$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/7b693eaf-d004-324d-b72a-3fd529d5b222.roa File: 7b693eaf-d004-324d-b72a-3fd529d5b222.roa (raw, json) Hash identifier: DUHPJZ8mFe3WQ2C2qg3DHFmzUmlNcWrdW9aHR0MxTzw= Subject key identifier: E8:19:BD:67:08:BD:9A:42:ED:7B:F2:9F:0F:8D:5C:6E:A2:ED:8D:28 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584EF44CC2B550AD17454B693440 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/7b693eaf-d004-324d-b72a-3fd529d5b222.roa Signing time: Tue 25 Aug 2026 13:00:12 +0000 ROA not before: Tue 25 Aug 2026 13:00:12 +0000 ROA not after: Mon 23 Nov 2026 14:00:12 +0000 asID: 13335 IP address blocks: 172.70.211.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f4:4c:c2:b5:50:ad:17:45:4b:69:34:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 25 13:00:12 2026 GMT Not After : Nov 23 14:00:12 2026 GMT Subject: CN=e2e4fae2-4953-4f39-9987-292fd6d449b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:dc:9a:91:c9:b4:44:dc:a1:1f:e4:28:96:1c: 27:8b:59:77:03:82:a0:3a:c8:32:18:e6:79:a7:ee: 5d:6c:c6:b5:7f:f2:8e:aa:5f:ee:49:c4:b2:c6:44: 0a:c2:d0:d9:eb:c4:b4:01:06:79:77:32:a2:a2:01: a0:8c:9a:40:69:48:05:d5:ed:b1:44:a7:eb:58:b8: f3:af:fe:91:46:8f:3a:a2:27:0d:a4:53:0e:94:19: 76:f6:4e:96:90:2e:7e:54:03:97:71:b2:f8:87:ca: 8e:b1:d0:56:7b:55:6b:f4:61:d5:9a:e1:a2:c7:66: 02:3d:bc:f3:da:ff:5a:5c:3f:e8:5e:e2:c2:5f:4c: ad:90:a3:87:5c:97:65:92:87:e6:3e:0d:4e:2e:ed: cd:a2:4d:aa:87:73:0b:ac:0c:29:83:a1:f1:85:65: 33:70:41:ca:c5:db:73:8c:1c:e6:b6:7c:9d:4c:54: 5d:b2:d1:bc:ee:3f:86:10:d5:78:78:9e:8f:12:37: 44:17:f5:e3:2d:7c:cc:f5:68:8e:b3:75:ed:d2:ab: cf:d2:d0:62:9a:a7:a4:41:b5:0f:ae:3e:d2:73:af: 4b:23:2f:6f:b5:9c:9c:a5:ab:d7:1f:9f:f4:38:9e: a9:a1:e4:1c:fc:a5:44:95:c2:45:11:11:76:f3:3e: 8b:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:19:BD:67:08:BD:9A:42:ED:7B:F2:9F:0F:8D:5C:6E:A2:ED:8D:28 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/7b693eaf-d004-324d-b72a-3fd529d5b222.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.70.211.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:ca:c4:bb:30:9c:c8:5a:ae:3d:90:cb:26:ac:d2:2c:8d:60: 63:9b:1a:c6:83:3d:b8:63:3a:43:a2:a5:10:85:ce:56:cd:65: b0:b4:75:77:16:7f:8b:e0:5d:ee:ed:00:0f:31:57:7e:ef:de: c4:18:47:93:c4:96:d2:17:61:7e:d1:36:bf:fa:7f:5f:74:80: be:16:57:97:b4:32:ab:0d:ca:91:35:2a:c3:c9:88:3c:87:23: 81:a8:85:f3:1e:6a:96:69:1a:c2:2f:96:4a:0d:f9:0e:d3:ed: 9b:24:2b:65:03:7a:cc:0c:a3:e5:74:48:fc:f7:8e:fe:62:40: f3:92:f9:26:89:30:f3:28:cd:de:55:0c:62:5f:da:95:ca:72: d8:30:9e:3b:cd:e6:7f:d9:19:ed:7b:a9:94:aa:1c:89:7c:53: 29:a9:6c:83:09:01:12:6e:e2:bf:32:28:7e:11:c1:1b:96:dc: 3a:9d:14:79:32:a9:5a:d7:70:5a:67:06:21:87:b4:5a:ee:1e: b3:c8:cb:bd:d8:40:45:0a:39:c1:18:f8:cc:8e:1c:25:84:99: 8d:27:41:71:bd:72:d9:5f:3d:99:4b:bc:8d:55:ab:02:01:ae: e3:45:d8:de:d6:41:dd:4f:f2:39:5c:8c:9c:7d:2d:2f:02:cb: 93:f9:c8:26 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE70TMK1UK0XRUtpNEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDgyNTEzMDAxMloXDTI2MTEyMzE0MDAxMlowLzEtMCsGA1UEAxMk ZTJlNGZhZTItNDk1My00ZjM5LTk5ODctMjkyZmQ2ZDQ0OWI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn9yakcm0RNyhH+Qolhwni1l3A4KgOsgyGOZ5 p+5dbMa1f/KOql/uScSyxkQKwtDZ68S0AQZ5dzKiogGgjJpAaUgF1e2xRKfrWLjz r/6RRo86oicNpFMOlBl29k6WkC5+VAOXcbL4h8qOsdBWe1Vr9GHVmuGix2YCPbzz 2v9aXD/oXuLCX0ytkKOHXJdlkofmPg1OLu3Nok2qh3MLrAwpg6HxhWUzcEHKxdtz jBzmtnydTFRdstG87j+GENV4eJ6PEjdEF/XjLXzM9WiOs3Xt0qvP0tBimqekQbUP rj7Sc69LIy9vtZycpavXH5/0OJ6poeQc/KVElcJFERF28z6LdQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOgZvWcIvZpC7Xvynw+NXG6i7Y0oMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvN2I2OTNlYWYtZDAwNC0z MjRkLWI3MmEtM2ZkNTI5ZDViMjIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEbTMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADzKxLswnMharj2Qyyas0iyNYGObGsaDPbhjOkOipRCFzlbNZbC0dXcW f4vgXe7tAA8xV37v3sQYR5PEltIXYX7RNr/6f190gL4WV5e0MqsNypE1KsPJiDyH I4GohfMeapZpGsIvlkoN+Q7T7ZskK2UDeswMo+V0SPz3jv5iQPOS+SaJMPMozd5V DGJf2pXKctgwnjvN5n/ZGe17qZSqHIl8UympbIMJARJu4r8yKH4RwRuW3DqdFHky qVrXcFpnBiGHtFruHrPIy73YQEUKOcEY+MyOHCWEmY0nQXG9ctlfPZlLvI1VqwIB ruNF2N7WQd1P8jlcjJx9LS8Cy5P5yCY= -----END CERTIFICATE-----Generated at Tue Sep 22 14:03:42 2026 by rpki-client