$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/8f386534-1af3-36dd-862c-afabdae6e157.roa File: 8f386534-1af3-36dd-862c-afabdae6e157.roa (raw, json) Hash identifier: v6VOl3ou9J33kQLF9Ig3toC00DTKyvC7Qk6y+ht94uI= Subject key identifier: 27:54:8C:8C:D8:E4:A6:8E:B0:1A:EA:78:7F:AC:22:01:DD:65:A4:0F Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584F8F3DE405614E4A31E7785840 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/8f386534-1af3-36dd-862c-afabdae6e157.roa Signing time: Tue 20 Oct 2026 01:00:12 +0000 ROA not before: Tue 20 Oct 2026 01:00:12 +0000 ROA not after: Mon 18 Jan 2027 02:00:12 +0000 asID: 13335 IP address blocks: 172.67.80.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 28 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:8f:3d:e4:05:61:4e:4a:31:e7:78:58:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 20 01:00:12 2026 GMT Not After : Jan 18 02:00:12 2027 GMT Subject: CN=58432a14-aa85-4a6e-a7d2-c11e72c10f76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:77:c2:ae:cd:5c:8f:5f:c4:4a:c6:a5:22:6f: d5:9d:55:60:29:70:2c:78:4c:cf:a1:88:a7:72:75: 8d:2a:fc:bc:ec:a9:e0:9c:29:6f:2a:a5:66:fb:16: 1b:f9:2e:52:11:9d:2b:1c:08:8a:72:15:a5:45:ce: e5:d4:66:7b:11:36:60:ad:3b:54:b3:8c:d8:16:b7: 9b:28:1f:00:7e:e9:2b:97:3d:9b:c8:c9:40:cb:ae: 31:f6:86:ba:54:b4:31:25:e1:93:3c:55:11:ee:e5: 0a:49:86:39:4e:3f:c7:59:d1:68:74:0c:f5:b7:5a: b0:6b:c1:8b:3c:eb:41:d9:c7:1b:01:93:96:48:85: a8:ad:5b:b6:0c:6b:da:6f:1f:30:e2:87:ab:2b:0e: 76:29:13:fd:67:54:5c:4b:b9:c8:5e:c9:12:6c:bf: 12:38:ea:9c:f6:2e:5d:e0:f5:05:81:f0:2c:f4:e8: c5:78:d8:a3:b3:0d:10:cc:04:17:97:3e:6d:ae:85: 89:13:da:cd:ae:27:a8:4e:60:a5:2c:28:7a:96:6d: f2:93:27:8d:40:54:a9:be:13:b0:7f:80:9a:69:e6: ed:64:7a:bc:03:29:f2:a7:47:b3:8b:35:54:59:52: b9:a8:cc:ac:ee:fe:05:6a:9a:cc:7d:91:99:26:bf: 92:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:54:8C:8C:D8:E4:A6:8E:B0:1A:EA:78:7F:AC:22:01:DD:65:A4:0F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/8f386534-1af3-36dd-862c-afabdae6e157.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.67.80.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bb:60:cb:da:11:59:ca:4c:1d:88:81:77:2d:d5:b3:37:af:31: 4d:9a:b8:3e:9f:26:35:65:8d:e2:1c:f4:16:1d:6f:21:d2:8d: 00:0d:2a:9b:d7:a5:f3:bf:fb:fd:64:c0:d8:e3:a4:48:02:af: 23:10:fe:83:33:c0:0b:a5:14:9d:98:d4:1c:a1:10:29:1b:10: c7:1b:49:f5:6a:7a:d2:4b:ee:48:70:2e:2e:ea:fa:fa:d8:89: 14:67:89:b3:7e:73:a0:28:8f:c5:35:35:c2:f2:90:89:59:b0: 3a:c9:cf:db:b1:14:31:46:c8:56:1a:3c:6e:80:f6:04:89:13: 4e:b3:78:d6:81:4f:ae:67:ba:b4:8f:46:98:8b:5e:9a:59:37: 96:ca:64:b8:71:1d:c1:b1:91:7a:ce:5a:8d:17:a5:9e:8e:f1: 8c:91:f4:c1:36:59:91:3f:bb:c2:9d:a0:61:12:8c:fe:0c:fe: 10:bf:cf:09:82:05:0e:71:aa:5f:52:67:45:a5:49:96:99:5a: da:54:1a:08:f4:aa:5e:af:1e:f7:56:cb:58:dd:f8:14:64:25: b5:20:d4:44:86:52:d7:74:e6:db:3d:01:c4:a1:10:19:76:d3: 92:c0:f7:2b:f8:9a:f4:6d:71:ee:5e:21:ab:08:5d:34:03:0c: 79:ab:72:4c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+PPeQFYU5KMed4WEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MTAyMDAxMDAxMloXDTI3MDExODAyMDAxMlowLzEtMCsGA1UEAxMk NTg0MzJhMTQtYWE4NS00YTZlLWE3ZDItYzExZTcyYzEwZjc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkXfCrs1cj1/ESsalIm/VnVVgKXAseEzPoYin cnWNKvy87KngnClvKqVm+xYb+S5SEZ0rHAiKchWlRc7l1GZ7ETZgrTtUs4zYFreb KB8Afukrlz2byMlAy64x9oa6VLQxJeGTPFUR7uUKSYY5Tj/HWdFodAz1t1qwa8GL POtB2ccbAZOWSIWorVu2DGvabx8w4oerKw52KRP9Z1RcS7nIXskSbL8SOOqc9i5d 4PUFgfAs9OjFeNijsw0QzAQXlz5troWJE9rNrieoTmClLCh6lm3ykyeNQFSpvhOw f4CaaebtZHq8Aynyp0ezizVUWVK5qMys7v4FaprMfZGZJr+SZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCdUjIzY5KaOsBrqeH+sIgHdZaQPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvOGYzODY1MzQtMWFmMy0z NmRkLTg2MmMtYWZhYmRhZTZlMTU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErENQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALtgy9oRWcpMHYiBdy3VszevMU2auD6fJjVljeIc9BYdbyHSjQANKpvX pfO/+/1kwNjjpEgCryMQ/oMzwAulFJ2Y1ByhECkbEMcbSfVqetJL7khwLi7q+vrY iRRnibN+c6Aoj8U1NcLykIlZsDrJz9uxFDFGyFYaPG6A9gSJE06zeNaBT65nurSP RpiLXppZN5bKZLhxHcGxkXrOWo0XpZ6O8YyR9ME2WZE/u8KdoGESjP4M/hC/zwmC BQ5xql9SZ0WlSZaZWtpUGgj0ql6vHvdWy1jd+BRkJbUg1ESGUtd05ts9AcShEBl2 05LA9yv4mvRtce5eIasIXTQDDHmrckw= -----END CERTIFICATE-----Generated at Tue Oct 27 15:06:18 2026 by rpki-client