$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b255b1e9-a637-3be4-a84f-50435291d1d5.roa File: b255b1e9-a637-3be4-a84f-50435291d1d5.roa (raw, json) Hash identifier: 5BjcSBfm1nALjjuXwy4LL4gSlqNDHhwcnG7Bg2kIVFc= Subject key identifier: C4:12:13:39:14:B3:C5:FB:AB:35:5E:20:97:83:CC:D5:B2:F0:A5:17 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584EF44CBB2A54B0D889D2F47BB0 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b255b1e9-a637-3be4-a84f-50435291d1d5.roa Signing time: Tue 25 Aug 2026 13:00:12 +0000 ROA not before: Tue 25 Aug 2026 13:00:12 +0000 ROA not after: Mon 23 Nov 2026 14:00:12 +0000 asID: 13335 IP address blocks: 172.71.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f4:4c:bb:2a:54:b0:d8:89:d2:f4:7b:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 25 13:00:12 2026 GMT Not After : Nov 23 14:00:12 2026 GMT Subject: CN=e91f1eb7-0184-41b9-b168-cdf2ea9127fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:73:69:ae:43:0f:ff:63:11:c5:a3:8b:a6:7e: 19:4d:09:c0:00:f3:c6:95:b9:30:b1:66:3a:d5:f3: e2:45:0f:0c:45:6f:eb:60:80:cc:69:d3:5d:84:58: 7b:ef:a5:ec:48:b3:af:78:de:55:1e:f9:a1:2b:52: 0f:19:4d:bc:10:ab:98:d7:54:fb:d6:af:15:bf:f0: 5d:93:e3:bc:93:47:5c:bf:69:59:da:7d:7d:2c:55: 62:ed:fa:25:6f:f1:d3:c5:1a:ce:96:bf:be:93:bf: 11:20:bc:bf:7b:8e:0f:6d:49:0a:7b:d3:08:6d:46: ae:32:6b:80:53:9c:36:4e:27:a3:ba:32:8a:30:f1: b0:bb:b4:41:5f:13:c3:c7:21:53:85:90:da:c4:46: b6:10:12:e6:f6:4a:57:47:d6:31:4b:e1:ae:91:cf: bd:d7:06:b0:5b:10:2e:1f:52:5b:78:40:82:a9:a3: 1e:5c:85:c0:df:a5:86:2a:53:ca:bd:de:5e:e6:83: ef:fc:34:5a:97:1f:5c:e6:63:39:ee:59:43:ff:d9: 3d:21:c4:3e:8e:e9:24:63:6c:11:06:2d:f8:32:e0: 9f:33:16:e5:9d:4f:65:1f:b9:04:cc:f1:53:d9:57: 23:be:b5:c8:c1:5d:0c:5b:e1:02:8c:f7:6e:d7:3f: e5:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:12:13:39:14:B3:C5:FB:AB:35:5E:20:97:83:CC:D5:B2:F0:A5:17 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b255b1e9-a637-3be4-a84f-50435291d1d5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.71.123.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b7:d1:29:10:78:f9:92:36:12:ba:b3:3c:84:82:df:5f:a6:33: a5:4c:f4:a4:4b:bb:b2:10:af:3d:64:c8:3b:9e:9e:da:8e:fc: 1d:cf:6f:6e:a5:a8:3a:5a:b1:8a:6f:4a:68:ef:12:96:09:6d: b8:f2:ca:14:d6:c7:70:24:2a:7d:5d:0e:16:c3:cf:d1:bb:04: 00:28:82:93:f3:dd:a9:88:1e:dd:0a:af:81:70:bd:78:5c:14: 72:1f:38:ba:42:81:b2:65:fb:ac:65:b7:ff:69:ac:0d:42:11: f0:2a:40:47:3a:48:98:28:61:03:66:32:ff:9c:1f:a3:5b:06: 36:f8:47:b8:6e:77:b8:b2:0c:a2:21:d6:6f:e3:f7:a6:eb:07: 1b:c1:a2:fd:13:0a:3b:6a:9f:41:53:d2:c7:6f:96:ec:fc:ed: 66:be:79:62:08:e4:99:d3:ed:86:2a:8a:5a:c9:e5:34:03:84: 89:69:e9:9c:b3:cc:52:b5:5e:02:84:ce:03:de:fc:c5:da:c2: df:bc:06:25:0a:ed:ae:d9:7a:41:bd:94:8c:6a:47:4e:92:e7: 19:c1:fb:ae:2b:4a:ad:d2:ad:3f:d8:40:bf:89:36:b4:10:34: 43:ba:59:bd:97:0e:9c:b4:7e:90:89:01:8f:ad:4f:c9:0a:a0: 4f:54:78:5f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE70TLsqVLDYidL0e7AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDgyNTEzMDAxMloXDTI2MTEyMzE0MDAxMlowLzEtMCsGA1UEAxMk ZTkxZjFlYjctMDE4NC00MWI5LWIxNjgtY2RmMmVhOTEyN2ZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuHNprkMP/2MRxaOLpn4ZTQnAAPPGlbkwsWY6 1fPiRQ8MRW/rYIDMadNdhFh776XsSLOveN5VHvmhK1IPGU28EKuY11T71q8Vv/Bd k+O8k0dcv2lZ2n19LFVi7folb/HTxRrOlr++k78RILy/e44PbUkKe9MIbUauMmuA U5w2TiejujKKMPGwu7RBXxPDxyFThZDaxEa2EBLm9kpXR9YxS+Gukc+91wawWxAu H1JbeECCqaMeXIXA36WGKlPKvd5e5oPv/DRalx9c5mM57llD/9k9IcQ+jukkY2wR Bi34MuCfMxblnU9lH7kEzPFT2VcjvrXIwV0MW+ECjPdu1z/lvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMQSEzkUs8X7qzVeIJeDzNWy8KUXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvYjI1NWIxZTktYTYzNy0z YmU0LWE4NGYtNTA0MzUyOTFkMWQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEd7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALfRKRB4+ZI2ErqzPISC31+mM6VM9KRLu7IQrz1kyDuentqO/B3Pb26l qDpasYpvSmjvEpYJbbjyyhTWx3AkKn1dDhbDz9G7BAAogpPz3amIHt0Kr4FwvXhc FHIfOLpCgbJl+6xlt/9prA1CEfAqQEc6SJgoYQNmMv+cH6NbBjb4R7hud7iyDKIh 1m/j96brBxvBov0TCjtqn0FT0sdvluz87Wa+eWII5JnT7YYqilrJ5TQDhIlp6Zyz zFK1XgKEzgPe/MXawt+8BiUK7a7ZekG9lIxqR06S5xnB+64rSq3SrT/YQL+JNrQQ NEO6Wb2XDpy0fpCJAY+tT8kKoE9UeF8= -----END CERTIFICATE-----Generated at Tue Sep 1 01:58:30 2026 by rpki-client