$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/4e7eaf9c-cd28-3272-b6db-c1d029b6a90b.roa File: 4e7eaf9c-cd28-3272-b6db-c1d029b6a90b.roa (raw, json) Hash identifier: QchTIJJzcdESQGYdqKv/aMtyXLPxvyMWW8zJZ+3rQKI= Subject key identifier: 55:AC:E1:89:0B:A5:A1:3D:81:14:C7:BE:43:44:C7:78:A6:5B:D9:43 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584F74B8279226AE08D56C1CBC80 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/4e7eaf9c-cd28-3272-b6db-c1d029b6a90b.roa Signing time: Sat 10 Oct 2026 13:00:13 +0000 ROA not before: Sat 10 Oct 2026 13:00:13 +0000 ROA not after: Fri 08 Jan 2027 14:00:13 +0000 asID: 13335 IP address blocks: 172.69.38.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 20 Oct 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:74:b8:27:92:26:ae:08:d5:6c:1c:bc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 10 13:00:13 2026 GMT Not After : Jan 8 14:00:13 2027 GMT Subject: CN=8e6cfd0c-42f5-46d2-8765-a94ea98e892a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:bf:ae:3e:cd:35:2d:7e:de:9d:c9:eb:26:90: b4:79:9a:7d:e7:d9:22:ee:d6:05:06:1f:3b:c5:c0: fc:24:1c:2f:d2:37:6c:3a:ff:27:e4:aa:03:07:2c: 15:ad:f0:13:d2:a5:64:7e:50:64:34:78:e0:0e:7d: c4:1b:f9:5e:3f:53:89:32:5a:4f:18:a0:b2:45:2f: dc:7e:e6:ae:39:28:c2:0f:15:3a:0f:a0:dd:64:1f: c2:bb:20:1e:7a:24:4c:80:88:88:a6:82:49:9b:40: 2b:10:c1:76:7f:c7:d5:66:32:32:46:90:78:6b:20: 67:18:38:a8:d2:e0:eb:58:e5:30:5a:72:00:c0:2e: f8:7f:e3:c2:cb:ba:f0:99:c8:63:52:84:8d:70:fd: 0e:58:3e:ad:aa:aa:49:95:92:1c:be:f2:69:d4:21: 00:7c:5f:8e:fc:60:f5:a6:f9:ef:de:fe:db:fa:ae: e2:9d:d9:07:ae:81:44:ff:cb:9c:75:9b:be:6b:a4: 25:2a:cd:f5:f7:16:6f:6c:c4:5a:ec:b5:0f:79:e8: b5:8b:fc:9a:35:41:2c:3e:64:a1:67:a2:4a:f9:e5: d2:9e:f6:ed:2f:13:c3:bf:b5:64:cf:f2:7c:13:17: d0:53:44:c1:db:df:50:5b:a0:2a:66:d0:d5:82:0e: 06:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:AC:E1:89:0B:A5:A1:3D:81:14:C7:BE:43:44:C7:78:A6:5B:D9:43 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/4e7eaf9c-cd28-3272-b6db-c1d029b6a90b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.69.38.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:60:8f:16:50:23:d3:54:b4:3b:5a:4b:b8:72:d9:d3:7d:aa: 55:bd:d7:ff:4a:ce:26:22:a3:d5:48:ad:6e:43:76:64:60:2f: 07:7c:9c:9b:dd:21:1c:77:10:82:19:86:71:9b:06:37:a6:41: e9:79:af:15:4d:95:94:34:56:57:71:0a:68:b7:d9:1f:1b:e5: ba:13:a2:f6:1c:f7:bc:83:93:3c:5b:11:6e:b2:ab:fc:8e:7d: 44:3f:9b:3b:98:ac:7f:c4:6b:ef:c0:e4:f2:8b:36:82:36:15: bb:d4:f1:7b:96:68:4d:6c:45:3f:15:5a:77:06:b9:10:cb:ab: 34:4d:69:f8:d3:cd:4d:fa:6b:25:65:ee:38:75:c8:96:b5:6b: 15:e7:17:72:e0:1c:85:8e:61:3f:38:61:5b:b2:90:d1:1f:de: 16:49:ca:8a:73:29:bc:44:96:33:0b:c9:d7:be:70:82:e9:2d: d3:18:7a:a5:d9:07:44:bb:e1:e5:ce:47:3b:01:90:11:b0:f8: 9f:bb:a0:66:9f:2e:d9:55:1a:eb:2b:5b:08:23:77:bf:78:f6: 61:79:b5:dd:bc:23:f0:1f:b4:e0:79:5b:96:71:aa:a6:bb:e0: 11:1b:bb:6e:3f:05:7a:dc:dd:57:c6:2c:f4:38:8f:af:70:ff: e5:3c:ab:55 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE90uCeSJq4I1WwcvIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MTAxMDEzMDAxM1oXDTI3MDEwODE0MDAxM1owLzEtMCsGA1UEAxMk OGU2Y2ZkMGMtNDJmNS00NmQyLTg3NjUtYTk0ZWE5OGU4OTJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjb+uPs01LX7encnrJpC0eZp959ki7tYFBh87 xcD8JBwv0jdsOv8n5KoDBywVrfAT0qVkflBkNHjgDn3EG/leP1OJMlpPGKCyRS/c fuauOSjCDxU6D6DdZB/CuyAeeiRMgIiIpoJJm0ArEMF2f8fVZjIyRpB4ayBnGDio 0uDrWOUwWnIAwC74f+PCy7rwmchjUoSNcP0OWD6tqqpJlZIcvvJp1CEAfF+O/GD1 pvnv3v7b+q7indkHroFE/8ucdZu+a6QlKs319xZvbMRa7LUPeei1i/yaNUEsPmSh Z6JK+eXSnvbtLxPDv7Vkz/J8ExfQU0TB299QW6AqZtDVgg4GywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFWs4YkLpaE9gRTHvkNEx3imW9lDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNGU3ZWFmOWMtY2QyOC0z MjcyLWI2ZGItYzFkMDI5YjZhOTBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEUmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD9gjxZQI9NUtDtaS7hy2dN9qlW91/9KziYio9VIrW5DdmRgLwd8nJvd IRx3EIIZhnGbBjemQel5rxVNlZQ0VldxCmi32R8b5boTovYc97yDkzxbEW6yq/yO fUQ/mzuYrH/Ea+/A5PKLNoI2FbvU8XuWaE1sRT8VWncGuRDLqzRNafjTzU36ayVl 7jh1yJa1axXnF3LgHIWOYT84YVuykNEf3hZJyopzKbxEljMLyde+cILpLdMYeqXZ B0S74eXORzsBkBGw+J+7oGafLtlVGusrWwgjd7949mF5td28I/AftOB5W5Zxqqa7 4BEbu24/BXrc3VfGLPQ4j69w/+U8q1U= -----END CERTIFICATE-----Generated at Sun Oct 18 11:32:23 2026 by rpki-client