$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f2d8f496-5c53-3121-9796-677fda00fb18.roa File: f2d8f496-5c53-3121-9796-677fda00fb18.roa (raw, json) Hash identifier: FOP2+sshmL5+fbwX6w8eaW099YfFRxxnaOTelYN3/P0= Subject key identifier: DC:0A:49:8C:D7:52:96:5D:B0:92:5F:74:3C:7A:02:75:77:61:92:38 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584EF44CC5D604958E81CA879700 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f2d8f496-5c53-3121-9796-677fda00fb18.roa Signing time: Tue 25 Aug 2026 13:00:12 +0000 ROA not before: Tue 25 Aug 2026 13:00:12 +0000 ROA not after: Mon 23 Nov 2026 14:00:12 +0000 asID: 13335 IP address blocks: 172.71.225.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f4:4c:c5:d6:04:95:8e:81:ca:87:97:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 25 13:00:12 2026 GMT Not After : Nov 23 14:00:12 2026 GMT Subject: CN=70c7f0f6-8775-419b-a4f0-385a523968d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:33:78:47:63:84:6f:bd:84:f4:b9:bb:1c:b4: 29:cb:11:e9:39:78:69:45:79:ca:20:51:a9:33:d4: 6f:5a:64:2e:35:37:9b:02:56:ca:64:68:5b:c3:71: 5f:62:64:da:8f:3a:ae:47:bf:94:75:e3:30:9e:c0: 1b:a5:c8:2f:ed:2e:6b:08:d4:c5:64:57:ad:21:0e: ae:81:1f:10:29:c0:54:3d:14:92:8f:d9:65:00:c6: e5:de:ba:d7:12:e3:26:a6:92:03:94:90:17:bb:d9: c6:83:a3:f5:7f:54:f6:b6:f0:fe:e9:eb:86:bb:bb: a3:0c:fb:a7:f3:38:6e:fb:fc:7b:09:55:91:25:33: 46:bf:ca:f8:5c:11:46:42:08:f5:8b:d4:1f:68:cf: 46:b7:2e:fc:7b:12:74:24:90:e4:83:ff:70:dc:a3: 9b:46:41:4c:0f:45:bb:27:21:54:54:f5:16:0a:f5: 7f:a1:03:6f:d1:65:99:bf:7c:48:da:45:de:f2:bd: bd:f5:a0:a2:49:be:ca:07:f2:18:ab:5d:7f:3e:50: 0b:9a:45:f7:fc:1b:af:53:18:83:09:de:af:8b:0b: 15:8b:3d:68:24:84:c0:9d:3a:82:02:d7:c4:89:d4: c2:ea:2a:ad:7f:29:f3:67:21:96:93:2e:c3:91:57: 13:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:0A:49:8C:D7:52:96:5D:B0:92:5F:74:3C:7A:02:75:77:61:92:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f2d8f496-5c53-3121-9796-677fda00fb18.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.71.225.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:88:99:54:29:f2:41:c4:44:f9:69:02:13:cd:e7:57:e2:58: 19:ec:20:ae:07:e9:97:55:6c:ee:f3:73:ba:63:1d:0d:46:75: b3:23:e5:d9:0e:d2:d0:62:a3:3b:e8:61:d4:c5:db:cb:29:7d: b3:1d:55:20:a9:2b:e0:da:11:65:ab:1f:19:37:fa:d5:dd:2c: fd:9a:62:86:dd:cb:da:10:83:6e:39:f1:a7:f8:c0:e0:3c:e6: 43:b1:4f:8a:c4:76:1e:e0:65:27:fe:b0:f9:25:3a:a3:67:90: 84:51:82:da:14:ae:3f:3c:5f:80:8b:2b:5d:54:59:25:54:87: 57:ea:96:8c:18:f5:cc:cb:de:24:b1:f2:d1:e7:61:6b:24:08: 46:6c:7d:d4:80:69:ef:4c:c5:45:01:14:bf:ca:8c:ca:1e:e5: d8:66:9b:d1:ee:74:75:28:54:1e:22:7e:ac:b8:dd:d4:d1:41: 57:3c:b7:13:0a:14:cd:81:2c:bf:53:32:02:df:58:33:28:d6: ff:5f:e4:5b:a8:e4:11:b0:0b:07:28:a7:7b:21:9b:a5:04:e6: 32:c8:6b:95:7f:f4:86:c3:bc:e1:ce:19:37:75:4a:3c:06:b5: 5b:92:01:ae:db:8e:ba:11:ef:fa:af:88:ae:3d:c3:a0:12:d9: b7:b9:34:c5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE70TMXWBJWOgcqHlwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDgyNTEzMDAxMloXDTI2MTEyMzE0MDAxMlowLzEtMCsGA1UEAxMk NzBjN2YwZjYtODc3NS00MTliLWE0ZjAtMzg1YTUyMzk2OGQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmzN4R2OEb72E9Lm7HLQpyxHpOXhpRXnKIFGp M9RvWmQuNTebAlbKZGhbw3FfYmTajzquR7+UdeMwnsAbpcgv7S5rCNTFZFetIQ6u gR8QKcBUPRSSj9llAMbl3rrXEuMmppIDlJAXu9nGg6P1f1T2tvD+6euGu7ujDPun 8zhu+/x7CVWRJTNGv8r4XBFGQgj1i9QfaM9Gty78exJ0JJDkg/9w3KObRkFMD0W7 JyFUVPUWCvV/oQNv0WWZv3xI2kXe8r299aCiSb7KB/IYq11/PlALmkX3/BuvUxiD Cd6viwsViz1oJITAnTqCAtfEidTC6iqtfynzZyGWky7DkVcTLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNwKSYzXUpZdsJJfdDx6AnV3YZI4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvZjJkOGY0OTYtNWM1My0z MTIxLTk3OTYtNjc3ZmRhMDBmYjE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEfhMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABiImVQp8kHERPlpAhPN51fiWBnsIK4H6ZdVbO7zc7pjHQ1GdbMj5dkO 0tBiozvoYdTF28spfbMdVSCpK+DaEWWrHxk3+tXdLP2aYobdy9oQg2458af4wOA8 5kOxT4rEdh7gZSf+sPklOqNnkIRRgtoUrj88X4CLK11UWSVUh1fqlowY9czL3iSx 8tHnYWskCEZsfdSAae9MxUUBFL/KjMoe5dhmm9HudHUoVB4ifqy43dTRQVc8txMK FM2BLL9TMgLfWDMo1v9f5Fuo5BGwCwcop3shm6UE5jLIa5V/9IbDvOHOGTd1SjwG tVuSAa7bjroR7/qviK49w6AS2be5NMU= -----END CERTIFICATE-----Generated at Tue Sep 22 09:34:26 2026 by rpki-client