$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/e91d9374-fd3a-33c2-a7f0-a937a3fa33cc.roa File: e91d9374-fd3a-33c2-a7f0-a937a3fa33cc.roa (raw, json) Hash identifier: i0XLD8QKufoXW+30wglkl1NL2YanQz/Y9P5l4iJvHw0= Subject key identifier: 2D:42:C0:12:EC:46:E5:EA:C2:91:E6:03:AA:F6:99:45:91:76:70:16 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584E4824A2CA5CC560E3FA80F480 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/e91d9374-fd3a-33c2-a7f0-a937a3fa33cc.roa Signing time: Wed 24 Jun 2026 21:00:12 +0000 ROA not before: Wed 24 Jun 2026 21:00:12 +0000 ROA not after: Tue 22 Sep 2026 21:00:12 +0000 asID: 13335 IP address blocks: 172.70.143.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 Jul 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:48:24:a2:ca:5c:c5:60:e3:fa:80:f4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Jun 24 21:00:12 2026 GMT Not After : Sep 22 21:00:12 2026 GMT Subject: CN=857da5ce-72d8-4546-bf76-d8303ec66de1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:27:5e:28:99:84:7b:04:71:68:71:94:7c:19: 89:f5:6d:81:10:b4:d7:ff:52:ff:15:35:83:85:23: 3d:74:f2:24:98:87:ba:45:14:78:4a:75:27:8a:91: 79:cf:94:1a:9f:7e:ec:17:30:e3:63:b2:65:b1:ae: 1c:18:9e:cb:46:45:4f:97:a7:b6:cf:92:83:7b:a8: ed:75:c1:f0:e3:5e:87:1d:35:5d:3f:8a:c2:37:bc: 44:49:72:5f:84:ff:3c:16:7b:1b:a9:9b:77:a9:b3: 6a:5d:10:9b:14:87:38:6e:91:25:6d:c1:8d:40:a0: 05:1f:8b:0e:ad:93:77:6a:df:33:d3:eb:5d:58:a6: 00:9e:05:62:ff:ba:f4:47:d4:f1:60:04:b6:50:00: a9:4a:e4:5b:4e:2b:00:de:f8:8d:81:c7:59:b0:21: 9e:ba:32:44:e2:17:70:96:dd:e9:37:3c:75:58:e4: 13:e6:84:ae:dc:55:5d:e9:b3:21:87:e4:2c:f1:de: b8:5f:45:48:d1:3a:76:ca:90:e9:05:0f:b3:79:66: 04:cd:60:cf:6b:67:99:18:bc:c0:69:15:7a:08:8f: e3:b2:f1:61:19:9c:09:9c:48:3d:ce:3a:29:c7:3e: fb:34:d2:1d:32:74:cb:5c:37:c9:58:5b:7f:5d:45: 3b:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:42:C0:12:EC:46:E5:EA:C2:91:E6:03:AA:F6:99:45:91:76:70:16 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/e91d9374-fd3a-33c2-a7f0-a937a3fa33cc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.70.143.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:99:ce:d0:38:d1:93:84:76:0c:b2:de:0d:d3:0d:a2:5a:5e: b1:90:70:0c:be:77:ef:ac:7f:86:fa:e5:77:fd:37:07:67:75: 8a:8d:fa:55:78:c0:7e:17:f8:46:30:77:04:6c:30:ba:6f:5f: 84:00:4c:c1:4d:ba:ee:aa:d5:ee:4b:b3:be:a4:a6:6e:9e:38: 3f:b8:d8:70:a1:50:ab:a7:a6:a9:b9:48:9f:08:fc:dd:ca:e0: 78:32:0f:cc:7f:17:62:26:2e:7b:0b:b9:de:65:09:32:f4:1b: 0e:76:0c:05:d5:e3:13:61:f8:1e:9a:06:e1:e5:6c:86:d2:83: f4:70:cc:bb:d9:8c:0f:f6:e6:e7:bd:5b:f2:b4:19:fc:11:c2: 12:71:e5:02:21:b6:1b:1b:b2:71:52:a1:24:55:7e:ea:62:36: 56:2a:1d:d2:33:3f:72:a0:7e:87:a1:e7:4a:81:a7:fc:b9:b6: e4:c8:4a:6c:16:a5:9a:c8:c2:bb:37:ce:98:79:73:f3:67:d9: 62:eb:26:91:a9:03:e3:05:60:e9:50:dd:d6:69:52:9a:91:c8: 01:02:20:ba:07:29:62:fb:50:47:88:93:70:88:ec:99:b9:8b: 9b:1a:fe:35:6f:ec:72:23:a6:fd:7c:d7:19:96:d6:8d:03:a9: fe:8d:5b:f2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5IJKLKXMVg4/qA9IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDYyNDIxMDAxMloXDTI2MDkyMjIxMDAxMlowLzEtMCsGA1UEAxMk ODU3ZGE1Y2UtNzJkOC00NTQ2LWJmNzYtZDgzMDNlYzY2ZGUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5ydeKJmEewRxaHGUfBmJ9W2BELTX/1L/FTWD hSM9dPIkmIe6RRR4SnUnipF5z5Qan37sFzDjY7Jlsa4cGJ7LRkVPl6e2z5KDe6jt dcHw416HHTVdP4rCN7xESXJfhP88FnsbqZt3qbNqXRCbFIc4bpElbcGNQKAFH4sO rZN3at8z0+tdWKYAngVi/7r0R9TxYAS2UACpSuRbTisA3viNgcdZsCGeujJE4hdw lt3pNzx1WOQT5oSu3FVd6bMhh+Qs8d64X0VI0Tp2ypDpBQ+zeWYEzWDPa2eZGLzA aRV6CI/jsvFhGZwJnEg9zjopxz77NNIdMnTLXDfJWFt/XUU7PwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC1CwBLsRuXqwpHmA6r2mUWRdnAWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvZTkxZDkzNzQtZmQzYS0z M2MyLWE3ZjAtYTkzN2EzZmEzM2NjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEaPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACCZztA40ZOEdgyy3g3TDaJaXrGQcAy+d++sf4b65Xf9NwdndYqN+lV4 wH4X+EYwdwRsMLpvX4QATMFNuu6q1e5Ls76kpm6eOD+42HChUKunpqm5SJ8I/N3K 4HgyD8x/F2ImLnsLud5lCTL0Gw52DAXV4xNh+B6aBuHlbIbSg/RwzLvZjA/25ue9 W/K0GfwRwhJx5QIhthsbsnFSoSRVfupiNlYqHdIzP3Kgfoeh50qBp/y5tuTISmwW pZrIwrs3zph5c/Nn2WLrJpGpA+MFYOlQ3dZpUpqRyAECILoHKWL7UEeIk3CI7Jm5 i5sa/jVv7HIjpv181xmW1o0Dqf6NW/I= -----END CERTIFICATE-----Generated at Sat Jul 18 00:47:32 2026 by rpki-client