$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/7fad9b23-4779-30e6-a138-18cb124dd0c3.roa File: 7fad9b23-4779-30e6-a138-18cb124dd0c3.roa (raw, json) Hash identifier: g5EnNC25wr8E85L5fzuLrbHt95JfTIW5AjLD8rMUxg4= Subject key identifier: 05:B6:47:24:F7:E5:BC:95:1A:37:76:8F:0B:52:81:64:CD:EC:BB:F0 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584EED522555AE6E227EB37BDD00 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/7fad9b23-4779-30e6-a138-18cb124dd0c3.roa Signing time: Sun 23 Aug 2026 01:00:12 +0000 ROA not before: Sun 23 Aug 2026 01:00:12 +0000 ROA not after: Sat 21 Nov 2026 02:00:12 +0000 asID: 13335 IP address blocks: 172.70.122.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ed:52:25:55:ae:6e:22:7e:b3:7b:dd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 23 01:00:12 2026 GMT Not After : Nov 21 02:00:12 2026 GMT Subject: CN=ccddcf5d-db5d-4a40-91f7-5e1090d1d4c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:63:23:f5:b3:a4:31:61:76:ed:13:2d:9f:20: 10:fa:04:20:47:fc:c2:22:90:8e:52:f7:56:03:4b: 76:3e:d8:be:94:3c:d7:d9:f6:50:eb:03:35:8e:e1: 76:eb:66:75:3e:63:f8:a9:24:b5:40:cd:37:10:6a: 5a:d8:0d:8a:18:e8:1c:f1:60:d4:f1:c2:16:2f:01: 4a:e4:b1:c7:f7:92:f2:e8:2c:d2:1f:bd:fb:30:30: 0a:8f:e4:99:3e:0f:0d:3b:00:8e:1d:ef:20:b2:94: b9:6a:9a:8b:7f:1f:bc:43:64:21:50:d2:f2:df:2b: b0:58:d7:61:92:a9:c0:17:9d:01:ab:26:50:65:fa: d2:58:b9:15:28:38:c8:80:57:4a:42:6b:c0:37:52: 21:0d:ae:1c:7e:bf:24:3c:3b:d9:4c:a2:dc:b3:27: 97:4e:7f:6a:11:b8:71:b8:e3:60:b1:3c:c8:23:f9: 6b:9f:9b:be:e8:e1:5c:23:56:a3:28:7a:36:33:a4: a0:ca:34:1e:fe:78:ef:8f:dc:a4:db:8d:79:d5:b2: 7c:c8:40:5b:2c:41:cd:93:60:87:81:ee:9e:b9:0a: dd:c2:d5:20:7a:83:2c:8a:ab:fb:d9:f6:63:b0:23: d4:64:9f:1d:52:e7:32:11:ab:e9:12:d6:c9:4b:12: 05:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:B6:47:24:F7:E5:BC:95:1A:37:76:8F:0B:52:81:64:CD:EC:BB:F0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/7fad9b23-4779-30e6-a138-18cb124dd0c3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.70.122.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:64:6e:0f:5b:ac:90:5e:61:5d:83:69:af:45:39:6d:0d:9e: 2e:d7:da:25:7d:9f:6f:63:09:0c:c9:28:cb:cc:d3:71:99:ff: 8b:5c:16:28:ab:aa:f1:20:40:99:5b:46:ff:3b:91:f2:f5:5f: bf:58:60:5d:a3:62:7a:ad:9a:cc:b1:5d:69:58:66:03:6d:db: 0c:c7:a2:98:98:1d:3f:0d:be:ee:5f:98:bb:49:dd:fd:9f:c2: 96:f3:9c:ac:d9:91:f4:27:2c:24:21:7f:f4:2f:29:72:bc:a2: 83:3a:12:bc:86:fa:71:d8:c2:a1:69:84:18:1d:0d:b9:64:61: 0a:08:fd:d1:c8:bd:02:f2:71:31:99:4a:02:4a:30:78:db:16: fe:03:77:0d:c5:d0:aa:27:8a:62:90:62:da:3b:ab:16:37:0c: e2:e8:3f:3f:e8:83:a1:2b:7f:0e:ed:62:d8:d1:17:2b:05:c1: 94:83:da:13:26:c7:93:46:39:79:15:89:b3:1f:ef:6b:b7:f7: 76:62:20:89:82:26:1d:73:98:ba:7a:48:04:40:c4:6b:2b:0a: bf:65:33:d3:8f:f2:00:99:25:6a:71:17:d2:fd:d5:32:09:37: 79:03:16:de:45:cc:b0:04:fa:cd:26:59:e7:c5:c7:6b:0f:eb: ad:5a:ed:31 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7tUiVVrm4ifrN73QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDgyMzAxMDAxMloXDTI2MTEyMTAyMDAxMlowLzEtMCsGA1UEAxMk Y2NkZGNmNWQtZGI1ZC00YTQwLTkxZjctNWUxMDkwZDFkNGM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgmMj9bOkMWF27RMtnyAQ+gQgR/zCIpCOUvdW A0t2Pti+lDzX2fZQ6wM1juF262Z1PmP4qSS1QM03EGpa2A2KGOgc8WDU8cIWLwFK 5LHH95Ly6CzSH737MDAKj+SZPg8NOwCOHe8gspS5apqLfx+8Q2QhUNLy3yuwWNdh kqnAF50BqyZQZfrSWLkVKDjIgFdKQmvAN1IhDa4cfr8kPDvZTKLcsyeXTn9qEbhx uONgsTzII/lrn5u+6OFcI1ajKHo2M6SgyjQe/njvj9yk24151bJ8yEBbLEHNk2CH ge6euQrdwtUgeoMsiqv72fZjsCPUZJ8dUucyEavpEtbJSxIFkwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAW2RyT35byVGjd2jwtSgWTN7LvwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvN2ZhZDliMjMtNDc3OS0z MGU2LWExMzgtMThjYjEyNGRkMGMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEZ6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI5kbg9brJBeYV2Daa9FOW0Nni7X2iV9n29jCQzJKMvM03GZ/4tcFiir qvEgQJlbRv87kfL1X79YYF2jYnqtmsyxXWlYZgNt2wzHopiYHT8Nvu5fmLtJ3f2f wpbznKzZkfQnLCQhf/QvKXK8ooM6EryG+nHYwqFphBgdDblkYQoI/dHIvQLycTGZ SgJKMHjbFv4Ddw3F0KonimKQYto7qxY3DOLoPz/og6Erfw7tYtjRFysFwZSD2hMm x5NGOXkVibMf72u393ZiIImCJh1zmLp6SARAxGsrCr9lM9OP8gCZJWpxF9L91TIJ N3kDFt5FzLAE+s0mWefFx2sP661a7TE= -----END CERTIFICATE-----Generated at Tue Sep 22 17:09:03 2026 by rpki-client