$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/7e5cd32f-4418-3687-a865-8f2a2ae8ab64.roa File: 7e5cd32f-4418-3687-a865-8f2a2ae8ab64.roa (raw, json) Hash identifier: qcT+a/1uLqzMPZW1sq+UsZqeREqOSc+0zdvldC/4yhQ= Subject key identifier: 2F:63:B6:27:09:F2:0E:A6:B3:D3:3F:05:8E:CB:86:7F:F3:AA:5C:82 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584EF2E77C09A42834A4BEB28540 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/7e5cd32f-4418-3687-a865-8f2a2ae8ab64.roa Signing time: Tue 25 Aug 2026 01:00:12 +0000 ROA not before: Tue 25 Aug 2026 01:00:12 +0000 ROA not after: Mon 23 Nov 2026 02:00:12 +0000 asID: 13335 IP address blocks: 172.70.86.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f2:e7:7c:09:a4:28:34:a4:be:b2:85:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 25 01:00:12 2026 GMT Not After : Nov 23 02:00:12 2026 GMT Subject: CN=3015afc9-93b7-468d-8c47-c5d86d10374d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:b3:aa:96:34:dc:f4:c8:ff:50:ef:53:a2:b5: 3d:8f:fc:aa:c3:ad:21:4a:7c:bf:75:4f:6b:80:c5: 85:9b:a7:d6:7a:f6:c7:97:c9:6a:10:02:88:7d:9b: e0:90:b0:ef:d1:ca:86:43:81:ae:29:cd:a8:3b:20: 1b:fc:a3:d2:68:ef:f5:29:df:2f:76:df:fa:20:ea: b0:dc:1d:2c:ee:75:7f:cb:90:88:ef:99:b0:dc:ca: 4e:ce:a8:11:05:9f:bf:cc:9f:7c:fe:42:a0:0c:8e: 5d:d4:a8:2f:0d:ae:8c:b0:f2:5c:4b:c8:4f:fa:6c: 97:3e:96:c8:f0:7f:1d:60:1a:41:19:20:e7:f7:4e: 92:4a:3b:59:84:61:57:6c:a7:13:22:1d:1b:5f:39: b2:d4:6f:b5:aa:df:9c:e7:2e:ab:2b:1d:71:87:e0: 72:d8:04:fd:f7:74:16:28:62:f4:cb:85:b6:62:94: 41:36:19:60:54:82:a8:f7:7e:70:b4:68:cd:64:27: df:d2:c1:7a:a1:57:94:22:88:9d:00:5d:7a:bb:33: aa:c9:0a:bf:97:88:4a:f3:f6:2d:15:40:be:5e:88: a3:b3:2b:ed:ed:0d:b3:35:85:48:00:4c:a7:f8:77: be:e6:b4:61:5b:dd:16:51:fd:f3:4b:d8:c4:cd:ec: 92:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:63:B6:27:09:F2:0E:A6:B3:D3:3F:05:8E:CB:86:7F:F3:AA:5C:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/7e5cd32f-4418-3687-a865-8f2a2ae8ab64.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.70.86.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9d:be:d3:01:c7:70:7c:8d:11:d9:2c:d7:9c:84:63:cf:50:6a: a9:90:63:0a:9d:20:46:21:46:76:f3:da:59:46:f0:9f:12:6e: 82:19:13:30:25:8b:20:36:1c:ce:9e:6d:07:6f:20:68:78:88: fb:b3:e8:dd:00:16:f0:a9:74:9b:9f:cc:d8:8a:48:e5:30:fe: 61:9c:1a:d9:ee:10:22:37:10:81:9e:6b:b5:37:57:62:ed:61: a9:1f:ff:a6:eb:b9:36:25:c1:12:ec:40:e4:9f:a9:3b:3f:c3: 28:6b:7c:ad:70:ae:97:24:96:2f:ea:00:72:60:89:2b:51:ca: ec:a0:c7:dd:99:e4:a2:f0:97:2e:b6:f6:e5:26:01:5c:31:c1: 56:69:f7:08:51:eb:8c:80:80:59:f1:23:54:2f:08:7d:8b:0b: 74:ba:13:11:e1:b4:26:36:d7:80:24:3c:68:48:65:55:d7:dc: 6b:89:e9:2b:c7:eb:27:b0:d9:ca:a8:c4:0f:ba:9a:f8:76:df: 3a:fa:cc:37:77:82:e8:50:83:66:ca:ed:8d:89:ef:bc:59:60: 3e:35:14:72:00:7c:16:f1:47:3b:c5:93:62:8c:19:2b:b9:a5: 83:09:c2:f2:c6:2f:2c:20:2c:9a:9e:88:49:83:e3:85:9a:d5: df:8a:d2:01 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7y53wJpCg0pL6yhUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDgyNTAxMDAxMloXDTI2MTEyMzAyMDAxMlowLzEtMCsGA1UEAxMk MzAxNWFmYzktOTNiNy00NjhkLThjNDctYzVkODZkMTAzNzRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqbOqljTc9Mj/UO9TorU9j/yqw60hSny/dU9r gMWFm6fWevbHl8lqEAKIfZvgkLDv0cqGQ4GuKc2oOyAb/KPSaO/1Kd8vdt/6IOqw 3B0s7nV/y5CI75mw3MpOzqgRBZ+/zJ98/kKgDI5d1KgvDa6MsPJcS8hP+myXPpbI 8H8dYBpBGSDn906SSjtZhGFXbKcTIh0bXzmy1G+1qt+c5y6rKx1xh+By2AT993QW KGL0y4W2YpRBNhlgVIKo935wtGjNZCff0sF6oVeUIoidAF16uzOqyQq/l4hK8/Yt FUC+Xoijsyvt7Q2zNYVIAEyn+He+5rRhW90WUf3zS9jEzeyS0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC9jticJ8g6ms9M/BY7Lhn/zqlyCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvN2U1Y2QzMmYtNDQxOC0z Njg3LWE4NjUtOGYyYTJhZThhYjY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEZWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ2+0wHHcHyNEdks15yEY89QaqmQYwqdIEYhRnbz2llG8J8SboIZEzAl iyA2HM6ebQdvIGh4iPuz6N0AFvCpdJufzNiKSOUw/mGcGtnuECI3EIGea7U3V2Lt Yakf/6bruTYlwRLsQOSfqTs/wyhrfK1wrpckli/qAHJgiStRyuygx92Z5KLwly62 9uUmAVwxwVZp9whR64yAgFnxI1QvCH2LC3S6ExHhtCY214AkPGhIZVXX3GuJ6SvH 6yew2cqoxA+6mvh23zr6zDd3guhQg2bK7Y2J77xZYD41FHIAfBbxRzvFk2KMGSu5 pYMJwvLGLywgLJqeiEmD44Wa1d+K0gE= -----END CERTIFICATE-----Generated at Sun Sep 20 18:51:57 2026 by rpki-client