$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/157e5c71-d55f-3966-b459-86fc43407e78.roa File: 157e5c71-d55f-3966-b459-86fc43407e78.roa (raw, json) Hash identifier: gSxewLoKXSdDAI7pEMCRlSNsXTZXfyHLc8tIyF+TMfA= Subject key identifier: CD:CC:79:50:C7:D4:EB:25:BB:96:18:99:13:57:40:0F:90:AB:90:62 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584F67E64A1C58A5C97A7C491A00 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/157e5c71-d55f-3966-b459-86fc43407e78.roa Signing time: Mon 05 Oct 2026 22:47:43 +0000 ROA not before: Mon 05 Oct 2026 22:47:43 +0000 ROA not after: Sun 03 Jan 2027 23:47:43 +0000 asID: 14789 IP address blocks: 172.71.196.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:67:e6:4a:1c:58:a5:c9:7a:7c:49:1a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 5 22:47:43 2026 GMT Not After : Jan 3 23:47:43 2027 GMT Subject: CN=8390966d-7cef-410c-ac03-ea388d1bec77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:46:b3:b8:a3:29:59:9a:63:06:7d:da:5e:c2: 04:69:90:28:65:ca:19:6f:36:e2:d8:af:b8:5f:1f: 05:b1:0c:3c:6e:d8:ec:8e:27:4e:55:5a:50:3e:c9: 97:34:f9:a5:18:7a:20:2d:e2:3d:75:95:63:1d:96: 3d:0b:80:e9:fd:6f:60:e4:d2:97:33:aa:9e:6e:1e: 39:e4:68:85:95:4e:57:ba:db:52:c7:eb:f3:0b:f2: ad:08:1b:4a:a4:bb:98:0b:bd:fa:b0:10:21:86:b4: 14:bd:05:13:c4:5a:16:83:d9:e1:f0:50:84:bc:8c: 04:b8:bc:5d:30:fb:7d:0f:15:01:18:03:cd:d6:ac: 54:43:ba:fb:b5:05:d3:96:63:11:57:7c:1f:f6:26: 61:e6:cd:aa:77:7c:6c:43:2a:dd:d1:43:f7:b4:90: c8:2c:62:95:f0:d2:fe:b0:e4:79:c3:4e:52:0b:f1: e3:58:a1:84:b6:0a:e1:5f:1d:06:3c:a2:9b:fd:29: e4:da:31:da:df:c5:75:62:75:50:1e:3d:46:ce:0b: 16:39:cb:d0:e2:f3:21:27:99:ad:ef:60:4c:ed:0f: c4:dc:c6:8f:99:bb:58:f0:2c:29:02:1a:0a:c3:7f: 2a:42:6e:7d:1a:f0:1a:f7:9a:39:86:4d:68:50:60: aa:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:CC:79:50:C7:D4:EB:25:BB:96:18:99:13:57:40:0F:90:AB:90:62 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/157e5c71-d55f-3966-b459-86fc43407e78.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.71.196.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:f2:02:e4:85:e5:a1:72:a7:00:69:0e:81:c5:16:88:e7:08: 1f:99:f0:6c:05:f5:8d:50:b5:c9:a5:5c:2a:19:79:28:46:ce: 29:e9:17:c0:8e:34:38:47:55:3d:50:4c:7d:af:ec:03:e6:79: 7f:b9:95:96:ec:e4:f4:ba:b7:d6:d3:67:97:d7:f0:38:15:9a: 16:23:ea:e9:54:2c:5c:ac:c7:09:43:0d:f5:31:7d:88:86:d5: 32:45:4b:65:77:8d:db:ed:3d:29:00:61:8f:b2:c4:6e:fe:19: e4:49:c9:c2:20:d3:6d:1f:06:37:2d:02:09:46:3b:74:7a:36: db:42:cc:37:55:ba:ce:0b:40:81:44:19:40:77:4f:c2:1a:0e: 96:90:80:49:0a:97:a7:dd:4a:51:f1:2d:37:13:bf:e7:3e:e9: 75:b2:86:4e:c7:be:19:92:c9:ed:f2:85:82:9d:ec:8c:17:86: fb:8f:b3:6f:5b:a6:4b:f9:1d:42:ed:7f:0e:c0:fd:96:7d:29: 92:b8:e1:3c:bb:93:b1:42:b5:46:a7:ca:af:58:54:cd:1c:c6: 72:0d:75:7a:74:70:95:ad:d6:93:5c:b7:50:92:44:e1:92:ca: 15:ad:e6:73:12:8c:77:6d:d2:ff:85:df:b9:5e:90:57:6d:75: 04:87:98:72 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9n5kocWKXJenxJGgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MTAwNTIyNDc0M1oXDTI3MDEwMzIzNDc0M1owLzEtMCsGA1UEAxMk ODM5MDk2NmQtN2NlZi00MTBjLWFjMDMtZWEzODhkMWJlYzc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8UazuKMpWZpjBn3aXsIEaZAoZcoZbzbi2K+4 Xx8FsQw8btjsjidOVVpQPsmXNPmlGHogLeI9dZVjHZY9C4Dp/W9g5NKXM6qebh45 5GiFlU5XuttSx+vzC/KtCBtKpLuYC736sBAhhrQUvQUTxFoWg9nh8FCEvIwEuLxd MPt9DxUBGAPN1qxUQ7r7tQXTlmMRV3wf9iZh5s2qd3xsQyrd0UP3tJDILGKV8NL+ sOR5w05SC/HjWKGEtgrhXx0GPKKb/Snk2jHa38V1YnVQHj1GzgsWOcvQ4vMhJ5mt 72BM7Q/E3MaPmbtY8CwpAhoKw38qQm59GvAa95o5hk1oUGCqNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM3MeVDH1Oslu5YYmRNXQA+Qq5BiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMTU3ZTVjNzEtZDU1Zi0z OTY2LWI0NTktODZmYzQzNDA3ZTc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEfEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAryAuSF5aFypwBpDoHFFojnCB+Z8GwF9Y1QtcmlXCoZeShGzinpF8CO NDhHVT1QTH2v7APmeX+5lZbs5PS6t9bTZ5fX8DgVmhYj6ulULFysxwlDDfUxfYiG 1TJFS2V3jdvtPSkAYY+yxG7+GeRJycIg020fBjctAglGO3R6NttCzDdVus4LQIFE GUB3T8IaDpaQgEkKl6fdSlHxLTcTv+c+6XWyhk7HvhmSye3yhYKd7IwXhvuPs29b pkv5HULtfw7A/ZZ9KZK44Ty7k7FCtUanyq9YVM0cxnINdXp0cJWt1pNct1CSROGS yhWt5nMSjHdt0v+F37lekFdtdQSHmHI= -----END CERTIFICATE-----Generated at Tue Oct 13 04:32:16 2026 by rpki-client