$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/6b4d8ae5-ba66-3f6c-bf77-49ed8dbac98c.roa File: 6b4d8ae5-ba66-3f6c-bf77-49ed8dbac98c.roa (raw, json) Hash identifier: PSztpZ8XdepjAecJEy+5NpjmNlakj5HNUpTt1NiykdE= Subject key identifier: 8F:98:99:52:80:8B:1A:15:F1:94:EE:CC:26:59:4B:8E:CD:D4:36:FF Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584EED522B793526A5814B1D7200 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/6b4d8ae5-ba66-3f6c-bf77-49ed8dbac98c.roa Signing time: Sun 23 Aug 2026 01:00:12 +0000 ROA not before: Sun 23 Aug 2026 01:00:12 +0000 ROA not after: Sat 21 Nov 2026 02:00:12 +0000 asID: 13335 IP address blocks: 172.67.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ed:52:2b:79:35:26:a5:81:4b:1d:72:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 23 01:00:12 2026 GMT Not After : Nov 21 02:00:12 2026 GMT Subject: CN=27eb1308-3bd1-4323-9ff7-5b9322a28bd0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:c8:2c:be:02:93:84:23:fd:2f:d0:ee:d5:74: cf:de:cf:1e:c5:6c:d5:d5:9f:74:6a:16:41:f5:2e: 9f:d3:ee:3b:4e:2e:69:db:c2:63:8c:dc:c1:76:d0: 88:44:c4:18:62:e4:de:6f:b9:1d:74:13:ae:68:5d: db:17:d5:79:f6:ab:ef:64:76:5b:79:c8:fe:e7:86: da:90:f6:15:d1:c9:e2:42:23:c5:25:b2:e1:fc:aa: a8:79:27:ea:03:f1:c6:0a:28:84:45:17:ad:60:ee: 32:68:b5:99:4b:32:dc:25:4e:06:1a:ef:46:95:42: c6:ab:59:71:8a:3f:68:26:de:a3:81:20:a3:75:98: 03:84:c3:4e:f1:6c:c7:30:8d:d0:23:ed:2d:82:80: f1:70:88:83:dd:3b:d6:2d:c4:67:3b:47:0b:89:fc: b8:00:5c:60:2b:05:75:db:66:e2:9c:36:78:43:81: b1:ac:eb:3b:4e:88:19:57:38:d1:91:b5:57:4b:52: 96:bf:2a:4b:5b:60:f6:de:66:e9:da:3c:ea:d6:7f: 10:26:97:3c:d9:d8:95:54:0d:c0:0c:cc:04:6c:b3: 73:13:9a:31:36:7a:45:10:1d:13:00:5b:8a:ef:c1: 40:e1:b3:a1:4f:df:18:49:3e:0c:a6:2d:b9:ae:3a: 30:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:98:99:52:80:8B:1A:15:F1:94:EE:CC:26:59:4B:8E:CD:D4:36:FF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/6b4d8ae5-ba66-3f6c-bf77-49ed8dbac98c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.67.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c3:f9:38:81:a4:97:73:f7:ac:86:c1:a0:a9:a7:91:d3:e3:d3: 90:bb:66:cd:08:a9:e4:4a:3e:2d:c2:83:cf:93:1b:6b:ed:3b: 87:ab:c5:0f:f6:ee:8f:63:20:cf:39:b9:87:ad:f0:91:c2:a4: ce:2b:3e:78:32:81:54:d3:96:3d:15:ae:97:78:0a:0d:ed:71: 79:38:57:29:60:40:53:69:c1:d1:35:60:5d:1c:1e:32:5b:58: 1e:d8:bf:ec:04:a2:7d:12:93:7d:40:f0:93:47:9f:2c:74:60: c7:93:59:c9:dc:da:b9:d3:19:61:2a:c6:ee:39:2c:bc:fb:eb: 8e:b7:da:8a:9f:d2:44:71:80:7c:01:46:ea:53:3e:d2:2b:24: 0a:53:a9:a4:47:b3:bb:f2:f8:c8:92:2e:d9:78:04:f0:30:bb: 40:3d:0d:38:8a:7d:ee:82:b2:cd:47:7e:52:f5:c9:d4:72:ef: 0d:5c:8b:ee:6d:6f:f2:65:e6:4e:50:dc:6b:48:0f:a7:ff:c6: d4:72:24:92:58:5c:2b:10:9e:2d:0f:57:bd:69:58:83:1f:d8: 08:3c:d0:0a:8d:2e:c8:f8:d8:fa:8a:e8:c7:10:d5:bc:16:37: cd:8c:73:09:72:8f:13:ec:69:36:fe:60:d7:83:27:fd:04:c7: 99:54:0d:53 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7tUit5NSalgUsdcgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDgyMzAxMDAxMloXDTI2MTEyMTAyMDAxMlowLzEtMCsGA1UEAxMk MjdlYjEzMDgtM2JkMS00MzIzLTlmZjctNWI5MzIyYTI4YmQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4sgsvgKThCP9L9Du1XTP3s8exWzV1Z90ahZB 9S6f0+47Ti5p28JjjNzBdtCIRMQYYuTeb7kddBOuaF3bF9V59qvvZHZbecj+54ba kPYV0cniQiPFJbLh/KqoeSfqA/HGCiiERRetYO4yaLWZSzLcJU4GGu9GlULGq1lx ij9oJt6jgSCjdZgDhMNO8WzHMI3QI+0tgoDxcIiD3TvWLcRnO0cLify4AFxgKwV1 22binDZ4Q4GxrOs7TogZVzjRkbVXS1KWvypLW2D23mbp2jzq1n8QJpc82diVVA3A DMwEbLNzE5oxNnpFEB0TAFuK78FA4bOhT98YST4Mpi25rjowrwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI+YmVKAixoV8ZTuzCZZS47N1Db/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNmI0ZDhhZTUtYmE2Ni0z ZjZjLWJmNzctNDllZDhkYmFjOThjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErEMgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMP5OIGkl3P3rIbBoKmnkdPj05C7Zs0IqeRKPi3Cg8+TG2vtO4erxQ/2 7o9jIM85uYet8JHCpM4rPngygVTTlj0Vrpd4Cg3tcXk4VylgQFNpwdE1YF0cHjJb WB7Yv+wEon0Sk31A8JNHnyx0YMeTWcnc2rnTGWEqxu45LLz764632oqf0kRxgHwB RupTPtIrJApTqaRHs7vy+MiSLtl4BPAwu0A9DTiKfe6Css1HflL1ydRy7w1ci+5t b/Jl5k5Q3GtID6f/xtRyJJJYXCsQni0PV71pWIMf2Ag80AqNLsj42PqK6McQ1bwW N82McwlyjxPsaTb+YNeDJ/0Ex5lUDVM= -----END CERTIFICATE-----Generated at Tue Sep 22 10:41:20 2026 by rpki-client