$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/de441c87-afcb-3e53-98c5-4a828c903001.roa File: de441c87-afcb-3e53-98c5-4a828c903001.roa (raw, json) Hash identifier: slaTESuk/CcFL3csjBQ3eNJjHPcPOZtAGoOJkZ1Uens= Subject key identifier: BD:9E:BE:0F:35:F3:6D:9C:FA:84:3B:7F:91:A2:7F:25:BD:DB:66:FF Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584EF44CBAC60B367AADA47F2C40 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/de441c87-afcb-3e53-98c5-4a828c903001.roa Signing time: Tue 25 Aug 2026 13:00:12 +0000 ROA not before: Tue 25 Aug 2026 13:00:12 +0000 ROA not after: Mon 23 Nov 2026 14:00:12 +0000 asID: 13335 IP address blocks: 172.71.96.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f4:4c:ba:c6:0b:36:7a:ad:a4:7f:2c:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 25 13:00:12 2026 GMT Not After : Nov 23 14:00:12 2026 GMT Subject: CN=24342139-bd38-4e9e-97cd-56bbbdc6894b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:e6:30:f7:84:7f:66:7e:ef:d7:b0:f1:9e:1d: d4:9c:5a:ad:73:ac:53:c0:a9:5c:be:96:90:f9:f4: 3e:8b:5d:d4:f5:00:4c:ec:2d:d1:3d:10:35:5e:e5: 70:48:23:13:53:c5:ce:87:a5:70:d5:71:7c:7d:46: 08:7a:e2:91:10:ba:d5:7d:4a:cd:0e:85:f0:1e:bd: 11:5d:3a:1a:de:45:2c:f5:b1:aa:c8:9b:6a:36:7c: d3:5d:5d:4c:84:c4:c1:62:e0:8f:43:d1:ae:9c:4d: 84:ed:1f:d2:47:2f:2d:ac:1b:88:d7:ee:b8:42:8f: 59:9f:c4:56:19:03:32:97:00:a0:50:df:76:1b:f8: 7a:05:1b:d4:8c:07:c1:37:9c:bf:85:88:f7:c0:d6: a2:ba:30:ef:72:11:54:bd:40:f5:a2:60:46:f1:ee: 06:7b:8e:0c:89:38:ee:ac:19:6e:c1:41:3b:f3:31: ef:fa:fb:6f:ec:1d:ff:dc:8c:23:c1:bb:20:77:9a: 65:dc:13:eb:94:ca:3d:10:52:8d:7c:86:33:f5:2a: 72:d7:3a:9c:72:ad:e8:4b:b8:de:6c:23:b9:95:e6: 2a:29:90:d2:38:8e:9c:0e:53:2d:ec:8a:c8:46:fd: 87:16:ca:70:a5:1d:a9:83:40:f2:22:82:fd:cb:2b: 7d:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:9E:BE:0F:35:F3:6D:9C:FA:84:3B:7F:91:A2:7F:25:BD:DB:66:FF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/de441c87-afcb-3e53-98c5-4a828c903001.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.71.96.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:19:b0:14:32:65:da:3c:88:6d:af:61:e4:fd:63:19:60:4a: a8:81:2d:b7:e7:76:ce:0a:28:ab:66:26:9b:57:eb:4b:b6:39: e1:42:7f:d5:eb:4f:f5:d1:98:59:c5:2b:25:b3:18:30:d7:8d: df:3b:92:f1:4d:a8:2f:4b:a7:d1:59:78:55:dc:3c:0a:40:42: 3e:d9:ce:e7:e1:77:61:4d:f4:01:c2:15:b7:52:37:67:d8:79: b4:ad:f7:f7:fa:54:77:fe:43:42:c2:80:9d:b0:c3:5e:d3:9e: 8d:e4:d4:df:ce:2f:8a:0e:e0:c0:a9:1b:13:a1:c2:11:a2:40: 8c:11:ee:7e:ff:92:ab:f2:ff:59:d2:7c:95:9a:26:93:69:07: 80:2a:33:bf:68:58:d6:24:8b:6c:1d:76:5f:9a:d3:fd:34:56: 13:6c:bc:4f:aa:8d:12:5d:cc:c5:17:39:bf:58:28:b8:6f:72: 63:2c:23:70:ac:e7:6c:2d:dc:c0:03:5e:b1:a8:21:46:f7:e2: 7c:eb:ed:4a:a9:6a:e0:ad:85:f9:0c:e5:11:76:ad:82:5b:6b: c9:6f:06:ea:82:37:b8:28:cf:ee:5e:4f:3c:64:f1:89:8e:9f: aa:4a:13:bd:d1:94:b9:29:ac:67:1e:66:95:ff:77:9e:75:a0: d3:29:96:79 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE70TLrGCzZ6raR/LEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDgyNTEzMDAxMloXDTI2MTEyMzE0MDAxMlowLzEtMCsGA1UEAxMk MjQzNDIxMzktYmQzOC00ZTllLTk3Y2QtNTZiYmJkYzY4OTRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAluYw94R/Zn7v17Dxnh3UnFqtc6xTwKlcvpaQ +fQ+i13U9QBM7C3RPRA1XuVwSCMTU8XOh6Vw1XF8fUYIeuKRELrVfUrNDoXwHr0R XToa3kUs9bGqyJtqNnzTXV1MhMTBYuCPQ9GunE2E7R/SRy8trBuI1+64Qo9Zn8RW GQMylwCgUN92G/h6BRvUjAfBN5y/hYj3wNaiujDvchFUvUD1omBG8e4Ge44MiTju rBluwUE78zHv+vtv7B3/3Iwjwbsgd5pl3BPrlMo9EFKNfIYz9Spy1zqccq3oS7je bCO5leYqKZDSOI6cDlMt7IrIRv2HFspwpR2pg0DyIoL9yyt9NQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL2evg81822c+oQ7f5GifyW922b/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvZGU0NDFjODctYWZjYi0z ZTUzLTk4YzUtNGE4MjhjOTAzMDAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEdgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFQZsBQyZdo8iG2vYeT9YxlgSqiBLbfnds4KKKtmJptX60u2OeFCf9Xr T/XRmFnFKyWzGDDXjd87kvFNqC9Lp9FZeFXcPApAQj7Zzufhd2FN9AHCFbdSN2fY ebSt9/f6VHf+Q0LCgJ2ww17Tno3k1N/OL4oO4MCpGxOhwhGiQIwR7n7/kqvy/1nS fJWaJpNpB4AqM79oWNYki2wddl+a0/00VhNsvE+qjRJdzMUXOb9YKLhvcmMsI3Cs 52wt3MADXrGoIUb34nzr7UqpauCthfkM5RF2rYJba8lvBuqCN7goz+5eTzxk8YmO n6pKE73RlLkprGceZpX/d551oNMplnk= -----END CERTIFICATE-----Generated at Tue Sep 22 17:09:06 2026 by rpki-client