$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ab39267d-e890-3685-bf10-579c4f6ef552.roa File: ab39267d-e890-3685-bf10-579c4f6ef552.roa (raw, json) Hash identifier: QZl1kPq+lxxAfjSO8AEj+LMT5nYo1/hgk2I16VRrpnY= Subject key identifier: 59:92:B2:94:49:8C:13:6C:3D:94:AF:B1:E0:5D:7F:F7:C7:9D:98:5A Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584EEEB77902E8AC7D61BFFB2BC0 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ab39267d-e890-3685-bf10-579c4f6ef552.roa Signing time: Sun 23 Aug 2026 13:00:12 +0000 ROA not before: Sun 23 Aug 2026 13:00:12 +0000 ROA not after: Sat 21 Nov 2026 14:00:12 +0000 asID: 13335 IP address blocks: 172.69.212.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ee:b7:79:02:e8:ac:7d:61:bf:fb:2b:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 23 13:00:12 2026 GMT Not After : Nov 21 14:00:12 2026 GMT Subject: CN=5c24418f-eb92-4fce-8eab-d44d1eede399 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:05:83:3a:3b:65:0b:a6:1d:dd:2a:ab:ac:54: 42:6e:aa:6e:5c:c4:02:b1:f2:3a:b4:a3:a1:78:3f: c6:fe:3d:27:58:1b:0b:be:7b:b8:0e:24:d6:c6:56: b5:49:6c:24:67:6f:04:03:7c:95:eb:8a:84:ba:69: 89:ac:43:f8:a6:f6:ee:26:4e:69:f6:91:e5:26:2c: 9f:a2:2c:5c:1e:59:4c:61:21:5b:2c:02:73:91:16: b7:44:a3:08:c2:e6:9f:a3:ac:71:ce:44:39:24:e6: b6:cc:5b:40:82:de:f7:c9:e1:45:38:00:73:b7:67: 52:1b:27:b2:a4:e7:42:b9:b3:b8:9d:4d:f9:49:5d: 46:e4:00:f6:2a:94:a5:dc:06:21:98:27:06:ae:f0: 9c:a4:ca:74:73:36:fa:ae:ec:6f:2f:99:3d:1a:87: ea:58:35:00:54:12:a3:3f:19:ed:4a:33:9d:4b:e1: f4:9d:1c:3a:9e:e3:c1:cb:0d:12:6a:43:eb:e3:57: 9c:50:ff:2f:c9:27:e0:ed:12:4d:67:fb:9d:0c:6d: 25:db:f5:b1:a8:76:84:0c:15:a6:61:02:aa:d4:b3: 38:e6:29:c9:7b:5c:f4:c4:a3:80:c9:3a:ad:af:11: fc:99:bf:94:a9:16:ce:cd:01:6f:34:ea:80:da:c1: ac:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:92:B2:94:49:8C:13:6C:3D:94:AF:B1:E0:5D:7F:F7:C7:9D:98:5A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ab39267d-e890-3685-bf10-579c4f6ef552.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.69.212.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:be:ac:cc:01:63:12:56:23:06:d1:fd:38:ab:e7:6f:1f:74: 54:1f:35:ce:b9:96:04:6b:6a:71:8d:a8:eb:11:f1:af:52:2f: ad:a8:0d:7a:be:84:f3:2a:01:b6:6f:4b:2a:06:84:b3:49:85: 73:8f:56:4b:8d:6c:05:81:fb:0a:c2:ec:7c:22:90:04:3d:d5: 89:4c:23:80:57:ca:cb:08:27:15:79:32:fd:5a:a9:92:3b:39: 76:34:80:6c:a3:54:12:4d:f7:49:c5:86:48:51:ba:3b:0f:97: cb:40:93:db:81:8a:84:e4:30:8a:76:06:e8:a9:9d:ad:0b:e7: ad:c1:c8:06:b4:60:42:05:1b:da:08:bb:42:30:10:82:97:0b: 09:4a:29:f7:c1:6c:22:23:c9:e1:9f:be:af:b5:3a:b2:fb:45: 37:fa:70:16:9b:63:f8:37:e4:f1:3e:05:35:60:13:29:ba:f5: ba:a2:ff:a0:c0:6a:32:7e:71:61:d0:4b:2e:f4:cb:1e:d0:5f: eb:48:bc:e5:3b:51:d3:f7:6b:6f:10:4f:35:23:f5:f9:bb:9a: eb:40:34:93:1e:eb:df:cc:98:70:76:38:ea:4b:00:76:b5:d3: b5:ae:01:0e:75:5c:b3:dc:6d:60:29:3f:11:d1:cb:20:10:09: b0:af:b5:4a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7ut3kC6Kx9Yb/7K8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDgyMzEzMDAxMloXDTI2MTEyMTE0MDAxMlowLzEtMCsGA1UEAxMk NWMyNDQxOGYtZWI5Mi00ZmNlLThlYWItZDQ0ZDFlZWRlMzk5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhQWDOjtlC6Yd3SqrrFRCbqpuXMQCsfI6tKOh eD/G/j0nWBsLvnu4DiTWxla1SWwkZ28EA3yV64qEummJrEP4pvbuJk5p9pHlJiyf oixcHllMYSFbLAJzkRa3RKMIwuafo6xxzkQ5JOa2zFtAgt73yeFFOABzt2dSGyey pOdCubO4nU35SV1G5AD2KpSl3AYhmCcGrvCcpMp0czb6ruxvL5k9GofqWDUAVBKj PxntSjOdS+H0nRw6nuPByw0SakPr41ecUP8vySfg7RJNZ/udDG0l2/WxqHaEDBWm YQKq1LM45inJe1z0xKOAyTqtrxH8mb+UqRbOzQFvNOqA2sGsYwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFmSspRJjBNsPZSvseBdf/fHnZhaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvYWIzOTI2N2QtZTg5MC0z Njg1LWJmMTAtNTc5YzRmNmVmNTUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEXUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGq+rMwBYxJWIwbR/Tir528fdFQfNc65lgRranGNqOsR8a9SL62oDXq+ hPMqAbZvSyoGhLNJhXOPVkuNbAWB+wrC7HwikAQ91YlMI4BXyssIJxV5Mv1aqZI7 OXY0gGyjVBJN90nFhkhRujsPl8tAk9uBioTkMIp2Buipna0L563ByAa0YEIFG9oI u0IwEIKXCwlKKffBbCIjyeGfvq+1OrL7RTf6cBabY/g35PE+BTVgEym69bqi/6DA ajJ+cWHQSy70yx7QX+tIvOU7UdP3a28QTzUj9fm7mutANJMe69/MmHB2OOpLAHa1 07WuAQ51XLPcbWApPxHRyyAQCbCvtUo= -----END CERTIFICATE-----Generated at Tue Sep 22 10:41:21 2026 by rpki-client