$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/57df0c23-97c2-38c3-b47c-b9406f7fa55b.roa File: 57df0c23-97c2-38c3-b47c-b9406f7fa55b.roa (raw, json) Hash identifier: QcTIQXJb+RykM/QiZuGFlEo6sZ+7sXqWClcQtRuInbg= Subject key identifier: 26:12:90:B3:B4:20:18:21:FD:AE:E9:53:4E:68:65:F3:9F:2E:ED:2A Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584EF7179B686D5475D4C0274900 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/57df0c23-97c2-38c3-b47c-b9406f7fa55b.roa Signing time: Wed 26 Aug 2026 13:00:12 +0000 ROA not before: Wed 26 Aug 2026 13:00:12 +0000 ROA not after: Tue 24 Nov 2026 14:00:12 +0000 asID: 395747 IP address blocks: 172.71.91.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f7:17:9b:68:6d:54:75:d4:c0:27:49:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 26 13:00:12 2026 GMT Not After : Nov 24 14:00:12 2026 GMT Subject: CN=c4a2dbd5-6f49-4240-b2b8-e5237dc25f2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:4c:a1:86:cd:ed:16:77:2c:a3:c7:42:56:a1: 38:b0:a8:b5:6b:41:7a:62:c7:a7:46:dd:59:cc:38: fd:78:d1:57:f6:05:b7:8a:6a:7a:7e:17:4a:43:2b: 0c:32:c4:21:a9:8f:27:49:8f:d1:71:41:d3:f8:6a: e2:d3:55:be:07:0e:ec:bc:58:f5:81:ef:ac:bc:d0: 82:36:4a:f1:eb:52:1b:86:5d:56:53:5c:56:fd:cc: 2d:3b:86:86:71:ef:06:94:e4:53:72:10:67:47:0e: fd:e1:59:36:be:f4:17:60:b5:0a:41:a4:ca:f3:1b: 13:7c:10:70:3f:59:89:a3:f7:46:60:7b:36:87:55: 09:44:42:84:b4:35:ed:1b:16:1f:d7:c2:5e:27:8c: d9:12:36:87:05:cf:c7:7f:d8:71:74:b7:3a:a4:7d: 04:3b:d6:51:df:fc:e0:91:b9:b7:49:51:38:d5:00: 0f:3f:6f:0c:fe:87:a6:47:d9:8d:95:d8:1f:13:a8: b3:9a:60:3c:26:98:3f:c0:22:f8:82:c8:2d:9f:80: b9:73:f2:4c:6c:5c:b8:fe:74:d2:2d:77:7a:7e:4d: 80:b5:31:8d:2d:17:18:30:c4:13:02:5d:3b:df:eb: ae:61:e8:94:83:55:a0:97:3b:7a:0a:59:03:e6:4a: ff:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:12:90:B3:B4:20:18:21:FD:AE:E9:53:4E:68:65:F3:9F:2E:ED:2A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/57df0c23-97c2-38c3-b47c-b9406f7fa55b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.71.91.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:62:95:34:5e:13:e9:d0:50:62:c6:dd:94:f9:16:69:e5:b6: 11:82:01:36:28:6f:b0:64:87:39:9c:58:90:65:94:59:6f:4b: fe:0d:20:f3:1a:9f:e3:3d:1f:21:cc:18:4b:f3:a8:bd:4f:72: 09:59:66:9d:5c:66:69:29:a7:30:60:40:6c:09:c5:29:c4:0c: 52:4f:23:f7:f4:24:b7:60:de:dc:e1:e3:1c:12:7c:a7:33:ce: 11:c7:ab:35:6a:fa:4f:cc:61:36:c7:9b:95:43:9b:a4:13:3c: 1a:dd:c6:4e:a0:f8:b5:e2:8f:33:6c:ec:f4:ac:57:6b:da:32: 56:44:56:72:4f:d9:c9:27:94:7c:1d:cd:7e:7b:a6:1a:3d:0d: b7:c6:58:87:b8:8e:80:1a:ae:7a:0f:a9:72:da:0f:30:12:e7: 22:c9:64:8e:fa:87:66:e1:32:65:85:8d:88:11:d0:53:bf:3d: b1:01:f1:07:51:e6:fc:ba:f2:a4:f6:ef:d8:fe:4b:d0:6f:9d: fa:41:43:20:b2:a7:fa:0c:2b:5e:6d:64:a5:53:b2:90:db:00: d5:a6:b8:8b:f7:d5:d4:21:0a:60:ef:d0:30:c8:d7:cf:75:0c: 4a:79:06:15:38:e4:ba:fe:40:37:b1:8c:54:fc:da:69:d4:51: 10:5d:54:f4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE73F5tobVR11MAnSQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDgyNjEzMDAxMloXDTI2MTEyNDE0MDAxMlowLzEtMCsGA1UEAxMk YzRhMmRiZDUtNmY0OS00MjQwLWIyYjgtZTUyMzdkYzI1ZjJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAikyhhs3tFncso8dCVqE4sKi1a0F6YsenRt1Z zDj9eNFX9gW3imp6fhdKQysMMsQhqY8nSY/RcUHT+Gri01W+Bw7svFj1ge+svNCC Nkrx61Ibhl1WU1xW/cwtO4aGce8GlORTchBnRw794Vk2vvQXYLUKQaTK8xsTfBBw P1mJo/dGYHs2h1UJREKEtDXtGxYf18JeJ4zZEjaHBc/Hf9hxdLc6pH0EO9ZR3/zg kbm3SVE41QAPP28M/oemR9mNldgfE6izmmA8Jpg/wCL4gsgtn4C5c/JMbFy4/nTS LXd6fk2AtTGNLRcYMMQTAl073+uuYeiUg1Wglzt6ClkD5kr/YwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCYSkLO0IBgh/a7pU05oZfOfLu0qMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNTdkZjBjMjMtOTdjMi0z OGMzLWI0N2MtYjk0MDZmN2ZhNTViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEdbMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFdilTReE+nQUGLG3ZT5FmnlthGCATYob7BkhzmcWJBllFlvS/4NIPMa n+M9HyHMGEvzqL1PcglZZp1cZmkppzBgQGwJxSnEDFJPI/f0JLdg3tzh4xwSfKcz zhHHqzVq+k/MYTbHm5VDm6QTPBrdxk6g+LXijzNs7PSsV2vaMlZEVnJP2cknlHwd zX57pho9DbfGWIe4joAarnoPqXLaDzAS5yLJZI76h2bhMmWFjYgR0FO/PbEB8QdR 5vy68qT279j+S9BvnfpBQyCyp/oMK15tZKVTspDbANWmuIv31dQhCmDv0DDI1891 DEp5BhU45Lr+QDexjFT82mnUURBdVPQ= -----END CERTIFICATE-----Generated at Tue Sep 22 08:01:18 2026 by rpki-client