$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2c5bc852-5a36-3b63-9420-58962a95c3e3.roa File: 2c5bc852-5a36-3b63-9420-58962a95c3e3.roa (raw, json) Hash identifier: OoeWKw/F8ts2tUeQIl+iPOyxgSEw008yDlVe1Vul/As= Subject key identifier: 81:D7:6D:C0:F0:63:10:CD:74:7E:F6:BC:B6:4E:2E:4E:E8:37:94:92 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584EF44CB9545A9700EC71DC9480 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2c5bc852-5a36-3b63-9420-58962a95c3e3.roa Signing time: Tue 25 Aug 2026 13:00:12 +0000 ROA not before: Tue 25 Aug 2026 13:00:12 +0000 ROA not after: Mon 23 Nov 2026 14:00:12 +0000 asID: 13335 IP address blocks: 172.70.238.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f4:4c:b9:54:5a:97:00:ec:71:dc:94:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 25 13:00:12 2026 GMT Not After : Nov 23 14:00:12 2026 GMT Subject: CN=11b17c6f-b60c-4081-b25b-458fbfd89655 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:17:f1:1a:ee:6e:f5:33:03:65:08:31:92:84: 92:ab:7d:8e:60:87:d5:c6:cf:a6:e7:64:b4:4b:9e: 9a:f6:c9:a9:28:59:cf:9f:d6:8d:6a:43:34:1a:a3: 4f:f0:29:5e:6f:96:b0:09:46:d4:6c:c2:04:27:8e: 52:2c:f1:b0:d4:d1:f3:d8:65:c1:6d:c0:46:80:5c: 9a:80:ff:fc:52:a0:f1:11:84:6c:4d:fe:29:fb:51: c1:c5:2d:f2:6c:65:8a:3c:54:f3:56:6d:ea:03:4d: bc:7c:26:7b:50:46:27:4e:6c:a1:32:2a:0b:8d:0a: 79:9e:15:77:c1:6b:1c:ad:ca:9a:d4:01:e3:cc:be: 0e:98:b0:74:b9:cc:a7:29:d7:fd:1b:e0:a4:b5:35: b8:c8:fa:02:48:42:cb:9b:99:90:10:0f:6a:f6:ac: 56:bb:4c:23:0c:66:b9:a9:5d:51:41:61:35:06:51: 5f:d7:c3:29:ea:a9:bc:37:8b:51:b5:80:28:a5:7c: 11:a3:0f:da:d5:fb:b5:87:3c:ca:0e:a2:e7:e3:6f: 87:7d:61:6a:1a:b9:b4:2c:a2:ec:a7:c9:63:b0:a7: 7c:fb:08:3c:36:b2:50:3e:d9:f8:ce:45:e8:65:84: 15:1b:03:36:6e:54:92:79:ba:f6:8d:c5:3d:04:86: 84:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:D7:6D:C0:F0:63:10:CD:74:7E:F6:BC:B6:4E:2E:4E:E8:37:94:92 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2c5bc852-5a36-3b63-9420-58962a95c3e3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.70.238.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption aa:62:51:c8:d0:99:9e:10:dd:df:96:15:81:81:49:31:5a:39: b2:19:91:6a:81:08:88:c3:d8:96:ce:8f:4a:07:19:80:8b:09: ff:ad:b6:f5:c9:d4:5d:28:3a:4c:63:23:b8:4d:b0:89:46:2e: a1:7d:91:f0:69:05:98:ff:3a:2e:21:45:59:6f:c2:2f:fd:e3: b2:ca:0f:cc:ef:14:98:95:1e:18:be:0a:ab:bd:5b:e9:7e:1b: 9b:66:6c:95:9b:46:49:6e:2d:73:08:29:5c:f9:85:da:01:2d: 2e:c5:9e:ce:27:1c:cf:89:af:d3:60:ee:36:de:42:5d:c7:85: a5:5b:f0:5b:c4:83:3c:cd:79:28:bf:ef:f9:38:9b:07:dd:57: 38:0f:f3:0c:dd:b8:2f:70:71:69:29:36:21:93:32:80:58:99: f6:31:1f:d5:5d:08:85:82:e0:a6:63:a9:a4:6d:aa:05:4c:82: ed:ba:ff:42:9e:1e:c7:c4:01:d7:a4:84:07:a2:75:d0:7d:36: 4c:9b:1d:65:bc:7f:ac:b0:89:b1:2d:0a:3a:f2:d8:3c:e4:8d: 31:b9:96:2a:05:e5:fb:6e:4c:fb:33:55:56:24:34:17:0c:11: fb:c0:c5:57:b7:9b:ec:3f:b4:76:a1:c9:85:16:26:e6:57:c4: b3:2e:18:c4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE70TLlUWpcA7HHclIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDgyNTEzMDAxMloXDTI2MTEyMzE0MDAxMlowLzEtMCsGA1UEAxMk MTFiMTdjNmYtYjYwYy00MDgxLWIyNWItNDU4ZmJmZDg5NjU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnhfxGu5u9TMDZQgxkoSSq32OYIfVxs+m52S0 S56a9smpKFnPn9aNakM0GqNP8Cleb5awCUbUbMIEJ45SLPGw1NHz2GXBbcBGgFya gP/8UqDxEYRsTf4p+1HBxS3ybGWKPFTzVm3qA028fCZ7UEYnTmyhMioLjQp5nhV3 wWscrcqa1AHjzL4OmLB0ucynKdf9G+CktTW4yPoCSELLm5mQEA9q9qxWu0wjDGa5 qV1RQWE1BlFf18Mp6qm8N4tRtYAopXwRow/a1fu1hzzKDqLn42+HfWFqGrm0LKLs p8ljsKd8+wg8NrJQPtn4zkXoZYQVGwM2blSSebr2jcU9BIaEWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIHXbcDwYxDNdH72vLZOLk7oN5SSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMmM1YmM4NTItNWEzNi0z YjYzLTk0MjAtNTg5NjJhOTVjM2UzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEbuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKpiUcjQmZ4Q3d+WFYGBSTFaObIZkWqBCIjD2JbOj0oHGYCLCf+ttvXJ 1F0oOkxjI7hNsIlGLqF9kfBpBZj/Oi4hRVlvwi/947LKD8zvFJiVHhi+Cqu9W+l+ G5tmbJWbRkluLXMIKVz5hdoBLS7Fns4nHM+Jr9Ng7jbeQl3HhaVb8FvEgzzNeSi/ 7/k4mwfdVzgP8wzduC9wcWkpNiGTMoBYmfYxH9VdCIWC4KZjqaRtqgVMgu26/0Ke HsfEAdekhAeiddB9NkybHWW8f6ywibEtCjry2DzkjTG5lioF5ftuTPszVVYkNBcM EfvAxVe3m+w/tHahyYUWJuZXxLMuGMQ= -----END CERTIFICATE-----Generated at Sun Sep 20 19:17:36 2026 by rpki-client