$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/de7dc7ec-37d8-3b69-be6f-9600d1b715a0.roa File: de7dc7ec-37d8-3b69-be6f-9600d1b715a0.roa (raw, json) Hash identifier: P9k8ZydoGBv+QLbTBjbvJvmc5Wq1zN9I9bUN4LfG3+s= Subject key identifier: 40:1A:88:90:EF:09:3B:AD:02:67:F0:53:8E:15:94:41:E3:E9:D9:B1 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584EE42330A2635935E62D41F030 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/de7dc7ec-37d8-3b69-be6f-9600d1b715a0.roa Signing time: Wed 19 Aug 2026 18:03:43 +0000 ROA not before: Wed 19 Aug 2026 18:03:43 +0000 ROA not after: Tue 09 Feb 2027 05:00:00 +0000 asID: 13335 IP address blocks: 172.69.18.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e4:23:30:a2:63:59:35:e6:2d:41:f0:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 19 18:03:43 2026 GMT Not After : Feb 9 05:00:00 2027 GMT Subject: CN=454450f0-186b-41ab-bda6-7bff27c56f0c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:76:e9:ac:dd:24:8b:6b:47:fe:39:1b:35:41: b8:40:a6:6a:10:1d:d8:0e:02:71:b4:45:ee:9d:46: 5a:42:0f:81:b9:29:99:8e:f2:c8:a3:b6:ac:9a:26: 4f:ec:59:dc:7d:4c:37:07:ab:45:17:66:43:e2:d2: c8:86:4a:49:01:99:5d:05:08:ff:43:f5:85:e8:8d: 36:b9:3d:a9:13:c9:a9:8b:32:68:d3:9a:5c:f7:b1: 5c:a6:ea:22:84:a3:04:d4:a4:7b:41:7b:cc:2c:8a: c5:f8:40:55:9f:9c:ef:a1:9f:8c:3c:05:53:34:25: 6f:b0:8a:c9:21:a7:f2:6e:f9:c8:fb:c6:ac:e8:4b: 02:7e:9d:78:8c:74:70:f4:59:34:48:fd:96:19:e1: 61:67:41:51:b9:ec:57:03:ca:e6:4d:57:15:b2:3c: 63:36:d7:9b:f4:a8:74:47:17:a9:81:8f:5a:db:6f: 39:64:fa:f1:54:05:d2:38:fc:e6:2c:5e:7c:b2:06: 5a:95:c9:b1:81:cb:e0:f4:c6:e7:5f:ce:54:ff:c0: 2e:56:f0:23:75:ee:25:49:0b:16:72:d5:51:63:14: 8f:65:1a:2d:ea:4e:b5:56:e3:da:86:4e:49:13:01: e7:98:0d:fa:17:e7:6d:b4:74:fd:e1:e2:c9:a5:16: f4:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:1A:88:90:EF:09:3B:AD:02:67:F0:53:8E:15:94:41:E3:E9:D9:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/de7dc7ec-37d8-3b69-be6f-9600d1b715a0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.69.18.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:29:03:69:89:c7:6a:12:9f:09:13:20:2a:37:39:9f:eb:8f: e2:8f:92:fb:f9:d4:82:8e:fe:6a:7f:c0:f0:4e:be:dd:dc:b5: 3a:1f:e3:38:47:a1:24:57:b3:d1:ec:92:f4:f4:79:c7:be:5f: af:89:f3:78:a9:7b:43:3b:d9:34:c8:da:e0:18:22:27:4b:e7: fc:79:3a:61:9b:4f:f0:33:66:57:e5:a0:a7:e4:1d:db:bc:03: 75:ea:6f:b8:c5:22:99:c0:88:fc:94:5a:ec:1e:e9:2f:dc:11: 84:1c:17:97:86:63:86:24:bb:e5:3c:01:99:ba:85:75:da:78: 47:39:c1:46:28:8e:8f:c4:ba:4b:5d:d6:26:c5:33:63:09:1a: de:13:1b:cc:0a:dd:59:7c:da:dc:26:59:4f:06:00:a1:93:81: 6b:1d:16:c7:5a:ff:de:2e:08:16:5a:f3:aa:d7:22:a3:50:ab: ac:01:4c:41:2f:2b:a0:2f:5a:98:18:9d:c0:3f:ef:12:cd:e4: de:cf:83:7a:99:74:98:e8:16:93:1d:f4:af:21:cf:71:28:b6: f1:92:df:5c:e5:4a:e7:e7:a8:df:a6:e2:5e:7e:9e:de:7f:87: 95:da:4f:84:f6:7f:0b:41:3e:16:e4:64:7b:5a:ea:8f:1e:94: 65:23:c3:35 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7kIzCiY1k15i1B8DAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDgxOTE4MDM0M1oXDTI3MDIwOTA1MDAwMFowLzEtMCsGA1UEAxMk NDU0NDUwZjAtMTg2Yi00MWFiLWJkYTYtN2JmZjI3YzU2ZjBjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuXbprN0ki2tH/jkbNUG4QKZqEB3YDgJxtEXu nUZaQg+BuSmZjvLIo7asmiZP7FncfUw3B6tFF2ZD4tLIhkpJAZldBQj/Q/WF6I02 uT2pE8mpizJo05pc97FcpuoihKME1KR7QXvMLIrF+EBVn5zvoZ+MPAVTNCVvsIrJ IafybvnI+8as6EsCfp14jHRw9Fk0SP2WGeFhZ0FRuexXA8rmTVcVsjxjNteb9Kh0 RxepgY9a2285ZPrxVAXSOPzmLF58sgZalcmxgcvg9MbnX85U/8AuVvAjde4lSQsW ctVRYxSPZRot6k61VuPahk5JEwHnmA36F+dttHT94eLJpRb0JQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEAaiJDvCTutAmfwU44VlEHj6dmxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvZGU3ZGM3ZWMtMzdkOC0z YjY5LWJlNmYtOTYwMGQxYjcxNWEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEUSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHApA2mJx2oSnwkTICo3OZ/rj+KPkvv51IKO/mp/wPBOvt3ctTof4zhH oSRXs9HskvT0ece+X6+J83ipe0M72TTI2uAYIidL5/x5OmGbT/AzZlfloKfkHdu8 A3Xqb7jFIpnAiPyUWuwe6S/cEYQcF5eGY4Yku+U8AZm6hXXaeEc5wUYojo/Euktd 1ibFM2MJGt4TG8wK3Vl82twmWU8GAKGTgWsdFsda/94uCBZa86rXIqNQq6wBTEEv K6AvWpgYncA/7xLN5N7Pg3qZdJjoFpMd9K8hz3EotvGS31zlSufnqN+m4l5+nt5/ h5XaT4T2fwtBPhbkZHta6o8elGUjwzU= -----END CERTIFICATE-----Generated at Tue Sep 22 05:14:31 2026 by rpki-client