$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/6997df4b-71d9-3f8d-a2ad-4511f636c7a2.roa File: 6997df4b-71d9-3f8d-a2ad-4511f636c7a2.roa (raw, json) Hash identifier: QUiGFwYUY2cI0oKgV0casdDnz9gpcmoLI75jwE7mI/E= Subject key identifier: 4B:A7:89:23:6B:97:D8:D1:16:C4:93:92:A5:EB:A3:A4:2C:F4:8F:65 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584EF44CC41EEC8F18E329833280 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/6997df4b-71d9-3f8d-a2ad-4511f636c7a2.roa Signing time: Tue 25 Aug 2026 13:00:12 +0000 ROA not before: Tue 25 Aug 2026 13:00:12 +0000 ROA not after: Mon 23 Nov 2026 14:00:12 +0000 asID: 13335 IP address blocks: 172.71.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f4:4c:c4:1e:ec:8f:18:e3:29:83:32:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 25 13:00:12 2026 GMT Not After : Nov 23 14:00:12 2026 GMT Subject: CN=bbd07abc-d4a6-4506-b6e4-c91f38f23c73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:c7:d3:64:86:d3:ac:bc:0a:13:74:8e:35:b3: 75:32:a4:34:42:5b:4b:c9:f1:8d:cb:2c:78:b3:14: f0:df:15:8d:a0:42:5e:78:ae:4c:56:a2:74:5c:f0: 0e:ff:5d:d2:b8:49:e9:ed:fe:53:e4:81:cc:be:f2: ac:56:c9:f3:85:94:3d:41:ca:8f:40:49:7f:e5:7c: b0:16:f0:5c:78:b7:1a:b3:45:a0:4f:5c:92:c5:d5: c5:a3:f7:99:16:d6:88:ed:5f:4c:7e:92:4a:36:73: 17:18:9c:6d:68:2f:f0:56:3d:ba:fc:b9:76:f0:e2: de:3f:a8:8a:8e:54:c2:69:38:95:58:0c:b8:27:b1: 37:22:17:98:3a:de:f9:2c:29:64:f6:17:1b:98:22: a1:fa:c9:5c:3e:c9:d7:9c:2e:1b:bb:35:79:8c:46: ed:98:69:cf:c8:73:d6:dd:79:ae:96:54:b5:5d:42: a9:3b:c0:57:24:02:58:09:17:d7:da:77:f1:9a:a3: df:91:da:4f:c5:1c:20:b5:dd:97:8d:ca:e6:c0:c6: cd:72:2b:53:f5:e4:0d:67:e7:5d:12:f7:51:32:ab: 2e:dd:d2:77:fe:b4:3c:a6:bf:08:0a:ba:fe:f4:a3: e5:90:d7:38:51:af:29:87:65:d5:23:18:41:52:67: 48:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:A7:89:23:6B:97:D8:D1:16:C4:93:92:A5:EB:A3:A4:2C:F4:8F:65 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/6997df4b-71d9-3f8d-a2ad-4511f636c7a2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.71.21.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:d5:b9:5e:63:6f:0a:87:32:d3:94:e7:1f:2f:08:0d:39:9b: 6f:e9:5f:c3:17:5f:ac:b4:2e:22:8a:70:f0:87:d9:e6:f0:4b: 22:05:f1:cb:3d:76:ad:de:fc:39:f2:65:b1:e6:78:15:9f:68: 7e:0e:5c:f5:6c:1c:f0:ef:5c:b9:51:b6:43:01:28:98:6f:04: c6:66:72:6f:a9:cd:f5:25:1a:77:e9:d4:34:00:d6:ca:0b:ea: a2:0c:d3:22:b2:b2:54:b8:81:95:d8:ce:0a:0f:7d:f9:ee:21: 79:cb:b7:dd:27:1d:0e:88:71:95:68:c4:90:33:ee:3a:1f:1e: 41:df:51:ae:b8:b9:9a:7b:d8:5c:83:ee:ae:e3:24:dc:f4:47: cb:a3:db:a6:f1:b8:27:93:a9:85:61:25:af:68:b6:b5:1f:7a: fb:92:21:df:8e:17:21:73:dd:4b:9e:c6:dd:c6:2b:fb:32:31: 45:ec:4a:23:e1:7e:41:50:e7:93:99:99:f0:63:f2:a7:dc:77: e9:9d:f9:cd:a5:c0:f9:03:38:19:45:5d:fa:f8:12:18:c6:03: a8:cf:5c:db:b2:46:a8:8f:ff:ae:4f:78:1c:9a:1a:99:f8:96: 87:f1:18:3a:4b:54:40:e9:77:00:da:d7:90:bf:9d:f9:f8:52: bd:ca:f6:a9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE70TMQe7I8Y4ymDMoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDgyNTEzMDAxMloXDTI2MTEyMzE0MDAxMlowLzEtMCsGA1UEAxMk YmJkMDdhYmMtZDRhNi00NTA2LWI2ZTQtYzkxZjM4ZjIzYzczMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MfTZIbTrLwKE3SONbN1MqQ0QltLyfGNyyx4 sxTw3xWNoEJeeK5MVqJ0XPAO/13SuEnp7f5T5IHMvvKsVsnzhZQ9QcqPQEl/5Xyw FvBceLcas0WgT1ySxdXFo/eZFtaI7V9MfpJKNnMXGJxtaC/wVj26/Ll28OLeP6iK jlTCaTiVWAy4J7E3IheYOt75LClk9hcbmCKh+slcPsnXnC4buzV5jEbtmGnPyHPW 3XmullS1XUKpO8BXJAJYCRfX2nfxmqPfkdpPxRwgtd2XjcrmwMbNcitT9eQNZ+dd EvdRMqsu3dJ3/rQ8pr8ICrr+9KPlkNc4Ua8ph2XVIxhBUmdI3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEuniSNrl9jRFsSTkqXro6Qs9I9lMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNjk5N2RmNGItNzFkOS0z ZjhkLWEyYWQtNDUxMWY2MzZjN2EyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEcVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABDVuV5jbwqHMtOU5x8vCA05m2/pX8MXX6y0LiKKcPCH2ebwSyIF8cs9 dq3e/DnyZbHmeBWfaH4OXPVsHPDvXLlRtkMBKJhvBMZmcm+pzfUlGnfp1DQA1soL 6qIM0yKyslS4gZXYzgoPffnuIXnLt90nHQ6IcZVoxJAz7jofHkHfUa64uZp72FyD 7q7jJNz0R8uj26bxuCeTqYVhJa9otrUfevuSId+OFyFz3Uuext3GK/syMUXsSiPh fkFQ55OZmfBj8qfcd+md+c2lwPkDOBlFXfr4EhjGA6jPXNuyRqiP/65PeByaGpn4 lofxGDpLVEDpdwDa15C/nfn4Ur3K9qk= -----END CERTIFICATE-----Generated at Sun Sep 20 17:33:17 2026 by rpki-client