$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c9f336b6-115d-342a-936e-43028155e65f.roa File: c9f336b6-115d-342a-936e-43028155e65f.roa (raw, json) Hash identifier: 9zxnnvwvCEtMB4+7h6QE9laWsKtaGnje8lFfpC8sJ5w= Subject key identifier: E2:A0:A7:F8:AE:C6:23:B1:01:91:4D:CC:CB:42:E1:B7:1F:97:F0:8D Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584EE42345A979D6ECD7F486E800 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c9f336b6-115d-342a-936e-43028155e65f.roa Signing time: Wed 19 Aug 2026 18:03:53 +0000 ROA not before: Wed 19 Aug 2026 18:03:53 +0000 ROA not after: Mon 07 Feb 2028 05:00:00 +0000 asID: 13335 IP address blocks: 172.69.157.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e4:23:45:a9:79:d6:ec:d7:f4:86:e8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 19 18:03:53 2026 GMT Not After : Feb 7 05:00:00 2028 GMT Subject: CN=bdaffdd8-9a98-46e9-bb16-42498941ae45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:c2:77:29:d9:3d:7a:e2:02:2c:98:e1:9b:c6: c7:62:bc:e8:5c:6e:09:6f:77:74:b6:5c:fb:c2:10: 00:6c:02:b0:42:73:84:89:bd:cf:72:5a:6a:58:ff: 5a:49:14:9d:66:65:3c:1f:79:c9:53:7d:82:53:49: 56:58:6b:99:ef:bf:74:14:73:0c:0e:ea:79:75:c6: fa:b6:a9:23:96:7c:b7:92:22:ec:4e:0f:ff:a0:2f: e9:83:a4:47:8e:a0:ad:87:b4:a4:50:eb:20:b8:b8: bc:56:b7:84:6c:68:d7:4a:b4:49:89:5a:12:cf:f7: 8d:a9:72:03:86:46:d2:04:fa:18:1f:be:00:eb:f0: d3:f8:b6:12:b2:31:12:8b:67:81:20:df:af:9f:e1: d1:8f:5a:3f:89:2c:b3:02:a3:1a:74:9e:91:c5:05: 26:c8:9f:41:fe:57:04:ad:9e:af:93:5d:62:e6:bb: b5:63:ee:54:1c:83:65:7c:51:eb:3d:dd:ba:e8:3d: f4:bf:2e:eb:1c:9d:3b:b0:61:19:a6:01:c0:8f:fc: 2e:2a:61:d3:f3:70:24:4a:42:ec:16:9d:9e:75:03: 01:95:a0:b6:7c:e1:7a:54:31:ca:66:52:17:73:7f: 6b:cc:8d:60:6b:c9:f8:62:17:82:db:20:83:df:ce: c8:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:A0:A7:F8:AE:C6:23:B1:01:91:4D:CC:CB:42:E1:B7:1F:97:F0:8D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c9f336b6-115d-342a-936e-43028155e65f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.69.157.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:0e:7c:75:6f:45:21:f2:55:e5:fb:27:ab:b0:37:8c:1a:ec: b4:5a:94:88:d6:74:43:62:6e:04:cc:57:ef:9e:89:ab:12:4a: 96:d7:14:8b:e7:f7:b9:8d:ef:c9:51:01:11:24:f2:a3:02:25: 56:a1:36:4f:85:e3:f1:20:4c:45:88:f2:de:3c:64:a4:ee:76: e5:1a:bf:84:65:9d:2f:a3:54:5a:99:77:1f:18:cb:7c:0c:2f: e0:40:8c:6f:31:11:27:e9:5e:de:5c:67:54:97:01:1d:19:4d: a2:97:0d:fb:d0:23:9b:03:5a:09:3c:0f:ce:95:f2:3a:6e:56: 54:5d:a7:d4:68:b8:59:9a:e4:d1:07:ce:f7:37:e6:1f:51:6f: 40:15:0f:09:e0:8d:10:ae:e3:11:75:9c:93:94:f4:e8:a6:76: 47:cb:0a:ff:14:a8:a2:8d:71:0e:c8:14:96:e7:d8:6c:73:61: 32:92:34:2c:ae:1b:ec:ae:d2:07:a6:db:a4:3f:10:2d:68:5e: e7:fc:f3:91:5c:e6:f9:a1:ea:fd:0e:00:57:b4:dd:ee:af:08: ec:1c:35:c9:62:6b:1b:00:35:3d:bf:1c:50:10:2f:9f:61:a7: 9a:22:66:c8:8a:59:c8:c0:3b:7d:3f:40:54:5d:60:52:eb:e8: 52:8b:e6:c9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7kI0Wpedbs1/SG6AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDgxOTE4MDM1M1oXDTI4MDIwNzA1MDAwMFowLzEtMCsGA1UEAxMk YmRhZmZkZDgtOWE5OC00NmU5LWJiMTYtNDI0OTg5NDFhZTQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApsJ3Kdk9euICLJjhm8bHYrzoXG4Jb3d0tlz7 whAAbAKwQnOEib3PclpqWP9aSRSdZmU8H3nJU32CU0lWWGuZ7790FHMMDup5dcb6 tqkjlny3kiLsTg//oC/pg6RHjqCth7SkUOsguLi8VreEbGjXSrRJiVoSz/eNqXID hkbSBPoYH74A6/DT+LYSsjESi2eBIN+vn+HRj1o/iSyzAqMadJ6RxQUmyJ9B/lcE rZ6vk11i5ru1Y+5UHINlfFHrPd266D30vy7rHJ07sGEZpgHAj/wuKmHT83AkSkLs Fp2edQMBlaC2fOF6VDHKZlIXc39rzI1ga8n4YheC2yCD387IywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOKgp/iuxiOxAZFNzMtC4bcfl/CNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvYzlmMzM2YjYtMTE1ZC0z NDJhLTkzNmUtNDMwMjgxNTVlNjVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEWdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEEOfHVvRSHyVeX7J6uwN4wa7LRalIjWdENibgTMV++eiasSSpbXFIvn 97mN78lRAREk8qMCJVahNk+F4/EgTEWI8t48ZKTuduUav4RlnS+jVFqZdx8Yy3wM L+BAjG8xESfpXt5cZ1SXAR0ZTaKXDfvQI5sDWgk8D86V8jpuVlRdp9RouFma5NEH zvc35h9Rb0AVDwngjRCu4xF1nJOU9OimdkfLCv8UqKKNcQ7IFJbn2GxzYTKSNCyu G+yu0gem26Q/EC1oXuf885Fc5vmh6v0OAFe03e6vCOwcNcliaxsANT2/HFAQL59h p5oiZsiKWcjAO30/QFRdYFLr6FKL5sk= -----END CERTIFICATE-----Generated at Tue Sep 1 01:58:30 2026 by rpki-client