$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a7f284f9-b5dd-303e-a9d9-97bce4720082.roa File: a7f284f9-b5dd-303e-a9d9-97bce4720082.roa (raw, json) Hash identifier: GQnnsG2HDVMJ8ZnFFfpVBewRL4rl3bckeWQSZ4189I0= Subject key identifier: 78:69:78:B1:B1:2C:17:8E:AE:54:36:4B:43:59:3E:C9:87:86:42:42 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584EED523764AE09049DA52FB860 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a7f284f9-b5dd-303e-a9d9-97bce4720082.roa Signing time: Sun 23 Aug 2026 01:00:12 +0000 ROA not before: Sun 23 Aug 2026 01:00:12 +0000 ROA not after: Sat 21 Nov 2026 02:00:12 +0000 asID: 13335 IP address blocks: 172.66.192.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ed:52:37:64:ae:09:04:9d:a5:2f:b8:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 23 01:00:12 2026 GMT Not After : Nov 21 02:00:12 2026 GMT Subject: CN=45820acb-1ee8-4551-84c7-186e360a563b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:1b:f4:f2:1a:ff:73:d2:64:f2:8f:aa:30:f6: 89:9f:80:98:11:15:e6:bf:50:54:38:61:31:9a:5c: 78:8e:86:5f:f2:33:06:1f:43:94:d2:19:f2:2d:6c: 02:72:dd:7b:09:d1:38:b7:6d:a9:02:e4:07:ed:3a: d9:07:d3:07:0e:7f:29:d5:ee:f6:ab:39:e5:7c:f1: 05:17:e3:7c:f3:1f:ba:91:9c:95:36:d2:04:37:66: 9f:31:d0:1e:b6:16:a0:66:53:03:4d:22:74:43:b0: ff:b3:6e:a5:6c:82:46:2f:98:ec:dc:59:9f:81:84: 27:5a:ba:a2:98:2e:23:fc:a5:74:7d:fc:e4:56:13: 3e:5d:06:bc:39:39:ad:0a:a5:e0:db:ad:8d:4d:ed: 44:1a:fe:bd:15:c6:4d:08:fb:ce:09:a8:c5:87:6f: f4:ca:1c:78:b8:50:10:c4:76:9f:2e:32:bf:bb:5a: 80:5a:1e:0d:e9:42:a3:74:8e:4e:fd:f7:6a:1c:03: 90:28:05:47:d6:04:90:1f:57:90:2f:79:47:ed:e9: 68:ea:8f:db:d9:1f:a8:88:15:61:f2:3e:21:63:ce: e2:61:04:01:fb:52:e7:32:01:c9:d2:a0:99:d4:bc: 0f:f1:d0:07:ef:24:d9:e0:67:d4:a3:f0:50:69:a3: b7:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:69:78:B1:B1:2C:17:8E:AE:54:36:4B:43:59:3E:C9:87:86:42:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a7f284f9-b5dd-303e-a9d9-97bce4720082.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.66.192.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:69:81:03:62:a1:3a:02:9c:dc:32:92:47:da:6a:87:ad:f2: 42:9c:c0:d1:41:ad:63:0f:1b:31:e5:4a:09:48:77:3d:b3:10: 3d:f9:79:ab:b9:35:02:c5:e1:2d:6b:a7:00:69:21:b4:5b:b4: be:34:f1:98:6a:18:ac:3b:d3:a9:c3:9b:58:73:6f:cb:f4:0a: 16:51:53:9c:d9:c4:33:89:51:fb:ce:f6:46:cb:eb:3a:f9:83: 7d:4c:9b:b1:60:fa:09:4c:a5:d2:91:08:16:a9:ea:8c:1e:54: 96:ce:bd:aa:eb:a4:16:c8:8e:46:18:72:d6:0e:f4:03:a7:09: 46:92:5f:c5:bb:b9:60:74:5a:40:76:78:1c:1a:ad:4a:04:e4: 80:0a:bb:34:5c:58:a2:8d:ef:f4:4c:e0:01:74:1a:c5:5f:7a: b3:72:02:da:aa:db:6d:8b:51:16:c0:e2:3d:cb:4c:de:0b:27: 51:99:b8:59:a6:8f:a2:d1:0f:bc:0b:f4:60:90:1f:1d:1e:f9: 8f:54:11:3f:f3:7c:80:db:3d:fc:62:89:26:8d:60:4f:29:56: e3:77:5a:18:d7:90:9f:63:14:6a:11:43:b8:d4:25:05:3a:bb: 34:12:25:b0:0c:fd:3f:3a:3d:3c:18:20:42:04:01:43:9f:76: 53:d6:b9:d8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7tUjdkrgkEnaUvuGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDgyMzAxMDAxMloXDTI2MTEyMTAyMDAxMlowLzEtMCsGA1UEAxMk NDU4MjBhY2ItMWVlOC00NTUxLTg0YzctMTg2ZTM2MGE1NjNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlBv08hr/c9Jk8o+qMPaJn4CYERXmv1BUOGEx mlx4joZf8jMGH0OU0hnyLWwCct17CdE4t22pAuQH7TrZB9MHDn8p1e72qznlfPEF F+N88x+6kZyVNtIEN2afMdAethagZlMDTSJ0Q7D/s26lbIJGL5js3FmfgYQnWrqi mC4j/KV0ffzkVhM+XQa8OTmtCqXg262NTe1EGv69FcZNCPvOCajFh2/0yhx4uFAQ xHafLjK/u1qAWh4N6UKjdI5O/fdqHAOQKAVH1gSQH1eQL3lH7elo6o/b2R+oiBVh 8j4hY87iYQQB+1LnMgHJ0qCZ1LwP8dAH7yTZ4GfUo/BQaaO3UQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHhpeLGxLBeOrlQ2S0NZPsmHhkJCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvYTdmMjg0ZjktYjVkZC0z MDNlLWE5ZDktOTdiY2U0NzIwMDgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErELAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADppgQNioToCnNwykkfaaoet8kKcwNFBrWMPGzHlSglIdz2zED35eau5 NQLF4S1rpwBpIbRbtL408ZhqGKw706nDm1hzb8v0ChZRU5zZxDOJUfvO9kbL6zr5 g31Mm7Fg+glMpdKRCBap6oweVJbOvarrpBbIjkYYctYO9AOnCUaSX8W7uWB0WkB2 eBwarUoE5IAKuzRcWKKN7/RM4AF0GsVferNyAtqq222LURbA4j3LTN4LJ1GZuFmm j6LRD7wL9GCQHx0e+Y9UET/zfIDbPfxiiSaNYE8pVuN3WhjXkJ9jFGoRQ7jUJQU6 uzQSJbAM/T86PTwYIEIEAUOfdlPWudg= -----END CERTIFICATE-----Generated at Tue Sep 22 14:58:20 2026 by rpki-client