$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a88128f7-729a-3527-a66e-0f8deb6e69f8.roa File: a88128f7-729a-3527-a66e-0f8deb6e69f8.roa (raw, json) Hash identifier: MGpdcUrnx6b1VW1QawhHInHjCiheuzlyrOOhDL2wJuc= Subject key identifier: 5C:A2:D8:0E:F5:71:A0:52:BD:88:B9:F4:E9:76:68:43:1F:9B:F6:04 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584EF44CC30590EE426C0AF29E80 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a88128f7-729a-3527-a66e-0f8deb6e69f8.roa Signing time: Tue 25 Aug 2026 13:00:12 +0000 ROA not before: Tue 25 Aug 2026 13:00:12 +0000 ROA not after: Mon 23 Nov 2026 14:00:12 +0000 asID: 13335 IP address blocks: 172.70.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f4:4c:c3:05:90:ee:42:6c:0a:f2:9e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 25 13:00:12 2026 GMT Not After : Nov 23 14:00:12 2026 GMT Subject: CN=a1cf0ecb-6ae6-4bee-8c64-33f5cd0f2e2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:f2:e0:ab:23:6d:9e:35:d9:f4:0e:df:af:df: eb:f3:86:b0:41:8e:b4:6c:de:c6:2f:ee:ed:0c:af: ba:6e:13:c3:b8:1c:de:1b:f8:e1:5b:21:b4:03:be: a8:0c:0e:a3:dd:c6:6f:ac:f1:d3:d0:94:75:53:2c: 25:23:fa:b1:4d:fe:2f:8f:f0:63:12:9a:b3:03:7f: 26:e6:78:3d:79:ec:46:89:bf:55:b7:b8:c3:05:ce: 57:fd:12:31:02:89:95:c7:ec:5d:0a:7e:08:f4:8f: db:f3:a7:12:e2:68:fe:cf:64:d0:c4:42:3c:2b:52: 8a:7a:93:29:27:89:1f:74:19:93:98:95:60:f1:70: 19:57:7b:b1:92:0f:bf:1f:65:7c:b0:15:8a:91:a2: 77:10:c9:09:7f:29:44:a2:8e:c2:33:01:e2:fa:66: cc:e6:5b:d8:8d:cd:56:20:c8:23:ee:0e:3b:53:8a: aa:1b:50:47:bb:01:78:ab:96:78:ca:44:e9:75:93: 4d:41:e8:85:89:46:46:8f:4d:13:f4:0e:21:ea:5e: 0c:ee:ab:66:48:14:82:58:fc:b3:47:7f:88:a5:a4: 7c:b2:88:32:75:2e:20:8a:7c:91:c4:66:15:fe:0a: 1d:14:b1:89:2f:3c:6a:aa:29:5f:1d:df:5e:d1:cd: 15:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:A2:D8:0E:F5:71:A0:52:BD:88:B9:F4:E9:76:68:43:1F:9B:F6:04 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a88128f7-729a-3527-a66e-0f8deb6e69f8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.70.220.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:f8:f4:15:36:c1:03:ca:63:e2:bc:5c:0b:2d:2a:b4:44:b9: 2a:ff:18:3d:64:4a:c9:cd:86:9a:de:ec:2d:8c:ff:72:2c:37: 17:22:b5:7b:d3:1e:7e:ee:ec:1a:4a:07:42:8b:3d:b8:66:d8: 53:f3:06:c9:c1:3e:39:d7:98:f7:7c:f0:72:70:80:8d:93:b2: 9f:d9:90:cf:44:70:24:7c:57:e2:a0:67:32:38:3c:ab:83:d2: 59:e7:75:05:8c:58:e6:8f:6e:c2:fe:13:c7:26:a4:db:02:3c: 89:89:cd:22:50:eb:60:b4:e9:e4:1a:18:0b:84:64:80:2f:0a: 30:a4:8c:bf:80:77:88:7c:82:2b:2a:02:f9:a8:5b:a6:27:d9: 6a:63:d0:99:3a:8e:db:37:e8:d3:d5:42:3f:0b:0a:eb:e2:5a: 4f:27:0e:41:b4:07:27:f8:84:c7:e1:e8:43:54:a5:36:a0:ff: ab:11:34:15:ea:d1:53:b7:2d:3c:09:59:a3:72:df:37:6b:44: f1:d1:d9:d0:c9:03:25:c3:0d:72:2a:b0:a2:43:07:1e:88:92: f3:62:80:2d:0e:d0:d8:12:1e:a8:75:a7:ca:20:d1:7c:4b:66: a9:22:77:3a:2c:43:16:bb:f2:2a:f3:e6:a0:65:b2:86:1c:41: 7f:43:4d:72 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE70TMMFkO5CbArynoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDgyNTEzMDAxMloXDTI2MTEyMzE0MDAxMlowLzEtMCsGA1UEAxMk YTFjZjBlY2ItNmFlNi00YmVlLThjNjQtMzNmNWNkMGYyZTJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuPLgqyNtnjXZ9A7fr9/r84awQY60bN7GL+7t DK+6bhPDuBzeG/jhWyG0A76oDA6j3cZvrPHT0JR1UywlI/qxTf4vj/BjEpqzA38m 5ng9eexGib9Vt7jDBc5X/RIxAomVx+xdCn4I9I/b86cS4mj+z2TQxEI8K1KKepMp J4kfdBmTmJVg8XAZV3uxkg+/H2V8sBWKkaJ3EMkJfylEoo7CMwHi+mbM5lvYjc1W IMgj7g47U4qqG1BHuwF4q5Z4ykTpdZNNQeiFiUZGj00T9A4h6l4M7qtmSBSCWPyz R3+IpaR8sogydS4ginyRxGYV/godFLGJLzxqqilfHd9e0c0VgQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFyi2A71caBSvYi59Ol2aEMfm/YEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvYTg4MTI4ZjctNzI5YS0z NTI3LWE2NmUtMGY4ZGViNmU2OWY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEbcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGH49BU2wQPKY+K8XAstKrREuSr/GD1kSsnNhpre7C2M/3IsNxcitXvT Hn7u7BpKB0KLPbhm2FPzBsnBPjnXmPd88HJwgI2Tsp/ZkM9EcCR8V+KgZzI4PKuD 0lnndQWMWOaPbsL+E8cmpNsCPImJzSJQ62C06eQaGAuEZIAvCjCkjL+Ad4h8gisq AvmoW6Yn2Wpj0Jk6jts36NPVQj8LCuviWk8nDkG0Byf4hMfh6ENUpTag/6sRNBXq 0VO3LTwJWaNy3zdrRPHR2dDJAyXDDXIqsKJDBx6IkvNigC0O0NgSHqh1p8og0XxL ZqkidzosQxa78irz5qBlsoYcQX9DTXI= -----END CERTIFICATE-----Generated at Sun Sep 20 16:03:53 2026 by rpki-client