$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/cad706ae-b7dd-3f7c-8794-f5ff4e7509a2.roa File: cad706ae-b7dd-3f7c-8794-f5ff4e7509a2.roa (raw, json) Hash identifier: 6JT5Y+XpxnAD1mP3TXeSAfU5Te/uvJmfx7teBZHRoV8= Subject key identifier: 5B:92:A3:3C:69:28:BE:38:55:B7:5A:10:F9:CB:C7:B6:C6:F4:C6:F7 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584EF44CC583108C0C507643E480 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/cad706ae-b7dd-3f7c-8794-f5ff4e7509a2.roa Signing time: Tue 25 Aug 2026 13:00:12 +0000 ROA not before: Tue 25 Aug 2026 13:00:12 +0000 ROA not after: Mon 23 Nov 2026 14:00:12 +0000 asID: 13335 IP address blocks: 172.71.210.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f4:4c:c5:83:10:8c:0c:50:76:43:e4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 25 13:00:12 2026 GMT Not After : Nov 23 14:00:12 2026 GMT Subject: CN=a9d935e3-5d36-4ef4-85a0-3ecd7b161e92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:5a:e8:07:59:6d:3c:a4:33:40:0e:30:7e:df: da:79:e9:1d:4d:01:e5:b0:e6:c3:dd:8a:7a:0c:97: f3:09:de:96:e0:0a:94:49:71:1a:2d:d5:09:cd:a0: 6b:f1:4b:2b:b1:c3:cd:a9:78:9f:d1:b2:2b:8c:bb: 24:12:08:e2:96:c4:12:16:56:2a:e3:2b:48:32:d8: c5:2d:cf:8b:f1:49:68:5c:e4:9c:9c:6a:26:cc:26: 2a:19:53:53:65:c7:ea:8d:ef:43:da:a9:fb:59:4f: 73:62:3b:b5:e9:49:cf:e6:5d:f5:06:44:73:a5:b7: 2b:55:cd:1b:e7:58:cf:25:e9:1f:fb:4f:0b:9d:22: 41:69:7c:9a:fd:d5:c1:85:d7:1c:ee:ff:30:9f:73: 90:96:37:7b:f4:50:d1:50:b6:77:ec:0c:1b:e6:c8: 05:81:9f:3f:d0:f9:b9:93:67:ad:db:72:f1:4e:fb: 13:1a:05:b0:c5:e8:bd:0e:8f:46:d7:09:9a:78:a6: c3:89:4a:1e:11:20:50:bb:b5:fc:e7:29:bd:ce:67: ed:13:89:e6:26:00:f8:c2:cd:ca:a1:9f:00:91:04: cb:8a:25:4d:69:a5:30:3d:31:ac:40:2a:2f:b0:44: ba:86:e3:e6:69:94:73:19:82:6f:cf:f7:39:b8:42: 87:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:92:A3:3C:69:28:BE:38:55:B7:5A:10:F9:CB:C7:B6:C6:F4:C6:F7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/cad706ae-b7dd-3f7c-8794-f5ff4e7509a2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.71.210.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:cc:c6:4c:84:4e:2a:37:6f:ac:3d:12:63:2f:44:b4:1c:1b: 27:f2:3f:9f:4a:4b:70:c7:1b:24:83:ad:45:1e:18:ee:c3:29: 65:36:24:30:2b:3c:7b:b2:4c:a1:3b:88:37:82:81:27:ad:73: 54:62:c0:f0:77:e3:52:68:f1:ff:75:5a:c3:7b:38:a4:5e:8b: 93:6a:8f:bf:0c:6e:51:b0:89:21:e5:52:ca:12:cc:47:f9:44: 6f:21:c8:95:cd:99:9c:c0:46:ae:49:a0:8a:17:00:52:d4:94: bc:40:0b:c1:53:d4:9d:18:c3:54:e5:fe:8a:31:cf:ed:c2:d1: 74:b6:0e:b3:7f:cf:b5:f4:36:4d:9b:72:a4:a7:0c:98:6c:1f: 3c:38:29:0a:a1:f9:4a:ab:5b:98:a0:b4:58:be:2d:52:5f:27: 0e:36:02:a9:76:3f:16:b0:36:9c:db:f7:66:0e:61:32:08:3d: 8e:d0:ec:da:1d:fc:4a:85:72:cc:41:8d:93:3f:0f:fa:07:fb: 41:ee:b6:31:f5:f2:be:e4:ca:be:2e:a4:60:f4:da:e0:31:e2: 3e:d4:d5:39:87:3f:3f:65:09:8b:3d:ad:80:4b:4c:8b:a3:af: 70:42:03:c0:69:f3:21:66:c1:c0:5b:8b:35:8e:97:33:80:7c: ac:07:da:15 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE70TMWDEIwMUHZD5IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDgyNTEzMDAxMloXDTI2MTEyMzE0MDAxMlowLzEtMCsGA1UEAxMk YTlkOTM1ZTMtNWQzNi00ZWY0LTg1YTAtM2VjZDdiMTYxZTkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA01roB1ltPKQzQA4wft/aeekdTQHlsObD3Yp6 DJfzCd6W4AqUSXEaLdUJzaBr8UsrscPNqXif0bIrjLskEgjilsQSFlYq4ytIMtjF Lc+L8UloXOScnGomzCYqGVNTZcfqje9D2qn7WU9zYju16UnP5l31BkRzpbcrVc0b 51jPJekf+08LnSJBaXya/dXBhdcc7v8wn3OQljd79FDRULZ37Awb5sgFgZ8/0Pm5 k2et23LxTvsTGgWwxei9Do9G1wmaeKbDiUoeESBQu7X85ym9zmftE4nmJgD4ws3K oZ8AkQTLiiVNaaUwPTGsQCovsES6huPmaZRzGYJvz/c5uEKH7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFuSozxpKL44VbdaEPnLx7bG9Mb3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvY2FkNzA2YWUtYjdkZC0z ZjdjLTg3OTQtZjVmZjRlNzUwOWEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEfSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG7MxkyETio3b6w9EmMvRLQcGyfyP59KS3DHGySDrUUeGO7DKWU2JDAr PHuyTKE7iDeCgSetc1RiwPB341Jo8f91WsN7OKRei5Nqj78MblGwiSHlUsoSzEf5 RG8hyJXNmZzARq5JoIoXAFLUlLxAC8FT1J0Yw1Tl/ooxz+3C0XS2DrN/z7X0Nk2b cqSnDJhsHzw4KQqh+UqrW5igtFi+LVJfJw42Aql2PxawNpzb92YOYTIIPY7Q7Nod /EqFcsxBjZM/D/oH+0HutjH18r7kyr4upGD02uAx4j7U1TmHPz9lCYs9rYBLTIuj r3BCA8Bp8yFmwcBbizWOlzOAfKwH2hU= -----END CERTIFICATE-----Generated at Tue Sep 22 11:55:23 2026 by rpki-client