$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/86f9b11a-4004-373f-9ca7-6b36b0ad8258.roa File: 86f9b11a-4004-373f-9ca7-6b36b0ad8258.roa (raw, json) Hash identifier: 9KsSJLrqU5Mm3vNgaLVfjGQnbv8FM7K/bBSBZ9ZIQVk= Subject key identifier: 67:A5:4C:0E:1B:1B:33:9C:4D:E9:99:5B:90:D7:4C:BD:A5:A6:07:5B Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584EF44CC2FAB680A6015EC35D80 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/86f9b11a-4004-373f-9ca7-6b36b0ad8258.roa Signing time: Tue 25 Aug 2026 13:00:12 +0000 ROA not before: Tue 25 Aug 2026 13:00:12 +0000 ROA not after: Mon 23 Nov 2026 14:00:12 +0000 asID: 13335 IP address blocks: 172.70.219.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f4:4c:c2:fa:b6:80:a6:01:5e:c3:5d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 25 13:00:12 2026 GMT Not After : Nov 23 14:00:12 2026 GMT Subject: CN=d6ba158b-26f5-46b1-8576-ca871a5e476f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:f1:2c:6c:2f:bd:49:54:f5:94:4d:da:1c:45: 54:73:a2:0e:02:e6:a1:52:d8:41:e5:f8:0f:e7:15: 2f:bf:25:a5:a5:31:94:41:e7:c9:d9:2c:af:cf:33: d1:81:a1:14:61:25:4c:a4:9d:26:a5:f7:49:3d:21: 51:e1:42:c4:c2:af:09:97:c0:ba:0f:93:c8:78:d7: 04:52:a4:23:45:a1:9c:44:92:cf:88:16:3b:26:41: 5f:fe:d7:a9:58:b1:18:83:3e:c4:8c:72:4b:bf:6c: b4:31:2c:1c:60:5d:92:25:f9:b7:b1:94:04:a0:bb: 99:01:bc:9f:97:04:82:08:2e:4e:10:5e:84:92:20: c5:30:20:39:d6:b8:a7:4f:b6:7d:e1:be:10:e0:b0: 84:61:e0:8d:d4:21:ac:83:da:5f:0d:fe:55:45:ea: cd:18:49:85:3f:7e:2b:a7:51:13:c3:78:be:4c:2f: d7:0e:e6:ad:dc:05:8e:27:55:c9:85:a8:62:8a:76: db:a5:50:b4:8d:d0:67:ee:28:46:92:07:f0:f2:1b: a1:38:63:1b:80:7a:af:40:65:2f:7e:2f:46:5f:12: dc:55:fa:ce:58:f0:ab:80:9a:4b:bf:44:27:7f:6a: 80:0d:14:c9:c8:02:10:d6:51:14:d5:93:f1:d4:cd: df:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:A5:4C:0E:1B:1B:33:9C:4D:E9:99:5B:90:D7:4C:BD:A5:A6:07:5B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/86f9b11a-4004-373f-9ca7-6b36b0ad8258.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.70.219.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:8c:2b:6c:05:91:5d:5d:07:07:d3:ee:0b:25:5b:eb:1e:e5: f6:33:62:42:17:2a:47:a9:13:90:0d:9a:18:94:b7:ee:42:a5: d8:a4:c1:ad:20:6e:5b:3e:a5:8a:7b:ce:cc:28:86:dd:ee:ec: ef:50:3d:cf:33:db:55:a9:ef:a3:15:28:b8:de:39:3d:8a:04: 19:de:16:65:17:d0:36:28:08:c5:61:ed:c9:dd:e6:df:0e:1d: f8:e7:b2:27:30:e4:3d:be:61:2c:64:c6:09:1c:91:aa:ac:4e: 2f:43:fb:a5:ef:d8:c8:91:c2:a7:0e:9e:71:39:d6:e4:dd:e2: 59:ad:66:fc:df:db:7b:cc:a6:53:c9:f1:54:2e:f8:b0:2e:15: 10:55:b5:0f:d4:b0:00:0c:7d:dc:44:53:77:e0:f7:b2:6b:4e: ee:c1:63:34:91:f7:ea:4a:e9:48:ef:fd:e9:9e:dd:4a:8e:6d: 4d:21:c9:16:fe:99:ef:dd:28:51:6a:db:4a:e6:f4:77:8d:da: 79:aa:b9:bc:1c:26:e0:6f:fb:67:e8:fb:28:dd:75:51:dc:1c: 14:27:57:e2:1c:01:3c:21:2a:d5:3e:39:4e:39:79:18:a0:c3: 48:9c:65:f4:0e:37:fd:35:d0:38:2a:fb:88:f1:29:e1:c2:89: a2:fb:34:0c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE70TML6toCmAV7DXYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDgyNTEzMDAxMloXDTI2MTEyMzE0MDAxMlowLzEtMCsGA1UEAxMk ZDZiYTE1OGItMjZmNS00NmIxLTg1NzYtY2E4NzFhNWU0NzZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi/EsbC+9SVT1lE3aHEVUc6IOAuahUthB5fgP 5xUvvyWlpTGUQefJ2SyvzzPRgaEUYSVMpJ0mpfdJPSFR4ULEwq8Jl8C6D5PIeNcE UqQjRaGcRJLPiBY7JkFf/tepWLEYgz7EjHJLv2y0MSwcYF2SJfm3sZQEoLuZAbyf lwSCCC5OEF6EkiDFMCA51rinT7Z94b4Q4LCEYeCN1CGsg9pfDf5VRerNGEmFP34r p1ETw3i+TC/XDuat3AWOJ1XJhahiinbbpVC0jdBn7ihGkgfw8huhOGMbgHqvQGUv fi9GXxLcVfrOWPCrgJpLv0Qnf2qADRTJyAIQ1lEU1ZPx1M3fIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGelTA4bGzOcTemZW5DXTL2lpgdbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvODZmOWIxMWEtNDAwNC0z NzNmLTljYTctNmIzNmIwYWQ4MjU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEbbMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFqMK2wFkV1dBwfT7gslW+se5fYzYkIXKkepE5ANmhiUt+5Cpdikwa0g bls+pYp7zswoht3u7O9QPc8z21Wp76MVKLjeOT2KBBneFmUX0DYoCMVh7cnd5t8O Hfjnsicw5D2+YSxkxgkckaqsTi9D+6Xv2MiRwqcOnnE51uTd4lmtZvzf23vMplPJ 8VQu+LAuFRBVtQ/UsAAMfdxEU3fg97JrTu7BYzSR9+pK6Ujv/eme3UqObU0hyRb+ me/dKFFq20rm9HeN2nmqubwcJuBv+2fo+yjddVHcHBQnV+IcATwhKtU+OU45eRig w0icZfQON/010Dgq+4jxKeHCiaL7NAw= -----END CERTIFICATE-----Generated at Tue Sep 1 01:45:21 2026 by rpki-client