$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/9bfb400a-88db-3562-9bfd-34170cf4a41b.roa File: 9bfb400a-88db-3562-9bfd-34170cf4a41b.roa (raw, json) Hash identifier: DEc9swjIbuLjhzRvmhRHBzbddy3SPZEJ4BMOPqa+IB8= Subject key identifier: BA:19:57:E9:A0:48:1C:93:A0:31:F1:32:79:3F:8C:17:02:3E:2A:AD Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584EF8136AE50D72C98D216EE500 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/9bfb400a-88db-3562-9bfd-34170cf4a41b.roa Signing time: Wed 26 Aug 2026 21:28:06 +0000 ROA not before: Wed 26 Aug 2026 21:28:06 +0000 ROA not after: Tue 24 Nov 2026 22:28:06 +0000 asID: 14789 IP address blocks: 172.69.105.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f8:13:6a:e5:0d:72:c9:8d:21:6e:e5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 26 21:28:06 2026 GMT Not After : Nov 24 22:28:06 2026 GMT Subject: CN=304f3b48-d6de-409d-9022-4871357ee6e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:04:bd:bb:70:10:b2:0c:c1:59:52:5d:0b:0e: 74:71:71:cb:5a:0f:5f:81:de:38:c6:08:2f:c9:76: 6a:90:b4:15:7e:2c:36:cd:c5:6c:d5:07:83:8e:c6: 60:d5:ad:3d:dd:fb:f4:ae:7b:e4:e4:df:c1:b6:72: 2f:c9:90:a9:4d:5a:7d:26:3e:47:ea:75:a7:a8:a6: 23:0b:cd:d6:41:d3:40:df:bb:5b:17:0b:a3:9e:5f: 3b:01:ec:ed:8d:52:80:10:36:4e:31:dc:2b:a3:06: d3:9a:63:fd:a1:6d:77:4e:37:23:75:ea:25:fa:6c: ae:08:35:bd:60:9e:3a:a8:da:7e:83:d0:36:17:6d: 36:11:7a:a5:42:27:e3:6a:bb:79:b1:a8:87:b0:d1: 26:e6:d6:f9:1d:75:6d:c9:0b:12:c4:41:96:ef:6f: 77:c3:c4:1e:4d:23:45:48:e9:d3:85:a3:20:5b:d8: 32:71:f4:dd:52:0f:fa:7f:a0:16:c4:7d:1f:ff:c8: 57:5e:a1:ef:51:33:e3:67:6a:7d:ea:25:95:9c:58: 06:d6:08:0b:f7:5e:a4:29:85:91:74:ec:19:c3:3b: 75:cf:e4:2c:e3:29:94:76:ed:df:73:9a:17:27:e4: e1:1a:ff:d4:30:dc:53:75:f2:0f:e6:2a:63:d3:0a: 8b:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:19:57:E9:A0:48:1C:93:A0:31:F1:32:79:3F:8C:17:02:3E:2A:AD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/9bfb400a-88db-3562-9bfd-34170cf4a41b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.69.105.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:dd:5e:56:22:e9:48:6a:04:f2:9a:7a:36:95:7e:5c:43:3a: d0:dd:67:29:bf:f6:5d:2a:62:8d:0e:04:26:56:19:34:09:dd: 51:75:59:d2:00:6e:c6:c1:8c:5f:10:5e:be:44:c8:ff:f5:db: 3f:d3:76:50:db:b5:12:c9:0b:9b:1c:c6:4f:78:34:73:e0:7e: 23:47:fc:67:fe:0c:42:5f:d1:35:cc:06:45:43:26:7f:28:07: 4a:61:62:0c:25:09:50:9c:91:b2:8c:ba:02:b2:56:a9:4c:e8: 21:5e:b7:a0:be:fa:40:55:6c:fc:13:91:80:f2:32:bf:1f:50: d6:ab:45:b4:61:d8:6f:01:59:48:cf:c2:19:3a:46:a2:93:43: 79:9d:9e:8e:cd:1e:02:56:96:b5:2d:b2:11:71:b6:b1:20:91: 87:29:9f:dd:58:03:27:41:d9:33:dc:09:5a:d7:7b:e3:ca:e5: 30:3e:3c:28:63:2b:7d:8d:45:c9:be:fe:f5:d8:e3:04:87:6c: d1:08:69:f3:45:83:5a:05:c3:98:c5:7d:ce:f1:18:c0:96:84: 91:59:4e:ac:c4:ec:10:0c:3f:da:c1:b0:8e:dd:0e:ef:24:2f: 40:9b:af:b6:35:c3:19:2e:d3:55:70:80:80:a9:12:c4:6b:f3: 5d:99:f4:c3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE74E2rlDXLJjSFu5QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDgyNjIxMjgwNloXDTI2MTEyNDIyMjgwNlowLzEtMCsGA1UEAxMk MzA0ZjNiNDgtZDZkZS00MDlkLTkwMjItNDg3MTM1N2VlNmUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkQS9u3AQsgzBWVJdCw50cXHLWg9fgd44xggv yXZqkLQVfiw2zcVs1QeDjsZg1a093fv0rnvk5N/BtnIvyZCpTVp9Jj5H6nWnqKYj C83WQdNA37tbFwujnl87AeztjVKAEDZOMdwrowbTmmP9oW13Tjcjdeol+myuCDW9 YJ46qNp+g9A2F202EXqlQifjart5saiHsNEm5tb5HXVtyQsSxEGW7293w8QeTSNF SOnThaMgW9gycfTdUg/6f6AWxH0f/8hXXqHvUTPjZ2p96iWVnFgG1ggL916kKYWR dOwZwzt1z+Qs4ymUdu3fc5oXJ+ThGv/UMNxTdfIP5ipj0wqLoQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLoZV+mgSByToDHxMnk/jBcCPiqtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvOWJmYjQwMGEtODhkYi0z NTYyLTliZmQtMzQxNzBjZjRhNDFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEVpMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACfdXlYi6UhqBPKaejaVflxDOtDdZym/9l0qYo0OBCZWGTQJ3VF1WdIA bsbBjF8QXr5EyP/12z/TdlDbtRLJC5scxk94NHPgfiNH/Gf+DEJf0TXMBkVDJn8o B0phYgwlCVCckbKMugKyVqlM6CFet6C++kBVbPwTkYDyMr8fUNarRbRh2G8BWUjP whk6RqKTQ3mdno7NHgJWlrUtshFxtrEgkYcpn91YAydB2TPcCVrXe+PK5TA+PChj K32NRcm+/vXY4wSHbNEIafNFg1oFw5jFfc7xGMCWhJFZTqzE7BAMP9rBsI7dDu8k L0Cbr7Y1wxku01VwgICpEsRr812Z9MM= -----END CERTIFICATE-----Generated at Tue Sep 22 20:39:55 2026 by rpki-client