$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/4a0b08bf-c8f1-3930-97e9-8d2af5d6756b.roa File: 4a0b08bf-c8f1-3930-97e9-8d2af5d6756b.roa (raw, json) Hash identifier: nBvHQ7eYN9vDpIGreotAae+wem9l/FIZneOiNC7GZpk= Subject key identifier: 37:01:F6:BA:F7:FF:F2:FE:5D:77:63:14:1D:0F:95:BE:16:BF:57:54 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584EEA876E8542C5D2157E17DD80 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/4a0b08bf-c8f1-3930-97e9-8d2af5d6756b.roa Signing time: Sat 22 Aug 2026 01:00:12 +0000 ROA not before: Sat 22 Aug 2026 01:00:12 +0000 ROA not after: Fri 20 Nov 2026 02:00:12 +0000 asID: 13335 IP address blocks: 172.71.239.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ea:87:6e:85:42:c5:d2:15:7e:17:dd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 22 01:00:12 2026 GMT Not After : Nov 20 02:00:12 2026 GMT Subject: CN=1b12d226-bc70-49ee-867e-d1fbc5cf0210 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:ea:76:4a:1e:49:d8:14:26:4c:1a:e9:f7:9b: 23:b1:c9:9b:02:a9:46:c7:42:67:4b:10:45:0b:49: b8:b6:1e:66:1e:c3:e9:e0:2b:e5:02:c1:74:35:1e: 6b:f8:12:55:d8:00:1d:4e:15:12:b2:75:5e:b1:fe: 55:63:db:c5:96:5c:ce:a1:7a:3b:90:8c:a9:2e:9f: 15:85:cc:c4:ff:78:93:4a:c8:d1:7d:00:eb:b1:80: a7:75:f9:7e:8f:8c:79:c1:fc:d2:28:0f:2a:33:57: 87:a7:25:cf:45:07:86:89:d1:09:e8:a2:be:6d:f8: f7:5a:a7:10:c9:dd:31:fd:bb:2e:e9:0a:bd:8d:9b: 59:fa:1a:d8:a4:17:a3:99:b8:f8:0c:bc:ec:cc:f1: 43:c0:f4:fd:bc:5b:ca:53:86:30:f2:7a:8f:9a:a9: 54:ec:03:61:73:fe:e8:66:5a:c3:7b:97:c4:50:ef: 0f:37:92:a8:e4:51:6d:d2:80:db:6a:41:ad:7d:6c: 33:07:c6:aa:9d:ac:e2:22:3b:ed:08:81:5d:8c:5a: d7:a3:10:4a:fa:6d:88:1b:72:d4:77:c4:95:69:49: 5e:bd:98:69:d4:e7:cc:4c:97:2e:67:ab:b9:92:ff: f2:f2:48:a9:1f:f4:e0:8c:88:f5:a6:24:8b:9a:28: 66:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:01:F6:BA:F7:FF:F2:FE:5D:77:63:14:1D:0F:95:BE:16:BF:57:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/4a0b08bf-c8f1-3930-97e9-8d2af5d6756b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.71.239.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:d7:24:2a:2b:8e:0b:68:a1:02:0c:cd:3b:42:c4:03:6d:90: c9:5a:26:04:87:5a:4f:6f:6c:b8:e6:c0:65:eb:7d:b2:7f:1a: 55:a2:0f:de:c3:cc:01:06:f4:b0:20:eb:38:c5:4c:c6:b7:38: 20:7e:f2:62:08:16:8f:77:b4:06:06:ea:a9:dc:65:d3:b4:94: a6:6d:9b:fe:80:59:4c:33:b7:36:75:ae:92:6d:8d:2a:2c:17: 52:8c:02:db:a3:6e:29:e3:e9:bb:8a:88:74:aa:ee:0b:c0:78: 9b:58:f3:08:fe:8f:98:44:25:40:91:f8:f9:3c:60:e3:42:55: 32:cb:bf:8c:70:16:86:4f:e5:03:de:63:e5:9d:b0:23:6f:5f: 8f:a7:c1:b2:e2:c6:eb:62:ab:f0:4c:7d:2c:e2:e8:54:e2:09: b6:58:5d:e1:dc:18:eb:38:e9:fa:c8:cd:84:33:41:dd:b8:30: 5f:33:21:4f:d8:5b:bf:7a:60:85:4a:b4:53:44:8f:45:25:57: 58:0e:00:40:17:57:5c:5e:aa:b8:8f:ac:e6:36:af:a5:8b:a7: fa:97:54:17:a0:48:f0:bc:7b:0c:4d:4c:ab:90:c0:18:1a:fd: 85:8b:d2:32:d9:36:8d:72:12:f9:2e:97:f1:0c:70:e7:dd:56: 1f:d7:b9:8d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7qh26FQsXSFX4X3YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDgyMjAxMDAxMloXDTI2MTEyMDAyMDAxMlowLzEtMCsGA1UEAxMk MWIxMmQyMjYtYmM3MC00OWVlLTg2N2UtZDFmYmM1Y2YwMjEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Op2Sh5J2BQmTBrp95sjscmbAqlGx0JnSxBF C0m4th5mHsPp4CvlAsF0NR5r+BJV2AAdThUSsnVesf5VY9vFllzOoXo7kIypLp8V hczE/3iTSsjRfQDrsYCndfl+j4x5wfzSKA8qM1eHpyXPRQeGidEJ6KK+bfj3WqcQ yd0x/bsu6Qq9jZtZ+hrYpBejmbj4DLzszPFDwPT9vFvKU4Yw8nqPmqlU7ANhc/7o ZlrDe5fEUO8PN5Ko5FFt0oDbakGtfWwzB8aqnaziIjvtCIFdjFrXoxBK+m2IG3LU d8SVaUlevZhp1OfMTJcuZ6u5kv/y8kipH/TgjIj1piSLmihm8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDcB9rr3//L+XXdjFB0Plb4Wv1dUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNGEwYjA4YmYtYzhmMS0z OTMwLTk3ZTktOGQyYWY1ZDY3NTZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEfvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHbXJCorjgtooQIMzTtCxANtkMlaJgSHWk9vbLjmwGXrfbJ/GlWiD97D zAEG9LAg6zjFTMa3OCB+8mIIFo93tAYG6qncZdO0lKZtm/6AWUwztzZ1rpJtjSos F1KMAtujbinj6buKiHSq7gvAeJtY8wj+j5hEJUCR+Pk8YONCVTLLv4xwFoZP5QPe Y+WdsCNvX4+nwbLixutiq/BMfSzi6FTiCbZYXeHcGOs46frIzYQzQd24MF8zIU/Y W796YIVKtFNEj0UlV1gOAEAXV1xeqriPrOY2r6WLp/qXVBegSPC8ewxNTKuQwBga /YWL0jLZNo1yEvkul/EMcOfdVh/XuY0= -----END CERTIFICATE-----Generated at Tue Sep 1 01:44:56 2026 by rpki-client