$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b8a29c46-e0f1-4edc-988a-9420affbc339/c86fcb92-e2ac-30f3-b3f9-6ebfe86ddd86.roa File: c86fcb92-e2ac-30f3-b3f9-6ebfe86ddd86.roa (raw, json) Hash identifier: XGzz2p4X0kAcghmf3ip41inCJndvms77r5TcF4D9SG0= Subject key identifier: 56:0C:AF:FE:9A:72:B7:66:5F:16:85:76:0E:78:05:3B:C6:F9:1E:CD Certificate issuer: /CN=b8a29c46-e0f1-4edc-988a-9420affbc339 Certificate serial: 010D0C9F4328584ECD372E5037226214DF3B3E60 Authority key identifier: AE:5B:91:0A:1A:F7:6A:0A:F9:C8:61:BA:B9:2C:80:AE:41:E0:79:14 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b8a29c46-e0f1-4edc-988a-9420affbc339.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b8a29c46-e0f1-4edc-988a-9420affbc339/c86fcb92-e2ac-30f3-b3f9-6ebfe86ddd86.roa Signing time: Tue 11 Aug 2026 13:00:11 +0000 ROA not before: Tue 11 Aug 2026 13:00:11 +0000 ROA not after: Mon 09 Nov 2026 14:00:11 +0000 asID: 205627 IP address blocks: 170.2.248.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b8a29c46-e0f1-4edc-988a-9420affbc339/b8a29c46-e0f1-4edc-988a-9420affbc339.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b8a29c46-e0f1-4edc-988a-9420affbc339/b8a29c46-e0f1-4edc-988a-9420affbc339.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b8a29c46-e0f1-4edc-988a-9420affbc339.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:cd:37:2e:50:37:22:62:14:df:3b:3e:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8a29c46-e0f1-4edc-988a-9420affbc339 Validity Not Before: Aug 11 13:00:11 2026 GMT Not After : Nov 9 14:00:11 2026 GMT Subject: CN=392bf352-2800-41b9-b53d-87b6e9342e0c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:63:e2:ac:74:39:f0:ff:15:59:b6:3c:0a:a0: 09:6a:4f:a1:82:bd:5d:31:13:9b:d3:ae:d4:c3:94: eb:b0:5b:89:47:3c:7b:45:9f:7c:65:82:1b:95:ec: d8:ef:4d:01:3b:b8:06:a3:34:db:02:84:68:90:39: 9f:c0:c6:a5:20:ad:ae:be:2c:1d:e3:08:17:ff:af: fb:2b:af:31:ae:ba:69:80:99:6d:41:87:ec:88:b9: fd:0d:da:05:23:13:7e:8e:15:4c:52:c3:4d:70:36: 3a:e9:04:9e:3a:c0:eb:44:d3:b5:e0:3b:7e:fc:4b: 54:b1:2e:d8:a9:b2:77:72:71:f1:35:da:9a:dd:c0: 8d:dc:90:71:6b:17:00:ac:df:66:f3:37:c9:da:fd: 3f:eb:e3:86:9c:ba:ac:bc:cc:71:ee:f9:c2:b1:ca: d2:00:21:0b:7b:62:3d:68:4d:99:9a:1c:a1:22:3d: db:dd:c0:ae:19:64:33:8c:10:9a:3b:6e:05:94:4f: ed:bb:37:12:b9:b3:f9:d8:ae:3e:6e:eb:33:5e:31: cb:b0:35:4d:94:e1:51:18:ff:8e:fc:c2:6e:a5:04: d4:cc:63:44:80:ec:c4:f1:a5:e0:be:96:06:19:3f: e2:ee:ec:dc:0b:34:3b:27:9b:69:11:5a:de:27:03: d2:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:0C:AF:FE:9A:72:B7:66:5F:16:85:76:0E:78:05:3B:C6:F9:1E:CD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b8a29c46-e0f1-4edc-988a-9420affbc339/c86fcb92-e2ac-30f3-b3f9-6ebfe86ddd86.