$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/e998b096-5c78-3320-92d7-e0141a3efa3e.roa File: e998b096-5c78-3320-92d7-e0141a3efa3e.roa (raw, json) Hash identifier: ZhxXCGqliV/6QquQnguSjlZp6vNg1eQnVMR1GlBNB+8= Subject key identifier: 98:46:D4:02:C1:5E:7E:A7:E7:7D:A1:B6:FB:40:0A:A2:1C:6C:B2:00 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584E48249B5A7E7110D85D109D80 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/e998b096-5c78-3320-92d7-e0141a3efa3e.roa Signing time: Wed 24 Jun 2026 21:00:12 +0000 ROA not before: Wed 24 Jun 2026 21:00:12 +0000 ROA not after: Tue 22 Sep 2026 21:00:12 +0000 asID: 13335 IP address blocks: 172.71.140.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Jul 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:48:24:9b:5a:7e:71:10:d8:5d:10:9d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Jun 24 21:00:12 2026 GMT Not After : Sep 22 21:00:12 2026 GMT Subject: CN=1b6b8e3e-cc4a-42f1-b5a2-9bef0c43c8c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:c9:7f:4b:79:ea:a1:e4:08:ca:89:90:ed:97: 0e:83:37:21:2b:7f:6d:d2:79:92:f2:9e:07:af:55: d2:0a:6d:14:86:13:ad:21:02:1c:80:2a:c5:5d:40: a4:32:70:3d:4e:05:0f:c3:1b:72:72:5d:50:d6:5b: bd:fa:71:13:8b:2e:11:83:b0:43:68:a4:16:33:52: 58:01:d7:96:2e:d7:1d:8d:05:95:b1:3f:b1:3f:fe: 4b:33:7e:96:d9:e2:ac:3d:82:c5:5c:b3:ed:d6:b7: af:9a:8d:6a:23:91:76:62:a4:77:6b:90:00:f6:fa: 91:29:c3:24:1c:05:53:30:50:8c:46:d2:da:ed:48: 51:ce:f1:69:0d:bf:a8:1d:24:03:6e:e8:f2:85:e6: 17:f5:54:14:a3:52:0e:03:30:4c:44:23:74:5e:0b: 0b:b5:63:6a:3e:af:84:09:80:13:d8:08:40:b2:b9: e9:2f:df:6e:cf:ac:f4:49:24:46:3e:7f:6d:ea:61: 09:b5:57:7f:5a:e3:5e:ee:68:c7:e6:b5:6e:e8:43: cd:65:d3:07:b1:eb:d7:82:7a:35:75:cd:7e:bc:cc: 84:9c:26:b2:99:de:dd:75:16:ce:6f:b6:ba:e2:78: 4a:97:5e:0a:55:7d:46:4f:ab:aa:da:76:01:ff:36: 1f:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:46:D4:02:C1:5E:7E:A7:E7:7D:A1:B6:FB:40:0A:A2:1C:6C:B2:00 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/e998b096-5c78-3320-92d7-e0141a3efa3e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.71.140.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:c8:ec:f2:95:ad:ed:8b:d3:dc:65:a9:1a:88:54:7f:67:13: 34:13:6a:99:5c:78:39:58:35:a0:7b:3e:e8:b4:9e:e6:22:94: 9c:53:f8:54:53:68:ae:99:e2:d7:03:08:b9:5c:48:f1:ba:57: 1a:08:9e:6c:2b:de:80:e4:aa:48:30:ab:08:02:aa:5e:22:10: 4c:dc:a3:fd:e2:52:09:75:f1:bb:80:54:ad:5f:72:15:ac:b4: 21:0a:43:f8:eb:dd:49:95:ed:7c:dd:7d:68:e1:1e:ab:ff:09: d6:ab:b2:6e:4e:fa:fc:73:f0:1f:7d:4c:e7:5e:3a:15:d0:78: 01:22:1e:cd:ea:f6:77:c3:37:d0:bc:b2:2b:44:eb:eb:25:b0: d9:e3:1a:a9:cb:0f:fd:10:1b:af:3e:83:53:ff:1c:1f:3f:4d: e0:30:73:db:df:6b:25:98:51:3b:bb:98:16:a7:e4:71:3b:b8: f9:c5:fd:a6:28:f0:43:af:33:00:ea:d0:b2:eb:a0:6c:c8:a2: 67:12:5a:b9:18:c7:51:ba:fb:57:35:f1:6f:b9:47:44:9a:f2: bc:e0:7b:dc:23:92:3b:1e:08:17:be:1b:95:e0:8f:dd:27:65: 48:dc:57:d9:af:e9:94:7d:91:2b:a9:11:ba:ed:0c:07:13:bb: f6:64:b1:e8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5IJJtafnEQ2F0QnYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDYyNDIxMDAxMloXDTI2MDkyMjIxMDAxMlowLzEtMCsGA1UEAxMk MWI2YjhlM2UtY2M0YS00MmYxLWI1YTItOWJlZjBjNDNjOGMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAycl/S3nqoeQIyomQ7ZcOgzchK39t0nmS8p4H r1XSCm0UhhOtIQIcgCrFXUCkMnA9TgUPwxtycl1Q1lu9+nETiy4Rg7BDaKQWM1JY AdeWLtcdjQWVsT+xP/5LM36W2eKsPYLFXLPt1revmo1qI5F2YqR3a5AA9vqRKcMk HAVTMFCMRtLa7UhRzvFpDb+oHSQDbujyheYX9VQUo1IOAzBMRCN0XgsLtWNqPq+E CYAT2AhAsrnpL99uz6z0SSRGPn9t6mEJtVd/WuNe7mjH5rVu6EPNZdMHsevXgno1 dc1+vMyEnCaymd7ddRbOb7a64nhKl14KVX1GT6uq2nYB/zYfxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJhG1ALBXn6n532htvtACqIcbLIAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvZTk5OGIwOTYtNWM3OC0z MzIwLTkyZDctZTAxNDFhM2VmYTNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEeMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG/I7PKVre2L09xlqRqIVH9nEzQTaplceDlYNaB7Pui0nuYilJxT+FRT aK6Z4tcDCLlcSPG6VxoInmwr3oDkqkgwqwgCql4iEEzco/3iUgl18buAVK1fchWs tCEKQ/jr3UmV7XzdfWjhHqv/Cdarsm5O+vxz8B99TOdeOhXQeAEiHs3q9nfDN9C8 sitE6+slsNnjGqnLD/0QG68+g1P/HB8/TeAwc9vfayWYUTu7mBan5HE7uPnF/aYo 8EOvMwDq0LLroGzIomcSWrkYx1G6+1c18W+5R0Sa8rzge9wjkjseCBe+G5Xgj90n ZUjcV9mv6ZR9kSupEbrtDAcTu/Zkseg= -----END CERTIFICATE-----Generated at Thu Jul 23 20:22:27 2026 by rpki-client