$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/fafb2955-a00f-3ffb-a04a-8a9f39dc7cb6.roa File: fafb2955-a00f-3ffb-a04a-8a9f39dc7cb6.roa (raw, json) Hash identifier: NkdktPlZvuX8KuDUvLvqIUy0Gm39hRUYNR8q49BWtfc= Subject key identifier: 82:B4:1E:07:31:CC:41:75:CE:A7:7F:ED:0E:A7:D5:91:BB:79:F8:9E Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584E51E9ECDCCAEEF60F21CB5A80 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/fafb2955-a00f-3ffb-a04a-8a9f39dc7cb6.roa Signing time: Sun 28 Jun 2026 09:00:11 +0000 ROA not before: Sun 28 Jun 2026 09:00:11 +0000 ROA not after: Sat 26 Sep 2026 09:00:11 +0000 asID: 13335 IP address blocks: 172.71.12.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Jul 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:51:e9:ec:dc:ca:ee:f6:0f:21:cb:5a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Jun 28 09:00:11 2026 GMT Not After : Sep 26 09:00:11 2026 GMT Subject: CN=dbcd73ce-88ca-488f-af95-bb3439a0ba8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:7c:3e:92:b1:2e:e9:2d:f1:94:df:37:30:07: b2:47:4a:16:08:04:1c:cb:3d:a0:70:b2:23:ec:3a: 07:b8:95:d9:39:26:0a:ab:12:0c:d6:95:50:ed:63: de:16:dc:18:54:d9:c0:0e:28:95:c6:6b:5d:89:c4: ae:89:ce:02:2c:e4:8c:4e:70:fa:f4:c9:4f:6a:9c: c7:85:ab:76:60:aa:39:74:cd:04:6a:f6:0c:fb:c1: 5b:2b:9d:18:12:54:41:17:9f:45:09:1b:e5:ad:f9: 0e:c3:5e:37:9d:54:0f:66:e4:f5:94:c5:b0:7d:94: 07:f8:9d:26:ff:36:5e:75:4b:a4:13:9a:30:03:83: a7:dd:83:03:76:96:28:c3:37:e1:89:d2:07:04:e3: 72:da:97:75:a0:42:6a:a3:87:37:19:ff:e9:8f:82: 05:2e:5b:eb:5a:f3:94:7a:58:56:ca:d7:30:ca:70: fc:9f:49:88:d5:a2:ad:d1:91:c8:1d:31:02:ef:b7: 0d:58:a8:28:5a:e5:3d:6a:de:0f:fb:ef:0a:1d:47: de:fc:88:4a:75:73:11:73:19:1e:5b:6a:26:33:cf: 39:65:7a:3c:c4:f3:51:3b:9a:e3:b0:23:2e:5d:00: dd:4b:04:20:61:51:21:92:dd:29:65:ba:e7:fb:e4: e0:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:B4:1E:07:31:CC:41:75:CE:A7:7F:ED:0E:A7:D5:91:BB:79:F8:9E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/fafb2955-a00f-3ffb-a04a-8a9f39dc7cb6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.71.12.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:f3:c7:21:d5:38:7e:49:7b:ef:c7:e9:56:b6:8f:19:f1:1b: e5:c2:5c:fb:1d:4f:af:1b:3d:b3:e4:22:bb:c4:00:48:08:a6: 2e:25:73:d9:c6:d5:66:d6:d1:02:2f:b2:5f:61:98:ff:79:b2: c4:1b:9f:62:a6:50:b6:ea:81:cc:1d:71:65:df:65:28:2e:d0: 12:89:6e:3b:9e:79:be:d6:b2:d3:60:54:0b:d7:86:ea:20:22: cb:86:4b:57:5f:5e:82:8b:88:cd:9a:c6:81:b9:2d:67:40:fb: dc:74:8b:e9:1e:8e:9d:c4:51:1b:2e:70:32:ea:c7:04:b5:c3: 64:b5:df:a9:e7:0c:26:c0:77:c0:bf:9d:63:b2:07:2d:53:75: 6c:81:e3:ed:fe:3d:df:d4:8f:c3:2c:11:d3:6d:eb:7a:cd:8b: 03:45:54:89:af:52:43:cf:20:1f:c8:3c:38:f1:0d:53:bd:80: b8:35:cc:38:eb:cf:ad:1f:dc:25:b9:5a:2b:67:5f:9e:80:60: 47:13:fb:83:7a:b6:d3:af:bc:b6:73:da:20:c3:a9:61:3e:a7: 27:18:a0:85:34:42:1d:dc:85:1f:d7:90:2f:ad:24:ad:f3:ef: 63:7c:84:c1:a6:4d:42:fb:fc:78:d3:7f:46:bf:d7:e6:c8:44: 1f:8f:3a:7a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5R6ezcyu72DyHLWoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDYyODA5MDAxMVoXDTI2MDkyNjA5MDAxMVowLzEtMCsGA1UEAxMk ZGJjZDczY2UtODhjYS00ODhmLWFmOTUtYmIzNDM5YTBiYThkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqXw+krEu6S3xlN83MAeyR0oWCAQcyz2gcLIj 7DoHuJXZOSYKqxIM1pVQ7WPeFtwYVNnADiiVxmtdicSuic4CLOSMTnD69MlPapzH hat2YKo5dM0EavYM+8FbK50YElRBF59FCRvlrfkOw143nVQPZuT1lMWwfZQH+J0m /zZedUukE5owA4On3YMDdpYowzfhidIHBONy2pd1oEJqo4c3Gf/pj4IFLlvrWvOU elhWytcwynD8n0mI1aKt0ZHIHTEC77cNWKgoWuU9at4P++8KHUfe/IhKdXMRcxke W2omM885ZXo8xPNRO5rjsCMuXQDdSwQgYVEhkt0pZbrn++TgUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIK0HgcxzEF1zqd/7Q6n1ZG7efieMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvZmFmYjI5NTUtYTAwZi0z ZmZiLWEwNGEtOGE5ZjM5ZGM3Y2I2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEcMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGHzxyHVOH5Je+/H6Va2jxnxG+XCXPsdT68bPbPkIrvEAEgIpi4lc9nG 1WbW0QIvsl9hmP95ssQbn2KmULbqgcwdcWXfZSgu0BKJbjueeb7WstNgVAvXhuog IsuGS1dfXoKLiM2axoG5LWdA+9x0i+kejp3EURsucDLqxwS1w2S136nnDCbAd8C/ nWOyBy1TdWyB4+3+Pd/Uj8MsEdNt63rNiwNFVImvUkPPIB/IPDjxDVO9gLg1zDjr z60f3CW5WitnX56AYEcT+4N6ttOvvLZz2iDDqWE+pycYoIU0Qh3chR/XkC+tJK3z 72N8hMGmTUL7/HjTf0a/1+bIRB+POno= -----END CERTIFICATE-----Generated at Fri Jul 24 04:04:44 2026 by rpki-client