$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/968a90ac-8b9c-34d4-9924-a9a02cc8f903.roa File: 968a90ac-8b9c-34d4-9924-a9a02cc8f903.roa (raw, json) Hash identifier: sg8zc4CTZnL+QWf5KBc7x062ZaWjc9vaO3a3EesUxjM= Subject key identifier: 99:A8:EB:C5:6F:D1:06:67:95:4D:43:D6:1C:BE:47:E9:39:41:D6:09 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584EA787FB3B3F579B2F008CBC80 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/968a90ac-8b9c-34d4-9924-a9a02cc8f903.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 14789 IP address blocks: 172.69.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 09 Aug 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:87:fb:3b:3f:57:9b:2f:00:8c:bc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=956c609b-3497-4af3-8a63-a857aa573769 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:97:69:cc:51:17:82:56:d1:1b:b2:5e:f1:3b: 89:44:4f:1f:63:90:ee:53:da:e5:4a:bb:b1:11:67: 85:26:05:a0:63:b5:f1:6c:45:c8:4c:82:bc:3f:f5: ea:fa:28:77:75:a3:46:aa:99:f0:5d:a9:11:10:bb: ca:c4:71:1c:8e:a8:27:db:89:5d:fb:c3:85:2d:95: 5c:d2:85:9c:a7:1d:d1:fc:ad:dc:fe:2a:2b:9c:52: ff:67:85:b3:1d:f4:02:51:b9:5c:63:98:17:fc:d6: 07:5a:af:58:cf:1c:6e:4b:26:60:07:73:b5:2d:8d: 2c:55:2d:86:ad:d8:4e:d7:7f:1e:4d:d1:a4:73:7f: 3c:6e:07:7d:3b:91:f3:5c:e0:5a:80:da:e8:40:19: b6:4c:2d:b2:49:bd:dc:12:8f:f6:fe:a0:4f:99:fb: ac:a5:23:cc:52:41:8a:a5:a5:46:c3:3a:f3:1a:1a: 9f:30:fa:35:57:e0:d3:5b:49:6f:7f:69:4b:3b:1b: d9:34:68:df:e8:ec:d7:65:e0:0e:d7:2c:eb:11:73: 10:c6:0d:3a:56:dd:ae:73:f2:62:89:ea:99:44:1e: 7e:7d:65:f6:85:25:b8:02:a4:53:2d:ac:8c:1e:f1: 63:60:50:b3:d2:d6:3c:a3:c5:7b:fa:b0:ed:7e:0b: 90:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:A8:EB:C5:6F:D1:06:67:95:4D:43:D6:1C:BE:47:E9:39:41:D6:09 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/968a90ac-8b9c-34d4-9924-a9a02cc8f903.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.69.20.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c8:5e:de:b8:3d:25:9a:b5:11:a3:31:98:38:5b:ee:3b:6e:f1: 85:a0:b3:3d:21:dd:c6:f3:49:be:19:d7:f8:ef:82:69:af:30: af:f7:ff:d2:f3:71:cb:8a:06:d0:d9:6e:f6:08:32:b2:88:62: ff:92:7d:38:e3:02:28:fe:6d:66:05:85:a8:c4:45:36:75:df: e1:c4:5a:b1:0a:8a:05:2e:39:b4:d9:24:28:a6:3a:f2:a4:e5: b1:0a:95:ab:2f:7a:f8:ae:d5:80:6b:f9:df:b9:a5:c1:9b:8c: b1:bf:46:6e:0f:91:4e:53:0d:fc:39:82:1c:d5:c2:1f:a7:28: a9:3f:a8:1f:d0:00:3c:87:59:5e:d9:d9:84:2f:15:24:27:79: 28:c1:f7:69:9a:b3:8a:d9:b9:c0:b5:f5:1c:11:27:8e:56:7d: 6c:1d:a0:9e:59:b5:e3:0b:35:7c:60:22:fd:98:08:0e:10:d6: b2:6b:ca:59:b0:45:f3:e5:fe:01:6e:21:2f:6b:ac:ff:22:41: 28:ef:2f:17:57:54:dd:56:e6:3a:af:75:43:b5:b1:04:e0:15: fc:4f:fa:9c:69:d4:2e:b8:97:e0:48:09:4f:4f:f0:31:7c:79: c3:81:f6:b6:21:a6:ca:84:f8:ca:c2:d8:2b:08:09:22:ff:cd: ff:6a:b7:94 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nh/s7P1ebLwCMvIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk OTU2YzYwOWItMzQ5Ny00YWYzLThhNjMtYTg1N2FhNTczNzY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqpdpzFEXglbRG7Je8TuJRE8fY5DuU9rlSrux EWeFJgWgY7XxbEXITIK8P/Xq+ih3daNGqpnwXakRELvKxHEcjqgn24ld+8OFLZVc 0oWcpx3R/K3c/iornFL/Z4WzHfQCUblcY5gX/NYHWq9YzxxuSyZgB3O1LY0sVS2G rdhO138eTdGkc388bgd9O5HzXOBagNroQBm2TC2ySb3cEo/2/qBPmfuspSPMUkGK paVGwzrzGhqfMPo1V+DTW0lvf2lLOxvZNGjf6OzXZeAO1yzrEXMQxg06Vt2uc/Ji ieqZRB5+fWX2hSW4AqRTLayMHvFjYFCz0tY8o8V7+rDtfguQlwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJmo68Vv0QZnlU1D1hy+R+k5QdYJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvOTY4YTkwYWMtOGI5Yy0z NGQ0LTk5MjQtYTlhMDJjYzhmOTAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEUUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMhe3rg9JZq1EaMxmDhb7jtu8YWgsz0h3cbzSb4Z1/jvgmmvMK/3/9Lz ccuKBtDZbvYIMrKIYv+SfTjjAij+bWYFhajERTZ13+HEWrEKigUuObTZJCimOvKk 5bEKlasveviu1YBr+d+5pcGbjLG/Rm4PkU5TDfw5ghzVwh+nKKk/qB/QADyHWV7Z 2YQvFSQneSjB92mas4rZucC19RwRJ45WfWwdoJ5ZteMLNXxgIv2YCA4Q1rJrylmw RfPl/gFuIS9rrP8iQSjvLxdXVN1W5jqvdUO1sQTgFfxP+pxp1C64l+BICU9P8DF8 ecOB9rYhpsqE+MrC2CsICSL/zf9qt5Q= -----END CERTIFICATE-----Generated at Sat Aug 8 02:54:57 2026 by rpki-client