$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d0c91acd-0fed-3eb9-bc0f-714dae796e0a.roa File: d0c91acd-0fed-3eb9-bc0f-714dae796e0a.roa (raw, json) Hash identifier: wIc9hFZ6yNZkjgOQewqVNGIafmWTzfdeaw2O2YG2xlc= Subject key identifier: 8A:E2:AA:DE:7B:EB:AB:1D:C7:68:06:50:9D:7D:4A:65:76:35:50:16 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584EF2E77AB059F6DA630F0BF400 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d0c91acd-0fed-3eb9-bc0f-714dae796e0a.roa Signing time: Tue 25 Aug 2026 01:00:12 +0000 ROA not before: Tue 25 Aug 2026 01:00:12 +0000 ROA not after: Mon 23 Nov 2026 02:00:12 +0000 asID: 13335 IP address blocks: 172.69.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f2:e7:7a:b0:59:f6:da:63:0f:0b:f4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 25 01:00:12 2026 GMT Not After : Nov 23 02:00:12 2026 GMT Subject: CN=28f6ca11-8ddc-4837-acf7-8d32f1807294 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:73:bd:45:e7:9d:37:f9:82:df:18:4f:be:78: f9:ab:a5:99:e4:20:f6:ec:30:2f:0b:70:56:72:66: 60:c4:13:14:96:95:55:b0:4e:d6:1c:01:e3:f6:f7: 77:a2:c7:29:b7:3a:46:9a:54:83:6c:a1:c1:05:83: 2f:51:46:58:b1:e8:84:3d:cd:d8:e1:94:63:29:25: 4d:e6:b0:a4:e0:09:40:20:26:3d:ed:a9:ca:e9:27: 35:f0:4b:a4:63:39:7d:13:ea:58:6c:47:52:83:c3: 6b:77:a5:4b:94:15:1f:4a:eb:6b:49:f1:3d:6e:d7: 1b:92:3c:d4:ed:2d:9d:7a:ef:15:a3:d3:4f:1a:34: 71:b4:8f:59:54:d1:76:ab:a9:1d:92:a4:79:04:4c: 6e:0c:dc:a8:e8:99:01:af:e1:8c:fa:fa:26:bc:3f: 0e:f1:f7:f2:0c:84:27:0f:c5:f5:69:07:a5:17:ee: 99:f5:ae:ec:b4:ec:34:53:16:75:29:3e:92:6b:81: 57:75:99:23:e7:20:d2:5e:6d:d6:37:d5:9f:d0:16: a8:7f:c2:65:16:f9:94:66:6e:55:98:99:01:1a:68: 36:30:4b:6a:23:ff:27:31:8d:4a:43:28:3c:de:4d: 41:cc:b9:12:f2:fa:fe:09:78:68:58:ba:c4:22:54: 97:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:E2:AA:DE:7B:EB:AB:1D:C7:68:06:50:9D:7D:4A:65:76:35:50:16 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d0c91acd-0fed-3eb9-bc0f-714dae796e0a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.69.221.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:90:a5:55:20:8b:a7:d0:49:a1:e7:c1:43:3f:ad:7a:a4:3e: ff:6f:d8:96:83:81:5e:d6:f8:9c:27:93:43:8b:b9:d9:1e:bb: 22:d5:ce:97:8b:7d:4f:4d:d5:ca:96:46:a8:58:c3:1d:18:d2: 3d:30:38:ef:90:ce:25:4f:1f:7a:98:30:fe:42:72:fb:3e:70: 36:a8:ac:e5:b2:f9:67:bc:4d:e4:3a:dd:36:4a:de:86:a7:59: d9:ea:b1:7d:c7:cd:f9:e9:7d:a9:a8:93:7f:4c:de:5c:2e:6e: b1:50:d1:7e:58:07:ae:77:04:a6:e1:d3:d1:08:69:f4:b8:63: 1c:73:d9:bc:91:91:40:35:3a:10:25:58:b6:0d:9c:58:70:48: 31:e3:55:20:74:48:93:b8:39:67:e0:34:c1:58:26:aa:af:87: 60:92:31:b6:0d:a1:32:27:c7:a3:a7:f4:57:20:3a:84:89:d9: 01:af:31:10:c6:ed:3e:c3:2c:c4:3e:b9:81:32:c8:09:49:a6: 5d:93:d3:8f:a3:dd:4e:8d:0d:1e:3c:11:9f:b5:9d:48:9d:c8: ae:b9:99:10:29:8b:0f:06:40:fd:7b:e1:73:9c:3e:27:ff:68: 81:14:d2:61:58:62:04:b7:9b:23:fe:ee:0c:e0:34:77:32:2f: b8:e1:7f:29 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7y53qwWfbaYw8L9AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDgyNTAxMDAxMloXDTI2MTEyMzAyMDAxMlowLzEtMCsGA1UEAxMk MjhmNmNhMTEtOGRkYy00ODM3LWFjZjctOGQzMmYxODA3Mjk0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnXO9ReedN/mC3xhPvnj5q6WZ5CD27DAvC3BW cmZgxBMUlpVVsE7WHAHj9vd3oscptzpGmlSDbKHBBYMvUUZYseiEPc3Y4ZRjKSVN 5rCk4AlAICY97anK6Sc18EukYzl9E+pYbEdSg8Nrd6VLlBUfSutrSfE9btcbkjzU 7S2deu8Vo9NPGjRxtI9ZVNF2q6kdkqR5BExuDNyo6JkBr+GM+vomvD8O8ffyDIQn D8X1aQelF+6Z9a7stOw0UxZ1KT6Sa4FXdZkj5yDSXm3WN9Wf0Baof8JlFvmUZm5V mJkBGmg2MEtqI/8nMY1KQyg83k1BzLkS8vr+CXhoWLrEIlSXKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIriqt5766sdx2gGUJ19SmV2NVAWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvZDBjOTFhY2QtMGZlZC0z ZWI5LWJjMGYtNzE0ZGFlNzk2ZTBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEXdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADyQpVUgi6fQSaHnwUM/rXqkPv9v2JaDgV7W+Jwnk0OLudkeuyLVzpeL fU9N1cqWRqhYwx0Y0j0wOO+QziVPH3qYMP5Ccvs+cDaorOWy+We8TeQ63TZK3oan WdnqsX3Hzfnpfamok39M3lwubrFQ0X5YB653BKbh09EIafS4Yxxz2byRkUA1OhAl WLYNnFhwSDHjVSB0SJO4OWfgNMFYJqqvh2CSMbYNoTInx6On9FcgOoSJ2QGvMRDG 7T7DLMQ+uYEyyAlJpl2T04+j3U6NDR48EZ+1nUidyK65mRApiw8GQP174XOcPif/ aIEU0mFYYgS3myP+7gzgNHcyL7jhfyk= -----END CERTIFICATE-----Generated at Tue Sep 1 01:45:11 2026 by rpki-client