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b8a29c46-e0f1-4edc-988a-9420affbc339/b8a29c46-e0f1-4edc-988a-9420affbc339.crl X509v3 Authority Key Identifier: keyid:AE:5B:91:0A:1A:F7:6A:0A:F9:C8:61:BA:B9:2C:80:AE:41:E0:79:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b8a29c46-e0f1-4edc-988a-9420affbc339.cer sbgp-ipAddrBlock: critical IPv4: 170.2.248.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:2e:52:f7:cc:94:c1:0f:81:ef:c3:a9:36:54:7e:56:e0:22: 6d:a2:f1:fb:2a:95:6d:54:41:11:8a:0d:41:99:3a:0a:12:c0: a8:28:ba:71:3e:3a:36:15:60:93:03:7d:39:b3:9c:dc:5d:0c: 76:5a:c9:53:75:0a:d3:50:80:d8:86:c1:ed:43:26:29:0c:79: 23:4f:9a:a6:d0:db:a2:0b:bb:5e:1b:4a:f8:8f:64:e3:a9:fb: 3e:42:4d:01:d9:b7:c2:81:ed:95:9c:e2:fd:b3:6e:61:59:73: 22:c9:e7:3a:ec:22:58:17:77:ff:c6:35:f0:66:80:f5:c5:38: 95:91:d3:d1:bf:38:97:3f:49:f4:70:b2:56:0e:d4:b7:92:d2: 64:2f:bb:b0:a3:97:e7:79:65:ea:20:bc:35:d6:7c:b7:9b:9f: f9:ba:c2:3c:33:0f:e4:b8:33:23:39:bf:0a:0e:60:b0:c2:68: e5:6d:64:aa:63:bd:d2:59:87:c1:c1:0c:4f:54:3f:48:9e:01: 95:07:ec:68:c2:d7:08:b3:77:a3:47:30:6a:0d:6b:a8:42:c6: c4:88:c3:36:8a:7a:25:a9:48:b0:18:37:b4:8c:9e:fb:91:a5: 13:a3:21:de:76:6e:b3:44:a1:23:d4:35:03:43:33:2f:13:3c: 9f:16:06:76 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7NNy5QNyJiFN87PmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhhMjljNDYtZTBmMS00ZWRjLTk4OGEtOTQyMGFmZmJj MzM5MB4XDTI2MDgxMTEzMDAxMVoXDTI2MTEwOTE0MDAxMVowLzEtMCsGA1UEAxMk MzkyYmYzNTItMjgwMC00MWI5LWI1M2QtODdiNmU5MzQyZTBjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr2PirHQ58P8VWbY8CqAJak+hgr1dMROb067U w5TrsFuJRzx7RZ98ZYIblezY700BO7gGozTbAoRokDmfwMalIK2uviwd4wgX/6/7 K68xrrppgJltQYfsiLn9DdoFIxN+jhVMUsNNcDY66QSeOsDrRNO14Dt+/EtUsS7Y qbJ3cnHxNdqa3cCN3JBxaxcArN9m8zfJ2v0/6+OGnLqsvMxx7vnCscrSACELe2I9 aE2ZmhyhIj3b3cCuGWQzjBCaO24FlE/tuzcSubP52K4+buszXjHLsDVNlOFRGP+O /MJupQTUzGNEgOzE8aXgvpYGGT/i7uzcCzQ7J5tpEVreJwPSmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFYMr/6acrdmXxaFdg54BTvG+R7NMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9iOGEy OWM0Ni1lMGYxLTRlZGMtOTg4YS05NDIwYWZmYmMzMzkvYzg2ZmNiOTItZTJhYy0z MGYzLWIzZjktNmViZmU4NmRkZDg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYjhhMjljNDYtZTBmMS00ZWRjLTk4 OGEtOTQyMGFmZmJjMzM5L2I4YTI5YzQ2LWUwZjEtNGVkYy05ODhhLTk0MjBhZmZi YzMzOS5jcmwwHwYDVR0jBBgwFoAUrluRChr3agr5yGG6uSyArkHgeRQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9iOGEyOWM0Ni1lMGYxLTRlZGMtOTg4YS05NDIw YWZmYmMzMzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDqgL4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI4uUvfMlMEPge/DqTZUflbgIm2i8fsqlW1UQRGKDUGZOgoSwKgounE+ OjYVYJMDfTmznNxdDHZayVN1CtNQgNiGwe1DJikMeSNPmqbQ26ILu14bSviPZOOp +z5CTQHZt8KB7ZWc4v2zbmFZcyLJ5zrsIlgXd//GNfBmgPXFOJWR09G/OJc/SfRw slYO1LeS0mQvu7Cjl+d5ZeogvDXWfLebn/m6wjwzD+S4MyM5vwoOYLDCaOVtZKpj vdJZh8HBDE9UP0ieAZUH7GjC1wizd6NHMGoNa6hCxsSIwzaKeiWpSLAYN7SMnvuR pROjId52brNEoSPUNQNDMy8TPJ8WBnY= -----END CERTIFICATE-----Generated at Fri Sep 11 05:58:22 2026 by rpki-client