$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b5c29b16-b492-33e1-863d-370c23ab71e2.roa File: b5c29b16-b492-33e1-863d-370c23ab71e2.roa (raw, json) Hash identifier: i5CSr6C1cSJpZ8H+A7TIWG/hpDVhCx49KZQl/EP3uTM= Subject key identifier: 3E:D2:40:F0:A7:CA:9F:F3:4D:17:EB:AC:B3:BE:95:FA:74:09:9F:E2 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584E51E9ECC235DD9AFA796135C0 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b5c29b16-b492-33e1-863d-370c23ab71e2.roa Signing time: Sun 28 Jun 2026 09:00:11 +0000 ROA not before: Sun 28 Jun 2026 09:00:11 +0000 ROA not after: Sat 26 Sep 2026 09:00:11 +0000 asID: 13335 IP address blocks: 172.71.2.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Jul 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:51:e9:ec:c2:35:dd:9a:fa:79:61:35:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Jun 28 09:00:11 2026 GMT Not After : Sep 26 09:00:11 2026 GMT Subject: CN=af109e8d-2916-4171-b7e8-0d19b2a3810a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:29:b3:ce:44:9f:22:fe:81:51:9b:56:9b:4d: bd:b3:77:27:14:64:60:6e:89:5d:2b:5a:47:5f:39: dd:7d:18:d4:cc:03:51:4f:b4:c4:f4:fe:f7:73:34: 64:0e:24:a4:75:af:0c:b9:f7:1e:da:54:15:01:be: a5:85:6b:e7:82:9f:99:a4:ed:9b:ab:9f:fd:9a:1b: f8:b8:83:82:74:8a:23:e4:ee:a9:9f:73:ab:46:89: 7b:9c:5a:2a:13:4d:ec:a4:ee:48:0f:1b:5f:34:b8: f5:9d:f3:2d:a0:f1:45:da:7e:5d:5f:92:3d:7a:6d: 2e:fa:64:dd:be:7e:8c:ce:54:33:7f:26:dd:c5:53: 51:2f:4a:bf:b7:26:8c:a9:7e:4d:ba:a3:a8:c5:08: 9e:6f:84:6c:96:fb:a3:1f:af:76:20:e7:a6:f3:f8: 20:df:1c:81:f3:63:13:56:dc:41:e1:ea:31:46:3f: 35:0a:21:7f:2a:c9:ff:f1:a0:95:77:db:04:08:ac: 7c:39:77:b0:e9:2a:a3:da:77:2b:4b:b0:5a:85:c8: a2:87:c6:4a:b3:cb:f4:ed:e8:7f:26:4a:35:39:80: 71:cb:a7:9a:7e:40:a3:13:38:4a:00:76:d0:3a:a6: 9f:83:49:2f:6d:82:21:dd:90:00:5c:2b:95:a6:93: 11:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:D2:40:F0:A7:CA:9F:F3:4D:17:EB:AC:B3:BE:95:FA:74:09:9F:E2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b5c29b16-b492-33e1-863d-370c23ab71e2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.71.2.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:ae:47:c3:d5:d8:2f:43:d9:c6:6f:21:c3:67:15:0f:7e:a7: 72:89:25:c7:64:0a:cc:99:49:28:e1:0f:01:92:10:a0:90:42: ec:99:6e:d6:0b:ef:78:ea:83:95:a4:64:d0:25:ab:dc:0d:41: ea:06:66:1e:28:4e:44:23:f8:ab:d9:3c:fe:c4:02:ab:cd:f6: 61:0d:15:05:60:d8:43:3c:4c:6a:fb:55:d3:61:b5:50:63:cb: 02:9d:23:6f:eb:cf:4a:9e:64:e7:7a:90:5d:78:4a:83:3c:bd: 71:d3:0f:86:2a:46:30:b5:c6:e1:c7:a0:8f:ba:9a:7a:a8:6e: 82:d1:4b:4e:3f:f8:26:4e:5d:a9:b8:8e:6c:48:b0:13:b7:fc: fe:41:e1:4f:80:68:52:99:f8:e9:89:79:3e:97:c7:6e:69:8e: 37:f8:1e:2a:0e:5f:a8:40:be:bc:d6:f3:96:07:44:63:d1:79: f9:e8:43:8b:36:09:30:5c:69:4c:fe:ca:29:22:c5:f3:ce:c0: 2a:fd:69:ba:70:06:ec:5d:e4:a3:9e:49:e5:10:30:07:a9:f8: de:57:c8:86:ad:83:f9:bb:5c:84:23:f3:92:3f:de:e5:b7:ed: 27:72:db:26:aa:9d:3f:a7:72:d3:82:ce:45:cd:11:6e:22:ed: e8:f0:c0:f1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5R6ezCNd2a+nlhNcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDYyODA5MDAxMVoXDTI2MDkyNjA5MDAxMVowLzEtMCsGA1UEAxMk YWYxMDllOGQtMjkxNi00MTcxLWI3ZTgtMGQxOWIyYTM4MTBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjimzzkSfIv6BUZtWm029s3cnFGRgboldK1pH XzndfRjUzANRT7TE9P73czRkDiSkda8Mufce2lQVAb6lhWvngp+ZpO2bq5/9mhv4 uIOCdIoj5O6pn3OrRol7nFoqE03spO5IDxtfNLj1nfMtoPFF2n5dX5I9em0u+mTd vn6MzlQzfybdxVNRL0q/tyaMqX5NuqOoxQieb4RslvujH692IOem8/gg3xyB82MT VtxB4eoxRj81CiF/Ksn/8aCVd9sECKx8OXew6Sqj2ncrS7Bahciih8ZKs8v07eh/ Jko1OYBxy6eafkCjEzhKAHbQOqafg0kvbYIh3ZAAXCuVppMRIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD7SQPCnyp/zTRfrrLO+lfp0CZ/iMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvYjVjMjliMTYtYjQ5Mi0z M2UxLTg2M2QtMzcwYzIzYWI3MWUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEcCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAOuR8PV2C9D2cZvIcNnFQ9+p3KJJcdkCsyZSSjhDwGSEKCQQuyZbtYL 73jqg5WkZNAlq9wNQeoGZh4oTkQj+KvZPP7EAqvN9mENFQVg2EM8TGr7VdNhtVBj ywKdI2/rz0qeZOd6kF14SoM8vXHTD4YqRjC1xuHHoI+6mnqoboLRS04/+CZOXam4 jmxIsBO3/P5B4U+AaFKZ+OmJeT6Xx25pjjf4HioOX6hAvrzW85YHRGPRefnoQ4s2 CTBcaUz+yikixfPOwCr9abpwBuxd5KOeSeUQMAep+N5XyIatg/m7XIQj85I/3uW3 7Sdy2yaqnT+nctOCzkXNEW4i7ejwwPE= -----END CERTIFICATE-----Generated at Thu Jul 23 23:27:08 2026 by rpki-client