$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/aafb9f44-97f7-373c-a608-7201b7934395.roa File: aafb9f44-97f7-373c-a608-7201b7934395.roa (raw, json) Hash identifier: 01QuFfkygvMNlO7jlKGECWrGykk9XsNs6vFCcwh+GXw= Subject key identifier: FA:5C:6D:A4:6C:93:25:93:CD:04:6A:2A:FE:76:AA:4F:21:47:80:28 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584E5084AE21FB71978AE012F100 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/aafb9f44-97f7-373c-a608-7201b7934395.roa Signing time: Sat 27 Jun 2026 21:00:12 +0000 ROA not before: Sat 27 Jun 2026 21:00:12 +0000 ROA not after: Fri 25 Sep 2026 21:00:12 +0000 asID: 13335 IP address blocks: 172.71.243.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Jul 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:50:84:ae:21:fb:71:97:8a:e0:12:f1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Jun 27 21:00:12 2026 GMT Not After : Sep 25 21:00:12 2026 GMT Subject: CN=a9d9dc60-061f-4755-ad2a-2c56adf7f530 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:97:6c:ef:fe:56:44:08:81:7f:87:30:72:ca: 29:4a:22:3f:a4:58:7d:9e:bf:54:94:a7:25:67:2a: d2:4b:89:bc:ee:6a:b2:dc:3b:bb:2f:71:13:5e:47: c5:50:15:e5:ce:85:d1:62:d8:9c:81:f2:b3:df:33: 32:0c:d5:ff:b0:5d:90:c6:be:82:4e:de:dd:21:65: 78:c3:7d:e0:30:bd:5b:1c:96:08:a1:b7:a5:29:ed: 5f:14:57:af:cf:aa:02:da:fc:e4:a2:35:0a:cc:01: 79:7b:71:81:2b:05:91:da:4d:5d:15:d2:b5:97:84: 71:a0:02:8a:00:a0:c5:bf:79:79:26:6c:92:68:ee: 5c:28:87:2f:d9:ec:72:02:db:4c:b3:91:53:8e:1c: b1:a3:73:e9:7d:d0:6c:aa:a3:1a:34:dc:48:db:cc: 9e:01:4b:1a:78:cb:97:c3:f3:9f:67:88:70:32:5f: 94:69:66:78:d9:0b:61:0b:0b:cd:ef:19:5a:48:b7: 2e:67:9f:b0:e6:82:2c:5a:8c:12:34:96:21:62:48: 2a:69:34:f2:76:e1:f5:b0:e5:50:80:54:d7:2a:30: ff:d3:af:1f:02:f0:30:6d:36:fc:39:13:d9:8a:cd: 57:c5:47:e7:97:9f:22:80:c1:60:1b:31:42:7d:46: 21:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:5C:6D:A4:6C:93:25:93:CD:04:6A:2A:FE:76:AA:4F:21:47:80:28 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/aafb9f44-97f7-373c-a608-7201b7934395.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.71.243.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:f1:17:55:43:38:95:40:e0:6b:c3:88:4d:f4:35:51:38:0d: 19:85:80:9a:ba:9c:d6:a2:df:96:24:a8:e5:72:99:07:87:5a: b5:8b:96:e5:d8:8e:71:17:00:54:3a:2c:e8:c0:4b:52:c7:27: 27:b4:eb:6a:e6:06:8a:21:10:7e:84:3d:15:6c:c6:9b:94:4e: 47:aa:08:6c:15:01:d2:f5:e4:24:72:81:f8:da:cb:f4:44:e4: ec:53:a6:51:16:2e:c1:28:7c:ae:08:82:0c:6e:39:2f:36:5a: 07:d3:80:8b:d7:3d:b0:9e:3b:11:26:64:f9:cc:92:eb:60:57: 7e:6e:fb:49:15:8e:da:11:d9:8c:70:e5:f0:f9:05:04:7c:c5: 64:96:0a:f6:bd:3a:76:e9:78:2e:12:5f:3b:5c:6c:01:43:2a: e2:a0:20:1f:41:2c:96:1e:50:31:9e:fa:74:69:47:04:ad:bb: 15:cb:91:83:9a:5d:f4:ce:8e:81:e4:e4:a2:99:33:11:12:3d: b9:54:15:33:77:30:2e:dc:63:9f:81:9c:88:31:e9:e9:f3:6c: e9:7d:9c:6f:04:9c:af:5d:8b:2f:6b:41:d9:b1:ce:21:ab:41: 86:25:c1:14:82:80:29:0b:ec:2a:30:b4:b8:15:12:c2:a6:ce: 2d:35:c5:af -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5QhK4h+3GXiuAS8QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDYyNzIxMDAxMloXDTI2MDkyNTIxMDAxMlowLzEtMCsGA1UEAxMk YTlkOWRjNjAtMDYxZi00NzU1LWFkMmEtMmM1NmFkZjdmNTMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Zds7/5WRAiBf4cwcsopSiI/pFh9nr9UlKcl ZyrSS4m87mqy3Du7L3ETXkfFUBXlzoXRYticgfKz3zMyDNX/sF2Qxr6CTt7dIWV4 w33gML1bHJYIobelKe1fFFevz6oC2vzkojUKzAF5e3GBKwWR2k1dFdK1l4RxoAKK AKDFv3l5JmySaO5cKIcv2exyAttMs5FTjhyxo3PpfdBsqqMaNNxI28yeAUsaeMuX w/OfZ4hwMl+UaWZ42QthCwvN7xlaSLcuZ5+w5oIsWowSNJYhYkgqaTTyduH1sOVQ gFTXKjD/068fAvAwbTb8ORPZis1XxUfnl58igMFgGzFCfUYhjQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPpcbaRskyWTzQRqKv52qk8hR4AoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvYWFmYjlmNDQtOTdmNy0z NzNjLWE2MDgtNzIwMWI3OTM0Mzk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEfzMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHHxF1VDOJVA4GvDiE30NVE4DRmFgJq6nNai35YkqOVymQeHWrWLluXY jnEXAFQ6LOjAS1LHJye062rmBoohEH6EPRVsxpuUTkeqCGwVAdL15CRygfjay/RE 5OxTplEWLsEofK4IggxuOS82WgfTgIvXPbCeOxEmZPnMkutgV35u+0kVjtoR2Yxw 5fD5BQR8xWSWCva9OnbpeC4SXztcbAFDKuKgIB9BLJYeUDGe+nRpRwStuxXLkYOa XfTOjoHk5KKZMxESPblUFTN3MC7cY5+BnIgx6enzbOl9nG8EnK9diy9rQdmxziGr QYYlwRSCgCkL7CowtLgVEsKmzi01xa8= -----END CERTIFICATE-----Generated at Thu Jul 23 20:29:25 2026 by rpki-client