$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/8b5d0a32-bf06-3862-b13f-422e3b704274.roa File: 8b5d0a32-bf06-3862-b13f-422e3b704274.roa (raw, json) Hash identifier: 3NVwBkVHvi45EIaxprtBazlIQGa/9lBAz644VZKMMu0= Subject key identifier: F0:05:D7:02:80:F5:15:70:DF:2B:1E:42:FF:10:35:54:98:F5:CE:7E Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584EEEB767C9761A2665B7FABF00 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/8b5d0a32-bf06-3862-b13f-422e3b704274.roa Signing time: Sun 23 Aug 2026 13:00:12 +0000 ROA not before: Sun 23 Aug 2026 13:00:12 +0000 ROA not after: Sat 21 Nov 2026 14:00:12 +0000 asID: 13335 IP address blocks: 172.69.86.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ee:b7:67:c9:76:1a:26:65:b7:fa:bf:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 23 13:00:12 2026 GMT Not After : Nov 21 14:00:12 2026 GMT Subject: CN=f77d2ad8-3cda-4619-9f1a-f05f5c8e1e1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:9a:7b:b7:54:03:d5:f8:d2:14:93:cf:ac:22: a4:87:35:f1:f1:11:0c:b8:77:36:21:49:d2:4a:05: 4b:e7:42:ee:b5:7a:43:27:5a:4c:f5:16:1c:00:8d: e4:ee:7c:ca:85:98:60:47:6b:ae:75:7e:9a:8b:8e: 64:aa:7d:9f:a4:47:e2:7d:93:59:06:80:34:89:62: c8:dc:6c:74:dc:ad:da:04:59:2c:2d:aa:0a:fe:0d: 7e:f4:41:9b:03:f6:d8:76:a5:23:23:c2:68:3c:fb: 95:3d:14:22:c0:88:0f:f8:76:66:72:87:d6:59:44: 94:78:8c:89:30:69:6c:44:a6:b2:32:a1:ce:d8:28: 2a:43:2a:c1:7a:8a:5d:15:a5:07:8c:bc:f9:35:47: 27:4f:b3:9b:31:7c:eb:b4:7c:5c:46:f7:a2:10:a3: ad:d8:e1:f0:c0:29:71:b6:65:9e:ac:3f:14:18:3b: 83:eb:4a:db:cf:9b:96:f9:cb:6b:e2:a1:7d:f5:e6: 4d:3c:4d:d2:d1:41:85:93:8b:6a:46:20:1e:25:a3: c1:7a:97:64:50:5f:2e:78:fd:b8:d9:30:b3:85:ab: c7:5b:57:c0:0d:39:af:ac:64:bc:6d:ce:1c:5c:97: 64:cb:b4:9d:09:de:e8:9b:1e:91:d7:8b:08:19:72: 50:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:05:D7:02:80:F5:15:70:DF:2B:1E:42:FF:10:35:54:98:F5:CE:7E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/8b5d0a32-bf06-3862-b13f-422e3b704274.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.69.86.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c8:01:42:11:cd:36:e5:af:69:87:93:46:39:c2:1c:1e:2a:3a: fe:dd:e5:96:ae:b5:8e:65:f0:a7:4d:28:0c:16:4e:cf:b5:a6: ed:71:6f:e6:27:a9:e8:8b:bf:ba:37:0a:b2:20:df:28:18:85: d8:b7:ed:50:ba:31:6f:fa:3f:de:17:bc:d3:4c:2b:d1:5a:0d: e3:94:a3:04:93:9c:e2:bd:87:fe:1a:3f:3b:63:20:1a:6b:ad: 26:df:77:06:21:69:2e:b1:6a:bd:9c:aa:dd:43:f9:35:66:6a: 51:fd:14:9b:df:a7:67:62:1f:c9:d1:a0:63:65:30:cc:39:c7: 5b:d5:3b:9b:7d:6f:08:01:d2:de:ed:de:13:02:5e:d7:a5:7c: 33:c6:bc:e1:74:3c:68:d9:04:79:b4:7f:15:2a:44:24:15:da: 13:17:72:d6:8d:13:c7:f8:66:83:04:19:f1:a8:68:7e:59:a8: c6:74:20:75:45:22:96:bb:0c:23:c1:64:85:50:e0:de:5c:2c: 7d:e7:1b:d9:bc:0d:5d:29:74:4a:1d:58:cb:31:69:99:0e:2a: 30:02:5a:de:d1:72:bb:7e:63:ab:f4:bf:22:58:bd:4c:1d:a1: f1:6c:e0:07:f6:50:60:6f:ea:2b:c3:de:6a:20:ff:60:21:53: 19:a5:55:ff -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7ut2fJdhomZbf6vwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDgyMzEzMDAxMloXDTI2MTEyMTE0MDAxMlowLzEtMCsGA1UEAxMk Zjc3ZDJhZDgtM2NkYS00NjE5LTlmMWEtZjA1ZjVjOGUxZTFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm5p7t1QD1fjSFJPPrCKkhzXx8REMuHc2IUnS SgVL50LutXpDJ1pM9RYcAI3k7nzKhZhgR2uudX6ai45kqn2fpEfifZNZBoA0iWLI 3Gx03K3aBFksLaoK/g1+9EGbA/bYdqUjI8JoPPuVPRQiwIgP+HZmcofWWUSUeIyJ MGlsRKayMqHO2CgqQyrBeopdFaUHjLz5NUcnT7ObMXzrtHxcRveiEKOt2OHwwClx tmWerD8UGDuD60rbz5uW+ctr4qF99eZNPE3S0UGFk4tqRiAeJaPBepdkUF8ueP24 2TCzhavHW1fADTmvrGS8bc4cXJdky7SdCd7omx6R14sIGXJQcwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPAF1wKA9RVw3yseQv8QNVSY9c5+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvOGI1ZDBhMzItYmYwNi0z ODYyLWIxM2YtNDIyZTNiNzA0Mjc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEVWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMgBQhHNNuWvaYeTRjnCHB4qOv7d5ZautY5l8KdNKAwWTs+1pu1xb+Yn qeiLv7o3CrIg3ygYhdi37VC6MW/6P94XvNNMK9FaDeOUowSTnOK9h/4aPztjIBpr rSbfdwYhaS6xar2cqt1D+TVmalH9FJvfp2diH8nRoGNlMMw5x1vVO5t9bwgB0t7t 3hMCXtelfDPGvOF0PGjZBHm0fxUqRCQV2hMXctaNE8f4ZoMEGfGoaH5ZqMZ0IHVF Ipa7DCPBZIVQ4N5cLH3nG9m8DV0pdEodWMsxaZkOKjACWt7Rcrt+Y6v0vyJYvUwd ofFs4Af2UGBv6ivD3mog/2AhUxmlVf8= -----END CERTIFICATE-----Generated at Tue Sep 1 01:45:39 2026 by rpki-client