$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d59e955a-b36b-344b-81cd-7f5b4670c997.roa File: d59e955a-b36b-344b-81cd-7f5b4670c997.roa (raw, json) Hash identifier: Hop5ECdQRx08azdUdQQ0+dfpOgK2+u8ureoCSuvvCbE= Subject key identifier: 72:C8:E6:09:5B:0B:F6:48:02:FF:D2:6D:15:B3:68:B5:02:50:6F:73 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584F90A324A77DE69D885700644E Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d59e955a-b36b-344b-81cd-7f5b4670c997.roa Signing time: Tue 20 Oct 2026 13:00:13 +0000 ROA not before: Tue 20 Oct 2026 13:00:13 +0000 ROA not after: Mon 18 Jan 2027 14:00:13 +0000 asID: 13335 IP address blocks: 172.69.9.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 28 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:90:a3:24:a7:7d:e6:9d:88:57:00:64:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 20 13:00:13 2026 GMT Not After : Jan 18 14:00:13 2027 GMT Subject: CN=e9329c05-fc36-434f-ac95-a01df47d7aac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:33:73:c7:b0:b0:70:03:dc:98:88:a9:80:00: b6:be:04:1e:8e:17:c0:a5:d4:6f:9a:7e:de:0c:ff: fe:71:3d:59:ee:52:27:5e:d2:3e:bd:8a:46:aa:0d: 62:bb:e5:eb:e3:b5:90:d4:82:82:36:9d:8f:a3:81: 19:21:cb:f3:2b:a0:be:fa:b9:49:e4:b5:bb:7f:e0: d3:39:b8:96:b8:71:84:84:ca:98:52:62:14:b6:79: 4f:b5:f6:5c:99:57:40:77:d2:4f:7e:4e:b2:8c:1e: d3:e7:95:a6:5a:de:89:dc:d3:42:99:ca:99:e7:f2: 05:ec:eb:38:be:78:2e:ad:c3:c3:b9:c4:84:d1:2d: 76:48:9c:94:38:54:c0:28:0b:c5:60:b0:7e:8b:7a: 56:0e:96:ab:7c:65:2f:28:e6:2d:8b:a8:f4:d4:f5: f8:32:d6:76:bd:64:be:70:75:07:ef:9a:ab:9b:49: 36:37:fe:17:33:dc:b3:3e:03:37:ff:66:ee:15:44: eb:f6:04:16:9a:00:18:13:e3:57:af:89:3b:e0:11: 4c:f5:d6:29:93:f0:b6:52:e2:0e:c4:02:3a:45:87: 2c:63:d7:d7:44:31:99:26:1b:98:e3:00:74:37:e7: d9:d8:7c:0b:e6:c0:0f:84:c1:29:83:49:4e:51:5b: 59:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:C8:E6:09:5B:0B:F6:48:02:FF:D2:6D:15:B3:68:B5:02:50:6F:73 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d59e955a-b36b-344b-81cd-7f5b4670c997.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.69.9.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:6a:08:e9:12:58:44:6f:94:63:e6:0a:d3:cb:01:94:bb:f1: 5d:22:7b:db:9b:4e:7a:86:a3:69:58:2c:e2:ca:b0:f2:30:e8: d8:cd:ee:fa:33:15:f4:cd:76:60:88:99:83:26:7b:ab:dd:ca: 53:00:28:d6:dd:de:ef:5f:22:bb:0f:2d:4b:c4:d3:2b:9e:ce: f9:cb:11:67:2f:d6:d4:7a:48:16:79:af:b5:c9:b0:66:5a:46: a5:a0:ac:1a:02:58:24:39:6f:d6:e0:dd:e2:35:e4:7d:1f:ea: 5d:e7:ce:39:24:f6:9d:95:0a:69:3f:de:94:ae:0c:c0:94:e9: cc:ce:5a:d3:5d:0b:6e:77:b9:c3:57:df:b7:3d:02:8a:2d:59: 30:33:a5:de:f9:ee:ba:26:ed:83:10:93:0f:6c:a4:0e:94:a7: 5c:8b:26:ba:df:57:4b:bf:52:d5:c7:31:77:fa:42:cf:21:da: d3:46:f2:9f:39:9f:98:0c:d7:46:80:e2:4b:be:91:f1:ad:d1: 30:95:66:e9:9c:a2:20:bd:1c:15:d1:51:b4:ab:36:6b:38:e2: 52:69:93:a2:d9:41:94:ce:7f:ca:d7:13:51:31:ad:63:19:5a: bb:d9:75:37:90:5a:b5:8f:3f:ac:83:f2:15:26:2f:a4:30:1f: 8a:1a:a1:63 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+QoySnfeadiFcAZE4wDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MTAyMDEzMDAxM1oXDTI3MDExODE0MDAxM1owLzEtMCsGA1UEAxMk ZTkzMjljMDUtZmMzNi00MzRmLWFjOTUtYTAxZGY0N2Q3YWFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjzNzx7CwcAPcmIipgAC2vgQejhfApdRvmn7e DP/+cT1Z7lInXtI+vYpGqg1iu+Xr47WQ1IKCNp2Po4EZIcvzK6C++rlJ5LW7f+DT ObiWuHGEhMqYUmIUtnlPtfZcmVdAd9JPfk6yjB7T55WmWt6J3NNCmcqZ5/IF7Os4 vngurcPDucSE0S12SJyUOFTAKAvFYLB+i3pWDparfGUvKOYti6j01PX4MtZ2vWS+ cHUH75qrm0k2N/4XM9yzPgM3/2buFUTr9gQWmgAYE+NXr4k74BFM9dYpk/C2UuIO xAI6RYcsY9fXRDGZJhuY4wB0N+fZ2HwL5sAPhMEpg0lOUVtZXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHLI5glbC/ZIAv/SbRWzaLUCUG9zMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvZDU5ZTk1NWEtYjM2Yi0z NDRiLTgxY2QtN2Y1YjQ2NzBjOTk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEUJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACpqCOkSWERvlGPmCtPLAZS78V0ie9ubTnqGo2lYLOLKsPIw6NjN7voz FfTNdmCImYMme6vdylMAKNbd3u9fIrsPLUvE0yuezvnLEWcv1tR6SBZ5r7XJsGZa RqWgrBoCWCQ5b9bg3eI15H0f6l3nzjkk9p2VCmk/3pSuDMCU6czOWtNdC253ucNX 37c9AootWTAzpd757rom7YMQkw9spA6Up1yLJrrfV0u/UtXHMXf6Qs8h2tNG8p85 n5gM10aA4ku+kfGt0TCVZumcoiC9HBXRUbSrNms44lJpk6LZQZTOf8rXE1ExrWMZ WrvZdTeQWrWPP6yD8hUmL6QwH4oaoWM= -----END CERTIFICATE-----Generated at Tue Oct 27 15:22:43 2026 by rpki-client