$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a2e24288-e94a-3c26-93c5-4dd394919e0e.roa File: a2e24288-e94a-3c26-93c5-4dd394919e0e.roa (raw, json) Hash identifier: CXJShFt+luO1jf25s0r6gO7CvvcRm+tfxk31pAa81dY= Subject key identifier: F7:72:E2:25:44:96:DA:75:F9:73:FE:5F:AD:E4:AE:EE:2B:90:70:3E Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584EF44CB8AC4CD9F5F31C03A940 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a2e24288-e94a-3c26-93c5-4dd394919e0e.roa Signing time: Tue 25 Aug 2026 13:00:12 +0000 ROA not before: Tue 25 Aug 2026 13:00:12 +0000 ROA not after: Mon 23 Nov 2026 14:00:12 +0000 asID: 13335 IP address blocks: 172.70.208.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Sep 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f4:4c:b8:ac:4c:d9:f5:f3:1c:03:a9:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 25 13:00:12 2026 GMT Not After : Nov 23 14:00:12 2026 GMT Subject: CN=f14305b7-722a-4966-9bc2-499f1fdd5384 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:e4:f5:8b:32:86:ba:59:3f:41:17:36:ce:d3: 75:5d:f7:ff:cf:cf:3d:2c:6c:8e:dc:17:31:11:fe: 09:30:9d:bb:68:10:13:c8:c4:fe:e4:53:a9:ed:95: b5:a4:d7:c8:3d:c9:78:5b:11:a5:0c:e7:ba:41:cd: 8d:32:3f:29:90:25:bb:6d:76:e8:03:6d:51:13:c7: 01:c2:a6:87:de:94:0c:be:41:5e:fd:d9:9d:f9:7b: 5b:99:85:f4:15:6b:54:03:27:10:94:6b:38:69:e9: b7:7b:bf:87:21:90:f4:4a:13:aa:f4:a7:79:3e:1f: a0:aa:30:37:cb:f2:46:55:a9:82:2b:bf:93:a6:59: c7:b2:46:81:85:77:62:5e:9f:00:39:f5:31:6f:83: 56:ec:34:e8:95:64:0b:6d:f7:d3:53:59:a2:01:44: 0f:e3:82:59:46:8c:47:53:f8:ec:f9:71:69:5f:5b: d0:b4:32:de:13:4f:e9:a5:bc:06:aa:df:0e:d5:f9: 22:93:a8:ee:56:24:b5:6a:64:1a:1f:03:51:28:33: ac:ab:36:bc:1b:60:6b:33:9d:41:c9:99:ac:1b:92: a2:d7:76:b8:cd:f2:0d:dc:75:8d:fb:74:f9:33:43: 7d:21:2c:8e:ed:ac:c8:ce:0e:58:39:cd:37:92:c0: 20:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:72:E2:25:44:96:DA:75:F9:73:FE:5F:AD:E4:AE:EE:2B:90:70:3E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a2e24288-e94a-3c26-93c5-4dd394919e0e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.70.208.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:72:3e:1d:e0:b3:9a:34:97:93:a5:5d:18:e3:cd:28:7d:a4: 64:b1:fc:a6:ba:b5:42:42:f6:bb:13:2d:7c:e5:2e:bc:c9:ba: 35:b6:41:1a:50:9e:cc:de:18:13:e3:7a:f8:07:20:1c:05:2c: 6f:45:eb:4c:69:36:3c:26:32:1a:35:c1:7f:d1:16:37:d5:da: e1:2c:35:4d:76:7d:06:84:84:6f:98:3d:1f:65:6c:3e:09:65: 40:80:a4:ea:56:b4:64:62:7e:d6:2c:6e:af:cb:b1:65:8b:27: 2d:b4:dd:ec:d6:77:25:d0:e4:f2:4e:3b:66:8b:e4:f6:63:c5: 0d:7b:7c:a7:d6:7a:71:e9:22:4e:40:a4:be:cb:b5:2c:93:d4: f1:31:b9:52:70:45:df:17:b1:39:90:42:fb:10:82:78:a5:63: bc:54:7d:4c:c6:1c:5a:0e:21:c8:10:f3:1e:8d:87:2b:cc:8e: 98:ad:48:7f:b8:5d:42:49:56:b9:b3:12:d0:10:40:2e:4e:43: 3a:36:94:71:4a:93:0d:02:06:84:09:d5:e2:50:87:2b:9f:ab: c4:c9:f4:f1:49:3d:aa:55:8c:e0:82:59:7f:8e:60:ff:7f:0c: 30:56:0c:1a:ef:f8:3c:ce:3d:3c:3f:7d:62:ca:57:57:70:1b: d8:d9:ae:ef -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE70TLisTNn18xwDqUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDgyNTEzMDAxMloXDTI2MTEyMzE0MDAxMlowLzEtMCsGA1UEAxMk ZjE0MzA1YjctNzIyYS00OTY2LTliYzItNDk5ZjFmZGQ1Mzg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuOT1izKGulk/QRc2ztN1Xff/z889LGyO3Bcx Ef4JMJ27aBATyMT+5FOp7ZW1pNfIPcl4WxGlDOe6Qc2NMj8pkCW7bXboA21RE8cB wqaH3pQMvkFe/dmd+XtbmYX0FWtUAycQlGs4aem3e7+HIZD0ShOq9Kd5Ph+gqjA3 y/JGVamCK7+TplnHskaBhXdiXp8AOfUxb4NW7DTolWQLbffTU1miAUQP44JZRoxH U/js+XFpX1vQtDLeE0/ppbwGqt8O1fkik6juViS1amQaHwNRKDOsqza8G2BrM51B yZmsG5Ki13a4zfIN3HWN+3T5M0N9ISyO7azIzg5YOc03ksAgdwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPdy4iVEltp1+XP+X63kru4rkHA+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvYTJlMjQyODgtZTk0YS0z YzI2LTkzYzUtNGRkMzk0OTE5ZTBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEbQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACByPh3gs5o0l5OlXRjjzSh9pGSx/Ka6tUJC9rsTLXzlLrzJujW2QRpQ nszeGBPjevgHIBwFLG9F60xpNjwmMho1wX/RFjfV2uEsNU12fQaEhG+YPR9lbD4J ZUCApOpWtGRiftYsbq/LsWWLJy203ezWdyXQ5PJOO2aL5PZjxQ17fKfWenHpIk5A pL7LtSyT1PExuVJwRd8XsTmQQvsQgnilY7xUfUzGHFoOIcgQ8x6NhyvMjpitSH+4 XUJJVrmzEtAQQC5OQzo2lHFKkw0CBoQJ1eJQhyufq8TJ9PFJPapVjOCCWX+OYP9/ DDBWDBrv+DzOPTw/fWLKV1dwG9jZru8= -----END CERTIFICATE-----Generated at Tue Sep 1 01:57:36 2026 by rpki-client