$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a3658be4-326f-302b-a13e-8df1bd794ff2.roa File: a3658be4-326f-302b-a13e-8df1bd794ff2.roa (raw, json) Hash identifier: Ze+kGb27LD3gX1v7IpyiFMsKpD+xRWyk3egO8voE8OI= Subject key identifier: 1F:E9:1C:30:53:3A:DB:33:1A:ED:C2:00:19:38:1C:FF:D4:0C:03:89 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584C9106F4B88B9BF52EE2DFE4C0 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a3658be4-326f-302b-a13e-8df1bd794ff2.roa Signing time: Sun 18 Jan 2026 14:00:39 +0000 ROA not before: Sun 18 Jan 2026 14:00:39 +0000 ROA not after: Sat 18 Apr 2026 13:00:39 +0000 asID: 13335 IP address blocks: 172.71.208.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:91:06:f4:b8:8b:9b:f5:2e:e2:df:e4:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Jan 18 14:00:39 2026 GMT Not After : Apr 18 13:00:39 2026 GMT Subject: CN=aad6125d-9389-4480-8221-a5623e3a8474 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:ce:6e:d8:67:39:fd:ba:6a:77:39:da:3b:e9: 86:01:6d:28:ab:ec:f8:73:60:b4:85:7c:47:b8:74: 1e:df:31:7f:99:e1:ec:d6:f3:8e:57:28:21:11:bb: 67:d6:0c:25:b1:b1:6a:7f:fb:e7:63:bf:f3:83:57: 62:b7:85:6e:66:09:aa:b3:f8:27:47:a8:b6:d4:b6: bc:c6:1c:a9:9e:59:6c:e9:f4:18:c7:82:2f:93:10: 14:8b:a4:97:13:b0:1f:67:cb:00:66:af:da:8f:ef: 7b:a2:2b:fa:e4:46:7e:ac:bf:bc:f5:d5:91:af:df: ca:86:f8:9d:a9:06:99:ca:ee:36:67:1a:00:93:42: 97:05:3f:68:a3:c3:4d:60:3f:bb:9f:07:20:fc:e0: e0:02:20:32:8a:21:ab:52:f1:df:8b:c8:52:22:a1: 0c:30:4f:20:23:83:92:5e:55:fd:17:53:7e:20:02: 4c:4f:ca:bd:6a:96:52:55:ab:71:c4:c9:6a:0d:e0: 53:1e:2e:70:40:90:c7:ea:55:85:d9:c3:85:0d:0c: 15:5c:e9:02:33:79:05:59:2e:35:ac:8b:61:db:c9: c6:83:84:f9:f6:7a:43:5d:21:b0:5d:d7:19:b4:1c: ef:8b:56:17:64:01:bb:77:3c:82:ae:b0:05:0f:d0: 09:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:E9:1C:30:53:3A:DB:33:1A:ED:C2:00:19:38:1C:FF:D4:0C:03:89 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a3658be4-326f-302b-a13e-8df1bd794ff2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.71.208.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:ea:de:7c:72:1a:01:f1:72:d0:50:b4:a6:93:88:09:ca:ae: 63:db:37:d3:aa:db:80:7f:6d:c2:72:c7:69:db:2e:05:a4:fb: 50:ce:b8:dd:79:be:15:84:19:d6:66:10:f2:81:92:f3:8d:6c: 39:d1:f4:26:10:a3:14:e4:0a:13:80:5e:f8:86:4f:d2:92:c1: 1f:cc:aa:87:bc:7e:c0:a2:4b:52:04:64:ee:25:bf:08:53:eb: e9:46:74:48:0a:aa:e9:f8:89:de:3a:0a:a0:64:bb:07:4c:40: f5:a9:a5:a7:e8:55:6b:04:16:f7:18:df:3a:56:f0:ff:4a:fa: 1b:92:04:b4:81:78:9c:84:b7:be:94:60:3a:67:7b:ed:5e:4b: aa:f5:48:81:0a:e3:70:d6:6f:9d:e5:3e:9d:da:62:71:f1:25: 0e:82:ae:8e:d5:f8:3f:7c:3c:dc:2d:ef:e7:d1:f8:fb:60:e7: ca:44:47:14:e5:23:a5:72:4d:51:fc:fc:af:a0:1b:59:12:ad: fa:44:f8:21:f7:b8:9a:25:0a:e5:81:51:53:c4:f6:45:43:36: 75:d4:4a:67:2e:a0:95:78:b8:a7:23:90:c4:c6:da:72:42:04: 95:db:d7:ce:5d:21:c6:0f:b5:ae:1a:48:30:7c:24:dc:3e:26: 8e:6f:d0:c4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyRBvS4i5v1LuLf5MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDExODE0MDAzOVoXDTI2MDQxODEzMDAzOVowLzEtMCsGA1UEAxMk YWFkNjEyNWQtOTM4OS00NDgwLTgyMjEtYTU2MjNlM2E4NDc0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAps5u2Gc5/bpqdznaO+mGAW0oq+z4c2C0hXxH uHQe3zF/meHs1vOOVyghEbtn1gwlsbFqf/vnY7/zg1dit4VuZgmqs/gnR6i21La8 xhypnlls6fQYx4IvkxAUi6SXE7AfZ8sAZq/aj+97oiv65EZ+rL+89dWRr9/Khvid qQaZyu42ZxoAk0KXBT9oo8NNYD+7nwcg/ODgAiAyiiGrUvHfi8hSIqEMME8gI4OS XlX9F1N+IAJMT8q9apZSVatxxMlqDeBTHi5wQJDH6lWF2cOFDQwVXOkCM3kFWS41 rIth28nGg4T59npDXSGwXdcZtBzvi1YXZAG7dzyCrrAFD9AJBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB/pHDBTOtszGu3CABk4HP/UDAOJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvYTM2NThiZTQtMzI2Zi0z MDJiLWExM2UtOGRmMWJkNzk0ZmYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEfQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGvq3nxyGgHxctBQtKaTiAnKrmPbN9Oq24B/bcJyx2nbLgWk+1DOuN15 vhWEGdZmEPKBkvONbDnR9CYQoxTkChOAXviGT9KSwR/Mqoe8fsCiS1IEZO4lvwhT 6+lGdEgKqun4id46CqBkuwdMQPWppafoVWsEFvcY3zpW8P9K+huSBLSBeJyEt76U YDpne+1eS6r1SIEK43DWb53lPp3aYnHxJQ6Cro7V+D98PNwt7+fR+Ptg58pERxTl I6VyTVH8/K+gG1kSrfpE+CH3uJolCuWBUVPE9kVDNnXUSmcuoJV4uKcjkMTG2nJC BJXb185dIcYPta4aSDB8JNw+Jo5v0MQ= -----END CERTIFICATE-----Generated at Sun Mar 1 19:04:29 2026 by rpki-client