$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/dc2dc789-3aaf-3694-9090-4f4c006937fe.roa File: dc2dc789-3aaf-3694-9090-4f4c006937fe.roa (raw, json) Hash identifier: QyRsYAjbjcBv4iBrA1byZjWbMakAQvr1Re/K/kr7Q1Q= Subject key identifier: 65:6C:C1:3D:0A:9E:37:B0:7A:64:B2:76:36:58:DC:DB:3F:19:E1:6F Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584EF2E777B8DE09388FC2257D00 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/dc2dc789-3aaf-3694-9090-4f4c006937fe.roa Signing time: Tue 25 Aug 2026 01:00:12 +0000 ROA not before: Tue 25 Aug 2026 01:00:12 +0000 ROA not after: Mon 23 Nov 2026 02:00:12 +0000 asID: 13335 IP address blocks: 172.70.96.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f2:e7:77:b8:de:09:38:8f:c2:25:7d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 25 01:00:12 2026 GMT Not After : Nov 23 02:00:12 2026 GMT Subject: CN=ddf78784-17b6-48c9-9e32-87744787a71d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:56:3d:4c:84:6f:eb:0b:75:79:43:12:50:7d: 74:d8:2b:49:ad:a8:10:c9:11:be:7a:c0:2e:53:28: 30:f1:5d:cf:e6:95:57:45:d3:7a:d9:40:19:7e:2b: df:c2:78:34:e4:cb:84:3b:54:b0:c3:03:bb:4b:c3: 7d:1f:0e:75:20:5b:e8:27:25:b0:ba:35:ae:a3:87: f4:15:95:8f:af:c4:9b:fb:4b:1f:45:e4:0b:9f:9c: 81:19:b3:44:45:09:7f:7d:0a:53:88:ff:ab:92:98: d4:0c:43:7b:42:8b:52:cc:0e:bb:6c:c1:39:02:22: bf:c0:78:4d:12:b9:8c:05:e0:27:d4:f6:48:9a:53: d6:1b:25:e6:d9:97:dd:65:54:1d:be:d1:50:34:d6: 9b:05:74:b0:bf:a2:9f:53:e7:ed:36:48:3a:6a:0b: 48:de:7e:3d:53:49:40:bd:0d:24:68:06:15:8d:c8: b7:09:e2:fa:f4:20:9d:4e:a8:18:63:84:8f:73:70: 18:c1:b2:43:63:39:cf:25:d7:97:79:4a:b9:ea:b3: 8a:ff:aa:8d:34:23:4f:68:f7:d4:10:da:0f:d9:53: 6e:f9:b3:bc:7b:32:10:fa:0d:e3:d5:1f:47:3d:32: cb:37:1b:bf:b4:f9:5b:39:b3:fa:3b:cf:22:62:3a: 53:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:6C:C1:3D:0A:9E:37:B0:7A:64:B2:76:36:58:DC:DB:3F:19:E1:6F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/dc2dc789-3aaf-3694-9090-4f4c006937fe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.70.96.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:4b:fc:30:ac:ae:e1:a2:29:e6:bc:e2:09:cb:22:fe:9f:13: 3e:91:74:78:d2:1b:07:a4:30:f9:3a:65:6a:8b:18:13:d1:d0: c1:6d:24:b8:db:97:ef:0f:23:1d:1d:d5:5c:e4:92:38:f1:dd: c1:24:e8:b5:18:c6:61:86:27:bc:3c:be:1b:0b:cd:ef:a8:df: 57:9c:88:5f:9b:82:9e:1f:9e:71:3d:44:82:97:e9:11:fb:68: 1b:cf:2e:a8:1f:09:07:43:e2:f3:81:94:7c:1c:9b:62:4a:5d: 4a:15:a2:70:b5:ef:12:a5:10:68:5a:fa:1a:f2:90:7e:30:11: fa:4f:3e:a7:9b:55:8e:2e:c3:6b:6a:7b:42:92:b4:92:eb:01: bc:84:90:95:fa:bb:51:ff:0a:59:6a:37:ef:19:57:f3:94:f7: c0:45:1e:db:be:e2:a6:1e:7b:7b:08:76:9f:0d:3d:17:f6:29: 78:19:11:9d:2d:14:8c:71:37:ad:34:88:db:b7:98:07:57:13: 5f:2f:6d:37:f3:61:16:7f:92:d1:ca:fd:64:1d:c5:6d:ba:d3: 45:b0:60:1c:ad:52:6d:ad:01:fe:42:2e:0c:8f:ba:63:a9:a3: af:8d:03:7f:0c:04:60:66:95:82:24:4a:ee:31:93:bb:b2:1f: 05:64:25:27 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7y53e43gk4j8IlfQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDgyNTAxMDAxMloXDTI2MTEyMzAyMDAxMlowLzEtMCsGA1UEAxMk ZGRmNzg3ODQtMTdiNi00OGM5LTllMzItODc3NDQ3ODdhNzFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhlY9TIRv6wt1eUMSUH102CtJragQyRG+esAu Uygw8V3P5pVXRdN62UAZfivfwng05MuEO1SwwwO7S8N9Hw51IFvoJyWwujWuo4f0 FZWPr8Sb+0sfReQLn5yBGbNERQl/fQpTiP+rkpjUDEN7QotSzA67bME5AiK/wHhN ErmMBeAn1PZImlPWGyXm2ZfdZVQdvtFQNNabBXSwv6KfU+ftNkg6agtI3n49U0lA vQ0kaAYVjci3CeL69CCdTqgYY4SPc3AYwbJDYznPJdeXeUq56rOK/6qNNCNPaPfU ENoP2VNu+bO8ezIQ+g3j1R9HPTLLNxu/tPlbObP6O88iYjpTDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGVswT0KnjewemSydjZY3Ns/GeFvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvZGMyZGM3ODktM2FhZi0z Njk0LTkwOTAtNGY0YzAwNjkzN2ZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEZgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH5L/DCsruGiKea84gnLIv6fEz6RdHjSGwekMPk6ZWqLGBPR0MFtJLjb l+8PIx0d1Vzkkjjx3cEk6LUYxmGGJ7w8vhsLze+o31eciF+bgp4fnnE9RIKX6RH7 aBvPLqgfCQdD4vOBlHwcm2JKXUoVonC17xKlEGha+hrykH4wEfpPPqebVY4uw2tq e0KStJLrAbyEkJX6u1H/CllqN+8ZV/OU98BFHtu+4qYee3sIdp8NPRf2KXgZEZ0t FIxxN600iNu3mAdXE18vbTfzYRZ/ktHK/WQdxW2600WwYBytUm2tAf5CLgyPumOp o6+NA38MBGBmlYIkSu4xk7uyHwVkJSc= -----END CERTIFICATE-----Generated at Tue Sep 1 01:43:48 2026 by rpki-client