$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/797dc0f9-8fa9-347e-ab47-5a2d9cdc8fb7.roa File: 797dc0f9-8fa9-347e-ab47-5a2d9cdc8fb7.roa (raw, json) Hash identifier: oNI4L92EGYUH0LTkFyii2BUBmPVen2brK6d17tppA8I= Subject key identifier: B8:99:8D:41:39:4A:73:26:BA:83:65:D2:DF:EB:35:87:CF:3B:F9:E1 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584F90A32646376F58CE49ED34C0 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/797dc0f9-8fa9-347e-ab47-5a2d9cdc8fb7.roa Signing time: Tue 20 Oct 2026 13:00:13 +0000 ROA not before: Tue 20 Oct 2026 13:00:13 +0000 ROA not after: Mon 18 Jan 2027 14:00:13 +0000 asID: 13335 IP address blocks: 172.69.89.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 24 Oct 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:90:a3:26:46:37:6f:58:ce:49:ed:34:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 20 13:00:13 2026 GMT Not After : Jan 18 14:00:13 2027 GMT Subject: CN=98d48caf-4748-4185-9435-8ba9063821a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:49:5b:25:ce:2d:75:22:c5:ef:62:81:81:ae: 0c:1d:46:9e:fa:a6:96:53:71:c8:3d:a2:be:aa:e4: 42:71:1e:df:46:52:07:43:ce:6a:1c:14:44:84:e6: f5:17:53:a4:5d:3e:3c:36:35:ad:7b:09:d0:c1:bf: 3d:89:28:1d:52:2d:f5:9a:98:35:5f:4f:4e:e2:23: 1e:a3:70:2c:2a:13:d2:51:18:f5:70:fb:d2:24:0a: 24:a7:ab:c0:65:16:92:e3:8c:ca:ac:00:ae:57:d2: 13:f1:40:7c:20:7b:71:6b:3b:d9:71:a7:72:e2:23: 5d:a3:e3:d3:66:49:f6:83:f0:e3:9a:bc:33:35:0e: 0b:83:1a:6d:39:69:4b:1e:ff:02:ef:69:7b:f5:68: 86:6b:e0:52:8a:41:08:39:1f:19:a0:bc:72:57:f8: 84:b8:93:b5:49:39:e5:0b:d7:96:bb:86:96:d9:c3: f8:d6:48:bd:20:ec:3d:e6:a0:64:e1:60:ee:a6:c4: d8:c1:3d:48:e8:bc:0e:f9:4e:e8:d1:6f:b5:4a:0f: 9b:3c:be:75:41:70:bd:de:8f:08:09:b2:a4:29:d2: 29:fd:5f:69:58:a0:2f:70:f3:77:96:5e:ec:e5:96: 33:ee:88:1b:10:0b:e3:62:e5:78:78:2f:52:b5:c2: f8:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:99:8D:41:39:4A:73:26:BA:83:65:D2:DF:EB:35:87:CF:3B:F9:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/797dc0f9-8fa9-347e-ab47-5a2d9cdc8fb7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.69.89.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a4:cb:da:d0:15:9e:5b:c4:28:77:55:76:18:40:d9:f7:56:f0: 06:53:e7:8d:04:b3:5a:ad:73:ba:1f:97:3d:0b:bf:e3:35:7c: c4:55:59:a9:51:c9:72:ba:8b:92:3f:b5:c4:d1:45:56:eb:7f: 1b:24:36:75:7b:b2:70:bb:42:f7:53:9a:3d:26:25:4d:26:8a: c7:1e:17:38:eb:70:71:9c:ec:05:36:5d:70:bf:81:8e:6c:fc: 40:4b:d9:7d:ac:6a:94:85:d1:ee:91:a7:23:d7:ee:78:9d:3f: 33:f2:c9:b0:2e:3e:e7:a3:cb:f6:1e:ca:b6:ae:fa:c5:97:33: 4c:0f:f7:2d:84:be:3e:18:20:89:e0:0b:b2:e0:5e:99:1f:eb: ca:83:77:70:c4:3f:73:18:3a:f1:8c:76:ac:98:0a:b6:ba:2c: 83:e6:2c:e3:77:80:07:48:9a:64:12:f7:dd:51:13:7e:66:bb: c5:a2:17:0e:3c:31:1f:35:7c:38:6b:12:a0:50:f1:5f:c9:e1: 3f:1e:70:97:c0:95:b0:ec:30:42:d2:b1:6a:04:a7:60:be:e9: b8:3a:13:64:87:65:3a:e7:4d:12:8c:7d:03:1a:9c:0c:04:53: 5f:81:7e:54:bc:07:78:9d:b7:cb:37:04:37:17:b9:e9:7d:22: bd:c9:4a:56 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+QoyZGN29YzkntNMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MTAyMDEzMDAxM1oXDTI3MDExODE0MDAxM1owLzEtMCsGA1UEAxMk OThkNDhjYWYtNDc0OC00MTg1LTk0MzUtOGJhOTA2MzgyMWEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjElbJc4tdSLF72KBga4MHUae+qaWU3HIPaK+ quRCcR7fRlIHQ85qHBREhOb1F1OkXT48NjWtewnQwb89iSgdUi31mpg1X09O4iMe o3AsKhPSURj1cPvSJAokp6vAZRaS44zKrACuV9IT8UB8IHtxazvZcady4iNdo+PT Zkn2g/DjmrwzNQ4LgxptOWlLHv8C72l79WiGa+BSikEIOR8ZoLxyV/iEuJO1STnl C9eWu4aW2cP41ki9IOw95qBk4WDupsTYwT1I6LwO+U7o0W+1Sg+bPL51QXC93o8I CbKkKdIp/V9pWKAvcPN3ll7s5ZYz7ogbEAvjYuV4eC9StcL4VQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLiZjUE5SnMmuoNl0t/rNYfPO/nhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNzk3ZGMwZjktOGZhOS0z NDdlLWFiNDctNWEyZDljZGM4ZmI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEVZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKTL2tAVnlvEKHdVdhhA2fdW8AZT540Es1qtc7oflz0Lv+M1fMRVWalR yXK6i5I/tcTRRVbrfxskNnV7snC7QvdTmj0mJU0misceFzjrcHGc7AU2XXC/gY5s /EBL2X2sapSF0e6RpyPX7nidPzPyybAuPuejy/Yeyrau+sWXM0wP9y2Evj4YIIng C7LgXpkf68qDd3DEP3MYOvGMdqyYCra6LIPmLON3gAdImmQS991RE35mu8WiFw48 MR81fDhrEqBQ8V/J4T8ecJfAlbDsMELSsWoEp2C+6bg6E2SHZTrnTRKMfQManAwE U1+BflS8B3idt8s3BDcXuel9Ir3JSlY= -----END CERTIFICATE-----Generated at Wed Oct 21 22:29:55 2026 by rpki-client