$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/cb2a4200-7976-329a-8820-412eb82b7286.roa File: cb2a4200-7976-329a-8820-412eb82b7286.roa (raw, json) Hash identifier: fyPRFatcIyFcMKm82a9G8QPFC6jTZsLdTbYEBL0tNtI= Subject key identifier: 67:5F:9C:70:57:FE:3A:FE:81:55:7C:2A:E7:8A:9D:AF:88:D0:6B:46 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584EF2E777EA27C2975465730890 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/cb2a4200-7976-329a-8820-412eb82b7286.roa Signing time: Tue 25 Aug 2026 01:00:12 +0000 ROA not before: Tue 25 Aug 2026 01:00:12 +0000 ROA not after: Mon 23 Nov 2026 02:00:12 +0000 asID: 13335 IP address blocks: 172.70.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f2:e7:77:ea:27:c2:97:54:65:73:08:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 25 01:00:12 2026 GMT Not After : Nov 23 02:00:12 2026 GMT Subject: CN=ebaf6317-33a4-4cad-b4a2-4190bc197c35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:a5:d9:08:d9:4b:b9:ed:58:ef:b7:5e:c4:a8: cc:02:2f:60:38:dc:c6:39:a0:f8:55:c6:6c:7c:c6: 3b:aa:36:56:8e:61:40:71:40:a2:9b:89:db:df:87: 3e:af:97:50:fd:50:23:99:29:dc:31:e5:7b:03:30: bb:0c:cf:4c:d4:8d:35:ef:b7:7c:b0:2b:bc:46:97: 9c:49:88:b0:f5:cc:70:0a:ca:5b:97:0e:80:89:00: 86:f5:1e:91:57:4a:a9:1a:08:31:e1:44:27:bf:2b: 69:66:9e:6c:55:44:16:9d:b3:7b:56:7c:9c:77:2c: 55:8c:c3:59:c2:24:2a:61:87:8d:7b:95:4d:ae:af: 96:6f:68:9a:99:3f:8e:3b:91:2f:ed:14:da:81:ac: 60:0b:11:a3:80:90:b3:09:04:51:5c:86:5a:ad:20: 25:e4:30:7c:3e:87:b0:7c:52:e2:2b:71:68:4c:59: 19:2e:20:e0:e0:5a:78:7b:3c:45:bb:6a:1c:54:ca: 39:70:db:46:42:30:19:41:45:fc:5a:b2:63:71:33: 15:b0:a3:6d:3e:68:5c:20:90:30:38:c6:51:7f:00: 30:12:16:7d:af:6c:fb:2c:d0:f6:e3:33:53:f0:c0: cf:c9:c0:b8:cd:ef:39:dc:03:c2:0f:89:23:a6:16: df:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:5F:9C:70:57:FE:3A:FE:81:55:7C:2A:E7:8A:9D:AF:88:D0:6B:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/cb2a4200-7976-329a-8820-412eb82b7286.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.70.111.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b9:4f:e7:da:fd:39:76:ee:e7:2b:5c:08:68:f7:9c:5a:40:06: 12:51:27:99:02:83:e7:82:50:9f:ec:30:55:43:dc:ff:8e:bd: 32:29:f7:be:0d:da:7c:10:0c:ce:8e:aa:4c:40:bb:78:41:2d: 4e:e5:d2:aa:49:98:00:58:b0:c8:1e:17:8c:32:50:ed:11:ad: fb:82:df:53:bd:54:b5:39:07:ee:f1:bd:37:3c:d6:52:49:1b: 56:4c:8d:7e:13:4c:af:e5:28:59:94:f3:04:bc:6d:d5:75:14: 1f:60:b3:16:a9:24:ed:e0:02:f9:28:d3:ca:54:24:4e:8d:7c: 68:1f:24:39:9d:c3:15:4b:47:ff:85:7a:cb:83:24:6c:04:c6: c5:15:5c:48:eb:96:09:1f:71:32:cf:6a:c7:d0:87:bc:28:ba: 0b:46:d2:ce:e7:c7:ec:7f:4a:fc:24:80:4b:a4:8f:40:63:83: 9b:af:7b:51:ea:98:ce:94:89:96:8b:e9:d2:84:b3:be:e1:1a: 1e:69:db:c6:55:03:89:5d:78:fc:b0:a2:56:ae:a7:a2:09:de: 6f:bc:4b:e1:9a:4c:f1:70:72:f9:0e:69:7c:59:62:1e:bf:72: 94:db:3c:2b:76:ba:70:da:17:8b:cd:14:9f:38:38:5a:d4:14: 82:8b:ed:3d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7y53fqJ8KXVGVzCJAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDgyNTAxMDAxMloXDTI2MTEyMzAyMDAxMlowLzEtMCsGA1UEAxMk ZWJhZjYzMTctMzNhNC00Y2FkLWI0YTItNDE5MGJjMTk3YzM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoqXZCNlLue1Y77dexKjMAi9gONzGOaD4VcZs fMY7qjZWjmFAcUCim4nb34c+r5dQ/VAjmSncMeV7AzC7DM9M1I0177d8sCu8Rpec SYiw9cxwCspblw6AiQCG9R6RV0qpGggx4UQnvytpZp5sVUQWnbN7VnycdyxVjMNZ wiQqYYeNe5VNrq+Wb2iamT+OO5Ev7RTagaxgCxGjgJCzCQRRXIZarSAl5DB8Poew fFLiK3FoTFkZLiDg4Fp4ezxFu2ocVMo5cNtGQjAZQUX8WrJjcTMVsKNtPmhcIJAw OMZRfwAwEhZ9r2z7LND24zNT8MDPycC4ze853APCD4kjphbffwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGdfnHBX/jr+gVV8KueKna+I0GtGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvY2IyYTQyMDAtNzk3Ni0z MjlhLTg4MjAtNDEyZWI4MmI3Mjg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEZvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALlP59r9OXbu5ytcCGj3nFpABhJRJ5kCg+eCUJ/sMFVD3P+OvTIp974N 2nwQDM6OqkxAu3hBLU7l0qpJmABYsMgeF4wyUO0RrfuC31O9VLU5B+7xvTc81lJJ G1ZMjX4TTK/lKFmU8wS8bdV1FB9gsxapJO3gAvko08pUJE6NfGgfJDmdwxVLR/+F esuDJGwExsUVXEjrlgkfcTLPasfQh7wougtG0s7nx+x/SvwkgEukj0Bjg5uve1Hq mM6UiZaL6dKEs77hGh5p28ZVA4ldePywolaup6IJ3m+8S+GaTPFwcvkOaXxZYh6/ cpTbPCt2unDaF4vNFJ84OFrUFIKL7T0= -----END CERTIFICATE-----Generated at Sun Sep 20 16:03:59 2026 by rpki-client