$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/66e3012f-d579-3d34-95be-63589873306b.roa File: 66e3012f-d579-3d34-95be-63589873306b.roa (raw, json) Hash identifier: erAEfqf2dZnHNL5w2dRooy7jCZyCCOtmaSd2PXv2Cw8= Subject key identifier: 04:85:FC:38:CE:F1:18:5D:AF:91:A3:30:A5:0D:77:F4:91:A6:52:55 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584EF44CC21114F08B4478687600 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/66e3012f-d579-3d34-95be-63589873306b.roa Signing time: Tue 25 Aug 2026 13:00:12 +0000 ROA not before: Tue 25 Aug 2026 13:00:12 +0000 ROA not after: Mon 23 Nov 2026 14:00:12 +0000 asID: 13335 IP address blocks: 172.70.172.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f4:4c:c2:11:14:f0:8b:44:78:68:76:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 25 13:00:12 2026 GMT Not After : Nov 23 14:00:12 2026 GMT Subject: CN=c411718d-de0e-4223-be30-caa2409e3e5f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:10:42:b1:21:c4:f0:74:01:70:ab:49:1f:b0: b0:fa:92:08:9a:c3:93:fc:66:61:7e:ad:19:18:e7: 0f:3e:92:d5:37:48:22:7e:70:5a:3c:b2:ce:4d:00: 6a:9b:9b:e6:7c:9b:03:05:88:c8:3d:7f:c9:0a:d1: 1c:1a:d8:ec:77:15:91:10:52:79:ed:e1:df:63:8b: 81:e9:6d:c9:35:b6:7d:b7:87:3d:e6:96:05:13:fd: ac:03:ab:e5:27:f5:10:e9:85:1b:68:1d:b8:81:e0: 47:36:be:b1:11:5d:04:a9:62:92:99:a5:e4:3d:e4: 89:b0:62:b0:97:64:7e:2c:16:fe:f1:ea:48:e2:35: 21:5a:55:77:fd:20:bf:42:f1:d2:f8:1e:ff:7e:3b: d5:5f:e2:29:3e:21:13:5e:4b:47:f5:fd:37:d5:5c: 7c:d8:7e:e0:cf:c4:a3:d5:1c:11:42:f6:96:45:d2: 32:85:65:09:98:33:a2:19:d4:de:be:b8:c0:1a:98: 05:62:63:26:96:2e:b5:eb:3f:af:84:e9:fd:3d:8f: 12:08:92:1e:05:3b:a2:6e:5a:6c:e5:4e:53:e2:e8: 27:c4:3b:c2:76:be:e1:73:e5:b8:f6:98:e5:70:3a: f4:45:4c:8d:43:ee:55:6e:9a:94:a9:61:23:d0:71: c0:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:85:FC:38:CE:F1:18:5D:AF:91:A3:30:A5:0D:77:F4:91:A6:52:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/66e3012f-d579-3d34-95be-63589873306b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.70.172.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:77:51:9b:d8:0e:9c:9a:23:07:2f:2c:fb:8d:4c:2e:6a:8d: f7:be:97:32:27:d6:5b:e8:11:f0:59:0d:e2:fa:26:fb:cd:e2: f7:bb:cf:1f:06:ab:9c:e3:5e:ec:3d:25:62:44:62:76:4c:b5: e8:96:9a:0b:49:3f:a5:85:aa:44:b6:b1:b1:dc:a9:9b:5e:1f: 5a:41:f9:8b:80:bb:0e:d0:be:ca:1e:eb:f0:78:6c:5c:d4:95: ae:74:97:8f:b7:06:f0:5c:2e:f9:c0:a5:46:9e:8f:b2:ac:43: cb:24:b5:14:16:3e:6a:2a:76:d8:d3:05:bd:ba:d5:93:09:2a: a0:48:f5:90:ec:d2:7d:0e:7e:c3:9a:a5:84:ef:51:d2:78:4c: 09:c4:ab:40:e6:3b:7a:db:de:9e:c6:de:dd:30:db:62:1b:f0: 69:48:51:b3:15:01:d4:86:46:7b:ff:a9:11:02:4c:d1:23:4f: fd:54:98:54:71:62:ac:48:e8:cc:0e:34:18:30:cd:e1:4b:ff: 36:44:84:40:5a:cb:3a:3f:d6:85:11:34:00:b2:0d:1d:a8:82: 99:16:4b:ae:09:f9:e6:45:f1:27:0d:45:43:58:7e:8d:43:ef: 0f:e5:dc:19:4d:9b:51:c9:fb:f7:a4:c2:ec:26:1b:1b:f9:46: aa:b9:ba:c1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE70TMIRFPCLRHhodgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDgyNTEzMDAxMloXDTI2MTEyMzE0MDAxMlowLzEtMCsGA1UEAxMk YzQxMTcxOGQtZGUwZS00MjIzLWJlMzAtY2FhMjQwOWUzZTVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArBBCsSHE8HQBcKtJH7Cw+pIImsOT/GZhfq0Z GOcPPpLVN0gifnBaPLLOTQBqm5vmfJsDBYjIPX/JCtEcGtjsdxWREFJ57eHfY4uB 6W3JNbZ9t4c95pYFE/2sA6vlJ/UQ6YUbaB24geBHNr6xEV0EqWKSmaXkPeSJsGKw l2R+LBb+8epI4jUhWlV3/SC/QvHS+B7/fjvVX+IpPiETXktH9f031Vx82H7gz8Sj 1RwRQvaWRdIyhWUJmDOiGdTevrjAGpgFYmMmli616z+vhOn9PY8SCJIeBTuiblps 5U5T4ugnxDvCdr7hc+W49pjlcDr0RUyNQ+5VbpqUqWEj0HHApwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFASF/DjO8Rhdr5GjMKUNd/SRplJVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNjZlMzAxMmYtZDU3OS0z ZDM0LTk1YmUtNjM1ODk4NzMzMDZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEasMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHx3UZvYDpyaIwcvLPuNTC5qjfe+lzIn1lvoEfBZDeL6JvvN4ve7zx8G q5zjXuw9JWJEYnZMteiWmgtJP6WFqkS2sbHcqZteH1pB+YuAuw7Qvsoe6/B4bFzU la50l4+3BvBcLvnApUaej7KsQ8sktRQWPmoqdtjTBb261ZMJKqBI9ZDs0n0OfsOa pYTvUdJ4TAnEq0DmO3rb3p7G3t0w22Ib8GlIUbMVAdSGRnv/qRECTNEjT/1UmFRx YqxI6MwONBgwzeFL/zZEhEBayzo/1oURNACyDR2ogpkWS64J+eZF8ScNRUNYfo1D 7w/l3BlNm1HJ+/ekwuwmGxv5Rqq5usE= -----END CERTIFICATE-----Generated at Tue Sep 1 01:45:43 2026 by rpki-client