$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/3118f74d-4ae5-3966-b111-6d6cb9945c2d.roa File: 3118f74d-4ae5-3966-b111-6d6cb9945c2d.roa (raw, json) Hash identifier: 8xzpu7mP5cGjgEjdT0dxPFlRSWgs3aGH5uKwL51ziqA= Subject key identifier: ED:FE:D1:AB:E5:20:EC:76:9A:A7:0C:65:E3:C7:3E:D5:04:8E:C7:00 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584EED522B6DCEAD083DDE24E480 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/3118f74d-4ae5-3966-b111-6d6cb9945c2d.roa Signing time: Sun 23 Aug 2026 01:00:12 +0000 ROA not before: Sun 23 Aug 2026 01:00:12 +0000 ROA not after: Sat 21 Nov 2026 02:00:12 +0000 asID: 13335 IP address blocks: 172.67.16.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Sep 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ed:52:2b:6d:ce:ad:08:3d:de:24:e4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 23 01:00:12 2026 GMT Not After : Nov 21 02:00:12 2026 GMT Subject: CN=d7bc8c10-fd80-4c23-9899-34f2f4106821 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:ca:18:77:a3:2b:07:bc:83:27:e5:1f:57:67: 73:e1:60:df:fc:4b:e0:fd:12:86:f7:e9:f4:e6:80: a9:72:02:00:40:b3:f6:5f:33:73:8d:de:c8:4e:7c: c9:40:f5:29:4b:66:05:d4:53:c0:b9:e3:36:a6:f2: 64:45:d3:9a:d8:47:51:64:76:4f:c4:6d:7b:90:f8: b3:4a:01:0a:2b:cc:a3:fa:e6:bb:ab:66:a3:c0:38: 6d:a1:b0:e7:bc:76:fb:58:23:cb:8a:15:5c:a1:17: 20:98:ba:55:b5:94:40:a6:40:55:45:7c:99:f0:b8: e9:8f:a5:19:95:b2:96:f2:26:63:45:63:5e:ba:5f: 00:62:30:3b:f7:ff:b4:ab:cd:e4:c7:9c:91:3e:ca: 82:89:84:f7:57:34:74:22:3c:48:09:d3:b3:5c:98: 19:ff:d4:17:03:8a:c1:ae:6a:6a:d5:8a:24:9e:bf: 95:95:2b:3c:a7:62:4e:6f:f6:96:a4:48:5d:99:1b: d6:ce:f8:8d:eb:29:dd:74:6e:24:be:fc:3c:3f:43: 15:ae:ac:a3:49:df:c3:b0:13:6b:e2:5b:95:3a:cf: 87:bc:df:0a:ed:d9:4c:69:67:67:a6:4d:18:a9:58: b6:7b:c0:47:21:77:f4:a2:0c:1e:7b:44:ef:27:e8: de:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:FE:D1:AB:E5:20:EC:76:9A:A7:0C:65:E3:C7:3E:D5:04:8E:C7:00 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/3118f74d-4ae5-3966-b111-6d6cb9945c2d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.67.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:41:5b:f8:e7:67:15:cf:0d:7d:84:21:2c:8b:56:2c:f2:2b: 82:fc:35:1d:8d:fa:36:09:bd:3b:b1:b2:34:d9:fd:b3:c7:01: 9a:3d:64:10:61:e1:9c:f9:24:a4:08:e5:ab:a4:78:11:47:14: ca:64:79:d9:d7:2a:8e:da:be:1e:fe:79:e2:37:d8:64:dc:46: 24:b3:42:40:b5:2c:78:90:36:cf:17:bd:93:15:43:a2:63:29: 77:71:f7:c2:e4:47:14:0c:74:fd:2f:34:b2:cb:e6:90:35:ba: fd:08:72:5e:1d:30:e1:d6:fc:ec:e0:21:12:25:39:c7:0b:5f: 5d:ae:c6:2f:bc:c2:9f:bb:2d:10:0d:7c:90:e8:82:35:11:62: 89:a0:22:37:69:c9:c1:d2:65:33:68:c7:94:47:67:a5:5d:2f: 15:0e:29:50:0a:16:e7:b2:07:00:fe:75:08:a0:a0:29:ca:95: 51:34:6b:7f:b0:0f:d4:ac:39:e7:88:6a:fd:41:fc:c6:db:b7: 9d:2e:9e:78:29:03:c6:fd:0d:12:fd:2e:b1:58:8d:c2:56:3b: d3:7b:b5:f7:72:e1:b3:af:9b:ce:43:e8:e3:f9:79:56:61:da: 9b:14:85:12:ad:91:b3:d1:0c:9d:50:23:ec:7a:4c:6c:b8:ff: 89:f6:2f:d5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7tUittzq0IPd4k5IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDgyMzAxMDAxMloXDTI2MTEyMTAyMDAxMlowLzEtMCsGA1UEAxMk ZDdiYzhjMTAtZmQ4MC00YzIzLTk4OTktMzRmMmY0MTA2ODIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl8oYd6MrB7yDJ+UfV2dz4WDf/Evg/RKG9+n0 5oCpcgIAQLP2XzNzjd7ITnzJQPUpS2YF1FPAueM2pvJkRdOa2EdRZHZPxG17kPiz SgEKK8yj+ua7q2ajwDhtobDnvHb7WCPLihVcoRcgmLpVtZRApkBVRXyZ8Ljpj6UZ lbKW8iZjRWNeul8AYjA79/+0q83kx5yRPsqCiYT3VzR0IjxICdOzXJgZ/9QXA4rB rmpq1Yoknr+VlSs8p2JOb/aWpEhdmRvWzviN6ynddG4kvvw8P0MVrqyjSd/DsBNr 4luVOs+HvN8K7dlMaWdnpk0YqVi2e8BHIXf0ogwee0TvJ+je/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO3+0avlIOx2mqcMZePHPtUEjscAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMzExOGY3NGQtNGFlNS0z OTY2LWIxMTEtNmQ2Y2I5OTQ1YzJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErEMQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE5BW/jnZxXPDX2EISyLVizyK4L8NR2N+jYJvTuxsjTZ/bPHAZo9ZBBh 4Zz5JKQI5aukeBFHFMpkednXKo7avh7+eeI32GTcRiSzQkC1LHiQNs8XvZMVQ6Jj KXdx98LkRxQMdP0vNLLL5pA1uv0Icl4dMOHW/OzgIRIlOccLX12uxi+8wp+7LRAN fJDogjURYomgIjdpycHSZTNox5RHZ6VdLxUOKVAKFueyBwD+dQigoCnKlVE0a3+w D9SsOeeIav1B/Mbbt50unngpA8b9DRL9LrFYjcJWO9N7tfdy4bOvm85D6OP5eVZh 2psUhRKtkbPRDJ1QI+x6TGy4/4n2L9U= -----END CERTIFICATE-----Generated at Tue Sep 1 03:16:53 2026 by rpki-client