$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5a95a405-f2a3-3033-b746-b09b7eb542d4.roa File: 5a95a405-f2a3-3033-b746-b09b7eb542d4.roa (raw, json) Hash identifier: 8JJgb19E6SNC8CliC+Cd01uti66tQ2UUp4kly8bNQsQ= Subject key identifier: B1:21:F3:CA:45:F2:59:D8:1A:C3:F6:F3:24:8F:12:99:DD:B4:D8:70 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584E4824AE333350502FE5E12B00 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5a95a405-f2a3-3033-b746-b09b7eb542d4.roa Signing time: Wed 24 Jun 2026 21:00:12 +0000 ROA not before: Wed 24 Jun 2026 21:00:12 +0000 ROA not after: Tue 22 Sep 2026 21:00:12 +0000 asID: 13335 IP address blocks: 172.71.143.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Jul 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:48:24:ae:33:33:50:50:2f:e5:e1:2b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Jun 24 21:00:12 2026 GMT Not After : Sep 22 21:00:12 2026 GMT Subject: CN=eb5bca99-5230-4bb7-a90c-09d90c11f01a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:81:4f:e6:46:9e:30:f3:25:6e:f6:87:96:c8: 32:ba:24:bb:2b:40:49:39:65:df:d3:ee:b3:bf:83: ef:47:28:da:26:6f:cd:92:98:f6:3a:9a:27:c1:ee: 46:5c:84:13:c5:46:da:62:cc:f6:04:55:33:56:8b: b8:86:54:3a:da:d3:91:87:5c:a3:7b:50:91:39:4e: ce:db:72:ba:f7:2b:82:df:e8:a9:79:a2:1e:88:d3: cb:b7:e0:ae:9b:f5:c6:73:b7:68:43:4d:56:bd:b5: 4f:44:6b:27:80:c2:bd:7f:94:7e:39:bf:6e:e5:51: 51:2f:e0:a4:07:8e:fd:01:45:cf:ff:ba:5c:99:5d: df:1d:21:bd:ee:eb:c6:df:b6:da:09:f6:13:59:c5: 00:51:c2:96:59:1f:89:71:82:f7:28:96:8f:af:f7: c2:6a:68:ff:0f:3b:aa:87:fa:41:b8:0f:83:05:22: 74:da:08:2b:28:21:08:8e:83:fa:5f:14:79:22:20: f9:b3:bb:00:8b:c1:6b:3a:67:91:0c:16:31:ee:0f: c0:7a:c2:ef:6a:30:54:f9:e5:4e:31:70:d8:31:8f: 3e:19:55:5a:93:50:55:43:da:9d:e9:fa:db:0d:90: 33:9e:d8:db:13:d9:b0:8f:d4:3f:8a:a3:4e:63:78: 83:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:21:F3:CA:45:F2:59:D8:1A:C3:F6:F3:24:8F:12:99:DD:B4:D8:70 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5a95a405-f2a3-3033-b746-b09b7eb542d4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.71.143.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:46:df:50:64:1a:7a:ae:af:d9:f4:d1:b2:c5:16:bf:d9:82: 3a:50:eb:48:4f:c3:15:a1:70:e0:2b:af:cb:14:ed:f3:53:1d: c0:82:76:d4:78:c8:bd:f4:db:00:13:9c:2d:fa:64:fd:6c:e5: 04:6c:35:28:c3:30:d5:10:59:a3:59:12:b1:ea:f1:74:c9:49: 08:cd:50:0f:56:07:8a:5b:25:69:01:08:5f:19:6b:0a:9c:3d: 54:6c:bf:2c:32:4f:c3:21:91:fc:c7:36:cc:38:79:e8:f0:c3: d8:23:4b:a4:ba:47:b8:20:90:8d:9d:8a:aa:41:30:0b:1f:34: 05:ad:7f:ba:94:39:7a:f6:0e:6f:44:59:8e:bb:81:c7:62:6d: 59:3b:2a:c1:a9:77:61:d2:45:8d:f9:68:10:56:ba:83:76:7e: c7:73:5f:2e:f6:a1:08:eb:f0:f5:67:ee:13:5a:b9:89:dd:5c: cb:ca:44:02:89:e0:b4:33:b9:03:86:be:e5:f5:40:45:70:0e: 5d:87:83:99:ac:bb:34:52:86:de:0c:53:ae:2b:99:25:fc:af: 21:bd:51:ea:e7:22:d5:12:fc:e7:dc:06:bb:28:38:8c:68:a5: 35:e9:32:ba:da:ec:21:ff:08:de:e6:29:c4:63:66:af:8e:0d: 79:93:f5:9b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5IJK4zM1BQL+XhKwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDYyNDIxMDAxMloXDTI2MDkyMjIxMDAxMlowLzEtMCsGA1UEAxMk ZWI1YmNhOTktNTIzMC00YmI3LWE5MGMtMDlkOTBjMTFmMDFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA24FP5kaeMPMlbvaHlsgyuiS7K0BJOWXf0+6z v4PvRyjaJm/Nkpj2Oponwe5GXIQTxUbaYsz2BFUzVou4hlQ62tORh1yje1CROU7O 23K69yuC3+ipeaIeiNPLt+Cum/XGc7doQ01WvbVPRGsngMK9f5R+Ob9u5VFRL+Ck B479AUXP/7pcmV3fHSG97uvG37baCfYTWcUAUcKWWR+JcYL3KJaPr/fCamj/Dzuq h/pBuA+DBSJ02ggrKCEIjoP6XxR5IiD5s7sAi8FrOmeRDBYx7g/AesLvajBU+eVO MXDYMY8+GVVak1BVQ9qd6frbDZAzntjbE9mwj9Q/iqNOY3iDHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLEh88pF8lnYGsP28ySPEpndtNhwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNWE5NWE0MDUtZjJhMy0z MDMzLWI3NDYtYjA5YjdlYjU0MmQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEePMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIxG31BkGnqur9n00bLFFr/ZgjpQ60hPwxWhcOArr8sU7fNTHcCCdtR4 yL302wATnC36ZP1s5QRsNSjDMNUQWaNZErHq8XTJSQjNUA9WB4pbJWkBCF8Zawqc PVRsvywyT8MhkfzHNsw4eejww9gjS6S6R7ggkI2diqpBMAsfNAWtf7qUOXr2Dm9E WY67gcdibVk7KsGpd2HSRY35aBBWuoN2fsdzXy72oQjr8PVn7hNauYndXMvKRAKJ 4LQzuQOGvuX1QEVwDl2Hg5msuzRSht4MU64rmSX8ryG9UernItUS/OfcBrsoOIxo pTXpMrra7CH/CN7mKcRjZq+ODXmT9Zs= -----END CERTIFICATE-----Generated at Thu Jul 23 20:29:31 2026 by rpki-client