$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ca49746d-4049-37ae-abe3-4ce797864695.roa File: ca49746d-4049-37ae-abe3-4ce797864695.roa (raw, json) Hash identifier: CXJh4eRcCeA370M7w4joa7xna03BVPHhRQwdz9+QFxs= Subject key identifier: 22:6C:E3:C6:94:F2:92:30:46:68:17:BF:05:1D:EF:A1:22:5E:9A:27 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584EF44CBBA1115571744320C1C0 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ca49746d-4049-37ae-abe3-4ce797864695.roa Signing time: Tue 25 Aug 2026 13:00:12 +0000 ROA not before: Tue 25 Aug 2026 13:00:12 +0000 ROA not after: Mon 23 Nov 2026 14:00:12 +0000 asID: 13335 IP address blocks: 172.71.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f4:4c:bb:a1:11:55:71:74:43:20:c1:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 25 13:00:12 2026 GMT Not After : Nov 23 14:00:12 2026 GMT Subject: CN=059c1877-51ba-4a73-9192-6398167afebc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:bd:79:5d:3a:98:bb:d8:38:68:d8:a6:9f:38: 1f:f9:5f:6e:a6:8b:cf:fe:fb:33:0b:0c:e9:2f:ad: e8:21:33:39:4a:a0:54:c0:c2:24:88:40:f6:53:eb: 13:01:e6:94:fc:be:5f:1d:23:4c:4b:b0:f6:a2:42: 20:3f:11:46:56:9d:04:7b:c6:f0:dc:0b:17:56:ad: 07:d0:2d:07:ea:28:de:0a:1c:2d:bd:01:5b:23:26: 27:f0:e4:c3:ac:81:76:b6:0d:f0:d6:ec:bb:97:9f: d6:32:03:52:e4:17:d0:ed:54:63:59:69:83:a0:93: 9a:d7:e2:ac:98:98:05:af:49:26:3a:dc:73:d2:fe: 9e:58:d2:a3:4e:67:cf:79:1d:da:68:a7:26:81:1b: f6:dd:34:1f:5f:9a:ad:ac:7a:cb:d8:c2:4b:77:dc: 57:ec:3a:ba:1b:f6:95:c0:05:eb:e1:61:e0:23:32: 0f:48:34:40:17:9a:27:50:c7:ad:c4:d4:31:69:e6: 0a:38:5e:fa:8c:8f:9f:f2:49:d7:72:c1:b8:ff:88: 1d:53:85:15:48:92:cd:5a:fa:3b:70:d4:04:7d:2b: 25:e0:fa:0a:c4:48:6c:16:02:c1:df:bb:1a:bc:b2: 4d:18:81:c5:36:8a:c9:75:72:c9:8d:08:5f:fa:28: fd:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:6C:E3:C6:94:F2:92:30:46:68:17:BF:05:1D:EF:A1:22:5E:9A:27 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ca49746d-4049-37ae-abe3-4ce797864695.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.71.153.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:a6:e8:f0:2f:1c:a2:13:ec:c7:c1:60:b2:a1:04:2c:78:5f: 35:f0:94:72:26:07:c8:3f:7e:f5:ae:0d:02:b0:cb:9c:6d:29: 4b:08:c7:0f:00:60:66:68:57:b7:ad:61:52:f2:cb:0e:0c:39: 09:23:a2:b6:9d:03:7a:ee:cf:4e:0f:ad:a1:3f:58:ed:e8:4f: 89:94:06:f9:ff:81:6b:68:51:68:70:5b:4a:aa:34:94:c0:97: 4d:df:84:c4:0a:e8:85:42:8a:e4:d0:52:1b:85:58:68:73:38: 60:09:54:08:85:d5:18:a5:e7:a4:b5:f8:a0:05:85:47:35:5e: 1e:72:de:ab:04:b7:da:f0:0e:12:73:dd:40:50:20:d6:d0:e0: 97:a9:50:d2:65:11:15:8d:fe:6b:35:76:ce:55:96:de:06:ff: 9e:ad:74:bb:8c:89:79:e7:d0:fa:75:fd:71:96:e5:18:f2:45: 14:86:e0:f0:d7:2c:cc:66:ea:48:a2:8f:ee:64:c8:bb:68:8a: 52:56:6b:f0:ca:11:8e:68:f2:4f:ba:8a:ca:fc:67:c6:8b:65: c2:43:ee:c0:d1:d1:cc:78:89:38:98:c4:45:94:2a:c1:f7:3c: 15:82:98:f3:4d:5e:82:6f:37:48:15:f6:0f:b9:b4:49:88:55: 08:bc:8b:d6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE70TLuhEVVxdEMgwcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDgyNTEzMDAxMloXDTI2MTEyMzE0MDAxMlowLzEtMCsGA1UEAxMk MDU5YzE4NzctNTFiYS00YTczLTkxOTItNjM5ODE2N2FmZWJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhb15XTqYu9g4aNimnzgf+V9upovP/vszCwzp L63oITM5SqBUwMIkiED2U+sTAeaU/L5fHSNMS7D2okIgPxFGVp0Ee8bw3AsXVq0H 0C0H6ijeChwtvQFbIyYn8OTDrIF2tg3w1uy7l5/WMgNS5BfQ7VRjWWmDoJOa1+Ks mJgFr0kmOtxz0v6eWNKjTmfPeR3aaKcmgRv23TQfX5qtrHrL2MJLd9xX7Dq6G/aV wAXr4WHgIzIPSDRAF5onUMetxNQxaeYKOF76jI+f8knXcsG4/4gdU4UVSJLNWvo7 cNQEfSsl4PoKxEhsFgLB37savLJNGIHFNorJdXLJjQhf+ij9DQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCJs48aU8pIwRmgXvwUd76EiXponMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvY2E0OTc0NmQtNDA0OS0z N2FlLWFiZTMtNGNlNzk3ODY0Njk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEeZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACem6PAvHKIT7MfBYLKhBCx4XzXwlHImB8g/fvWuDQKwy5xtKUsIxw8A YGZoV7etYVLyyw4MOQkjoradA3ruz04PraE/WO3oT4mUBvn/gWtoUWhwW0qqNJTA l03fhMQK6IVCiuTQUhuFWGhzOGAJVAiF1Ril56S1+KAFhUc1Xh5y3qsEt9rwDhJz 3UBQINbQ4JepUNJlERWN/ms1ds5Vlt4G/56tdLuMiXnn0Pp1/XGW5RjyRRSG4PDX LMxm6kiij+5kyLtoilJWa/DKEY5o8k+6isr8Z8aLZcJD7sDR0cx4iTiYxEWUKsH3 PBWCmPNNXoJvN0gV9g+5tEmIVQi8i9Y= -----END CERTIFICATE-----Generated at Tue Sep 22 10:04:55 2026 by rpki-client