$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/bab89aa8-f770-324f-b2eb-0ca45279ba2e.roa File: bab89aa8-f770-324f-b2eb-0ca45279ba2e.roa (raw, json) Hash identifier: c8ody2E+VoQHDUsMvdVXBBudcCC1vm59I14SKPLXTjE= Subject key identifier: 03:F5:A5:A0:29:CE:F7:77:19:B2:C7:B5:9F:79:79:B0:61:86:27:BD Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584F8F3DD7618CF8995BEB93DFB8 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/bab89aa8-f770-324f-b2eb-0ca45279ba2e.roa Signing time: Tue 20 Oct 2026 01:00:12 +0000 ROA not before: Tue 20 Oct 2026 01:00:12 +0000 ROA not after: Mon 18 Jan 2027 02:00:12 +0000 asID: 13335 IP address blocks: 172.66.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 28 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:8f:3d:d7:61:8c:f8:99:5b:eb:93:df:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 20 01:00:12 2026 GMT Not After : Jan 18 02:00:12 2027 GMT Subject: CN=49251ccc-5644-4792-9467-533d30ab56cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:fd:5e:ab:d1:9d:27:5e:7e:34:ba:b3:4f:94: 68:08:1c:d4:b3:e5:fe:ef:1a:6f:37:60:7b:7b:55: ff:17:16:03:35:a8:76:d0:80:2d:46:36:85:4a:8d: 89:99:b8:78:ab:e7:a7:34:c8:43:15:0f:28:fa:c9: bb:dd:26:74:d5:dc:68:27:ce:43:97:2f:a4:79:c7: 8a:1c:2a:98:76:3f:a3:44:07:c7:ba:c1:d4:4d:04: 96:e2:78:ac:57:98:cd:12:f4:82:4d:86:90:47:4a: fe:33:80:2b:6d:2f:87:56:3c:c8:29:5a:6c:d4:ca: 10:81:a8:a7:72:da:2a:8a:8f:4c:c1:a4:90:84:1e: ed:0a:c0:30:f5:58:2c:35:4e:e5:b6:b0:e2:4d:f7: 30:b2:9c:ca:a2:ef:bc:7b:b7:4e:88:a4:67:e3:bd: 0f:64:14:0d:63:6b:a3:54:73:b8:47:b5:79:cd:fa: e7:8f:e1:8c:1a:e6:94:66:24:10:3e:d4:f2:c9:08: 74:d3:4e:66:d8:7e:d2:17:7a:fc:e5:59:6c:63:4c: d9:0e:0f:45:95:73:8f:49:82:b9:7c:ef:54:4e:72: 73:04:53:33:37:10:98:2d:fc:9c:6f:20:a9:b7:59: 44:61:07:99:32:60:17:38:5a:93:45:fe:f8:9a:c9: 24:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:F5:A5:A0:29:CE:F7:77:19:B2:C7:B5:9F:79:79:B0:61:86:27:BD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/bab89aa8-f770-324f-b2eb-0ca45279ba2e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.66.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b3:ae:04:99:aa:6f:fc:56:e0:b5:fd:4c:c7:39:d2:ad:91:ec: 0d:d8:df:16:4d:b3:8f:ef:f7:6a:43:b2:23:05:51:51:7d:0e: ce:06:39:1d:d1:39:f7:b0:06:a7:01:90:a4:2d:cc:31:65:a1: 8a:64:d2:7e:8b:6e:46:72:d0:ec:14:85:66:9d:f2:e7:1a:55: b5:53:eb:48:fb:3e:dc:9d:00:a3:52:42:53:ad:1e:dc:db:4d: 41:d8:ab:7f:bc:5d:d6:6a:14:36:db:ed:a7:a5:35:9d:5c:71: 76:4a:70:81:14:52:f6:43:5d:66:cd:c2:7c:76:b7:52:22:c2: 92:82:58:0b:85:7c:a8:82:27:02:1e:b2:5d:2d:ec:38:a7:dd: d4:3a:8f:3d:f8:6d:8e:94:58:38:46:0d:58:55:9a:27:4f:e9: 77:e6:ba:5f:0b:5c:ed:7b:7e:73:dd:e5:fb:e4:1f:81:9d:b1: 6d:4e:18:17:ee:9a:5f:3a:fc:f6:3e:fb:7e:53:cc:e7:06:5c: 8f:23:75:8a:a3:a3:ba:54:56:67:cb:f3:96:4a:78:4f:11:06: 8a:1d:cb:9c:86:f7:ff:bd:bc:94:c7:e8:f8:dd:48:c3:44:1c: 3e:b6:87:cf:88:48:75:da:28:09:9d:08:df:33:6e:4a:0b:b1: 5b:ab:58:a2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+PPddhjPiZW+uT37gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MTAyMDAxMDAxMloXDTI3MDExODAyMDAxMlowLzEtMCsGA1UEAxMk NDkyNTFjY2MtNTY0NC00NzkyLTk0NjctNTMzZDMwYWI1NmNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAif1eq9GdJ15+NLqzT5RoCBzUs+X+7xpvN2B7 e1X/FxYDNah20IAtRjaFSo2Jmbh4q+enNMhDFQ8o+sm73SZ01dxoJ85Dly+keceK HCqYdj+jRAfHusHUTQSW4nisV5jNEvSCTYaQR0r+M4ArbS+HVjzIKVps1MoQgain ctoqio9MwaSQhB7tCsAw9VgsNU7ltrDiTfcwspzKou+8e7dOiKRn470PZBQNY2uj VHO4R7V5zfrnj+GMGuaUZiQQPtTyyQh0005m2H7SF3r85VlsY0zZDg9FlXOPSYK5 fO9UTnJzBFMzNxCYLfycbyCpt1lEYQeZMmAXOFqTRf74mskkWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAP1paApzvd3GbLHtZ95ebBhhie9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvYmFiODlhYTgtZjc3MC0z MjRmLWIyZWItMGNhNDUyNzliYTJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErEKAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALOuBJmqb/xW4LX9TMc50q2R7A3Y3xZNs4/v92pDsiMFUVF9Ds4GOR3R OfewBqcBkKQtzDFloYpk0n6LbkZy0OwUhWad8ucaVbVT60j7PtydAKNSQlOtHtzb TUHYq3+8XdZqFDbb7aelNZ1ccXZKcIEUUvZDXWbNwnx2t1IiwpKCWAuFfKiCJwIe sl0t7Din3dQ6jz34bY6UWDhGDVhVmidP6Xfmul8LXO17fnPd5fvkH4GdsW1OGBfu ml86/PY++35TzOcGXI8jdYqjo7pUVmfL85ZKeE8RBoody5yG9/+9vJTH6PjdSMNE HD62h8+ISHXaKAmdCN8zbkoLsVurWKI= -----END CERTIFICATE-----Generated at Tue Oct 27 13:05:55 2026 by rpki-client