$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/8400bcb8-69f0-3aaf-9266-e93b38bf894a.roa File: 8400bcb8-69f0-3aaf-9266-e93b38bf894a.roa (raw, json) Hash identifier: NByGnKtNBP6+gsFwUCj+zvsbvG/5N0K+A2StMl5VWGM= Subject key identifier: 6A:6F:46:6B:3B:0C:06:6A:B1:BA:CA:F2:8D:1B:0C:1D:4E:86:5C:5F Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584EF2E77730CC1F2CEA0182F480 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/8400bcb8-69f0-3aaf-9266-e93b38bf894a.roa Signing time: Tue 25 Aug 2026 01:00:12 +0000 ROA not before: Tue 25 Aug 2026 01:00:12 +0000 ROA not after: Mon 23 Nov 2026 02:00:12 +0000 asID: 13335 IP address blocks: 172.70.89.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f2:e7:77:30:cc:1f:2c:ea:01:82:f4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 25 01:00:12 2026 GMT Not After : Nov 23 02:00:12 2026 GMT Subject: CN=bfb3141b-05f4-4480-9092-6a0ea55c3fe5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:b4:64:3b:7e:c2:f3:4b:82:5c:1c:dc:0e:fc: 9a:36:f7:40:45:2f:8d:0c:12:c7:5b:c5:12:2f:db: 7c:fc:8c:06:ea:83:b9:57:45:ca:17:65:81:38:ed: c8:95:64:a2:74:3e:75:a3:81:f3:0c:da:43:a9:a3: b9:7f:28:69:7d:37:bc:e1:b8:94:c8:7e:73:ea:a4: cd:aa:0b:b4:8c:b2:7f:9c:c3:aa:72:fd:74:a3:ec: 27:8f:ad:58:fa:2c:ff:3a:01:b7:2b:09:1d:ea:a3: 63:ea:2e:c8:e6:a2:3c:c6:65:a8:1f:26:a1:ff:c8: ac:fa:31:91:22:94:1b:d6:27:1e:16:8e:d8:b4:69: 61:6b:97:7a:80:37:de:f2:d9:6e:bc:77:57:28:73: 08:c8:c5:dc:17:95:81:99:69:9b:68:35:38:b7:14: f4:6e:36:1d:6e:de:61:2f:45:cf:39:58:b7:2f:53: 53:e9:00:01:2c:16:68:3b:89:fb:69:ed:08:37:34: ad:4d:a5:4a:78:0b:c7:9c:0a:7a:55:dc:95:80:6a: b7:32:98:c6:5f:52:9d:5c:2f:57:64:08:c4:f7:8e: 1f:7d:d5:f6:7e:68:48:6d:c6:4d:01:82:a1:a1:3a: fa:b2:5a:0c:1b:b1:5d:6a:70:68:57:3b:99:bf:22: 50:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:6F:46:6B:3B:0C:06:6A:B1:BA:CA:F2:8D:1B:0C:1D:4E:86:5C:5F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/8400bcb8-69f0-3aaf-9266-e93b38bf894a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.70.89.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:f8:08:44:a4:13:a7:f3:08:d6:c7:db:f9:be:b8:f0:e7:1c: 8d:9e:79:af:b5:1e:60:a1:76:af:f9:84:b6:cb:e8:8e:5b:32: 49:78:47:94:a5:b6:20:f3:95:96:bf:54:b3:c7:9a:b9:28:e4: 03:2e:e2:7d:dd:4f:25:9b:53:a2:80:23:aa:c5:c8:f7:aa:9f: 82:ee:03:df:ef:ac:a4:05:1b:0a:7f:28:4f:55:ee:75:07:5a: db:e6:34:c3:05:fd:05:e7:60:36:a1:42:80:64:f2:64:d8:43: 26:17:fb:de:75:cd:fc:75:51:87:93:63:57:52:9b:de:8a:cb: 26:f1:db:06:bd:41:e6:89:43:c9:47:c8:a2:bc:e0:06:08:eb: e8:0d:c6:8d:7e:2b:db:bc:de:73:b7:00:d7:c3:60:d4:5c:55: 3c:f8:0b:d0:97:2f:76:fc:c3:f2:e4:ff:b5:0c:fa:c6:38:8e: 9b:5f:8e:94:ea:91:f0:db:d5:72:ad:54:eb:14:25:1c:13:5b: d5:53:23:c4:ea:bc:cc:9f:93:d0:93:d8:41:6f:12:89:7c:8a: ba:34:67:3e:16:33:31:40:b4:36:db:a2:7a:1c:dc:f2:7c:fe: 40:fd:d2:c7:d8:d1:70:05:cb:18:81:73:55:8d:72:30:75:58: 3e:dd:82:45 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7y53cwzB8s6gGC9IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDgyNTAxMDAxMloXDTI2MTEyMzAyMDAxMlowLzEtMCsGA1UEAxMk YmZiMzE0MWItMDVmNC00NDgwLTkwOTItNmEwZWE1NWMzZmU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuLRkO37C80uCXBzcDvyaNvdARS+NDBLHW8US L9t8/IwG6oO5V0XKF2WBOO3IlWSidD51o4HzDNpDqaO5fyhpfTe84biUyH5z6qTN qgu0jLJ/nMOqcv10o+wnj61Y+iz/OgG3Kwkd6qNj6i7I5qI8xmWoHyah/8is+jGR IpQb1iceFo7YtGlha5d6gDfe8tluvHdXKHMIyMXcF5WBmWmbaDU4txT0bjYdbt5h L0XPOVi3L1NT6QABLBZoO4n7ae0INzStTaVKeAvHnAp6VdyVgGq3MpjGX1KdXC9X ZAjE944ffdX2fmhIbcZNAYKhoTr6sloMG7FdanBoVzuZvyJQ6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGpvRms7DAZqsbrK8o0bDB1OhlxfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvODQwMGJjYjgtNjlmMC0z YWFmLTkyNjYtZTkzYjM4YmY4OTRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEZZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHj4CESkE6fzCNbH2/m+uPDnHI2eea+1HmChdq/5hLbL6I5bMkl4R5Sl tiDzlZa/VLPHmrko5AMu4n3dTyWbU6KAI6rFyPeqn4LuA9/vrKQFGwp/KE9V7nUH WtvmNMMF/QXnYDahQoBk8mTYQyYX+951zfx1UYeTY1dSm96Kyybx2wa9QeaJQ8lH yKK84AYI6+gNxo1+K9u83nO3ANfDYNRcVTz4C9CXL3b8w/Lk/7UM+sY4jptfjpTq kfDb1XKtVOsUJRwTW9VTI8TqvMyfk9CT2EFvEol8iro0Zz4WMzFAtDbbonoc3PJ8 /kD90sfY0XAFyxiBc1WNcjB1WD7dgkU= -----END CERTIFICATE-----Generated at Tue Sep 1 01:43:40 2026 by rpki-client