$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/989129ce-efbf-32bf-af20-d252442c0b18.roa File: 989129ce-efbf-32bf-af20-d252442c0b18.roa (raw, json) Hash identifier: SoE0PRrkVVL7lsaUdj/h64Fi3/DVlW8776r16V4utf8= Subject key identifier: 7E:96:FE:E2:60:81:1A:84:7D:8B:28:83:40:00:A0:90:3D:BB:72:E6 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584EF44CC3FC3051C4D5BEFA6280 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/989129ce-efbf-32bf-af20-d252442c0b18.roa Signing time: Tue 25 Aug 2026 13:00:12 +0000 ROA not before: Tue 25 Aug 2026 13:00:12 +0000 ROA not after: Mon 23 Nov 2026 14:00:12 +0000 asID: 13335 IP address blocks: 172.71.15.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Sep 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f4:4c:c3:fc:30:51:c4:d5:be:fa:62:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 25 13:00:12 2026 GMT Not After : Nov 23 14:00:12 2026 GMT Subject: CN=0fe30990-e64e-4b9a-8a64-00756edb0a08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:36:92:77:28:dc:4a:83:72:ba:1b:f4:99:ed: 4e:8e:68:b8:ba:98:59:8b:8b:e9:71:fb:9e:15:56: c0:b4:16:8e:b8:3c:fb:f3:be:81:05:de:6a:b9:80: 60:f1:c7:b3:ec:93:46:09:42:2f:34:d1:7c:78:cb: f3:20:03:0b:36:77:60:54:de:ad:08:b1:b1:b1:8b: 5b:1d:66:4d:ea:44:14:f4:3e:e4:c0:c7:72:ea:6b: 95:a2:1f:03:e3:32:7e:d9:b5:61:65:8f:10:4a:f6: 39:ff:e3:1d:1b:e9:d6:b0:59:f6:f6:f5:ec:df:c2: e5:bd:7d:62:f7:0d:6a:70:cc:3b:21:52:22:a7:fc: d5:59:68:40:a6:39:bc:c3:ee:d0:9c:20:55:34:e1: 08:5d:f6:83:ae:e3:6e:10:b4:4b:44:89:08:18:14: 91:64:0f:a0:1b:cf:cd:1c:7c:ff:ae:1e:b1:d9:a9: eb:78:e1:4c:ab:ab:de:c0:4a:c5:8c:61:e5:2a:71: a7:61:7d:5c:1c:05:c6:7c:44:34:e8:62:9a:ac:46: 1c:68:47:f9:2a:67:cd:22:99:7c:99:8c:e5:4b:fc: e1:7e:e3:70:c3:2b:fe:f6:ba:8e:f8:5c:98:94:18: 27:ea:67:8e:ea:a5:1f:88:91:02:2a:3d:14:e7:a7: 5c:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:96:FE:E2:60:81:1A:84:7D:8B:28:83:40:00:A0:90:3D:BB:72:E6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/989129ce-efbf-32bf-af20-d252442c0b18.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.71.15.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:66:34:fb:cd:11:7b:ec:53:e3:39:f4:42:73:e9:e2:7d:68: 79:a0:f2:3d:87:06:77:25:23:8e:af:c5:ed:e2:40:3f:92:8b: 81:a8:83:8d:36:08:6e:78:fb:0f:a3:ee:f3:2b:ab:f0:81:9f: ed:a7:ed:2e:a2:1f:20:43:fe:69:23:ad:44:da:1b:1e:98:67: 3a:eb:7a:72:4d:97:30:bb:b3:23:74:d4:74:96:4b:db:4c:9b: 08:32:58:5b:8f:07:d5:29:25:90:3d:eb:3b:06:d4:51:f8:4c: f5:0c:11:5b:53:3f:e0:6c:ef:d4:de:a6:38:b5:26:4c:26:be: 11:1c:79:01:c6:5d:5a:46:42:7a:f4:e3:1b:58:c4:75:b2:64: d8:d2:f9:74:0c:77:7c:3e:f4:77:05:c4:31:0c:ea:87:71:49: 11:30:9b:e6:2c:62:a2:5d:55:cc:95:09:1a:d8:62:20:18:d1: f3:ea:2e:eb:6d:0c:14:88:70:b1:63:a2:fd:c1:80:33:21:83: 16:dd:e1:ec:18:ab:64:ac:bc:72:8a:b5:4d:b2:4f:fb:4f:77: 03:80:a0:20:5c:a7:91:5c:91:9d:20:b2:94:3a:65:e7:28:4d: cf:98:d6:34:00:39:dd:42:21:14:18:1b:2d:2f:ce:0d:5e:a3: 0d:6a:b2:46 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE70TMP8MFHE1b76YoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDgyNTEzMDAxMloXDTI2MTEyMzE0MDAxMlowLzEtMCsGA1UEAxMk MGZlMzA5OTAtZTY0ZS00YjlhLThhNjQtMDA3NTZlZGIwYTA4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhjaSdyjcSoNyuhv0me1Ojmi4uphZi4vpcfue FVbAtBaOuDz7876BBd5quYBg8cez7JNGCUIvNNF8eMvzIAMLNndgVN6tCLGxsYtb HWZN6kQU9D7kwMdy6muVoh8D4zJ+2bVhZY8QSvY5/+MdG+nWsFn29vXs38LlvX1i 9w1qcMw7IVIip/zVWWhApjm8w+7QnCBVNOEIXfaDruNuELRLRIkIGBSRZA+gG8/N HHz/rh6x2anreOFMq6vewErFjGHlKnGnYX1cHAXGfEQ06GKarEYcaEf5KmfNIpl8 mYzlS/zhfuNwwyv+9rqO+FyYlBgn6meO6qUfiJECKj0U56dcZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH6W/uJggRqEfYsog0AAoJA9u3LmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvOTg5MTI5Y2UtZWZiZi0z MmJmLWFmMjAtZDI1MjQ0MmMwYjE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEcPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAANmNPvNEXvsU+M59EJz6eJ9aHmg8j2HBnclI46vxe3iQD+Si4Gog402 CG54+w+j7vMrq/CBn+2n7S6iHyBD/mkjrUTaGx6YZzrrenJNlzC7syN01HSWS9tM mwgyWFuPB9UpJZA96zsG1FH4TPUMEVtTP+Bs79Tepji1JkwmvhEceQHGXVpGQnr0 4xtYxHWyZNjS+XQMd3w+9HcFxDEM6odxSREwm+YsYqJdVcyVCRrYYiAY0fPqLutt DBSIcLFjov3BgDMhgxbd4ewYq2SsvHKKtU2yT/tPdwOAoCBcp5FckZ0gspQ6Zeco Tc+Y1jQAOd1CIRQYGy0vzg1eow1qskY= -----END CERTIFICATE-----Generated at Tue Sep 1 01:58:03 2026 by rpki-client