$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/da2e2b33-85fb-3497-90f2-450986169521.roa File: da2e2b33-85fb-3497-90f2-450986169521.roa (raw, json) Hash identifier: pFED6XilBrFkev13xBGQgK45gAuk6aGzZ2gsZxg1zXg= Subject key identifier: 6A:38:B9:ED:DE:B6:BE:A9:AC:50:EB:D7:15:60:10:AB:22:53:44:B9 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584EE42334BFB37A07EC729BCEA0 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/da2e2b33-85fb-3497-90f2-450986169521.roa Signing time: Wed 19 Aug 2026 18:03:45 +0000 ROA not before: Wed 19 Aug 2026 18:03:45 +0000 ROA not after: Sat 27 Nov 2027 05:00:00 +0000 asID: 13335 IP address blocks: 172.69.84.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e4:23:34:bf:b3:7a:07:ec:72:9b:ce:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 19 18:03:45 2026 GMT Not After : Nov 27 05:00:00 2027 GMT Subject: CN=5743c276-cbb8-4998-a26a-e86f540fb6a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:ac:9d:ec:3c:ed:a2:00:d1:3a:be:2f:56:77: f7:5c:5d:d5:a0:d7:0a:20:a3:f5:05:a5:4c:94:33: 5b:e9:ff:6a:9f:0c:ca:23:ce:85:b8:88:79:8d:8a: 7e:5d:2c:66:6a:8b:de:f0:02:23:5c:3a:76:9f:6f: 41:07:e3:57:98:84:b5:92:52:b1:82:73:08:6f:39: a5:60:df:98:3d:2d:fb:fd:da:99:46:da:ed:9e:a4: a4:cc:f7:72:6a:2e:71:5b:46:c3:64:d7:a1:b7:fe: 1b:b9:ec:10:38:14:14:71:ec:7b:03:4f:fa:a2:54: fe:ce:c7:4f:d3:b0:d9:69:63:99:e6:61:c4:1c:e3: 14:53:cc:b6:3d:96:c9:e2:53:ae:df:ce:8c:76:63: fa:20:cc:3f:60:b5:1c:9c:0b:5b:80:ab:19:9a:b6: 18:a3:04:b7:a9:ed:34:22:fa:d6:24:9d:2d:5d:fd: 19:22:64:0f:25:cd:4a:ab:91:cc:34:3a:58:10:bf: 2c:37:66:d2:37:46:bf:ae:d0:8f:e1:88:04:bc:24: 65:3f:3c:70:36:94:f3:f9:e0:9d:ce:a1:19:65:3f: 3e:fe:96:6d:01:12:5b:2a:04:12:b4:b7:94:e8:c4: 76:d5:d9:b6:61:86:72:ab:6a:d3:f2:8e:4f:c6:86: 2e:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:38:B9:ED:DE:B6:BE:A9:AC:50:EB:D7:15:60:10:AB:22:53:44:B9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/da2e2b33-85fb-3497-90f2-450986169521.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.69.84.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:7c:61:eb:d3:01:b2:44:dc:81:61:95:a7:b5:a6:50:50:d7: cb:76:ac:81:0b:a9:62:26:c7:f1:60:26:df:4c:af:e1:bd:cd: 18:de:85:2e:4d:ef:58:1b:20:43:3c:7b:6c:2e:d8:e8:b8:e0: 8c:c4:d2:b6:b0:f9:2a:8b:c1:07:dc:f6:f4:11:03:88:ca:b0: f7:1d:fc:5b:2f:ec:7c:29:60:b2:15:9c:dd:b5:18:5c:f1:1f: 2f:19:44:51:d5:30:66:c6:4f:09:bf:42:09:23:cf:40:9b:9c: 6c:33:4a:01:c2:4e:6e:3e:ff:bd:ee:df:45:c2:0f:b2:2d:35: 32:cc:47:21:66:68:d7:ed:01:dc:1b:b6:67:83:cc:d3:35:40: 2b:7f:8e:b0:eb:7f:26:96:df:cc:d3:09:75:0f:4f:7a:a6:7c: 46:1d:2c:2f:c1:89:c3:d5:ec:12:a6:66:35:ae:f7:87:b4:ea: b3:35:05:1b:d0:c6:96:7d:97:20:f2:b9:6a:37:2e:f0:7c:56: 89:22:0e:6d:79:a3:aa:48:0c:d8:27:41:23:b8:9b:95:0b:e8: f6:61:ee:a3:c4:e7:55:54:4b:79:97:c3:61:ee:3c:ba:80:6d: 9f:2c:e6:94:b0:c3:44:d9:d6:4f:d8:03:a3:84:79:99:f5:0c: 98:59:47:29 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7kIzS/s3oH7HKbzqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDgxOTE4MDM0NVoXDTI3MTEyNzA1MDAwMFowLzEtMCsGA1UEAxMk NTc0M2MyNzYtY2JiOC00OTk4LWEyNmEtZTg2ZjU0MGZiNmEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw6yd7DztogDROr4vVnf3XF3VoNcKIKP1BaVM lDNb6f9qnwzKI86FuIh5jYp+XSxmaove8AIjXDp2n29BB+NXmIS1klKxgnMIbzml YN+YPS37/dqZRtrtnqSkzPdyai5xW0bDZNeht/4buewQOBQUcex7A0/6olT+zsdP 07DZaWOZ5mHEHOMUU8y2PZbJ4lOu386MdmP6IMw/YLUcnAtbgKsZmrYYowS3qe00 IvrWJJ0tXf0ZImQPJc1Kq5HMNDpYEL8sN2bSN0a/rtCP4YgEvCRlPzxwNpTz+eCd zqEZZT8+/pZtARJbKgQStLeU6MR21dm2YYZyq2rT8o5PxoYunwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGo4ue3etr6prFDr1xVgEKsiU0S5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvZGEyZTJiMzMtODVmYi0z NDk3LTkwZjItNDUwOTg2MTY5NTIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrEVUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHN8YevTAbJE3IFhlae1plBQ18t2rIELqWImx/FgJt9Mr+G9zRjehS5N 71gbIEM8e2wu2Oi44IzE0raw+SqLwQfc9vQRA4jKsPcd/Fsv7HwpYLIVnN21GFzx Hy8ZRFHVMGbGTwm/Qgkjz0CbnGwzSgHCTm4+/73u30XCD7ItNTLMRyFmaNftAdwb tmeDzNM1QCt/jrDrfyaW38zTCXUPT3qmfEYdLC/BicPV7BKmZjWu94e06rM1BRvQ xpZ9lyDyuWo3LvB8VokiDm15o6pIDNgnQSO4m5UL6PZh7qPE51VUS3mXw2HuPLqA bZ8s5pSww0TZ1k/YA6OEeZn1DJhZRyk= -----END CERTIFICATE-----Generated at Tue Sep 22 06:17:54 2026 by rpki-client