$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/90e5da50-dbe6-352a-a24d-8068f1287bf2.roa File: 90e5da50-dbe6-352a-a24d-8068f1287bf2.roa (raw, json) Hash identifier: TE5I/qa/+DVdOxMWo/5e9Fcod4GJFPrrx9JL853nd0c= Subject key identifier: 9D:B7:70:76:71:F8:45:E5:E1:CD:D6:A1:3E:8C:A3:82:BA:69:D8:92 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584EF44CB8FC84C9593DA0D4B180 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/90e5da50-dbe6-352a-a24d-8068f1287bf2.roa Signing time: Tue 25 Aug 2026 13:00:12 +0000 ROA not before: Tue 25 Aug 2026 13:00:12 +0000 ROA not after: Mon 23 Nov 2026 14:00:12 +0000 asID: 13335 IP address blocks: 172.70.225.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f4:4c:b8:fc:84:c9:59:3d:a0:d4:b1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 25 13:00:12 2026 GMT Not After : Nov 23 14:00:12 2026 GMT Subject: CN=1836f0e6-2015-4a5f-a1a0-3d09ad69887b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:f2:c6:a8:2e:ab:f5:7b:bd:26:98:25:48:5d: 2d:f8:b2:ab:fa:f7:13:27:10:18:75:e8:53:72:d4: da:54:ee:2a:10:94:f0:70:ed:11:69:ab:f8:ae:57: 9e:23:54:8d:3e:2a:8a:28:37:f2:6b:f8:1f:8c:d1: 64:b0:43:50:c0:d7:cf:18:67:e1:15:bb:26:96:16: ac:46:ba:f9:42:89:0b:71:3e:25:65:cf:12:43:83: 34:98:d9:30:b3:1c:57:23:9e:39:8a:32:20:0c:af: e8:79:2a:93:ba:c0:c1:c1:85:7e:29:95:e1:dd:13: 85:19:5c:84:7b:c2:2f:a9:22:01:0e:5d:08:12:7c: f5:58:92:0e:04:c1:3b:57:d3:2e:43:a3:a5:3b:6b: c5:58:d8:0b:62:6f:7e:99:c2:10:f0:61:97:0b:8d: 40:72:d6:57:02:f0:f4:45:27:6c:cb:4e:83:e9:3b: 76:e8:bb:ff:d3:f0:1e:af:4f:81:a9:12:d1:97:93: 5a:10:dc:fb:e8:21:84:02:f7:10:c2:d9:9c:4d:b5: ca:32:9e:8b:10:b3:f7:6a:67:9d:90:15:34:6e:ba: 5a:e1:ac:16:4a:ea:8d:fb:48:0e:12:c9:e0:1f:17: 35:c0:e9:d5:c1:6b:9f:54:6d:75:6a:5d:52:9a:6b: 8e:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:B7:70:76:71:F8:45:E5:E1:CD:D6:A1:3E:8C:A3:82:BA:69:D8:92 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/90e5da50-dbe6-352a-a24d-8068f1287bf2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.70.225.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a3:30:8d:82:72:d8:0c:1b:28:09:01:4e:b3:4f:68:a2:0a:dd: 6a:1b:5f:4b:49:ab:c0:13:fd:94:2e:17:34:d2:8e:98:98:99: 5a:a3:26:f3:37:a7:14:a7:21:d1:9e:91:0d:8c:23:c3:fb:7e: 1e:d0:8e:57:3a:33:34:15:c2:bd:16:15:7a:40:d1:3e:61:11: 89:5d:78:9a:13:11:de:e9:ce:81:a5:15:1d:95:e5:ad:62:7d: 6b:e7:fd:ac:54:0a:22:da:61:71:dd:b8:dc:2c:d3:ac:2d:26: bb:e4:7d:3b:b0:45:8f:bc:8f:0a:94:cf:27:11:a9:86:b5:a2: d2:cf:7b:da:dc:e7:48:e2:d4:91:55:2f:d2:5d:22:f6:4d:75: f9:51:11:f2:d1:ed:f7:6e:6e:fb:b2:6f:80:b9:7f:73:9f:d4: ff:ac:ae:80:39:91:10:d7:34:c0:31:73:98:be:ca:ef:fa:8b: d1:b1:45:eb:5a:b8:b9:e5:b0:27:14:a7:8f:ba:20:bc:c4:e2: 2f:d5:b3:1c:42:66:90:31:7d:34:7f:61:c4:39:2d:76:78:ec: 32:f9:ba:5b:20:53:75:7e:2d:23:42:a4:fa:00:f0:07:c9:61: 7a:d5:b0:3e:05:dc:ef:e6:63:bb:a1:26:6f:a4:1c:fb:88:cc: 79:4c:13:a5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE70TLj8hMlZPaDUsYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDgyNTEzMDAxMloXDTI2MTEyMzE0MDAxMlowLzEtMCsGA1UEAxMk MTgzNmYwZTYtMjAxNS00YTVmLWExYTAtM2QwOWFkNjk4ODdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp/LGqC6r9Xu9JpglSF0t+LKr+vcTJxAYdehT ctTaVO4qEJTwcO0Raav4rleeI1SNPiqKKDfya/gfjNFksENQwNfPGGfhFbsmlhas Rrr5QokLcT4lZc8SQ4M0mNkwsxxXI545ijIgDK/oeSqTusDBwYV+KZXh3ROFGVyE e8IvqSIBDl0IEnz1WJIOBME7V9MuQ6OlO2vFWNgLYm9+mcIQ8GGXC41ActZXAvD0 RSdsy06D6Tt26Lv/0/Aer0+BqRLRl5NaENz76CGEAvcQwtmcTbXKMp6LELP3amed kBU0brpa4awWSuqN+0gOEsngHxc1wOnVwWufVG11al1SmmuOuwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ23cHZx+EXl4c3WoT6Mo4K6adiSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvOTBlNWRhNTAtZGJlNi0z NTJhLWEyNGQtODA2OGYxMjg3YmYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEbhMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKMwjYJy2AwbKAkBTrNPaKIK3WobX0tJq8AT/ZQuFzTSjpiYmVqjJvM3 pxSnIdGekQ2MI8P7fh7Qjlc6MzQVwr0WFXpA0T5hEYldeJoTEd7pzoGlFR2V5a1i fWvn/axUCiLaYXHduNws06wtJrvkfTuwRY+8jwqUzycRqYa1otLPe9rc50ji1JFV L9JdIvZNdflREfLR7fdubvuyb4C5f3Of1P+sroA5kRDXNMAxc5i+yu/6i9GxReta uLnlsCcUp4+6ILzE4i/VsxxCZpAxfTR/YcQ5LXZ47DL5ulsgU3V+LSNCpPoA8AfJ YXrVsD4F3O/mY7uhJm+kHPuIzHlME6U= -----END CERTIFICATE-----Generated at Tue Sep 1 01:44:27 2026 by rpki-client