$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/99908df1-457f-3812-ba42-c5d989b81d93.roa File: 99908df1-457f-3812-ba42-c5d989b81d93.roa (raw, json) Hash identifier: DiusUPSGbYEIu5zZTk35youhAoKnGilckmI7I103LEY= Subject key identifier: E4:9E:75:47:F5:5F:7B:18:E6:A7:B7:6A:58:D4:2B:6B:20:D9:E2:67 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584EED5230F7704106FB6EAE1580 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/99908df1-457f-3812-ba42-c5d989b81d93.roa Signing time: Sun 23 Aug 2026 01:00:12 +0000 ROA not before: Sun 23 Aug 2026 01:00:12 +0000 ROA not after: Sat 21 Nov 2026 02:00:12 +0000 asID: 13335 IP address blocks: 172.69.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ed:52:30:f7:70:41:06:fb:6e:ae:15:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 23 01:00:12 2026 GMT Not After : Nov 21 02:00:12 2026 GMT Subject: CN=006f1c70-0e14-412e-a364-cddd248f6bb2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fb:08:05:09:d7:5c:83:37:6a:44:3a:81:20:05: cf:9f:69:c9:2a:f3:15:77:d4:b6:82:8d:7e:f3:b8: 1e:8a:77:e3:23:da:43:82:20:1e:f8:00:c5:70:79: e3:81:a9:5e:7d:5c:b2:46:2c:1a:67:e9:ea:87:5d: 55:e9:88:22:e4:bb:0a:09:cf:84:0a:f4:89:f7:2e: 74:30:c5:84:1e:d4:60:87:f9:6d:6b:bd:76:97:d9: 15:ed:a1:89:59:18:bf:d0:96:5b:65:28:85:84:ee: d6:69:08:49:27:eb:a4:f1:a7:05:65:49:0a:1a:e9: 29:2d:7a:43:70:1f:db:ae:14:11:07:05:fe:5e:62: 92:24:9f:8c:08:46:b6:0a:64:af:b8:1c:61:11:45: 1b:46:a6:df:49:74:25:39:8f:45:9c:95:cf:2a:b9: 35:29:e0:47:7c:db:c8:91:ae:4a:a9:7c:76:26:95: 37:75:5c:23:c1:88:94:d0:65:ca:5a:37:a8:c1:53: c9:0f:f3:d8:3e:c0:5f:9b:57:d3:62:c0:83:1d:eb: 16:8e:32:8a:a6:6e:96:06:14:9c:c1:93:2e:6c:1c: c1:6d:f7:61:1f:2b:50:b8:f6:e6:35:7d:a9:49:4e: e2:53:8b:18:de:2d:a8:31:7c:11:9d:7e:7d:a3:fd: a2:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:9E:75:47:F5:5F:7B:18:E6:A7:B7:6A:58:D4:2B:6B:20:D9:E2:67 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/99908df1-457f-3812-ba42-c5d989b81d93.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.69.21.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:c2:7f:7b:a5:59:dd:d4:31:3e:bc:c0:78:88:32:9e:50:ac: 66:d8:8d:d2:54:66:38:78:49:cf:32:86:93:65:3f:14:76:bf: 12:0f:d5:5d:5a:f7:c4:ea:84:fa:00:c9:1b:ea:71:f3:5a:b7: 3c:8c:03:a4:02:9a:98:bb:a7:f4:41:3d:dd:12:f9:ee:a0:b4: b1:d3:60:dd:26:19:3a:06:bb:ab:72:08:fc:a4:99:22:b3:0b: c1:ea:c1:bc:76:5a:15:4c:57:76:44:7f:0d:2e:6b:0f:fe:a9: c5:f1:a9:7b:88:5d:69:db:fc:99:14:1b:2b:5a:79:5b:3a:e9: 74:4c:49:24:ea:a9:3d:83:7d:ce:36:d1:a2:23:03:dc:53:cb: 54:fe:6f:66:8c:ab:cd:53:73:17:3c:96:fe:12:fe:af:23:5e: 0f:57:24:4d:49:60:75:d3:0d:34:1a:7f:7b:ec:78:65:82:9b: 06:05:4c:b2:7f:50:41:84:20:6a:77:1d:f8:2b:4b:40:db:7c: ad:6b:26:cc:9d:84:b5:f1:5a:45:80:87:36:c2:21:37:0b:40: 6d:c8:9f:54:cc:b5:37:50:78:b8:77:a6:73:45:05:69:0c:7c: 28:34:1a:74:b1:18:d1:dd:3a:13:af:df:2b:22:5c:d7:2f:08: 0c:80:1f:52 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7tUjD3cEEG+26uFYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDgyMzAxMDAxMloXDTI2MTEyMTAyMDAxMlowLzEtMCsGA1UEAxMk MDA2ZjFjNzAtMGUxNC00MTJlLWEzNjQtY2RkZDI0OGY2YmIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+wgFCddcgzdqRDqBIAXPn2nJKvMVd9S2go1+ 87geinfjI9pDgiAe+ADFcHnjgalefVyyRiwaZ+nqh11V6Ygi5LsKCc+ECvSJ9y50 MMWEHtRgh/lta712l9kV7aGJWRi/0JZbZSiFhO7WaQhJJ+uk8acFZUkKGukpLXpD cB/brhQRBwX+XmKSJJ+MCEa2CmSvuBxhEUUbRqbfSXQlOY9FnJXPKrk1KeBHfNvI ka5KqXx2JpU3dVwjwYiU0GXKWjeowVPJD/PYPsBfm1fTYsCDHesWjjKKpm6WBhSc wZMubBzBbfdhHytQuPbmNX2pSU7iU4sY3i2oMXwRnX59o/2imwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOSedUf1X3sY5qe3aljUK2sg2eJnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvOTk5MDhkZjEtNDU3Zi0z ODEyLWJhNDItYzVkOTg5YjgxZDkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEUVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAITCf3ulWd3UMT68wHiIMp5QrGbYjdJUZjh4Sc8yhpNlPxR2vxIP1V1a 98TqhPoAyRvqcfNatzyMA6QCmpi7p/RBPd0S+e6gtLHTYN0mGToGu6tyCPykmSKz C8Hqwbx2WhVMV3ZEfw0uaw/+qcXxqXuIXWnb/JkUGytaeVs66XRMSSTqqT2Dfc42 0aIjA9xTy1T+b2aMq81Tcxc8lv4S/q8jXg9XJE1JYHXTDTQaf3vseGWCmwYFTLJ/ UEGEIGp3HfgrS0DbfK1rJsydhLXxWkWAhzbCITcLQG3In1TMtTdQeLh3pnNFBWkM fCg0GnSxGNHdOhOv3ysiXNcvCAyAH1I= -----END CERTIFICATE-----Generated at Tue Sep 22 17:12:07 2026 by rpki-client