$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/aeb6b3dd-da76-3bf5-b068-55e3f23cbb16.roa File: aeb6b3dd-da76-3bf5-b068-55e3f23cbb16.roa (raw, json) Hash identifier: I2l2tEXTHi13yoTmn/znGg5THLejGg744mG/dXH8YH0= Subject key identifier: 02:CE:1D:A5:39:A1:D3:57:9D:3E:ED:85:0C:0B:3C:86:D5:D4:50:82 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584F68281523FD84A7B15095D300 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/aeb6b3dd-da76-3bf5-b068-55e3f23cbb16.roa Signing time: Tue 06 Oct 2026 01:00:13 +0000 ROA not before: Tue 06 Oct 2026 01:00:13 +0000 ROA not after: Mon 04 Jan 2027 02:00:13 +0000 asID: 14789 IP address blocks: 172.71.139.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 07 Nov 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:68:28:15:23:fd:84:a7:b1:50:95:d3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 6 01:00:13 2026 GMT Not After : Jan 4 02:00:13 2027 GMT Subject: CN=b1a31a49-7f6e-43c4-a6ce-e8d5e5e30fa6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:38:97:70:08:df:c8:50:51:fb:86:8e:62:f4: 65:57:5c:02:eb:8e:1f:a8:f9:e3:23:1b:33:83:6d: a0:b4:19:6c:8a:90:a4:c6:e6:37:1d:e3:92:62:63: 4b:29:62:7b:3c:00:36:ef:f5:87:c9:95:3c:b9:43: aa:e5:fa:ec:6a:df:bb:ba:8b:e6:48:8a:9e:78:c3: 4a:51:53:8b:19:20:3a:25:1e:aa:34:aa:9b:44:0e: 48:72:14:50:02:bc:fa:63:7e:dd:43:6c:f8:b9:5c: 0f:05:50:14:50:a5:f0:22:f1:3b:c1:32:55:7d:c5: 7e:07:50:08:dd:88:fd:e2:36:c3:dd:e0:4e:f5:b8: 38:65:6f:80:10:ce:b3:92:70:87:e8:8f:0b:a4:c6: 3e:e8:03:ec:16:c6:5f:47:78:50:f4:0a:d6:7d:05: bc:e9:35:b8:aa:df:2f:d6:83:fd:9e:25:9f:1e:88: d6:31:1a:12:e1:22:52:04:bb:d9:3b:7a:82:6f:86: e0:20:a5:a5:1b:64:0a:e1:8a:5a:73:4f:15:22:ee: bf:23:aa:d3:c4:34:5d:03:fa:53:cb:69:30:e6:c5: b7:37:dd:86:ce:ad:a5:8c:d4:42:4b:8f:25:8d:67: 11:1e:c3:7a:7c:34:c2:51:73:93:8b:99:e3:27:bb: 3e:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:CE:1D:A5:39:A1:D3:57:9D:3E:ED:85:0C:0B:3C:86:D5:D4:50:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/aeb6b3dd-da76-3bf5-b068-55e3f23cbb16.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.71.139.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:60:52:65:be:cb:52:7a:94:54:23:99:e7:e0:d2:38:57:00: e8:55:e5:17:cf:3f:01:29:73:3f:6b:b1:7b:ac:d5:1f:7c:36: ef:e6:42:95:45:e6:8d:6c:15:92:19:58:30:5b:5b:78:55:f7: f9:9e:65:d0:b1:36:83:3f:af:37:06:41:d4:b6:60:c8:a1:82: d1:b0:54:3a:c2:4a:d3:9b:47:39:d4:31:ce:7a:ea:0d:d9:70: 10:66:6d:26:df:76:3e:2f:33:58:93:84:37:6b:37:0d:1d:b7: 3e:9f:4e:d6:a8:a4:7b:34:b5:43:7f:6a:03:42:24:99:df:4e: 54:64:c7:ee:80:e3:d3:8d:71:db:c2:cf:dc:7f:44:0a:b7:68: 6c:1f:6b:69:be:b5:d2:93:df:f6:6a:e0:77:26:e2:a5:2e:a0: eb:1e:63:da:42:e5:56:4e:63:d3:26:31:08:0a:1b:74:f0:51: 63:f8:50:85:ca:78:63:33:37:17:c3:aa:e9:51:f4:76:d4:41: 81:9b:7c:ca:af:71:88:85:de:bf:df:00:01:cc:d5:a5:2d:6a: 43:8d:52:5a:52:5b:08:b0:d6:ab:07:99:1d:b6:83:67:22:82: 81:13:0e:8d:c1:fe:05:67:fa:62:d2:07:ec:39:19:79:d8:91: f8:c2:80:21 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9oKBUj/YSnsVCV0wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MTAwNjAxMDAxM1oXDTI3MDEwNDAyMDAxM1owLzEtMCsGA1UEAxMk YjFhMzFhNDktN2Y2ZS00M2M0LWE2Y2UtZThkNWU1ZTMwZmE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgziXcAjfyFBR+4aOYvRlV1wC644fqPnjIxsz g22gtBlsipCkxuY3HeOSYmNLKWJ7PAA27/WHyZU8uUOq5frsat+7uovmSIqeeMNK UVOLGSA6JR6qNKqbRA5IchRQArz6Y37dQ2z4uVwPBVAUUKXwIvE7wTJVfcV+B1AI 3Yj94jbD3eBO9bg4ZW+AEM6zknCH6I8LpMY+6APsFsZfR3hQ9ArWfQW86TW4qt8v 1oP9niWfHojWMRoS4SJSBLvZO3qCb4bgIKWlG2QK4Ypac08VIu6/I6rTxDRdA/pT y2kw5sW3N92Gzq2ljNRCS48ljWcRHsN6fDTCUXOTi5njJ7s+PQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFALOHaU5odNXnT7thQwLPIbV1FCCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvYWViNmIzZGQtZGE3Ni0z YmY1LWIwNjgtNTVlM2YyM2NiYjE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEeLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACJgUmW+y1J6lFQjmefg0jhXAOhV5RfPPwEpcz9rsXus1R98Nu/mQpVF 5o1sFZIZWDBbW3hV9/meZdCxNoM/rzcGQdS2YMihgtGwVDrCStObRznUMc566g3Z cBBmbSbfdj4vM1iThDdrNw0dtz6fTtaopHs0tUN/agNCJJnfTlRkx+6A49ONcdvC z9x/RAq3aGwfa2m+tdKT3/Zq4Hcm4qUuoOseY9pC5VZOY9MmMQgKG3TwUWP4UIXK eGMzNxfDqulR9HbUQYGbfMqvcYiF3r/fAAHM1aUtakONUlpSWwiw1qsHmR22g2ci goETDo3B/gVn+mLSB+w5GXnYkfjCgCE= -----END CERTIFICATE-----Generated at Thu Nov 5 04:36:46 2026 by rpki-client