$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/dfba8e5a-0248-33cb-bc7f-f3dd12af24b4.roa File: dfba8e5a-0248-33cb-bc7f-f3dd12af24b4.roa (raw, json) Hash identifier: ZpGst+fok4L68zAo2i5akDIKOUruKvkl1gvz5ne8OAc= Subject key identifier: 92:F3:9D:7D:65:55:97:C5:2B:D2:0E:E0:9F:1A:DC:DA:D6:04:5E:AE Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584E5084AE169594E15F93012EC0 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/dfba8e5a-0248-33cb-bc7f-f3dd12af24b4.roa Signing time: Sat 27 Jun 2026 21:00:12 +0000 ROA not before: Sat 27 Jun 2026 21:00:12 +0000 ROA not after: Fri 25 Sep 2026 21:00:12 +0000 asID: 13335 IP address blocks: 172.71.242.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 Jul 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:50:84:ae:16:95:94:e1:5f:93:01:2e:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Jun 27 21:00:12 2026 GMT Not After : Sep 25 21:00:12 2026 GMT Subject: CN=1e165f53-1d6a-45f2-ba50-515108a6f05c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:9f:6d:77:56:37:c0:65:42:41:bf:7b:66:e1: 64:0d:19:a3:bf:48:95:01:1d:fe:19:0a:6f:60:9a: 66:f2:e2:11:5b:40:d7:15:d6:ff:d4:27:bb:51:2c: c9:11:70:d4:c0:99:85:10:1d:57:e3:28:a5:cc:e9: f7:60:65:a3:8b:9d:06:0b:eb:0f:f9:6f:9a:08:a9: 72:97:69:d6:d5:7c:e2:e3:e4:91:2d:a4:35:62:c2: 41:79:52:b5:5d:cf:78:41:19:1b:dc:ae:ee:fa:1f: 53:36:77:46:9d:ac:8c:7e:6b:f8:96:07:fe:b9:05: 09:0b:11:16:34:28:9e:a4:d6:a0:72:8f:8b:2d:fd: bc:dd:2c:3b:13:12:f0:d0:81:e5:bb:b4:27:43:4a: de:df:04:4a:10:e3:ab:f2:31:a4:3e:ac:cc:1e:c0: d2:eb:a1:1d:5d:78:ab:cc:23:18:6b:ed:de:97:06: 6f:06:d0:b1:8a:ff:75:67:a0:09:0f:8b:46:42:ae: 08:1f:e3:62:12:b8:e9:b3:5f:7d:be:55:dc:7b:b3: 74:b1:b3:c6:86:e8:3b:51:d8:2f:c7:aa:c5:66:fb: e7:3e:98:e5:f2:86:e9:1c:81:43:c7:f0:4e:6f:a9: cd:c1:f6:db:23:16:fc:27:56:f9:12:5c:7a:70:ff: a2:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:F3:9D:7D:65:55:97:C5:2B:D2:0E:E0:9F:1A:DC:DA:D6:04:5E:AE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/dfba8e5a-0248-33cb-bc7f-f3dd12af24b4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.71.242.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:39:4a:3e:b2:bb:82:2f:5e:9f:05:82:33:ae:21:97:a0:6d: b7:38:8f:24:63:65:79:2e:0e:62:4f:f7:54:73:0f:3a:91:38: ac:86:ca:41:09:f0:90:f2:9b:ad:b0:8f:df:54:7a:76:a1:9b: 77:6b:84:da:09:c3:40:13:ee:37:43:af:27:a5:f4:96:92:72: c9:46:87:0f:c4:bb:f6:26:e8:a9:dc:52:03:df:64:78:a1:b4: 2b:29:49:db:18:3a:c0:24:d1:c2:11:ee:4f:bf:1c:0c:07:b2: 20:ab:d6:97:49:b6:fc:22:6c:9f:df:d1:60:c9:17:69:e2:65: 84:e9:68:12:66:63:3f:a0:42:3a:46:41:32:ed:65:56:4e:0d: c2:ff:8e:55:57:b4:fd:0c:ca:8e:75:3e:46:fd:32:50:dc:59: 47:2f:44:39:1b:cb:3e:3a:b1:6a:30:26:65:ee:d1:c7:78:47: d7:97:8c:bf:b9:e3:3d:bf:aa:61:d8:97:1a:0f:36:b8:c4:a7: 60:d1:5c:04:d4:31:93:b3:79:c3:29:4b:ee:67:e5:ac:a4:96: b3:58:d5:b6:39:83:d9:36:d1:ed:11:09:d5:65:d5:57:ff:0f: 80:3b:40:33:a8:26:aa:de:9e:5d:8e:f9:cd:ff:f8:64:37:10: 2a:29:ce:08 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5QhK4WlZThX5MBLsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDYyNzIxMDAxMloXDTI2MDkyNTIxMDAxMlowLzEtMCsGA1UEAxMk MWUxNjVmNTMtMWQ2YS00NWYyLWJhNTAtNTE1MTA4YTZmMDVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgZ9td1Y3wGVCQb97ZuFkDRmjv0iVAR3+GQpv YJpm8uIRW0DXFdb/1Ce7USzJEXDUwJmFEB1X4yilzOn3YGWji50GC+sP+W+aCKly l2nW1Xzi4+SRLaQ1YsJBeVK1Xc94QRkb3K7u+h9TNndGnayMfmv4lgf+uQUJCxEW NCiepNagco+LLf283Sw7ExLw0IHlu7QnQ0re3wRKEOOr8jGkPqzMHsDS66EdXXir zCMYa+3elwZvBtCxiv91Z6AJD4tGQq4IH+NiErjps199vlXce7N0sbPGhug7Udgv x6rFZvvnPpjl8obpHIFDx/BOb6nNwfbbIxb8J1b5Elx6cP+iUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJLznX1lVZfFK9IO4J8a3NrWBF6uMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvZGZiYThlNWEtMDI0OC0z M2NiLWJjN2YtZjNkZDEyYWYyNGI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEfyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIE5Sj6yu4IvXp8FgjOuIZegbbc4jyRjZXkuDmJP91RzDzqROKyGykEJ 8JDym62wj99Uenahm3drhNoJw0AT7jdDryel9JaScslGhw/Eu/Ym6KncUgPfZHih tCspSdsYOsAk0cIR7k+/HAwHsiCr1pdJtvwibJ/f0WDJF2niZYTpaBJmYz+gQjpG QTLtZVZODcL/jlVXtP0Myo51Pkb9MlDcWUcvRDkbyz46sWowJmXu0cd4R9eXjL+5 4z2/qmHYlxoPNrjEp2DRXATUMZOzecMpS+5n5ayklrNY1bY5g9k20e0RCdVl1Vf/ D4A7QDOoJqrenl2O+c3/+GQ3ECopzgg= -----END CERTIFICATE-----Generated at Sat Jul 18 00:48:59 2026 by rpki-client