$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f4a230db-031d-3490-b152-d40b5424ae7e.roa File: f4a230db-031d-3490-b152-d40b5424ae7e.roa (raw, json) Hash identifier: mG2m4pk5qOqDGRD+QAcdD/rSyoFmwkSGEh3sFQ+li08= Subject key identifier: 83:B2:EE:71:E2:17:7F:47:A9:5F:0A:05:94:10:18:25:20:C5:2F:43 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584EF44CBA788F271C902B9AA300 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f4a230db-031d-3490-b152-d40b5424ae7e.roa Signing time: Tue 25 Aug 2026 13:00:12 +0000 ROA not before: Tue 25 Aug 2026 13:00:12 +0000 ROA not after: Mon 23 Nov 2026 14:00:12 +0000 asID: 13335 IP address blocks: 172.71.31.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Sep 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f4:4c:ba:78:8f:27:1c:90:2b:9a:a3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 25 13:00:12 2026 GMT Not After : Nov 23 14:00:12 2026 GMT Subject: CN=9225a4c4-81b3-4fb3-be57-1d462f22e8ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:38:93:60:46:7d:6c:be:76:cd:2a:c5:d1:a8: 41:26:af:2e:df:77:08:7b:0e:fa:ff:b2:d8:df:a9: f4:31:0f:67:01:27:43:92:e7:81:30:81:6d:f5:35: d6:35:ad:9b:d3:f1:4c:87:25:98:cd:af:ad:68:c4: 79:39:17:bd:71:29:65:db:76:d9:10:bb:01:03:9e: 81:d3:ba:11:bd:cd:7b:8c:4e:48:5c:c5:00:26:ba: 9c:7b:26:6a:c7:f7:4f:94:4c:15:0c:35:42:e6:c3: b6:44:b6:8c:20:63:73:ee:a7:53:0a:63:5e:87:5c: e4:b8:8e:b0:46:2b:20:59:44:6b:dc:16:99:c0:4d: 95:63:b2:c0:da:fb:5b:76:1c:47:e2:23:f5:c1:e2: 72:af:f7:85:5b:53:9b:6b:1e:dd:51:fc:e7:ef:92: a6:d2:8a:c8:7b:f9:ca:33:2b:59:5a:b9:0a:37:bd: 63:04:dd:16:f7:6c:ad:b2:83:b8:f0:03:9c:ad:e2: 41:a0:d9:5f:c3:8c:7b:fe:e6:6f:49:a9:90:2b:18: 2d:71:8e:9e:83:b0:bf:a6:3b:0d:f6:b1:73:8e:cb: e7:90:cf:29:e4:78:0b:21:ee:c9:8a:66:ff:6a:d1: 41:75:b4:99:4d:2c:43:66:a0:c2:30:14:ff:f9:93: 07:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:B2:EE:71:E2:17:7F:47:A9:5F:0A:05:94:10:18:25:20:C5:2F:43 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f4a230db-031d-3490-b152-d40b5424ae7e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.71.31.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:4c:fa:b8:c1:4e:5e:a0:e1:4a:b9:e1:6d:62:2d:fb:9a:cb: 48:80:3d:b6:85:e7:17:ae:e6:9e:89:0f:25:46:b7:7c:46:43: fa:48:0e:14:60:eb:75:7c:9f:de:5d:2b:b5:3a:90:5c:6d:4c: b5:e6:80:eb:48:03:11:74:ad:5f:8d:04:a9:56:b5:2f:18:ce: 8a:89:f0:1b:41:c1:e8:b2:7b:32:40:47:a9:09:e2:9b:d1:1c: 3a:07:52:9d:aa:b4:a3:1e:ec:27:58:6d:7a:f5:ef:9a:c6:eb: c6:b2:83:e2:bb:22:28:32:60:c0:a8:ac:50:4f:d2:df:77:2d: cf:eb:50:a8:ec:17:5c:aa:ad:86:20:f5:fa:74:01:b0:31:a0: 71:cd:0e:3b:ae:c4:9f:50:8c:16:ca:6f:48:35:ab:ac:5c:8e: a6:04:a6:57:8f:64:af:6c:d2:a6:42:ee:27:65:92:f5:d5:22: 37:81:08:b7:9f:39:6f:40:41:7b:67:89:61:60:e2:e4:b5:ca: e2:0c:6c:11:a4:d4:3b:72:6e:08:96:31:4a:36:fa:27:9a:11: 62:ab:4e:9a:6a:03:4f:76:f0:6f:af:96:2f:92:58:de:52:6a: 92:fa:a6:99:c9:69:92:b4:8b:08:57:8e:df:a1:41:96:6c:18: fe:4f:41:93 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE70TLp4jycckCuaowAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDgyNTEzMDAxMloXDTI2MTEyMzE0MDAxMlowLzEtMCsGA1UEAxMk OTIyNWE0YzQtODFiMy00ZmIzLWJlNTctMWQ0NjJmMjJlOGFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxziTYEZ9bL52zSrF0ahBJq8u33cIew76/7LY 36n0MQ9nASdDkueBMIFt9TXWNa2b0/FMhyWYza+taMR5ORe9cSll23bZELsBA56B 07oRvc17jE5IXMUAJrqceyZqx/dPlEwVDDVC5sO2RLaMIGNz7qdTCmNeh1zkuI6w RisgWURr3BaZwE2VY7LA2vtbdhxH4iP1weJyr/eFW1Obax7dUfzn75Km0orIe/nK MytZWrkKN71jBN0W92ytsoO48AOcreJBoNlfw4x7/uZvSamQKxgtcY6eg7C/pjsN 9rFzjsvnkM8p5HgLIe7Jimb/atFBdbSZTSxDZqDCMBT/+ZMH6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIOy7nHiF39HqV8KBZQQGCUgxS9DMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvZjRhMjMwZGItMDMxZC0z NDkwLWIxNTItZDQwYjU0MjRhZTdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEcfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHpM+rjBTl6g4Uq54W1iLfuay0iAPbaF5xeu5p6JDyVGt3xGQ/pIDhRg 63V8n95dK7U6kFxtTLXmgOtIAxF0rV+NBKlWtS8YzoqJ8BtBweiyezJAR6kJ4pvR HDoHUp2qtKMe7CdYbXr175rG68ayg+K7IigyYMCorFBP0t93Lc/rUKjsF1yqrYYg 9fp0AbAxoHHNDjuuxJ9QjBbKb0g1q6xcjqYEplePZK9s0qZC7idlkvXVIjeBCLef OW9AQXtniWFg4uS1yuIMbBGk1DtybgiWMUo2+ieaEWKrTppqA0928G+vli+SWN5S apL6ppnJaZK0iwhXjt+hQZZsGP5PQZM= -----END CERTIFICATE-----Generated at Tue Sep 1 02:10:45 2026 by rpki-client