$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/3a9f2315-a087-31cb-9143-a5c640258af9.roa File: 3a9f2315-a087-31cb-9143-a5c640258af9.roa (raw, json) Hash identifier: 5pdDOuWjs3ybxLiqVKr4z8kDSuJWTItfwuKH3FBWzJY= Subject key identifier: 02:F5:54:5B:CF:84:07:75:B2:FB:3B:86:F4:29:3E:FF:12:D9:87:38 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584E640FD4C8AA0B6E327A08C300 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/3a9f2315-a087-31cb-9143-a5c640258af9.roa Signing time: Sat 04 Jul 2026 21:00:12 +0000 ROA not before: Sat 04 Jul 2026 21:00:12 +0000 ROA not after: Fri 02 Oct 2026 21:00:12 +0000 asID: 14789 IP address blocks: 172.71.225.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Jul 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:64:0f:d4:c8:aa:0b:6e:32:7a:08:c3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Jul 4 21:00:12 2026 GMT Not After : Oct 2 21:00:12 2026 GMT Subject: CN=cae6d01b-bf82-4595-92d8-d5619abae1b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:8c:4d:1d:f8:9a:b9:e9:c3:24:d4:c8:76:c2: f7:d6:5f:4a:76:07:5b:c7:3e:19:27:37:e4:84:6b: c5:73:72:d3:09:92:dd:ec:88:58:42:ca:b7:05:2f: ab:fd:79:e6:52:bd:9e:d3:e4:3a:11:2a:87:86:41: 9f:c2:fc:da:37:da:1f:9e:6a:16:b0:15:9e:a2:17: 66:71:d7:75:84:36:f0:2f:c9:11:57:c5:64:5d:cd: 23:38:60:19:0b:66:30:13:6f:83:cf:88:fe:4a:9a: af:4a:9e:09:ae:3d:0e:f5:cc:f7:62:3e:9a:64:5a: 71:bf:b0:5d:4b:b0:73:fa:77:f3:8a:33:5c:6d:ac: b2:53:7b:9b:10:3c:05:91:e6:eb:76:69:30:3d:c9: ba:29:75:c4:8e:9d:26:8a:24:a2:80:38:b2:61:55: 0a:45:22:fd:02:3a:be:d0:1a:28:f6:69:ac:bc:cc: df:54:65:46:1c:85:93:f1:07:b1:4d:85:8d:79:1f: d7:19:54:67:c7:29:b5:3d:d7:bc:d7:3e:59:45:1a: 62:8f:42:ec:e9:b3:ba:02:9b:c4:4c:d8:bc:7c:bd: 85:d5:b6:fb:3c:22:08:cd:fc:b2:b1:fe:7e:07:6f: d8:54:9c:56:dc:b7:ce:96:53:82:9f:a7:45:6a:83: 29:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:F5:54:5B:CF:84:07:75:B2:FB:3B:86:F4:29:3E:FF:12:D9:87:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/3a9f2315-a087-31cb-9143-a5c640258af9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.71.225.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:89:76:b1:ac:d1:c1:4a:b1:27:a0:8b:94:79:e8:22:63:0a: 28:e8:88:4e:97:88:a1:a8:42:ab:05:2c:7d:f6:e9:39:d4:63: 47:d5:98:68:7b:f9:f6:f3:79:41:08:e4:0a:02:9f:35:c1:2d: c2:54:03:61:80:b4:89:44:b9:94:7c:4b:45:71:05:3a:00:fe: 18:e8:be:53:99:cd:38:49:28:e4:06:3f:b8:2b:58:58:f7:db: 4e:09:d7:9c:59:81:16:11:ae:c8:ae:eb:fb:1e:4e:37:e2:34: 61:60:43:cf:f7:3e:1a:67:c8:fc:16:d4:2d:ff:45:47:94:b3: 75:b9:db:07:24:44:88:ac:ce:46:19:e3:bd:bf:bf:e9:60:87: 20:1a:49:31:e5:38:89:32:08:51:16:13:56:a1:3e:31:3b:06: 5c:9d:9c:a5:a2:4e:df:4b:43:a5:df:55:c8:19:ed:95:5a:07: 3a:aa:3a:f9:45:0d:6b:e5:3b:50:8b:3b:4d:c8:38:2a:83:19: e3:53:29:67:8e:cb:8f:57:da:75:69:a2:79:63:7d:34:28:87: 41:db:ac:f2:4c:27:3f:03:50:04:7a:7d:98:03:ce:c4:c6:b7: a3:fe:15:c4:17:61:48:2c:9f:26:4e:a9:2b:25:46:4b:a6:07: 22:9e:a4:f7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5kD9TIqgtuMnoIwwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDcwNDIxMDAxMloXDTI2MTAwMjIxMDAxMlowLzEtMCsGA1UEAxMk Y2FlNmQwMWItYmY4Mi00NTk1LTkyZDgtZDU2MTlhYmFlMWIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAioxNHfiauenDJNTIdsL31l9Kdgdbxz4ZJzfk hGvFc3LTCZLd7IhYQsq3BS+r/XnmUr2e0+Q6ESqHhkGfwvzaN9ofnmoWsBWeohdm cdd1hDbwL8kRV8VkXc0jOGAZC2YwE2+Dz4j+SpqvSp4Jrj0O9cz3Yj6aZFpxv7Bd S7Bz+nfzijNcbayyU3ubEDwFkebrdmkwPcm6KXXEjp0miiSigDiyYVUKRSL9Ajq+ 0Boo9mmsvMzfVGVGHIWT8QexTYWNeR/XGVRnxym1Pde81z5ZRRpij0Ls6bO6ApvE TNi8fL2F1bb7PCIIzfyysf5+B2/YVJxW3LfOllOCn6dFaoMpuwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAL1VFvPhAd1svs7hvQpPv8S2Yc4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvM2E5ZjIzMTUtYTA4Ny0z MWNiLTkxNDMtYTVjNjQwMjU4YWY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEfhMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGuJdrGs0cFKsSegi5R56CJjCijoiE6XiKGoQqsFLH326TnUY0fVmGh7 +fbzeUEI5AoCnzXBLcJUA2GAtIlEuZR8S0VxBToA/hjovlOZzThJKOQGP7grWFj3 204J15xZgRYRrsiu6/seTjfiNGFgQ8/3PhpnyPwW1C3/RUeUs3W52wckRIiszkYZ 472/v+lghyAaSTHlOIkyCFEWE1ahPjE7BlydnKWiTt9LQ6XfVcgZ7ZVaBzqqOvlF DWvlO1CLO03IOCqDGeNTKWeOy49X2nVponljfTQoh0HbrPJMJz8DUAR6fZgDzsTG t6P+FcQXYUgsnyZOqSslRkumByKepPc= -----END CERTIFICATE-----Generated at Thu Jul 23 20:30:33 2026 by rpki-client