$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a4d24589-120f-3342-a970-7f75ed378e81.roa File: a4d24589-120f-3342-a970-7f75ed378e81.roa (raw, json) Hash identifier: 3Lj5O7kfzB3a1h93v53idtCJwjYZqzAB+ttQvZNn1B4= Subject key identifier: 08:0F:C2:19:87:B6:59:5C:44:40:B3:0E:7B:4F:EE:DB:06:B5:2C:A2 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584EF44CB9098AA25B62528B0840 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a4d24589-120f-3342-a970-7f75ed378e81.roa Signing time: Tue 25 Aug 2026 13:00:12 +0000 ROA not before: Tue 25 Aug 2026 13:00:12 +0000 ROA not after: Mon 23 Nov 2026 14:00:12 +0000 asID: 13335 IP address blocks: 172.70.226.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 Oct 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f4:4c:b9:09:8a:a2:5b:62:52:8b:08:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 25 13:00:12 2026 GMT Not After : Nov 23 14:00:12 2026 GMT Subject: CN=ae713e51-6118-40e8-9678-1c21fb271238 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:60:c0:8e:00:79:ac:e2:d6:ba:9b:b8:08:5d: b5:06:75:81:32:37:2e:a7:fd:e6:03:d7:44:e1:3e: 25:57:78:99:12:6b:9b:d7:8e:f6:00:6c:08:31:a3: 8c:0d:63:dc:a5:fa:5f:7e:17:a3:13:19:af:da:37: d5:d4:dd:2c:fe:38:0f:b6:d4:02:26:10:e7:6a:dd: 35:a2:32:1e:6d:5c:f9:04:39:08:5b:2f:51:5b:32: 5a:d5:77:43:1a:b7:61:d9:d4:ba:41:45:28:d9:56: 2a:e7:e0:c1:4b:f3:78:df:c3:af:6a:52:92:c4:e4: d7:a1:a3:d1:76:e7:94:30:7a:21:70:ea:cc:1b:71: d0:56:c0:71:15:62:f9:70:17:29:fb:36:77:42:6f: a6:cc:43:f4:d2:af:e2:b4:15:44:2b:84:19:39:ae: 3a:4a:fc:07:2b:c3:20:ea:03:45:4c:32:51:37:1c: a8:c5:33:2c:d5:39:8c:1c:d4:80:f5:e5:de:3f:cc: 31:cd:50:a1:13:5d:af:8a:99:46:5e:74:b8:c9:ca: 63:48:7f:1c:e6:90:c1:5d:5a:e1:f4:98:27:8f:ca: 79:dc:7d:a5:a7:21:d4:9a:51:63:c2:b1:74:87:fa: fa:5e:e4:44:97:ce:a4:f9:1a:c2:89:61:6a:66:25: 8e:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:0F:C2:19:87:B6:59:5C:44:40:B3:0E:7B:4F:EE:DB:06:B5:2C:A2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a4d24589-120f-3342-a970-7f75ed378e81.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.70.226.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:e5:dd:04:d3:d3:30:d6:e0:74:fb:0d:40:11:48:bf:af:6a: b5:50:a3:c4:ad:17:f2:f7:59:2a:e2:9e:5b:15:f2:d0:a5:da: bf:1e:e1:40:c5:a8:1f:42:53:1e:d1:89:5d:ed:e8:6f:49:9c: 59:e0:09:db:fe:d7:a7:b0:34:44:da:fa:12:05:b4:9d:d5:9a: f1:e0:24:cc:58:93:95:9f:ae:0d:49:db:44:51:32:0e:89:62: 8d:4f:d1:d7:a4:b2:bb:40:02:86:c0:e2:00:af:49:fe:a4:12: 35:7e:b7:81:23:37:6e:8a:a8:f2:0a:83:86:e0:79:33:0d:a9: 6e:c4:26:4c:e6:1b:20:fb:f5:45:f4:9b:85:43:e8:6b:7f:d0: b7:73:c4:7a:be:a0:4e:22:2f:8e:09:b5:bb:c1:e3:67:b8:65: a0:ed:6b:37:bf:d3:fb:6a:b3:35:36:c7:a9:3c:00:77:0c:12: 06:c8:27:18:4b:86:11:2c:97:97:8a:31:fd:4c:45:78:2b:b0: 08:67:76:18:b5:9e:56:ca:4f:cb:74:5c:eb:fe:d0:b1:61:c2: 4f:98:f3:3e:ac:81:53:fb:18:d8:8d:95:27:19:66:94:73:dc: cc:17:e4:1f:06:fd:df:6e:88:ef:35:44:95:0d:14:b4:a5:b8: d3:12:dd:7c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE70TLkJiqJbYlKLCEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDgyNTEzMDAxMloXDTI2MTEyMzE0MDAxMlowLzEtMCsGA1UEAxMk YWU3MTNlNTEtNjExOC00MGU4LTk2NzgtMWMyMWZiMjcxMjM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArWDAjgB5rOLWupu4CF21BnWBMjcup/3mA9dE 4T4lV3iZEmub1472AGwIMaOMDWPcpfpffhejExmv2jfV1N0s/jgPttQCJhDnat01 ojIebVz5BDkIWy9RWzJa1XdDGrdh2dS6QUUo2VYq5+DBS/N438OvalKSxOTXoaPR dueUMHohcOrMG3HQVsBxFWL5cBcp+zZ3Qm+mzEP00q/itBVEK4QZOa46SvwHK8Mg 6gNFTDJRNxyoxTMs1TmMHNSA9eXeP8wxzVChE12viplGXnS4ycpjSH8c5pDBXVrh 9Jgnj8p53H2lpyHUmlFjwrF0h/r6XuREl86k+RrCiWFqZiWOawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAgPwhmHtllcRECzDntP7tsGtSyiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvYTRkMjQ1ODktMTIwZi0z MzQyLWE5NzAtN2Y3NWVkMzc4ZTgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEbiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA/l3QTT0zDW4HT7DUARSL+varVQo8StF/L3WSrinlsV8tCl2r8e4UDF qB9CUx7RiV3t6G9JnFngCdv+16ewNETa+hIFtJ3VmvHgJMxYk5Wfrg1J20RRMg6J Yo1P0deksrtAAobA4gCvSf6kEjV+t4EjN26KqPIKg4bgeTMNqW7EJkzmGyD79UX0 m4VD6Gt/0LdzxHq+oE4iL44JtbvB42e4ZaDtaze/0/tqszU2x6k8AHcMEgbIJxhL hhEsl5eKMf1MRXgrsAhndhi1nlbKT8t0XOv+0LFhwk+Y8z6sgVP7GNiNlScZZpRz 3MwX5B8G/d9uiO81RJUNFLSluNMS3Xw= -----END CERTIFICATE-----Generated at Tue Oct 6 17:00:40 2026 by rpki-client