$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5e3ae088-6353-3be1-aead-7babd5fdd94e.roa File: 5e3ae088-6353-3be1-aead-7babd5fdd94e.roa (raw, json) Hash identifier: dxXt95CQFy8BwRKhYrCdM2X4vsg7MSlKiA/GVf6dsFA= Subject key identifier: 7A:4D:74:3D:7B:E8:98:40:F5:5A:04:0E:D5:58:39:A0:8B:16:4F:19 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584EF44CB89D2485DD9BF0FF0700 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5e3ae088-6353-3be1-aead-7babd5fdd94e.roa Signing time: Tue 25 Aug 2026 13:00:12 +0000 ROA not before: Tue 25 Aug 2026 13:00:12 +0000 ROA not after: Mon 23 Nov 2026 14:00:12 +0000 asID: 13335 IP address blocks: 172.70.207.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f4:4c:b8:9d:24:85:dd:9b:f0:ff:07:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 25 13:00:12 2026 GMT Not After : Nov 23 14:00:12 2026 GMT Subject: CN=8fc854a5-6b1f-46f6-b262-4ac24734c002 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:15:17:bb:ee:42:77:64:a4:5a:ce:01:72:01: 78:c4:71:28:17:83:b2:49:6c:2d:a6:f6:c7:bd:75: bc:62:a3:39:b0:d2:8d:54:72:e1:ae:78:30:68:e3: aa:da:77:7f:cc:4e:97:39:9d:af:02:b7:53:47:0b: 45:53:63:b1:c2:de:16:32:c9:36:1c:cd:1c:20:70: a5:5f:85:29:6d:a5:98:ec:47:28:17:41:5c:50:bb: 4c:90:be:24:df:48:4a:54:28:45:24:4c:da:2d:30: b5:6f:45:32:35:8c:21:30:53:2c:7f:a1:ea:fd:de: 45:2c:ef:89:05:6a:8e:59:43:e5:30:dc:32:8a:0f: a4:6b:9f:43:b2:31:0d:2c:f4:0c:67:c8:2f:1f:3c: dc:4c:94:13:fc:b2:14:c3:0a:39:1b:64:65:c1:62: 0f:05:d4:7b:b8:f3:31:57:30:d2:1e:a8:0a:70:5b: 7f:c9:0a:eb:fa:19:39:fb:29:34:07:bf:69:93:22: 02:58:45:09:e4:5a:7a:3b:91:e1:90:e2:8e:e3:1c: d1:62:6a:99:b8:ef:8c:1a:a4:8d:1a:48:a5:72:6c: ef:11:a5:24:f1:d6:36:9b:e3:db:b1:65:a0:bc:96: 63:3b:d3:f2:77:37:d0:57:1d:bc:d5:c7:ac:0a:d8: c6:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:4D:74:3D:7B:E8:98:40:F5:5A:04:0E:D5:58:39:A0:8B:16:4F:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5e3ae088-6353-3be1-aead-7babd5fdd94e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.70.207.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:bc:67:6f:cc:ce:f4:90:33:ea:d8:51:aa:c9:46:f1:44:c9: 20:06:f1:99:9b:34:44:71:89:e3:cc:8a:7f:6e:b2:2c:40:ce: 1d:c4:71:57:9c:5c:7e:16:ef:10:3a:7d:be:bd:dc:62:7f:0e: a3:88:15:cc:ab:28:27:53:be:71:9e:4d:ca:11:e3:fb:f0:3e: 4a:64:a9:6e:ef:4d:ff:ea:73:89:39:7b:58:91:14:42:a7:e6: a9:04:dc:97:a8:76:f9:7b:bc:3c:72:1b:c7:06:9d:d6:59:d9: 69:d7:b5:a9:72:17:37:a5:a6:01:e9:9f:58:e0:b6:8c:5d:e8: 9d:66:07:d0:e6:71:52:19:02:3b:1f:05:19:4d:65:be:8e:1e: b7:a2:b1:06:8d:6d:d2:ec:35:d1:57:1f:0d:2f:2d:72:f4:14: ee:ab:04:d7:0f:52:ee:bc:66:24:38:13:2e:90:bf:f5:2e:57: 6b:df:0e:91:5a:95:8d:3f:79:4d:ef:f3:1e:b4:e6:58:b8:59: 53:4d:4d:fe:c2:11:92:6a:c4:c5:20:97:ec:68:63:07:ab:8c: 14:25:9a:7b:a5:9d:4b:14:fe:89:7d:7f:39:ca:19:71:cd:a1: db:53:e7:48:4c:94:f1:8b:c0:00:1c:75:92:6d:59:95:cd:a9: 96:8d:df:7a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE70TLidJIXdm/D/BwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDgyNTEzMDAxMloXDTI2MTEyMzE0MDAxMlowLzEtMCsGA1UEAxMk OGZjODU0YTUtNmIxZi00NmY2LWIyNjItNGFjMjQ3MzRjMDAyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkBUXu+5Cd2SkWs4BcgF4xHEoF4OySWwtpvbH vXW8YqM5sNKNVHLhrngwaOOq2nd/zE6XOZ2vArdTRwtFU2Oxwt4WMsk2HM0cIHCl X4UpbaWY7EcoF0FcULtMkL4k30hKVChFJEzaLTC1b0UyNYwhMFMsf6Hq/d5FLO+J BWqOWUPlMNwyig+ka59DsjENLPQMZ8gvHzzcTJQT/LIUwwo5G2RlwWIPBdR7uPMx VzDSHqgKcFt/yQrr+hk5+yk0B79pkyICWEUJ5Fp6O5HhkOKO4xzRYmqZuO+MGqSN GkilcmzvEaUk8dY2m+PbsWWgvJZjO9PydzfQVx281cesCtjG+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHpNdD176JhA9VoEDtVYOaCLFk8ZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNWUzYWUwODgtNjM1My0z YmUxLWFlYWQtN2JhYmQ1ZmRkOTRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEbPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACC8Z2/MzvSQM+rYUarJRvFEySAG8ZmbNERxiePMin9usixAzh3EcVec XH4W7xA6fb693GJ/DqOIFcyrKCdTvnGeTcoR4/vwPkpkqW7vTf/qc4k5e1iRFEKn 5qkE3Jeodvl7vDxyG8cGndZZ2WnXtalyFzelpgHpn1jgtoxd6J1mB9DmcVIZAjsf BRlNZb6OHreisQaNbdLsNdFXHw0vLXL0FO6rBNcPUu68ZiQ4Ey6Qv/UuV2vfDpFa lY0/eU3v8x605li4WVNNTf7CEZJqxMUgl+xoYwerjBQlmnulnUsU/ol9fznKGXHN odtT50hMlPGLwAAcdZJtWZXNqZaN33o= -----END CERTIFICATE-----Generated at Tue Sep 22 06:20:10 2026 by rpki-client