$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/bdd425fd-07b4-38b3-b93b-19ab62fc0b0a.roa File: bdd425fd-07b4-38b3-b93b-19ab62fc0b0a.roa (raw, json) Hash identifier: RqRxmUXwIo+MWj3c2+lxckKG5qlY3FoZgEKwu1vEhHk= Subject key identifier: 02:EB:1D:CC:18:00:B2:69:F1:1D:75:D2:77:05:FB:A9:39:54:54:35 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584EF44CBAAC0B2E6E4D4EA31580 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/bdd425fd-07b4-38b3-b93b-19ab62fc0b0a.roa Signing time: Tue 25 Aug 2026 13:00:12 +0000 ROA not before: Tue 25 Aug 2026 13:00:12 +0000 ROA not after: Mon 23 Nov 2026 14:00:12 +0000 asID: 13335 IP address blocks: 172.71.89.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f4:4c:ba:ac:0b:2e:6e:4d:4e:a3:15:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 25 13:00:12 2026 GMT Not After : Nov 23 14:00:12 2026 GMT Subject: CN=e1501d39-1995-41bc-b374-30c1072a77f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:00:c5:a6:63:62:f2:c4:bb:ac:3c:57:4c:0a: a3:3b:b3:69:df:7d:ad:cd:0a:42:41:0f:19:67:af: e2:8d:99:dc:19:0a:22:28:0c:c4:0b:8a:30:8e:b6: f4:33:fa:07:10:fe:4e:09:a8:93:fc:74:be:7a:18: 62:f0:c8:b8:e5:06:7f:d2:06:02:4e:80:49:66:4b: ce:1b:a7:af:9d:f4:26:84:9c:c0:83:aa:3f:c1:1a: 31:35:ff:2f:c9:9e:ca:23:d6:1b:35:26:a5:b6:47: 11:99:0c:30:36:50:55:f8:af:a8:5e:53:79:af:96: 6c:cd:ce:84:53:d0:51:cb:49:cb:78:17:17:ce:ea: ec:4b:3e:d1:6b:7b:95:af:d7:90:d2:16:20:a2:cf: 78:c8:ac:1f:5a:69:94:2f:e3:06:60:15:71:07:a3: f0:94:a7:2d:4d:9c:48:ff:b0:ac:f1:3f:ca:50:e9: 89:9e:fe:73:f8:98:1d:c5:4c:80:7b:42:3d:6a:55: 69:65:5a:93:2a:1c:d4:01:71:08:73:1f:32:c3:f1: d9:f3:34:67:e9:a9:7f:86:1b:0e:64:d2:1d:8b:f4: 60:e5:f0:90:a5:b3:70:8f:6e:b3:8d:bf:78:28:8a: ac:2c:56:99:f6:45:32:c7:de:1b:0d:c9:fb:d9:64: 6b:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:EB:1D:CC:18:00:B2:69:F1:1D:75:D2:77:05:FB:A9:39:54:54:35 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/bdd425fd-07b4-38b3-b93b-19ab62fc0b0a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.71.89.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9d:d3:01:2d:89:a2:62:42:58:00:93:1b:1f:80:5a:30:82:f4: 4e:8b:fa:6c:cc:53:9a:b0:58:b9:8f:78:cf:40:14:fc:71:a3: 20:ea:3f:c5:c2:f1:88:f6:4f:7e:df:06:b0:f7:d1:59:4b:ea: 82:cb:b1:9b:48:a6:ba:72:7f:b5:ec:dc:5d:84:48:ad:24:44: e9:f3:33:12:1e:32:3d:d6:ba:d3:a4:3d:f8:c5:be:19:37:48: 86:6f:18:b8:eb:ad:1b:32:b6:81:91:59:b8:a0:7e:42:3e:ca: 7e:0c:bf:cf:87:02:98:90:9e:e3:1d:a5:d3:4c:eb:97:c9:27: 5c:b0:6a:bf:c8:cf:26:93:07:9a:59:36:15:26:b3:5a:53:99: a1:31:c4:2c:ad:42:63:32:18:d8:f4:f7:ab:b3:87:69:e0:22: 52:08:9c:6b:37:63:6b:ee:d1:e6:34:cf:01:98:12:88:45:12: 8c:d3:25:8d:f0:4a:70:8d:60:fc:d1:e1:e6:8f:17:54:65:c9: 54:7e:29:a1:73:77:2d:f1:49:fa:ae:0f:a5:f4:4d:dd:c4:3c: 20:76:fa:71:dc:92:cd:ec:4a:aa:0e:f8:02:52:59:dc:bf:cd: 85:35:69:b8:5d:62:92:c2:4f:e2:92:da:8a:0c:ab:6a:7d:c8: 00:0f:cb:8d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE70TLqsCy5uTU6jFYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDgyNTEzMDAxMloXDTI2MTEyMzE0MDAxMlowLzEtMCsGA1UEAxMk ZTE1MDFkMzktMTk5NS00MWJjLWIzNzQtMzBjMTA3MmE3N2Y4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmwDFpmNi8sS7rDxXTAqjO7Np332tzQpCQQ8Z Z6/ijZncGQoiKAzEC4owjrb0M/oHEP5OCaiT/HS+ehhi8Mi45QZ/0gYCToBJZkvO G6evnfQmhJzAg6o/wRoxNf8vyZ7KI9YbNSaltkcRmQwwNlBV+K+oXlN5r5Zszc6E U9BRy0nLeBcXzursSz7Ra3uVr9eQ0hYgos94yKwfWmmUL+MGYBVxB6PwlKctTZxI /7Cs8T/KUOmJnv5z+JgdxUyAe0I9alVpZVqTKhzUAXEIcx8yw/HZ8zRn6al/hhsO ZNIdi/Rg5fCQpbNwj26zjb94KIqsLFaZ9kUyx94bDcn72WRrmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFALrHcwYALJp8R110ncF+6k5VFQ1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvYmRkNDI1ZmQtMDdiNC0z OGIzLWI5M2ItMTlhYjYyZmMwYjBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEdZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ3TAS2JomJCWACTGx+AWjCC9E6L+mzMU5qwWLmPeM9AFPxxoyDqP8XC 8Yj2T37fBrD30VlL6oLLsZtIprpyf7Xs3F2ESK0kROnzMxIeMj3WutOkPfjFvhk3 SIZvGLjrrRsytoGRWbigfkI+yn4Mv8+HApiQnuMdpdNM65fJJ1ywar/IzyaTB5pZ NhUms1pTmaExxCytQmMyGNj096uzh2ngIlIInGs3Y2vu0eY0zwGYEohFEozTJY3w SnCNYPzR4eaPF1RlyVR+KaFzdy3xSfquD6X0Td3EPCB2+nHcks3sSqoO+AJSWdy/ zYU1abhdYpLCT+KS2ooMq2p9yAAPy40= -----END CERTIFICATE-----Generated at Tue Sep 22 13:01:00 2026 by rpki-client