$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2b2ebbe8-0b6a-3db2-ae9c-b3c9f78e0059.roa File: 2b2ebbe8-0b6a-3db2-ae9c-b3c9f78e0059.roa (raw, json) Hash identifier: 7WfdAzvxOuEbV/UiwHUvHFvWQEjKOV7lp87aqVJHB/M= Subject key identifier: 4F:3C:73:33:FE:02:C5:89:63:61:37:B5:F3:48:8A:6A:DB:B0:DB:A5 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584EEA87737B68A4C995A956AAC0 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2b2ebbe8-0b6a-3db2-ae9c-b3c9f78e0059.roa Signing time: Sat 22 Aug 2026 01:00:12 +0000 ROA not before: Sat 22 Aug 2026 01:00:12 +0000 ROA not after: Fri 20 Nov 2026 02:00:12 +0000 asID: 13335 IP address blocks: 172.71.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ea:87:73:7b:68:a4:c9:95:a9:56:aa:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 22 01:00:12 2026 GMT Not After : Nov 20 02:00:12 2026 GMT Subject: CN=b357eae0-b19f-4398-8b83-dc1d639df706 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:e7:17:25:37:20:58:e8:a6:20:15:ba:4f:fa: 97:33:84:8e:a6:7f:d9:f0:bb:c6:26:80:83:c6:be: 60:06:ef:ae:46:e5:2d:10:12:c4:be:82:8f:28:69: 76:54:93:45:7a:80:23:fc:e8:f5:17:95:e5:1e:ff: a3:be:4c:53:c8:ba:36:d2:26:41:e9:3b:95:85:54: 3d:a3:bd:00:bf:df:0f:03:cd:bd:5f:76:88:0d:c6: da:80:29:e1:64:29:c3:5a:da:82:ac:c5:95:98:dd: b4:27:c8:87:c5:8e:54:58:35:9e:31:09:d8:8e:1e: e1:ab:d7:58:9c:fd:8d:24:80:30:2b:a8:d2:5f:2c: ef:95:6e:56:43:71:43:06:e6:a3:f0:1e:9f:7b:0a: f7:72:e7:91:32:db:54:de:bf:39:56:83:21:ea:70: 66:3e:dc:43:2a:bd:4a:eb:b8:a5:2e:38:24:bb:b9: 25:1d:60:bc:4c:8f:42:ea:16:95:06:17:37:71:e7: 11:4c:3f:6e:1e:cc:81:42:59:91:73:e9:15:22:b9: 04:a2:34:39:ea:ba:31:53:ff:bf:00:33:e2:39:90: b9:c6:0b:98:e1:90:26:f5:34:35:db:eb:df:05:8c: 17:81:b6:1e:42:7f:35:b5:60:ec:19:06:1c:84:5f: 1a:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:3C:73:33:FE:02:C5:89:63:61:37:B5:F3:48:8A:6A:DB:B0:DB:A5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2b2ebbe8-0b6a-3db2-ae9c-b3c9f78e0059.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.71.152.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:d9:79:0b:5e:14:d4:00:14:77:45:d3:5f:cc:5b:84:d3:bb: 19:24:a3:ad:a2:8c:ec:bb:5a:78:8b:ba:f4:0f:b5:eb:7a:9a: 8f:af:a8:ec:0a:91:2d:8a:5f:37:4e:74:07:cb:e3:c2:3b:34: d8:9e:69:a7:c2:5e:83:09:10:d9:da:87:a6:74:bf:b3:df:9f: 8b:92:9b:e6:9a:78:9f:9f:3b:ef:cf:df:cb:5a:fa:3d:a9:5b: f1:47:a4:27:99:17:c3:ca:e6:df:46:aa:74:e9:c8:3c:d2:25: 31:79:bd:9a:7a:41:73:c5:52:51:4a:e9:74:69:f5:05:68:8c: 05:ad:0d:d1:5e:a2:75:08:56:b2:52:87:25:5e:03:e5:fd:b9: 57:92:1d:7b:d7:39:34:e6:30:62:d1:d3:fa:53:fc:83:74:e9: 32:75:79:a0:4d:1d:49:4c:c2:93:c5:0c:c8:fd:af:9b:4f:0a: 01:1b:85:02:23:cf:a5:1b:d1:75:64:7e:36:6f:3b:69:40:ee: c4:26:d2:a0:24:dc:d1:81:57:85:0d:ae:8a:b2:7f:02:d6:29: 61:02:de:ec:b7:b2:83:33:cb:df:f8:27:21:6f:2e:33:85:1a: e2:a2:81:08:66:88:43:f0:7c:65:74:58:3b:e4:d4:ef:72:78: 08:c6:8f:6b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7qh3N7aKTJlalWqsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDgyMjAxMDAxMloXDTI2MTEyMDAyMDAxMlowLzEtMCsGA1UEAxMk YjM1N2VhZTAtYjE5Zi00Mzk4LThiODMtZGMxZDYzOWRmNzA2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkecXJTcgWOimIBW6T/qXM4SOpn/Z8LvGJoCD xr5gBu+uRuUtEBLEvoKPKGl2VJNFeoAj/Oj1F5XlHv+jvkxTyLo20iZB6TuVhVQ9 o70Av98PA829X3aIDcbagCnhZCnDWtqCrMWVmN20J8iHxY5UWDWeMQnYjh7hq9dY nP2NJIAwK6jSXyzvlW5WQ3FDBuaj8B6fewr3cueRMttU3r85VoMh6nBmPtxDKr1K 67ilLjgku7klHWC8TI9C6haVBhc3cecRTD9uHsyBQlmRc+kVIrkEojQ56roxU/+/ ADPiOZC5xguY4ZAm9TQ12+vfBYwXgbYeQn81tWDsGQYchF8a6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE88czP+AsWJY2E3tfNIimrbsNulMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMmIyZWJiZTgtMGI2YS0z ZGIyLWFlOWMtYjNjOWY3OGUwMDU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEeYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJDZeQteFNQAFHdF01/MW4TTuxkko62ijOy7WniLuvQPtet6mo+vqOwK kS2KXzdOdAfL48I7NNieaafCXoMJENnah6Z0v7Pfn4uSm+aaeJ+fO+/P38ta+j2p W/FHpCeZF8PK5t9GqnTpyDzSJTF5vZp6QXPFUlFK6XRp9QVojAWtDdFeonUIVrJS hyVeA+X9uVeSHXvXOTTmMGLR0/pT/IN06TJ1eaBNHUlMwpPFDMj9r5tPCgEbhQIj z6Ub0XVkfjZvO2lA7sQm0qAk3NGBV4UNroqyfwLWKWEC3uy3soMzy9/4JyFvLjOF GuKigQhmiEPwfGV0WDvk1O9yeAjGj2s= -----END CERTIFICATE-----Generated at Mon Sep 21 19:16:33 2026 by rpki-client