$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/6271fc68-ffa1-36e8-986f-5b3f458779fe.roa File: 6271fc68-ffa1-36e8-986f-5b3f458779fe.roa (raw, json) Hash identifier: hLhywegujaR22VuqGXD2sq2Nt0gXDwnNRjKxx+3Vu1A= Subject key identifier: 6C:A8:43:D1:71:9F:83:C4:8F:26:B8:C8:C2:7A:37:87:51:E9:91:9B Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584EF44CC2052538987CD1830780 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/6271fc68-ffa1-36e8-986f-5b3f458779fe.roa Signing time: Tue 25 Aug 2026 13:00:12 +0000 ROA not before: Tue 25 Aug 2026 13:00:12 +0000 ROA not after: Mon 23 Nov 2026 14:00:12 +0000 asID: 13335 IP address blocks: 172.70.158.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f4:4c:c2:05:25:38:98:7c:d1:83:07:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 25 13:00:12 2026 GMT Not After : Nov 23 14:00:12 2026 GMT Subject: CN=ec500b58-5804-4244-8313-272d4e9ff5f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:87:09:e7:a5:94:f4:53:75:e4:31:64:a8:a5: 7a:c1:8e:14:ee:77:69:a5:6a:8d:5a:1c:dd:f1:a5: f8:30:26:7b:f7:42:d3:5e:3c:e2:47:23:98:54:72: 1b:7d:ea:90:06:7c:71:41:7e:2e:a6:c2:e0:52:c1: 37:27:52:3d:e1:0b:f8:42:11:67:11:68:45:a9:65: 6d:52:b0:5f:8d:94:59:10:31:2b:64:06:92:07:85: f8:34:36:fa:2b:f2:42:35:73:92:f1:4f:c8:27:d1: f4:f3:9d:9c:fd:aa:c4:fc:0c:f4:d1:3a:f4:37:69: c9:9a:d8:dd:51:44:8b:b6:43:73:f4:f0:18:53:be: 8a:87:06:d9:63:f5:dd:3d:22:e3:f3:b9:d9:66:b9: 38:27:f9:43:35:b0:13:fe:5d:19:f4:85:fb:98:7f: 06:a3:fd:7e:d8:6c:df:e4:58:11:79:87:3e:76:45: e5:54:52:4b:40:7d:89:71:61:7b:31:b1:5a:82:2e: a1:4c:4f:aa:a0:0b:dc:4b:14:95:c8:48:32:47:74: 14:55:af:55:ac:8a:b9:b9:16:00:79:6e:70:23:c0: 13:80:00:dd:7a:2c:58:5a:53:35:09:62:f2:d3:44: 96:97:54:ee:fd:c0:85:b1:17:7d:d1:13:9b:ac:d5: d0:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:A8:43:D1:71:9F:83:C4:8F:26:B8:C8:C2:7A:37:87:51:E9:91:9B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/6271fc68-ffa1-36e8-986f-5b3f458779fe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.70.158.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9f:c7:ea:b7:00:6c:9a:0d:d8:bc:1f:94:a4:7f:1d:78:83:45: ab:2c:43:e6:59:84:ad:01:48:97:73:d8:df:e9:3d:c2:ac:28: 53:48:45:0b:80:14:93:c7:5a:f9:73:08:67:bd:f2:7a:f9:0d: a6:68:61:8b:6a:56:e9:b8:57:80:bb:6f:24:eb:7e:d6:08:cd: b1:f9:07:a5:97:cf:8f:e7:1c:e9:1c:4b:af:1c:9e:91:9a:21: 20:8e:ac:fd:f0:86:1d:46:1f:03:14:f8:ca:6d:b9:dc:8b:ac: 38:60:b1:e8:16:55:2a:2d:b2:94:00:6a:ab:1b:38:66:bd:18: e6:0a:af:98:47:aa:12:e2:7f:ea:9a:50:2d:65:ee:8b:49:11: 63:8d:92:c6:88:e8:9e:be:b4:21:5d:24:22:3d:0f:40:0f:4b: 9a:5a:e0:6c:64:a5:59:17:65:f2:b7:d5:86:43:18:20:20:18: ae:66:97:de:0b:ed:06:9e:a5:e9:2c:8c:de:c6:c0:da:24:e7: 37:40:03:56:9f:0b:44:af:98:9b:ce:89:e0:da:b9:98:89:ae: 93:eb:f5:be:a9:a8:54:76:91:7b:67:34:0c:df:3c:b6:e6:00: 03:38:72:b8:06:b5:e2:a4:44:f7:10:f0:f9:47:76:d1:8d:67: d6:17:2a:83 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE70TMIFJTiYfNGDB4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDgyNTEzMDAxMloXDTI2MTEyMzE0MDAxMlowLzEtMCsGA1UEAxMk ZWM1MDBiNTgtNTgwNC00MjQ0LTgzMTMtMjcyZDRlOWZmNWYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg4cJ56WU9FN15DFkqKV6wY4U7ndppWqNWhzd 8aX4MCZ790LTXjziRyOYVHIbfeqQBnxxQX4upsLgUsE3J1I94Qv4QhFnEWhFqWVt UrBfjZRZEDErZAaSB4X4NDb6K/JCNXOS8U/IJ9H0852c/arE/Az00Tr0N2nJmtjd UUSLtkNz9PAYU76KhwbZY/XdPSLj87nZZrk4J/lDNbAT/l0Z9IX7mH8Go/1+2Gzf 5FgReYc+dkXlVFJLQH2JcWF7MbFagi6hTE+qoAvcSxSVyEgyR3QUVa9VrIq5uRYA eW5wI8ATgADdeixYWlM1CWLy00SWl1Tu/cCFsRd90RObrNXQwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGyoQ9Fxn4PEjya4yMJ6N4dR6ZGbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNjI3MWZjNjgtZmZhMS0z NmU4LTk4NmYtNWIzZjQ1ODc3OWZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEaeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ/H6rcAbJoN2LwflKR/HXiDRassQ+ZZhK0BSJdz2N/pPcKsKFNIRQuA FJPHWvlzCGe98nr5DaZoYYtqVum4V4C7byTrftYIzbH5B6WXz4/nHOkcS68cnpGa ISCOrP3whh1GHwMU+MptudyLrDhgsegWVSotspQAaqsbOGa9GOYKr5hHqhLif+qa UC1l7otJEWONksaI6J6+tCFdJCI9D0APS5pa4GxkpVkXZfK31YZDGCAgGK5ml94L 7QaepeksjN7GwNok5zdAA1afC0SvmJvOieDauZiJrpPr9b6pqFR2kXtnNAzfPLbm AAM4crgGteKkRPcQ8PlHdtGNZ9YXKoM= -----END CERTIFICATE-----Generated at Tue Sep 22 19:07:07 2026 by rpki-client