$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/28695044-fdc2-3f03-bb5e-7c71fef2f129.roa File: 28695044-fdc2-3f03-bb5e-7c71fef2f129.roa (raw, json) Hash identifier: pb7EHtvVoX07i047XBADT0lzZQ74z+UQd9rzzSC3G38= Subject key identifier: 95:99:19:D2:61:B1:04:5B:97:D7:67:F1:A1:F3:21:64:90:E1:A5:F1 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584EED5236F024879DF6AD3F4F00 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/28695044-fdc2-3f03-bb5e-7c71fef2f129.roa Signing time: Sun 23 Aug 2026 01:00:12 +0000 ROA not before: Sun 23 Aug 2026 01:00:12 +0000 ROA not after: Sat 21 Nov 2026 02:00:12 +0000 asID: 13335 IP address blocks: 172.65.80.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ed:52:36:f0:24:87:9d:f6:ad:3f:4f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 23 01:00:12 2026 GMT Not After : Nov 21 02:00:12 2026 GMT Subject: CN=3414186e-be25-45e4-9a07-fe691bc339ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:5f:f0:87:00:db:c6:3c:96:ed:8f:29:31:72: ad:ba:75:33:d5:11:d8:fe:ef:0f:8b:51:b3:4d:c7: c1:74:86:51:a4:80:74:41:fb:10:ff:5f:06:92:48: ba:5a:2c:61:2f:8b:e5:4c:07:14:9d:4c:b0:15:82: 0e:0b:89:a7:e5:ee:93:54:a9:c8:de:a1:d9:db:e7: 8e:1d:22:ba:70:d8:02:82:04:30:ae:a3:54:ae:65: 3c:7c:ef:2c:00:9b:fe:a5:48:e4:67:54:80:ce:aa: d1:91:d9:d8:7b:83:ca:b9:f7:77:37:36:27:cd:59: 64:52:93:c9:10:08:24:1f:1a:f4:64:e1:5b:bd:ab: 42:77:8a:b7:c2:23:57:b5:64:25:ed:3a:55:05:f7: 83:57:ae:f4:05:57:6f:e1:03:4b:ba:50:ef:fa:1e: 42:d5:77:2c:b7:13:35:2a:fc:30:17:f6:e3:5e:0f: 6b:2c:84:5d:34:bb:2a:50:43:89:21:ae:23:a6:4e: bf:f0:8c:ec:96:e2:35:36:1c:a4:5d:1c:fe:28:4f: 1a:27:5a:56:70:38:8e:af:c9:5f:43:33:e3:2c:7b: e7:5c:e7:b1:df:18:1c:2d:ea:f3:95:01:89:3e:ad: e7:e3:1c:87:49:9f:38:44:e1:7a:11:db:19:af:c0: 3d:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:99:19:D2:61:B1:04:5B:97:D7:67:F1:A1:F3:21:64:90:E1:A5:F1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/28695044-fdc2-3f03-bb5e-7c71fef2f129.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.65.80.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:65:0b:fb:6c:6a:0a:01:33:8c:01:ab:e5:1c:d4:ff:0b:05: 87:a2:22:45:66:d5:fc:f6:34:3d:59:72:26:56:97:66:43:33: 7e:05:55:69:22:77:fc:6f:db:c5:89:35:ba:f3:ee:63:96:0f: 73:59:27:bc:9a:73:92:f8:1a:d7:a7:03:b4:35:5b:16:2d:b6: c3:12:ff:f3:b4:cb:b4:56:6f:db:35:82:ee:77:a5:79:01:03: 86:37:8c:3f:ff:87:0c:6b:d0:95:5c:6a:5b:b1:49:41:18:a0: 89:7c:6e:82:43:bb:d9:b4:10:04:17:ba:b7:ac:0c:73:e6:ff: 4d:78:e7:c9:6d:d9:30:25:c1:44:d1:13:9b:85:26:6e:08:4e: 61:16:dc:fb:62:00:83:e1:7c:31:e3:18:76:41:06:a1:f4:0e: 4b:da:2b:1f:81:e5:6c:22:52:c6:a7:2f:37:3c:ef:e3:d9:db: ae:68:ca:bc:35:61:40:fe:b2:c3:17:fc:39:0a:c4:17:97:c0: 39:a9:59:41:c7:64:da:56:f8:ea:0d:9d:4e:6a:9c:61:e4:fd: 15:22:0f:39:9c:c0:df:51:c3:e6:2f:b7:37:21:52:1f:04:1a: 16:74:51:11:ce:ad:73:d3:4b:39:24:b8:ed:4e:56:04:55:dd: bb:25:d8:18 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7tUjbwJIed9q0/TwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDgyMzAxMDAxMloXDTI2MTEyMTAyMDAxMlowLzEtMCsGA1UEAxMk MzQxNDE4NmUtYmUyNS00NWU0LTlhMDctZmU2OTFiYzMzOWJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnF/whwDbxjyW7Y8pMXKtunUz1RHY/u8Pi1Gz TcfBdIZRpIB0QfsQ/18Gkki6WixhL4vlTAcUnUywFYIOC4mn5e6TVKnI3qHZ2+eO HSK6cNgCggQwrqNUrmU8fO8sAJv+pUjkZ1SAzqrRkdnYe4PKufd3NzYnzVlkUpPJ EAgkHxr0ZOFbvatCd4q3wiNXtWQl7TpVBfeDV670BVdv4QNLulDv+h5C1XcstxM1 KvwwF/bjXg9rLIRdNLsqUEOJIa4jpk6/8IzsluI1NhykXRz+KE8aJ1pWcDiOr8lf QzPjLHvnXOex3xgcLerzlQGJPq3n4xyHSZ84ROF6EdsZr8A9AwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJWZGdJhsQRbl9dn8aHzIWSQ4aXxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMjg2OTUwNDQtZmRjMi0z ZjAzLWJiNWUtN2M3MWZlZjJmMTI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErEFQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFplC/tsagoBM4wBq+Uc1P8LBYeiIkVm1fz2ND1ZciZWl2ZDM34FVWki d/xv28WJNbrz7mOWD3NZJ7yac5L4GtenA7Q1WxYttsMS//O0y7RWb9s1gu53pXkB A4Y3jD//hwxr0JVcaluxSUEYoIl8boJDu9m0EAQXuresDHPm/01458lt2TAlwUTR E5uFJm4ITmEW3PtiAIPhfDHjGHZBBqH0DkvaKx+B5WwiUsanLzc87+PZ265oyrw1 YUD+ssMX/DkKxBeXwDmpWUHHZNpW+OoNnU5qnGHk/RUiDzmcwN9Rw+YvtzchUh8E GhZ0URHOrXPTSzkkuO1OVgRV3bsl2Bg= -----END CERTIFICATE-----Generated at Tue Sep 1 01:44:38 2026 by rpki-client