$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/649c537d-669c-3deb-a266-9dcdbfd17007.roa File: 649c537d-669c-3deb-a266-9dcdbfd17007.roa (raw, json) Hash identifier: BdOlOdPsv+97Pp3NsVarGLPzWJK4Jsd7VIbv1G8q4zY= Subject key identifier: 7A:2A:92:98:74:E7:B3:6A:51:6E:6A:77:6A:94:2D:B9:D3:E3:B8:EE Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584EF44CB93A4F84AED1ED6B5820 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/649c537d-669c-3deb-a266-9dcdbfd17007.roa Signing time: Tue 25 Aug 2026 13:00:12 +0000 ROA not before: Tue 25 Aug 2026 13:00:12 +0000 ROA not after: Mon 23 Nov 2026 14:00:12 +0000 asID: 13335 IP address blocks: 172.70.231.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f4:4c:b9:3a:4f:84:ae:d1:ed:6b:58:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 25 13:00:12 2026 GMT Not After : Nov 23 14:00:12 2026 GMT Subject: CN=3e6ba074-d3cd-4971-a26f-357b4ea308ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:59:20:dd:fd:80:ba:2f:0e:ab:a0:6b:25:e9: df:d4:36:1f:05:40:79:0d:a7:6b:cb:cc:e9:e6:7b: d5:cd:a0:c0:3d:e6:07:f8:89:89:e3:83:99:ae:3c: 2f:f4:4a:aa:1d:36:12:5a:37:15:1d:a2:34:3d:82: ca:cf:7c:13:b3:e5:4f:67:9c:c6:ba:c6:bc:5e:f3: 09:61:39:84:3e:c6:c4:d2:c4:26:97:fa:2a:f3:85: 50:04:71:dc:a1:69:15:f3:79:0c:1a:ea:cf:dd:19: a4:7b:82:aa:28:18:9b:e3:da:b3:42:40:2e:40:2c: 14:c2:a4:9f:0d:16:72:04:64:5d:e0:fc:88:df:4f: 8a:27:6e:5d:5f:97:e6:90:4e:f0:3a:82:18:ed:78: 1e:74:09:4a:8d:5a:02:77:74:c5:dc:64:73:60:96: d1:a2:7e:36:67:4e:54:a9:7f:ab:10:05:ec:b6:ff: 53:bc:05:1d:26:4b:9c:5f:bd:0b:3b:58:8a:cd:30: e0:e2:b1:e3:e6:91:fb:59:9a:a8:bc:a6:e7:62:32: ec:a0:fa:12:bd:9e:28:4a:8c:e3:1a:3a:04:ff:ff: 43:b4:7b:6a:0b:13:30:a7:d9:14:6d:4f:d4:22:cc: b8:bc:6b:94:c5:fb:84:9f:b5:54:82:6b:3e:ff:e4: 95:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:2A:92:98:74:E7:B3:6A:51:6E:6A:77:6A:94:2D:B9:D3:E3:B8:EE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/649c537d-669c-3deb-a266-9dcdbfd17007.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.70.231.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:4d:f6:79:fb:6c:a2:ad:77:fe:90:8a:ae:e1:27:5c:76:10: a2:08:33:93:3c:fd:35:05:e1:8a:1d:ec:22:a3:a6:34:bc:d6: 7b:82:e3:66:a2:1f:1d:c2:4a:ba:55:4c:48:f4:f7:e4:0e:e1: b8:d7:29:16:78:98:19:f7:1d:b7:d8:65:f5:7a:0e:46:36:2f: b5:1e:27:70:a0:39:8b:de:0e:42:6b:8e:96:34:bd:c0:92:f8: 37:05:33:38:04:49:e4:34:a3:69:7c:94:9f:a2:a4:7f:08:03: 7a:b0:ff:68:c3:e4:1a:a4:b0:6f:53:c1:e5:97:c8:5c:4d:de: 40:0c:f5:7e:15:43:72:a8:88:c6:15:4c:76:bf:b2:27:6e:d2: 18:5a:f2:5f:51:4a:08:1a:6d:dc:ec:05:70:5f:26:d6:10:7d: dd:16:f9:35:c3:f4:b1:d0:e8:3b:9e:56:6c:68:7e:11:66:0f: 5d:9a:a4:5b:54:48:e4:84:4f:9c:5b:8b:27:22:fa:cb:e9:31: be:59:b0:4d:ae:68:eb:c5:92:bc:46:c2:35:b2:15:f7:1b:73: 4b:ac:64:27:53:57:2b:24:45:b0:c5:53:2a:c0:c9:78:36:b2: fb:78:24:cd:b1:06:3a:2d:f5:75:f7:9d:f0:2d:3f:c1:8a:ee: c5:49:13:aa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE70TLk6T4Su0e1rWCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDgyNTEzMDAxMloXDTI2MTEyMzE0MDAxMlowLzEtMCsGA1UEAxMk M2U2YmEwNzQtZDNjZC00OTcxLWEyNmYtMzU3YjRlYTMwOGFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1lkg3f2Aui8Oq6BrJenf1DYfBUB5Dadry8zp 5nvVzaDAPeYH+ImJ44OZrjwv9EqqHTYSWjcVHaI0PYLKz3wTs+VPZ5zGusa8XvMJ YTmEPsbE0sQml/oq84VQBHHcoWkV83kMGurP3Rmke4KqKBib49qzQkAuQCwUwqSf DRZyBGRd4PyI30+KJ25dX5fmkE7wOoIY7XgedAlKjVoCd3TF3GRzYJbRon42Z05U qX+rEAXstv9TvAUdJkucX70LO1iKzTDg4rHj5pH7WZqovKbnYjLsoPoSvZ4oSozj GjoE//9DtHtqCxMwp9kUbU/UIsy4vGuUxfuEn7VUgms+/+SVvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHoqkph057NqUW5qd2qULbnT47juMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNjQ5YzUzN2QtNjY5Yy0z ZGViLWEyNjYtOWRjZGJmZDE3MDA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEbnMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJZN9nn7bKKtd/6Qiq7hJ1x2EKIIM5M8/TUF4Yod7CKjpjS81nuC42ai Hx3CSrpVTEj09+QO4bjXKRZ4mBn3HbfYZfV6DkY2L7UeJ3CgOYveDkJrjpY0vcCS +DcFMzgESeQ0o2l8lJ+ipH8IA3qw/2jD5BqksG9TweWXyFxN3kAM9X4VQ3KoiMYV THa/sidu0hha8l9RSggabdzsBXBfJtYQfd0W+TXD9LHQ6DueVmxofhFmD12apFtU SOSET5xbiyci+svpMb5ZsE2uaOvFkrxGwjWyFfcbc0usZCdTVyskRbDFUyrAyXg2 svt4JM2xBjot9XX3nfAtP8GK7sVJE6o= -----END CERTIFICATE-----Generated at Mon Sep 21 21:11:02 2026 by rpki-client