$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/94d34060-7e90-37ef-b43e-f385f7e8b0cc.roa File: 94d34060-7e90-37ef-b43e-f385f7e8b0cc.roa (raw, json) Hash identifier: vx8pciy3IbJDCNssigELEzx6u56cyKdKt25t1MK0hW8= Subject key identifier: 2B:D0:E0:25:35:75:00:F0:9D:7C:EC:2B:BC:09:7A:57:EB:AE:D8:07 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584EF44CC49F5AF7CE916F24C1D0 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/94d34060-7e90-37ef-b43e-f385f7e8b0cc.roa Signing time: Tue 25 Aug 2026 13:00:12 +0000 ROA not before: Tue 25 Aug 2026 13:00:12 +0000 ROA not after: Mon 23 Nov 2026 14:00:12 +0000 asID: 13335 IP address blocks: 172.71.103.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f4:4c:c4:9f:5a:f7:ce:91:6f:24:c1:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 25 13:00:12 2026 GMT Not After : Nov 23 14:00:12 2026 GMT Subject: CN=1f4f9ad8-98c8-4090-983e-1fab1c49523f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:0c:c5:8b:d6:2e:d4:08:ba:da:44:81:21:ae: 4f:7e:80:cc:48:4b:ef:9b:3b:1a:81:4c:38:1f:e8: b5:9c:58:03:5f:67:b5:48:69:75:23:57:34:b6:48: ee:af:c5:60:22:fc:a5:93:0e:b2:05:06:28:d4:b0: 0c:db:6e:0a:c1:a9:d0:dc:65:d7:64:9d:27:9b:a8: fc:05:04:7a:5b:6e:5b:bc:82:8a:6d:56:61:58:d5: 44:b6:43:e0:56:bd:04:67:f1:b8:19:1e:06:a0:8e: 3c:36:9c:c1:5b:71:70:a1:a4:60:05:ad:25:d5:c2: 3e:36:1a:a8:95:e4:23:45:1a:ca:c8:5a:da:16:9f: 95:37:84:74:dc:58:07:07:30:51:26:b9:31:45:24: c8:c0:fa:51:4b:5e:31:aa:27:3c:a1:89:6d:0f:92: d0:98:fd:2f:2e:65:f7:5d:5f:6f:63:ca:42:e1:25: 66:ca:47:c8:b4:1d:ba:32:ef:b0:df:85:e4:c5:a9: 4d:27:f9:a0:11:e9:07:0b:57:68:51:60:6e:d4:ba: 3a:0f:01:4a:84:48:b2:0a:ae:e6:7b:58:84:0d:58: 07:01:ac:4a:5b:88:6a:b6:2a:52:f5:f8:1c:55:c1: 50:84:9f:cb:fd:3c:00:0d:9b:f3:25:56:af:9e:1b: b3:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:D0:E0:25:35:75:00:F0:9D:7C:EC:2B:BC:09:7A:57:EB:AE:D8:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/94d34060-7e90-37ef-b43e-f385f7e8b0cc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.71.103.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:4c:f8:e1:6c:a1:c5:04:6e:cd:c8:0f:46:0f:26:a4:73:c0: 3e:ba:ac:6c:81:98:ec:72:80:df:7c:ae:d0:0c:5c:67:19:ac: 23:25:1d:64:70:6b:37:af:e1:75:77:59:10:11:9a:07:ce:d2: 50:4c:fe:29:dd:c7:c7:2c:d9:d9:e3:c4:e4:c8:da:ec:23:54: d2:b0:80:44:b0:ca:94:dc:cd:c3:82:57:a4:a4:fa:b0:2c:8e: c9:8d:05:e2:69:14:da:3f:48:4e:39:3f:c2:cc:87:e1:07:e3: 39:8c:7d:50:f1:43:ee:54:1a:d0:ad:85:a2:bd:03:18:4c:a8: 73:16:61:66:86:c1:7b:9e:3a:ad:07:28:81:ad:4c:f9:16:2e: 1d:b8:1c:e0:6a:70:b4:80:8b:33:7b:46:65:46:4f:0e:9b:1d: 14:9e:d4:d1:57:03:e3:0e:eb:1c:ee:80:73:75:40:df:22:2e: 5d:ab:1c:82:33:43:f2:ad:f3:6d:ca:c0:9e:73:ba:a7:af:e7: 06:86:0b:ba:15:5d:c0:75:66:7c:16:6e:88:a5:0b:73:21:69: 46:a7:78:65:e2:d2:ac:35:49:0f:24:dc:ee:e4:98:65:66:c3: 93:4c:40:30:75:8b:ec:5e:43:a4:fd:aa:e6:25:7d:2e:bb:76: a6:94:71:8d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE70TMSfWvfOkW8kwdAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDgyNTEzMDAxMloXDTI2MTEyMzE0MDAxMlowLzEtMCsGA1UEAxMk MWY0ZjlhZDgtOThjOC00MDkwLTk4M2UtMWZhYjFjNDk1MjNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArwzFi9Yu1Ai62kSBIa5PfoDMSEvvmzsagUw4 H+i1nFgDX2e1SGl1I1c0tkjur8VgIvylkw6yBQYo1LAM224KwanQ3GXXZJ0nm6j8 BQR6W25bvIKKbVZhWNVEtkPgVr0EZ/G4GR4GoI48NpzBW3FwoaRgBa0l1cI+Nhqo leQjRRrKyFraFp+VN4R03FgHBzBRJrkxRSTIwPpRS14xqic8oYltD5LQmP0vLmX3 XV9vY8pC4SVmykfItB26Mu+w34XkxalNJ/mgEekHC1doUWBu1Lo6DwFKhEiyCq7m e1iEDVgHAaxKW4hqtipS9fgcVcFQhJ/L/TwADZvzJVavnhuzYwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCvQ4CU1dQDwnXzsK7wJelfrrtgHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvOTRkMzQwNjAtN2U5MC0z N2VmLWI0M2UtZjM4NWY3ZThiMGNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEdnMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAtM+OFsocUEbs3ID0YPJqRzwD66rGyBmOxygN98rtAMXGcZrCMlHWRw azev4XV3WRARmgfO0lBM/indx8cs2dnjxOTI2uwjVNKwgESwypTczcOCV6Sk+rAs jsmNBeJpFNo/SE45P8LMh+EH4zmMfVDxQ+5UGtCthaK9AxhMqHMWYWaGwXueOq0H KIGtTPkWLh24HOBqcLSAizN7RmVGTw6bHRSe1NFXA+MO6xzugHN1QN8iLl2rHIIz Q/Kt823KwJ5zuqev5waGC7oVXcB1ZnwWboilC3MhaUaneGXi0qw1SQ8k3O7kmGVm w5NMQDB1i+xeQ6T9quYlfS67dqaUcY0= -----END CERTIFICATE-----Generated at Tue Sep 1 01:58:36 2026 by rpki-client