$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c3b48fbb-0a32-34ba-9d91-b2eb7337344e.roa File: c3b48fbb-0a32-34ba-9d91-b2eb7337344e.roa (raw, json) Hash identifier: 0ZaDXP4+IgX+wR6gKRgnSQwcoHtLCqaBwuJBp2VSgKU= Subject key identifier: 8A:69:5B:03:57:B1:09:B9:C1:0F:49:45:B1:18:A9:FE:15:ED:3F:F7 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584EF44CC387A91B6998C1971300 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c3b48fbb-0a32-34ba-9d91-b2eb7337344e.roa Signing time: Tue 25 Aug 2026 13:00:12 +0000 ROA not before: Tue 25 Aug 2026 13:00:12 +0000 ROA not after: Mon 23 Nov 2026 14:00:12 +0000 asID: 13335 IP address blocks: 172.70.242.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f4:4c:c3:87:a9:1b:69:98:c1:97:13:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 25 13:00:12 2026 GMT Not After : Nov 23 14:00:12 2026 GMT Subject: CN=be9d8483-5d1c-43fa-a440-811f95177001 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:8f:90:90:9b:21:54:46:a4:c6:30:8d:4d:6f: 63:39:81:54:c1:3e:fe:b4:23:f8:6a:6e:7d:eb:0f: 91:90:c3:b9:60:cf:7f:b9:69:9b:7c:b5:6c:1a:4a: 3a:7c:ab:38:c3:25:ff:5a:22:44:81:24:35:a2:ca: 90:d1:a1:db:c1:16:70:ba:d3:12:38:99:c8:ac:fe: be:ec:bf:ac:e7:da:53:1f:ec:de:bb:53:61:57:d6: 89:4d:e7:af:19:f8:3c:f8:e3:39:95:c2:ba:f1:b3: 32:5b:4f:a4:12:4f:d8:5b:7e:a4:96:5d:97:9d:99: c5:80:9d:3d:3f:52:49:24:c6:fb:aa:d8:0d:75:a8: ea:5e:51:4c:ad:cb:44:13:5f:d5:89:02:80:30:f1: e0:64:ef:1d:9d:58:8d:3c:57:14:36:f1:83:cb:de: 17:44:d2:56:19:ba:4d:e4:19:9c:c3:63:f3:c1:20: 2f:56:28:72:5f:0f:e5:1c:e6:64:d5:06:62:be:de: 1e:f6:87:90:cd:e1:ec:45:4e:aa:f9:0e:a7:86:c6: a4:74:fd:fe:5e:be:8c:3a:38:6a:60:d8:e1:7a:b6: d9:0c:10:51:14:88:e7:ba:e1:3a:19:c9:43:79:ff: e7:b3:af:84:49:2d:42:55:a0:91:25:77:81:b8:cc: da:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:69:5B:03:57:B1:09:B9:C1:0F:49:45:B1:18:A9:FE:15:ED:3F:F7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c3b48fbb-0a32-34ba-9d91-b2eb7337344e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.70.242.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:f9:59:45:e9:45:99:ad:f5:6f:46:f4:50:0b:1c:c0:ff:65: 06:40:37:d4:46:01:74:e8:0a:21:82:b1:8d:34:71:e9:70:5f: d1:83:b6:2e:8d:0a:92:ff:25:48:8d:09:f1:19:2c:c3:ac:cc: c9:67:ce:d5:36:f7:6b:76:6f:44:e1:9a:2a:d3:a7:5e:2f:8d: 79:d2:64:d9:62:8a:42:91:24:80:b4:ca:81:84:30:43:68:96: 46:7d:d6:92:b1:c4:07:ce:80:0a:66:41:8a:5f:40:9b:db:cf: 7a:5a:ab:35:41:b7:64:61:be:ed:e0:b0:9e:3a:cc:58:4f:29: f6:11:52:3b:8f:30:74:6f:4e:94:6c:79:11:b0:ef:e5:e9:ff: ae:76:31:d2:ad:d8:17:87:eb:f4:2b:00:13:e2:dd:39:8e:dd: 20:cc:d5:34:6b:95:ad:8f:d6:a7:e0:bb:b9:19:01:83:7c:32: 44:4e:fc:b9:bf:10:78:78:6c:a3:9b:ab:dd:ad:cb:e1:58:d8: 46:79:98:c1:74:7c:04:5d:53:01:63:6d:56:4c:1a:cf:c1:94: 74:b7:7e:a5:9e:55:8c:77:5a:4b:ce:a1:87:14:45:ae:d3:19: 12:e0:a1:60:40:94:3d:74:c3:5a:68:ab:3a:17:32:fc:80:b9: 89:8d:2f:6f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE70TMOHqRtpmMGXEwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDgyNTEzMDAxMloXDTI2MTEyMzE0MDAxMlowLzEtMCsGA1UEAxMk YmU5ZDg0ODMtNWQxYy00M2ZhLWE0NDAtODExZjk1MTc3MDAxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi4+QkJshVEakxjCNTW9jOYFUwT7+tCP4am59 6w+RkMO5YM9/uWmbfLVsGko6fKs4wyX/WiJEgSQ1osqQ0aHbwRZwutMSOJnIrP6+ 7L+s59pTH+zeu1NhV9aJTeevGfg8+OM5lcK68bMyW0+kEk/YW36kll2XnZnFgJ09 P1JJJMb7qtgNdajqXlFMrctEE1/ViQKAMPHgZO8dnViNPFcUNvGDy94XRNJWGbpN 5Bmcw2PzwSAvVihyXw/lHOZk1QZivt4e9oeQzeHsRU6q+Q6nhsakdP3+Xr6MOjhq YNjherbZDBBRFIjnuuE6GclDef/ns6+ESS1CVaCRJXeBuMzayQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIppWwNXsQm5wQ9JRbEYqf4V7T/3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvYzNiNDhmYmItMGEzMi0z NGJhLTlkOTEtYjJlYjczMzczNDRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEbyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIX5WUXpRZmt9W9G9FALHMD/ZQZAN9RGAXToCiGCsY00celwX9GDti6N CpL/JUiNCfEZLMOszMlnztU292t2b0ThmirTp14vjXnSZNliikKRJIC0yoGEMENo lkZ91pKxxAfOgApmQYpfQJvbz3paqzVBt2Rhvu3gsJ46zFhPKfYRUjuPMHRvTpRs eRGw7+Xp/652MdKt2BeH6/QrABPi3TmO3SDM1TRrla2P1qfgu7kZAYN8MkRO/Lm/ EHh4bKObq92ty+FY2EZ5mMF0fARdUwFjbVZMGs/BlHS3fqWeVYx3WkvOoYcURa7T GRLgoWBAlD10w1poqzoXMvyAuYmNL28= -----END CERTIFICATE-----Generated at Tue Sep 22 09:09:55 2026 by rpki-client