$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f52c6422-00d1-3c24-bedf-b54ad1588881.roa File: f52c6422-00d1-3c24-bedf-b54ad1588881.roa (raw, json) Hash identifier: 03JMcio4TuZtYaPqY0on80ocslWUkBZ7UmI0dZhfo/s= Subject key identifier: 25:6E:C5:1E:FE:61:1C:22:C4:CB:07:F6:E4:C8:5F:C6:94:D7:68:CC Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584EEEB7668AB0186FAA0A98CCA0 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f52c6422-00d1-3c24-bedf-b54ad1588881.roa Signing time: Sun 23 Aug 2026 13:00:12 +0000 ROA not before: Sun 23 Aug 2026 13:00:12 +0000 ROA not after: Sat 21 Nov 2026 14:00:12 +0000 asID: 13335 IP address blocks: 172.69.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ee:b7:66:8a:b0:18:6f:aa:0a:98:cc:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 23 13:00:12 2026 GMT Not After : Nov 21 14:00:12 2026 GMT Subject: CN=d5c0e764-bdc6-4da2-9d94-f6ffa0ef1c4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:8b:00:ea:41:15:00:4e:bc:6e:29:0d:5f:02: 54:e6:69:06:3a:fb:22:ce:4d:b6:9c:1d:9d:df:73: 24:08:7b:d7:9c:2b:4f:bf:90:9c:99:18:c4:1b:c6: b7:4d:ec:d0:be:81:86:6d:ad:0a:17:8b:4c:e6:eb: 49:de:63:4b:d8:cf:6a:71:e1:81:d5:70:78:5f:8c: 91:f0:8e:ee:f5:c9:d0:2c:6f:6a:b5:2d:65:1b:0d: 36:3b:24:f8:6a:6a:31:f8:ae:b0:ea:e1:2a:a2:fe: 9a:07:4f:22:0e:7b:9f:70:97:c9:2e:7f:45:f6:f3: 86:3e:36:72:24:b8:c8:26:ab:25:77:34:d9:e0:98: 26:31:2d:cb:f9:5e:c7:52:81:f4:64:74:f3:de:fa: 3c:3c:0d:e4:c8:24:b0:0e:03:90:d8:0b:08:9c:d0: 5f:37:84:f0:9c:2e:56:88:07:10:04:6a:f0:e6:85: 7a:fc:c2:15:ac:45:d7:12:99:c1:f3:bd:04:87:72: 96:aa:7a:9c:06:68:b3:ed:0d:a6:cd:dc:91:7f:e3: e6:65:42:ee:93:9e:a1:af:9e:1e:bc:a9:b4:a5:32: 8a:b9:e1:cc:46:0a:1d:63:07:75:68:94:7f:7e:dc: a7:71:51:4e:c3:ff:74:8a:e1:e4:f7:c9:22:4f:7f: 35:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:6E:C5:1E:FE:61:1C:22:C4:CB:07:F6:E4:C8:5F:C6:94:D7:68:CC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f52c6422-00d1-3c24-bedf-b54ad1588881.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.69.20.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:b1:8c:d5:1b:7a:b3:d7:99:46:c5:0f:03:32:d1:e9:26:2d: 75:e4:62:61:58:cc:e7:30:af:9d:ec:17:42:60:08:64:44:5a: 7a:fa:b6:82:c0:4d:04:e8:e7:8c:fc:04:74:98:c7:02:52:78: 31:18:fa:7a:e4:d9:6c:81:20:9a:19:f6:b8:f3:7d:2c:c7:1b: c6:5f:01:4c:af:6c:35:d4:a2:e1:9e:a7:dc:ec:ac:a4:d1:3d: bd:b7:68:00:3f:30:b5:2e:2b:77:2f:3d:bb:19:07:b4:6b:39: 1e:1b:f8:15:f6:2b:2a:55:83:9c:07:8d:67:ac:4c:95:e8:24: 07:57:78:43:fd:84:71:da:42:81:b4:9f:23:4f:34:69:27:3e: 9e:af:5f:d5:da:8d:d0:c5:6e:e9:0e:c1:87:f3:21:29:98:c7: a7:6d:1f:6e:51:8c:31:00:43:a5:c3:a2:4b:44:3a:25:fb:30: ba:7c:c5:86:6a:8e:1c:f5:bf:ca:34:9c:27:7b:8f:bd:32:69: 81:c0:97:bc:1e:fd:b8:9c:ea:a4:e2:e8:1f:93:03:a4:d6:35: 5c:c5:2e:5c:e3:43:e6:71:2b:e7:a2:3a:87:05:9a:d1:dd:0f: 90:22:0a:ff:73:55:b9:18:d3:2d:74:1d:d8:1e:c4:40:2f:dd: 85:a5:fe:92 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7ut2aKsBhvqgqYzKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDgyMzEzMDAxMloXDTI2MTEyMTE0MDAxMlowLzEtMCsGA1UEAxMk ZDVjMGU3NjQtYmRjNi00ZGEyLTlkOTQtZjZmZmEwZWYxYzRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyYsA6kEVAE68bikNXwJU5mkGOvsizk22nB2d 33MkCHvXnCtPv5CcmRjEG8a3TezQvoGGba0KF4tM5utJ3mNL2M9qceGB1XB4X4yR 8I7u9cnQLG9qtS1lGw02OyT4amox+K6w6uEqov6aB08iDnufcJfJLn9F9vOGPjZy JLjIJqsldzTZ4JgmMS3L+V7HUoH0ZHTz3vo8PA3kyCSwDgOQ2AsInNBfN4TwnC5W iAcQBGrw5oV6/MIVrEXXEpnB870Eh3KWqnqcBmiz7Q2mzdyRf+PmZULuk56hr54e vKm0pTKKueHMRgodYwd1aJR/ftyncVFOw/90iuHk98kiT381jwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCVuxR7+YRwixMsH9uTIX8aU12jMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvZjUyYzY0MjItMDBkMS0z YzI0LWJlZGYtYjU0YWQxNTg4ODgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEUUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAImxjNUberPXmUbFDwMy0ekmLXXkYmFYzOcwr53sF0JgCGREWnr6toLA TQTo54z8BHSYxwJSeDEY+nrk2WyBIJoZ9rjzfSzHG8ZfAUyvbDXUouGep9zsrKTR Pb23aAA/MLUuK3cvPbsZB7RrOR4b+BX2KypVg5wHjWesTJXoJAdXeEP9hHHaQoG0 nyNPNGknPp6vX9XajdDFbukOwYfzISmYx6dtH25RjDEAQ6XDoktEOiX7MLp8xYZq jhz1v8o0nCd7j70yaYHAl7we/bic6qTi6B+TA6TWNVzFLlzjQ+ZxK+eiOocFmtHd D5AiCv9zVbkY0y10HdgexEAv3YWl/pI= -----END CERTIFICATE-----Generated at Tue Sep 22 23:09:50 2026 by rpki-client