$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/8554fa8e-b4c4-3f90-9d48-569f74cda04b.roa File: 8554fa8e-b4c4-3f90-9d48-569f74cda04b.roa (raw, json) Hash identifier: nfRCUU6zNWEaxYamvA4oYGTk1isVbJbhilTIHD+5tVE= Subject key identifier: 5F:9E:B2:FD:77:8B:A7:28:64:13:78:DE:CA:7F:E2:86:EF:61:0E:1C Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584EF2E776F3800C945812E6B6A0 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/8554fa8e-b4c4-3f90-9d48-569f74cda04b.roa Signing time: Tue 25 Aug 2026 01:00:12 +0000 ROA not before: Tue 25 Aug 2026 01:00:12 +0000 ROA not after: Mon 23 Nov 2026 02:00:12 +0000 asID: 13335 IP address blocks: 172.70.63.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f2:e7:76:f3:80:0c:94:58:12:e6:b6:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 25 01:00:12 2026 GMT Not After : Nov 23 02:00:12 2026 GMT Subject: CN=f4bae463-3861-4d39-b4f5-0d842ee07f75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:26:dc:ef:04:2b:14:74:3e:4b:d7:ea:96:2b: b6:b1:01:c5:9d:81:4d:96:85:32:1d:47:61:d3:78: 89:bd:99:b0:73:7c:dc:70:bf:6f:40:4f:4d:ec:3a: 0c:82:93:0f:8e:bc:a7:fc:cb:88:90:bc:dd:89:b8: 58:47:92:79:3a:73:93:e1:a1:41:6f:67:f6:16:9d: 5e:12:91:a9:38:5f:91:5c:46:db:ef:cc:a9:62:f8: 1f:92:42:52:c9:8a:cf:da:94:a6:ae:21:42:67:e6: c2:eb:3e:55:3c:3e:ec:a4:17:22:2f:7c:e4:8a:07: 47:50:14:06:44:e7:48:17:88:85:f1:94:45:b5:43: f0:bb:84:03:e8:c0:9d:3a:9b:c7:43:d6:56:70:f8: c9:32:f6:e9:a3:1b:b9:27:c4:c5:ac:bb:00:6e:a0: 3b:24:fa:f7:4e:6c:c9:26:0d:83:a7:8b:3d:db:16: 44:e8:de:71:44:13:5e:de:8a:39:53:fa:8b:15:00: 45:00:22:b8:85:7d:12:98:5e:6d:73:fc:5b:92:f3: e6:ea:89:71:f7:ed:fc:49:89:53:1d:09:de:08:e8: e2:b5:18:cb:f8:a5:23:c2:1c:bc:4e:31:59:16:50: c9:dc:3e:f4:dc:4f:6b:40:31:d6:59:fe:eb:b8:c5: 33:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:9E:B2:FD:77:8B:A7:28:64:13:78:DE:CA:7F:E2:86:EF:61:0E:1C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/8554fa8e-b4c4-3f90-9d48-569f74cda04b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.70.63.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a4:04:b7:93:ed:18:c1:e1:a1:7d:73:b7:45:02:94:1b:75:24: b9:80:e4:47:f1:38:72:47:14:d0:70:e6:e6:37:c4:1f:b4:f9: 89:9d:a3:11:6d:72:fa:45:4c:5f:62:9a:0f:4a:e5:ee:1f:dc: d5:62:9f:9b:c3:df:c1:db:88:76:e6:4a:f9:12:63:ae:6f:e7: de:a0:d4:4d:22:b9:d4:87:b2:94:8d:91:d7:84:77:da:26:0b: 6d:09:f2:2e:f1:84:46:c9:f8:07:4f:9b:6d:ab:31:c8:e2:4f: 55:30:6c:f0:aa:62:4c:84:9f:ef:4b:56:6f:c3:84:22:48:ce: de:cf:19:92:3f:74:e6:0a:19:86:d7:bc:49:99:48:27:ef:06: 8e:78:2a:8e:46:3a:43:81:90:d3:bb:ba:f9:b9:dc:e6:07:38: e5:3c:90:65:48:b5:1d:0a:6f:e1:eb:de:fc:36:3f:ff:64:ed: d5:f9:cc:80:c9:5a:74:45:b9:43:ed:b8:d8:fa:a3:cc:ea:2e: 18:f2:d0:30:d5:80:a1:75:0e:d5:32:de:59:08:b3:44:87:a5: 8b:4c:e0:0f:c9:96:7b:eb:c9:6d:28:b8:18:9a:23:a0:d0:50: bd:43:d5:cf:b4:49:a6:ed:1c:54:64:90:01:09:fd:b3:57:86: 0d:1f:05:b8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7y53bzgAyUWBLmtqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDgyNTAxMDAxMloXDTI2MTEyMzAyMDAxMlowLzEtMCsGA1UEAxMk ZjRiYWU0NjMtMzg2MS00ZDM5LWI0ZjUtMGQ4NDJlZTA3Zjc1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjCbc7wQrFHQ+S9fqliu2sQHFnYFNloUyHUdh 03iJvZmwc3zccL9vQE9N7DoMgpMPjryn/MuIkLzdibhYR5J5OnOT4aFBb2f2Fp1e EpGpOF+RXEbb78ypYvgfkkJSyYrP2pSmriFCZ+bC6z5VPD7spBciL3zkigdHUBQG ROdIF4iF8ZRFtUPwu4QD6MCdOpvHQ9ZWcPjJMvbpoxu5J8TFrLsAbqA7JPr3TmzJ Jg2Dp4s92xZE6N5xRBNe3oo5U/qLFQBFACK4hX0SmF5tc/xbkvPm6olx9+38SYlT HQneCOjitRjL+KUjwhy8TjFZFlDJ3D703E9rQDHWWf7ruMUz1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF+esv13i6coZBN43sp/4obvYQ4cMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvODU1NGZhOGUtYjRjNC0z ZjkwLTlkNDgtNTY5Zjc0Y2RhMDRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEY/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKQEt5PtGMHhoX1zt0UClBt1JLmA5EfxOHJHFNBw5uY3xB+0+YmdoxFt cvpFTF9img9K5e4f3NVin5vD38HbiHbmSvkSY65v596g1E0iudSHspSNkdeEd9om C20J8i7xhEbJ+AdPm22rMcjiT1UwbPCqYkyEn+9LVm/DhCJIzt7PGZI/dOYKGYbX vEmZSCfvBo54Ko5GOkOBkNO7uvm53OYHOOU8kGVItR0Kb+Hr3vw2P/9k7dX5zIDJ WnRFuUPtuNj6o8zqLhjy0DDVgKF1DtUy3lkIs0SHpYtM4A/JlnvryW0ouBiaI6DQ UL1D1c+0SabtHFRkkAEJ/bNXhg0fBbg= -----END CERTIFICATE-----Generated at Tue Sep 1 01:57:05 2026 by rpki-client