$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/e4cdd618-ab61-321e-9f4d-6184ac67234f.roa File: e4cdd618-ab61-321e-9f4d-6184ac67234f.roa (raw, json) Hash identifier: 8tpxzxqyt9iuyU3eJi3qs9ndFpgcq6xVK8barTUSFhw= Subject key identifier: 76:F0:A5:26:73:66:D5:E5:16:F9:6C:E8:62:FE:3B:FD:56:07:2A:A4 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584F497F71A13C3EA9E603795441 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/e4cdd618-ab61-321e-9f4d-6184ac67234f.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 13335 IP address blocks: 172.71.188.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7f:71:a1:3c:3e:a9:e6:03:79:54:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=8e46a5fa-7591-4489-befb-646c5d7a301b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:ae:3f:66:18:d3:e7:a1:b9:3e:c9:dd:05:16: 64:d0:a3:de:57:f2:c9:0d:4b:4a:45:b4:f0:f5:76: 7a:de:72:00:1a:7f:56:19:02:91:87:9d:a6:b2:df: 8a:39:3f:c7:ba:b3:fa:40:f7:f8:3b:06:20:1e:91: 5a:53:2c:cf:64:ca:b5:1c:ac:32:4b:ea:cf:7d:bc: f4:e6:1b:7a:6a:80:54:ca:c4:77:cd:17:fd:67:e4: 1d:db:79:a4:d7:54:9d:24:cf:df:55:dd:c4:0a:21: d9:c1:3e:99:c4:3c:ac:e0:99:27:92:1b:55:f9:6e: 5f:2d:03:22:98:41:44:11:99:00:29:a0:3d:07:6b: 02:b2:5e:2a:de:70:57:11:21:9a:b0:b8:48:99:4a: 10:cd:c2:3a:40:17:69:0b:73:2c:04:c0:eb:1b:aa: ad:c6:47:ee:d5:4e:c8:a5:a4:27:14:37:5b:3b:a7: 27:03:f1:c3:3a:5d:d9:6e:8b:e9:88:2d:a9:1b:47: 51:3f:d3:1c:2f:32:16:15:9d:9c:aa:0b:f0:3a:58: fc:b0:d4:b2:c8:dd:36:18:34:c9:28:e3:b0:b6:3f: 2a:61:f0:fb:4b:76:4c:80:fe:40:f3:3c:7f:2a:eb: 37:48:8f:8b:9f:7b:10:8b:94:7b:76:5b:88:1e:6e: b2:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:F0:A5:26:73:66:D5:E5:16:F9:6C:E8:62:FE:3B:FD:56:07:2A:A4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/e4cdd618-ab61-321e-9f4d-6184ac67234f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.71.188.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a3:bf:54:71:c4:75:8b:b3:4f:b0:ac:55:43:49:99:f5:8f:1c: 95:6d:5c:f9:af:1b:d8:f4:40:0c:c6:74:69:5c:fc:55:9d:52: 80:64:01:e0:8a:c8:13:8f:ad:01:03:34:d9:94:fd:f6:ef:71: 45:63:de:04:1e:01:bf:c7:11:a4:d4:03:e6:4b:f6:93:4b:ae: 35:83:49:9f:d2:d8:26:e5:38:7e:67:d8:32:fe:15:c9:8b:89: 48:ba:87:c8:bc:d1:fc:a8:44:f3:08:19:e1:dd:0a:4c:6a:36: ef:55:80:7c:9b:68:fb:67:c0:16:aa:37:c2:53:b0:04:de:77: 1d:83:a7:11:bc:c3:d5:9d:f7:a7:34:1d:17:f2:0c:19:f6:e4: 60:75:71:5c:78:43:a6:81:f5:b4:03:4d:3f:f4:bf:36:c6:0d: bc:2f:ab:1e:f8:10:06:4b:a6:f7:8b:ea:c4:56:b2:c4:12:27: ae:ac:41:b4:0d:4c:f3:46:1b:4a:ce:f4:a7:2c:cc:26:2a:3b: d6:1c:e6:9d:2a:30:c2:bb:9f:b4:24:e4:66:65:d1:9a:14:ee: 7d:d8:33:be:56:da:af:ee:8a:80:54:42:ee:12:06:eb:a6:e4: 3c:87:5c:85:e5:69:27:9f:5c:17:dd:de:fe:a1:03:13:7e:4f: cd:0e:99:0c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jf3GhPD6p5gN5VEEwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk OGU0NmE1ZmEtNzU5MS00NDg5LWJlZmItNjQ2YzVkN2EzMDFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkq4/ZhjT56G5PsndBRZk0KPeV/LJDUtKRbTw 9XZ63nIAGn9WGQKRh52mst+KOT/HurP6QPf4OwYgHpFaUyzPZMq1HKwyS+rPfbz0 5ht6aoBUysR3zRf9Z+Qd23mk11SdJM/fVd3ECiHZwT6ZxDys4JknkhtV+W5fLQMi mEFEEZkAKaA9B2sCsl4q3nBXESGasLhImUoQzcI6QBdpC3MsBMDrG6qtxkfu1U7I paQnFDdbO6cnA/HDOl3ZbovpiC2pG0dRP9McLzIWFZ2cqgvwOlj8sNSyyN02GDTJ KOOwtj8qYfD7S3ZMgP5A8zx/Kus3SI+Ln3sQi5R7dluIHm6y1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHbwpSZzZtXlFvls6GL+O/1WByqkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvZTRjZGQ2MTgtYWI2MS0z MjFlLTlmNGQtNjE4NGFjNjcyMzRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEe8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKO/VHHEdYuzT7CsVUNJmfWPHJVtXPmvG9j0QAzGdGlc/FWdUoBkAeCK yBOPrQEDNNmU/fbvcUVj3gQeAb/HEaTUA+ZL9pNLrjWDSZ/S2CblOH5n2DL+FcmL iUi6h8i80fyoRPMIGeHdCkxqNu9VgHybaPtnwBaqN8JTsATedx2DpxG8w9Wd96c0 HRfyDBn25GB1cVx4Q6aB9bQDTT/0vzbGDbwvqx74EAZLpveL6sRWssQSJ66sQbQN TPNGG0rO9KcszCYqO9Yc5p0qMMK7n7Qk5GZl0ZoU7n3YM75W2q/uioBUQu4SBuum 5DyHXIXlaSefXBfd3v6hAxN+T80OmQw= -----END CERTIFICATE-----Generated at Fri Oct 9 23:09:03 2026 by rpki-client