$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/0ad3d610-d0da-36f4-aa76-65d7de6dc345.roa File: 0ad3d610-d0da-36f4-aa76-65d7de6dc345.roa (raw, json) Hash identifier: TEKyt81Y0uX+WsQX7CBUucPYYtyf0m8RStklLEXquNY= Subject key identifier: 53:42:16:77:03:0F:E2:BE:D9:11:A3:B7:75:5C:38:A0:C9:BC:0A:43 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584EE4233176623207D000245180 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/0ad3d610-d0da-36f4-aa76-65d7de6dc345.roa Signing time: Wed 19 Aug 2026 18:03:44 +0000 ROA not before: Wed 19 Aug 2026 18:03:44 +0000 ROA not after: Sat 27 Nov 2027 05:00:00 +0000 asID: 13335 IP address blocks: 172.65.224.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Sep 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e4:23:31:76:62:32:07:d0:00:24:51:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 19 18:03:44 2026 GMT Not After : Nov 27 05:00:00 2027 GMT Subject: CN=1793b4cf-09d4-4b24-9604-584a697933f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:f7:bf:41:4f:ee:fd:bb:10:cc:29:37:65:d6: 1e:ce:13:d4:8f:4a:23:e0:7d:ff:be:dc:a7:95:b6: cc:8b:b9:06:00:8e:33:6e:eb:31:8a:e8:d1:ec:25: c7:db:04:a7:25:cd:6b:e8:a9:a8:12:dc:81:58:5b: a9:49:28:55:87:81:57:8e:b3:bd:4a:39:b8:c4:69: 15:e1:da:99:75:3b:83:8b:e1:24:94:aa:72:f2:4c: 73:3c:ab:ed:54:d9:dc:57:ec:c5:74:30:ff:77:18: 8d:a1:a6:b1:2f:42:cb:94:f9:da:89:8e:51:f0:ca: 75:95:1d:4c:68:e8:0c:7a:74:8e:77:a2:14:e9:b7: 7d:d6:d5:ac:5f:91:a3:1c:73:08:3e:d4:55:03:ee: c9:c7:2f:16:3e:33:8b:25:4e:6c:f2:44:2e:2f:c9: 88:a2:07:2f:34:16:29:9c:1f:64:0a:40:14:eb:81: 0b:1a:57:ae:ad:0a:68:2d:01:8e:8b:ad:a2:81:ea: 45:c2:3f:3f:0e:03:b8:9a:38:23:25:04:14:5e:27: bc:68:df:62:ae:6e:3d:6b:ff:57:46:db:06:a3:9b: 92:71:45:d2:23:b6:95:99:44:01:35:dc:e1:e9:61: 76:17:dd:85:6c:9a:64:c4:d9:bc:88:8d:b0:49:36: 28:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:42:16:77:03:0F:E2:BE:D9:11:A3:B7:75:5C:38:A0:C9:BC:0A:43 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/0ad3d610-d0da-36f4-aa76-65d7de6dc345.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.65.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:a8:35:2b:80:c3:19:ed:e6:49:c6:5e:15:30:6d:fc:87:3b: d9:ec:70:26:fd:86:66:4f:28:6f:2b:24:5b:f7:6d:63:ac:ac: 69:f9:6b:fe:fe:47:de:6a:29:57:18:36:94:96:3e:4c:e9:90: 83:58:c0:ff:94:cc:6d:3b:10:cc:5b:d6:cd:43:2f:33:0b:a4: a2:17:88:cf:db:b3:45:4e:f9:9b:83:4b:cd:b0:ad:dc:fa:a4: b5:66:04:61:4c:fb:a8:94:23:08:df:55:4d:e0:3e:91:45:69: 25:6b:9c:a4:c9:56:6e:a0:50:9d:67:74:e7:4b:97:ff:8a:7a: 2c:b6:04:7c:7a:82:a0:78:f5:c2:b3:f7:c4:18:25:fd:30:7c: 6a:08:97:35:1f:aa:b4:6a:c5:c5:34:f8:34:f6:e8:ae:b8:7c: a1:7d:23:ff:82:01:23:ed:f2:92:e1:b4:86:0c:1c:fe:eb:a7: ff:27:5f:7d:73:1e:2b:76:66:bc:bc:6f:86:01:37:3b:b8:0a: 7e:ca:1d:be:19:9a:ae:74:e4:51:2c:08:82:86:c4:1d:ab:a9: b5:75:cc:24:3e:99:56:cd:a4:1f:bc:4c:46:a4:d8:e3:66:7e: 13:3c:32:79:ad:69:cd:52:7b:8e:a1:09:a2:30:f4:82:58:bc: 24:5d:58:3a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7kIzF2YjIH0AAkUYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDgxOTE4MDM0NFoXDTI3MTEyNzA1MDAwMFowLzEtMCsGA1UEAxMk MTc5M2I0Y2YtMDlkNC00YjI0LTk2MDQtNTg0YTY5NzkzM2YzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyve/QU/u/bsQzCk3ZdYezhPUj0oj4H3/vtyn lbbMi7kGAI4zbusxiujR7CXH2wSnJc1r6KmoEtyBWFupSShVh4FXjrO9Sjm4xGkV 4dqZdTuDi+EklKpy8kxzPKvtVNncV+zFdDD/dxiNoaaxL0LLlPnaiY5R8Mp1lR1M aOgMenSOd6IU6bd91tWsX5GjHHMIPtRVA+7Jxy8WPjOLJU5s8kQuL8mIogcvNBYp nB9kCkAU64ELGleurQpoLQGOi62igepFwj8/DgO4mjgjJQQUXie8aN9irm49a/9X RtsGo5uScUXSI7aVmUQBNdzh6WF2F92FbJpkxNm8iI2wSTYolwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFNCFncDD+K+2RGjt3VcOKDJvApDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMGFkM2Q2MTAtZDBkYS0z NmY0LWFhNzYtNjVkN2RlNmRjMzQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErEHgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFmoNSuAwxnt5knGXhUwbfyHO9nscCb9hmZPKG8rJFv3bWOsrGn5a/7+ R95qKVcYNpSWPkzpkINYwP+UzG07EMxb1s1DLzMLpKIXiM/bs0VO+ZuDS82wrdz6 pLVmBGFM+6iUIwjfVU3gPpFFaSVrnKTJVm6gUJ1ndOdLl/+Keiy2BHx6gqB49cKz 98QYJf0wfGoIlzUfqrRqxcU0+DT26K64fKF9I/+CASPt8pLhtIYMHP7rp/8nX31z Hit2Zry8b4YBNzu4Cn7KHb4Zmq505FEsCIKGxB2rqbV1zCQ+mVbNpB+8TEak2ONm fhM8Mnmtac1Se46hCaIw9IJYvCRdWDo= -----END CERTIFICATE-----Generated at Tue Sep 1 01:57:56 2026 by rpki-client