$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/cfc7b722-1cc4-3cc9-a16f-a9855a2d1e55.roa File: cfc7b722-1cc4-3cc9-a16f-a9855a2d1e55.roa (raw, json) Hash identifier: JR/aFhgE0Mn1j98uwo71NKCit/1SefZdC+uaJeFYgvE= Subject key identifier: 57:48:0A:18:B4:CA:4C:52:78:54:A6:61:8A:BD:F7:3F:54:62:E9:94 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584ED9C76ACFC491918E49288400 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/cfc7b722-1cc4-3cc9-a16f-a9855a2d1e55.roa Signing time: Sun 16 Aug 2026 01:00:14 +0000 ROA not before: Sun 16 Aug 2026 01:00:14 +0000 ROA not after: Sat 14 Nov 2026 02:00:14 +0000 asID: 14789 IP address blocks: 172.69.142.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:d9:c7:6a:cf:c4:91:91:8e:49:28:84:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 16 01:00:14 2026 GMT Not After : Nov 14 02:00:14 2026 GMT Subject: CN=d3248ad5-c8a5-47e3-b66a-87d508131ebf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:49:30:c6:f9:f8:bb:28:cb:72:21:ec:7b:01: 40:14:97:01:d4:45:01:76:d2:09:ea:c4:c9:f8:e1: 59:4d:02:93:07:2b:b4:d5:97:6e:82:9f:46:83:41: 41:b3:80:b8:98:39:7b:a5:4a:3b:71:d9:c3:22:59: a8:b1:e9:53:1c:67:82:a3:a5:f2:26:43:47:3a:f4: 12:12:57:86:67:62:19:7b:24:83:d8:7c:96:8a:53: 12:5e:03:04:01:72:d2:f7:42:ca:b9:41:33:8b:76: 99:6e:01:3a:fd:7b:d8:6d:86:a4:76:5b:96:bb:40: f6:73:7f:6f:d8:0e:9c:d9:a0:16:d8:d2:48:47:64: 89:9e:5d:16:32:11:2c:0b:00:91:69:57:ed:9d:ca: ff:b9:8a:7a:bb:ed:ff:34:bd:a5:cc:93:77:f1:bd: 83:61:c3:3a:98:5f:f3:e9:97:cb:bf:3c:8f:f3:b6: 29:25:ea:9d:36:4a:1d:6b:18:a3:82:e8:1d:bc:a0: 2b:b5:c9:7c:51:7d:ce:4d:1a:f7:37:07:96:87:ec: 2e:d7:bd:f8:59:53:a6:8d:89:5b:bc:b0:0b:97:b9: 7f:ec:7e:8f:fa:fa:86:17:04:29:70:d8:7d:d2:29: 92:f8:59:88:d6:63:d7:3f:a4:00:6c:b3:e8:98:77: f0:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:48:0A:18:B4:CA:4C:52:78:54:A6:61:8A:BD:F7:3F:54:62:E9:94 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/cfc7b722-1cc4-3cc9-a16f-a9855a2d1e55.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.69.142.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:bc:f1:30:50:48:35:1b:d8:24:0d:90:e8:eb:3b:43:5c:5d: 2c:49:57:65:62:f9:50:fe:e2:5e:4a:91:72:b1:1b:b1:01:b3: cc:f8:e9:17:a1:71:9c:8c:00:5a:03:83:35:46:ab:cc:df:c9: 24:fe:f3:2d:e2:e0:42:95:97:f4:00:93:c9:f6:7b:10:e0:85: 25:cb:e1:3f:fc:0e:31:d9:04:55:a2:af:d0:0f:fb:84:43:2f: de:bc:ea:99:42:ee:30:65:e7:8e:95:45:94:6c:de:c8:8f:ab: 50:2f:b4:c3:da:e6:1c:64:3f:58:85:07:5a:f2:65:98:16:30: 53:16:d6:23:b4:30:b7:27:aa:bc:7f:7c:f2:0b:71:6c:ce:50: 92:7c:42:35:f0:53:e8:50:1e:21:6d:65:05:f0:bf:e4:c5:63: 5a:1b:01:fc:47:81:a8:4a:21:44:0f:ce:ba:77:d4:55:b1:4e: 32:cc:02:9e:7c:59:a6:39:d8:37:bf:d3:df:6d:9e:36:39:e5: 79:d0:54:2b:7f:11:03:d7:e6:2d:d8:95:55:5e:cb:b8:aa:95: 71:d1:f8:a6:17:ca:3c:18:8d:7e:f4:ab:6d:bf:77:64:7e:15: 5f:32:3f:6b:db:46:bf:e8:15:d1:18:57:4b:24:b3:8e:6a:c4: 1d:ca:b5:76 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7Zx2rPxJGRjkkohAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDgxNjAxMDAxNFoXDTI2MTExNDAyMDAxNFowLzEtMCsGA1UEAxMk ZDMyNDhhZDUtYzhhNS00N2UzLWI2NmEtODdkNTA4MTMxZWJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkEkwxvn4uyjLciHsewFAFJcB1EUBdtIJ6sTJ +OFZTQKTByu01Zdugp9Gg0FBs4C4mDl7pUo7cdnDIlmoselTHGeCo6XyJkNHOvQS EleGZ2IZeySD2HyWilMSXgMEAXLS90LKuUEzi3aZbgE6/XvYbYakdluWu0D2c39v 2A6c2aAW2NJIR2SJnl0WMhEsCwCRaVftncr/uYp6u+3/NL2lzJN38b2DYcM6mF/z 6ZfLvzyP87YpJeqdNkodaxijgugdvKArtcl8UX3OTRr3NweWh+wu1734WVOmjYlb vLALl7l/7H6P+vqGFwQpcNh90imS+FmI1mPXP6QAbLPomHfwGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFdIChi0ykxSeFSmYYq99z9UYumUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvY2ZjN2I3MjItMWNjNC0z Y2M5LWExNmYtYTk4NTVhMmQxZTU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEWOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACa88TBQSDUb2CQNkOjrO0NcXSxJV2Vi+VD+4l5KkXKxG7EBs8z46Reh cZyMAFoDgzVGq8zfyST+8y3i4EKVl/QAk8n2exDghSXL4T/8DjHZBFWir9AP+4RD L9686plC7jBl546VRZRs3siPq1AvtMPa5hxkP1iFB1ryZZgWMFMW1iO0MLcnqrx/ fPILcWzOUJJ8QjXwU+hQHiFtZQXwv+TFY1obAfxHgahKIUQPzrp31FWxTjLMAp58 WaY52De/099tnjY55XnQVCt/EQPX5i3YlVVey7iqlXHR+KYXyjwYjX70q22/d2R+ FV8yP2vbRr/oFdEYV0sks45qxB3KtXY= -----END CERTIFICATE-----Generated at Tue Sep 22 07:55:18 2026 by rpki-client