$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/fa87a9a5-918a-3697-ba82-bb79cbeebbe0.roa File: fa87a9a5-918a-3697-ba82-bb79cbeebbe0.roa (raw, json) Hash identifier: XAbPC9zUgSHtc4dX2F3P1EdCSLJd9wGiHUc5XUJOOXo= Subject key identifier: DD:C3:CD:96:96:65:EB:E2:04:6E:18:85:62:7C:A7:9B:BA:20:43:EC Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584EE42334A6C2A5DB76E10D1C20 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/fa87a9a5-918a-3697-ba82-bb79cbeebbe0.roa Signing time: Wed 19 Aug 2026 18:03:45 +0000 ROA not before: Wed 19 Aug 2026 18:03:45 +0000 ROA not after: Sat 27 Nov 2027 05:00:00 +0000 asID: 13335 IP address blocks: 172.69.240.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e4:23:34:a6:c2:a5:db:76:e1:0d:1c:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 19 18:03:45 2026 GMT Not After : Nov 27 05:00:00 2027 GMT Subject: CN=5ea4f6dc-52cf-456f-ade4-29f183ac1b17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:95:7e:88:ef:cc:f2:ea:57:b1:7b:c6:dc:b8: a1:c3:4b:5b:f7:e2:71:d4:19:bb:b0:41:23:31:9d: de:84:83:17:ac:a2:7c:01:de:65:c9:62:84:7f:45: 2f:61:87:89:3a:8a:0e:3d:bf:86:7c:33:72:81:a3: 32:4f:ca:d9:3d:fe:91:be:2b:c2:6e:ff:98:16:f9: 70:3c:41:02:54:81:b3:3a:27:55:cf:03:9d:49:16: e0:02:fe:65:78:24:d3:85:cc:1c:72:92:7a:98:68: ee:77:a3:54:45:8c:cf:87:1e:12:31:68:91:de:8f: 78:6a:26:18:ce:1b:b2:f4:2b:d3:06:a7:b8:a9:b4: 87:8c:e2:24:b7:cf:9f:d0:d9:a6:2d:31:e6:18:79: 04:a8:c1:c5:fc:43:d5:bc:99:74:68:22:f7:e9:f5: f5:6e:ad:c3:c0:e1:bf:47:76:a8:3b:89:23:ac:30: f4:eb:36:b3:35:d8:e4:69:bf:6d:c9:cf:dd:0c:d6: 80:de:6a:7d:15:3d:c3:32:73:06:0d:d2:ed:42:62: 14:6c:77:76:30:28:d9:e8:ee:75:b9:73:a7:5d:49: 4e:d7:b8:11:8f:56:f5:30:b3:7e:c2:56:7d:05:32: 00:14:34:77:be:7e:b0:48:db:e5:ca:63:de:40:f1: 2f:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:C3:CD:96:96:65:EB:E2:04:6E:18:85:62:7C:A7:9B:BA:20:43:EC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/fa87a9a5-918a-3697-ba82-bb79cbeebbe0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.69.240.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:52:8c:1f:3e:8d:14:68:71:08:16:a7:05:d1:c0:b6:25:dc: 8e:74:ca:a3:b3:6f:87:be:0b:dc:67:2a:6e:3a:ef:b5:0f:cb: 39:08:5d:bd:72:82:b7:f3:22:c3:5b:96:fc:71:f5:a6:ab:47: 1e:9c:06:8c:09:1b:00:8e:d2:12:08:93:c9:7a:e2:78:28:9f: cf:f2:c3:c2:34:e2:6a:af:4f:6a:86:0e:7a:d8:49:a0:44:55: 15:3a:07:d5:3b:00:d0:65:7d:28:f3:88:13:3a:e3:24:15:2e: 88:49:fa:5b:a9:90:8f:7f:e3:d2:3a:29:00:40:ce:05:41:39: b9:35:b8:ac:a4:05:87:b0:7f:f7:60:ca:7e:b1:40:16:21:1e: b0:8d:67:23:55:a1:87:25:6e:d0:4a:b0:ef:c8:a1:dd:cd:03: 94:98:c7:f7:ad:38:77:9e:e7:48:4e:45:46:e8:45:95:66:ed: ef:df:e3:23:54:52:80:9b:b2:95:9b:19:b5:bb:14:79:7b:d0: 0c:df:9b:6e:9d:6e:66:cb:61:c8:6a:ca:60:3e:aa:73:14:cb: be:1e:30:fd:4e:f5:55:40:73:6e:63:db:36:25:5f:01:b2:70: e9:cb:f4:14:9e:03:93:50:be:6c:d2:de:ca:5d:8d:e7:09:7f: 98:84:50:28 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7kIzSmwqXbduENHCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDgxOTE4MDM0NVoXDTI3MTEyNzA1MDAwMFowLzEtMCsGA1UEAxMk NWVhNGY2ZGMtNTJjZi00NTZmLWFkZTQtMjlmMTgzYWMxYjE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0JV+iO/M8upXsXvG3Lihw0tb9+Jx1Bm7sEEj MZ3ehIMXrKJ8Ad5lyWKEf0UvYYeJOooOPb+GfDNygaMyT8rZPf6RvivCbv+YFvlw PEECVIGzOidVzwOdSRbgAv5leCTThcwccpJ6mGjud6NURYzPhx4SMWiR3o94aiYY zhuy9CvTBqe4qbSHjOIkt8+f0NmmLTHmGHkEqMHF/EPVvJl0aCL36fX1bq3DwOG/ R3aoO4kjrDD06zazNdjkab9tyc/dDNaA3mp9FT3DMnMGDdLtQmIUbHd2MCjZ6O51 uXOnXUlO17gRj1b1MLN+wlZ9BTIAFDR3vn6wSNvlymPeQPEvmQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN3DzZaWZeviBG4YhWJ8p5u6IEPsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvZmE4N2E5YTUtOTE4YS0z Njk3LWJhODItYmI3OWNiZWViYmUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrEXwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEdSjB8+jRRocQgWpwXRwLYl3I50yqOzb4e+C9xnKm4677UPyzkIXb1y grfzIsNblvxx9aarRx6cBowJGwCO0hIIk8l64ngon8/yw8I04mqvT2qGDnrYSaBE VRU6B9U7ANBlfSjziBM64yQVLohJ+lupkI9/49I6KQBAzgVBObk1uKykBYewf/dg yn6xQBYhHrCNZyNVoYclbtBKsO/Iod3NA5SYx/etOHee50hORUboRZVm7e/f4yNU UoCbspWbGbW7FHl70Azfm26dbmbLYchqymA+qnMUy74eMP1O9VVAc25j2zYlXwGy cOnL9BSeA5NQvmzS3spdjecJf5iEUCg= -----END CERTIFICATE-----Generated at Tue Sep 1 01:44:55 2026 by rpki-client