$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d07a4467-d12d-326c-b29c-7b0c1f89bec0.roa File: d07a4467-d12d-326c-b29c-7b0c1f89bec0.roa (raw, json) Hash identifier: h4CWCIPYbnZKa3Gt2qvQ4Rm2WHGFuSOSttxxePmn1tI= Subject key identifier: 00:EC:27:F1:E8:9E:B5:69:18:39:90:52:6F:BD:65:FF:82:9A:BF:A3 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584EEEB7756B7C268586A76A28C0 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d07a4467-d12d-326c-b29c-7b0c1f89bec0.roa Signing time: Sun 23 Aug 2026 13:00:12 +0000 ROA not before: Sun 23 Aug 2026 13:00:12 +0000 ROA not after: Sat 21 Nov 2026 14:00:12 +0000 asID: 13335 IP address blocks: 172.69.36.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ee:b7:75:6b:7c:26:85:86:a7:6a:28:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 23 13:00:12 2026 GMT Not After : Nov 21 14:00:12 2026 GMT Subject: CN=8f249171-5daf-4e75-a156-0dea08713b2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:4b:b3:b9:a3:ea:7b:ab:c2:8c:3d:52:24:c3: 2c:f2:20:3d:e6:9a:69:68:e2:2a:47:56:04:b8:b8: 49:7a:6f:ee:bf:27:7f:4f:4e:87:78:3f:f0:df:f1: a1:35:7d:20:28:af:e8:ac:de:1f:dc:8b:52:41:f8: 15:b9:a8:51:27:26:fb:b9:0c:4a:fd:9f:ed:9e:6a: 33:cb:21:36:66:f7:f2:8a:2f:da:b5:98:a9:80:c0: cf:02:05:1b:2b:32:db:5a:c7:37:ba:c3:0e:63:42: 9f:ee:d3:5f:05:88:08:2e:0f:a0:4f:3a:e9:8f:81: 34:9f:89:c0:b2:3b:25:a4:a6:fc:6d:c7:29:d3:73: a9:3c:3b:3c:06:ef:54:5d:05:3a:92:bc:4e:24:9f: 0c:b4:d5:a2:c4:c6:87:79:4c:db:00:38:3f:02:f4: 4b:18:26:33:74:39:5f:85:d9:3d:58:18:fe:b1:f8: 03:9c:ca:42:09:a5:cd:c0:00:78:96:b0:0d:0a:16: 31:e2:b5:48:f7:39:2e:4b:e1:c3:c4:13:53:fe:9e: f7:b0:18:52:25:1e:c3:f6:c9:4c:cc:0f:f2:4c:2b: 4c:b3:20:df:11:a1:46:ae:9f:79:57:b1:80:20:2c: 5d:a2:a1:bd:3e:0f:81:75:d1:32:f6:5b:3d:0e:35: 33:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:EC:27:F1:E8:9E:B5:69:18:39:90:52:6F:BD:65:FF:82:9A:BF:A3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d07a4467-d12d-326c-b29c-7b0c1f89bec0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.69.36.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:1e:13:39:4f:64:dd:96:41:18:33:aa:0f:52:e0:4e:50:de: c4:fa:fe:65:bb:c7:13:92:c8:1d:e6:5a:9a:74:12:af:32:95: 7a:a9:19:09:2a:1c:88:17:39:d8:b8:9a:4d:80:fc:00:18:6e: ff:03:43:9c:68:d8:3a:44:fd:56:a3:e1:b6:d0:d8:cc:82:8b: 8f:85:b1:af:59:ad:c5:78:ed:91:63:1c:05:49:9d:fa:22:d3: 00:ac:20:01:2d:8b:11:05:36:4b:e2:24:80:b4:01:94:79:18: f8:ef:ba:57:04:f2:22:9d:4f:35:2e:2a:6a:b1:36:6c:da:52: db:19:32:09:86:b6:f7:e0:4a:e4:f6:d4:29:91:c3:b9:a3:bc: 86:69:a9:c9:b7:0b:e4:30:68:47:12:bf:f4:56:da:92:4f:02: c4:0a:17:bd:07:1d:db:71:41:cd:59:8f:cf:1e:58:b8:1f:f5: 21:9c:f4:4e:d0:b6:21:c8:7a:e5:5f:9e:a6:b4:e5:1b:83:84: 37:e0:55:0b:2c:f1:39:0f:8b:a6:f6:a2:81:d0:c8:bc:e3:8d: ad:fe:b8:a1:e3:53:4d:94:d9:5b:92:8a:78:0c:d4:ee:9a:51: c5:47:48:1b:bb:fe:fe:4a:9c:ca:fe:2f:4e:da:38:ab:d9:68: 74:18:34:e8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7ut3VrfCaFhqdqKMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDgyMzEzMDAxMloXDTI2MTEyMTE0MDAxMlowLzEtMCsGA1UEAxMk OGYyNDkxNzEtNWRhZi00ZTc1LWExNTYtMGRlYTA4NzEzYjJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtkuzuaPqe6vCjD1SJMMs8iA95pppaOIqR1YE uLhJem/uvyd/T06HeD/w3/GhNX0gKK/orN4f3ItSQfgVuahRJyb7uQxK/Z/tnmoz yyE2Zvfyii/atZipgMDPAgUbKzLbWsc3usMOY0Kf7tNfBYgILg+gTzrpj4E0n4nA sjslpKb8bccp03OpPDs8Bu9UXQU6krxOJJ8MtNWixMaHeUzbADg/AvRLGCYzdDlf hdk9WBj+sfgDnMpCCaXNwAB4lrANChYx4rVI9zkuS+HDxBNT/p73sBhSJR7D9slM zA/yTCtMsyDfEaFGrp95V7GAICxdoqG9Pg+BddEy9ls9DjUz5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFADsJ/HonrVpGDmQUm+9Zf+Cmr+jMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvZDA3YTQ0NjctZDEyZC0z MjZjLWIyOWMtN2IwYzFmODliZWMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrEUkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJUeEzlPZN2WQRgzqg9S4E5Q3sT6/mW7xxOSyB3mWpp0Eq8ylXqpGQkq HIgXOdi4mk2A/AAYbv8DQ5xo2DpE/Vaj4bbQ2MyCi4+Fsa9ZrcV47ZFjHAVJnfoi 0wCsIAEtixEFNkviJIC0AZR5GPjvulcE8iKdTzUuKmqxNmzaUtsZMgmGtvfgSuT2 1CmRw7mjvIZpqcm3C+QwaEcSv/RW2pJPAsQKF70HHdtxQc1Zj88eWLgf9SGc9E7Q tiHIeuVfnqa05RuDhDfgVQss8TkPi6b2ooHQyLzjja3+uKHjU02U2VuSingM1O6a UcVHSBu7/v5KnMr+L07aOKvZaHQYNOg= -----END CERTIFICATE-----Generated at Tue Sep 22 09:34:07 2026 by rpki-client