$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/aa0cc9d0-de42-39df-90be-776c39262fb4.roa File: aa0cc9d0-de42-39df-90be-776c39262fb4.roa (raw, json) Hash identifier: 7PmyFoQEVyNeP8ZRNaY1vKvJfErq+0LEaRoYkuFdEeM= Subject key identifier: CE:33:3C:52:25:52:DE:4B:5E:00:BE:D7:DD:7B:2E:24:F2:72:27:E5 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584F497F70031765223E86990600 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/aa0cc9d0-de42-39df-90be-776c39262fb4.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 13335 IP address blocks: 172.71.196.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7f:70:03:17:65:22:3e:86:99:06:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=e614fb6b-c1e6-41a6-855d-c6925ec82a3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:69:0d:e2:ed:d7:b0:31:e1:c2:19:60:ac:c3: 40:6d:85:1e:4d:10:cd:77:f4:8a:70:2d:3e:5c:c0: bc:04:f9:f3:17:fe:4f:de:27:0b:28:ed:27:87:79: 39:51:5b:44:a4:b8:8e:5a:f2:b4:0f:c4:a6:3f:b3: 77:ac:cf:3b:4d:cd:92:6e:2b:61:15:3e:ac:c9:13: 7a:c1:ac:19:ec:15:63:6b:e8:29:54:c2:c3:a8:c4: 71:a2:ee:67:6e:36:d4:51:45:a2:7f:09:6f:14:ac: 72:78:8b:7b:fb:75:4c:87:8a:e3:75:3a:9d:de:72: ce:82:b5:21:22:8b:e6:a7:6c:1e:f2:2f:20:94:3b: ec:9c:3d:63:cb:0f:1b:6b:2f:22:99:b8:74:cd:da: 29:57:7d:b6:8f:81:e4:db:8a:ea:6a:4c:17:db:4b: b0:96:ff:ef:08:e6:96:38:3e:c0:33:3d:13:f9:53: 43:a9:65:32:d8:38:82:ed:ae:b7:81:36:e5:f5:4a: 09:3a:b5:dd:16:1e:5e:6f:2a:72:6c:3a:0d:1c:f9: a9:cd:ac:1e:ca:ec:e5:88:ab:15:a5:d2:b5:fe:6c: 2d:81:7c:31:e0:d3:b1:d5:1f:8f:87:a7:b4:ae:d4: 73:07:82:a5:d3:27:5b:7f:7e:bb:ce:65:b9:8d:63: 20:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:33:3C:52:25:52:DE:4B:5E:00:BE:D7:DD:7B:2E:24:F2:72:27:E5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/aa0cc9d0-de42-39df-90be-776c39262fb4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.71.196.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:15:00:4c:df:7c:ea:e9:87:78:b6:93:74:74:92:a4:52:ea: 0d:5e:86:5a:53:70:7b:64:27:a7:37:5d:9d:37:77:42:4c:b4: cf:96:af:03:c7:43:4c:79:a7:45:bd:5f:0a:db:d5:18:26:4f: 3a:c0:3f:2b:b1:c8:9d:81:a0:7d:9a:5e:85:30:0f:05:a2:7c: bf:45:ca:ba:68:2d:9e:31:8e:2b:4a:c8:0b:82:af:5f:7a:69: e3:13:a9:3e:9f:ac:25:88:49:3d:7d:73:05:93:90:b6:e6:e8: c0:4f:5c:e9:15:a7:cf:e1:9e:d8:b9:5e:e1:e6:cc:23:34:90: bf:fa:2e:6c:32:84:33:90:31:6f:0e:8b:10:c0:77:6d:61:1d: 7e:25:f3:06:37:c7:8d:a8:1b:58:66:88:61:3e:7b:46:cb:6e: 23:a5:dd:ee:f0:23:b1:77:92:38:a2:c3:22:7e:a7:23:22:b3: 85:46:2f:d8:2c:4d:6a:b7:1a:2d:a7:7c:4a:00:25:ed:a8:3b: 60:96:1c:04:cd:ea:0f:b3:d1:7e:43:11:de:97:40:d3:22:2d: 3a:13:f9:70:f8:94:50:10:3f:7a:84:62:76:42:37:e9:a2:fc: 59:90:8a:8c:10:14:dd:17:d6:91:b9:87:73:f1:7d:0c:62:19: 7b:ac:d7:47 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jf3ADF2UiPoaZBgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZTYxNGZiNmItYzFlNi00MWE2LTg1NWQtYzY5MjVlYzgyYTNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6WkN4u3XsDHhwhlgrMNAbYUeTRDNd/SKcC0+ XMC8BPnzF/5P3icLKO0nh3k5UVtEpLiOWvK0D8SmP7N3rM87Tc2SbithFT6syRN6 wawZ7BVja+gpVMLDqMRxou5nbjbUUUWifwlvFKxyeIt7+3VMh4rjdTqd3nLOgrUh Iovmp2we8i8glDvsnD1jyw8bay8imbh0zdopV322j4Hk24rqakwX20uwlv/vCOaW OD7AMz0T+VNDqWUy2DiC7a63gTbl9UoJOrXdFh5ebypybDoNHPmpzaweyuzliKsV pdK1/mwtgXwx4NOx1R+Ph6e0rtRzB4Kl0ydbf367zmW5jWMgqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM4zPFIlUt5LXgC+1917LiTyciflMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvYWEwY2M5ZDAtZGU0Mi0z OWRmLTkwYmUtNzc2YzM5MjYyZmI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEfEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAAVAEzffOrph3i2k3R0kqRS6g1ehlpTcHtkJ6c3XZ03d0JMtM+WrwPH Q0x5p0W9Xwrb1RgmTzrAPyuxyJ2BoH2aXoUwDwWifL9FyrpoLZ4xjitKyAuCr196 aeMTqT6frCWIST19cwWTkLbm6MBPXOkVp8/hnti5XuHmzCM0kL/6LmwyhDOQMW8O ixDAd21hHX4l8wY3x42oG1hmiGE+e0bLbiOl3e7wI7F3kjiiwyJ+pyMis4VGL9gs TWq3Gi2nfEoAJe2oO2CWHATN6g+z0X5DEd6XQNMiLToT+XD4lFAQP3qEYnZCN+mi /FmQiowQFN0X1pG5h3PxfQxiGXus10c= -----END CERTIFICATE-----Generated at Sat Oct 10 12:59:13 2026 by rpki-client