$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/0abf13f8-cec7-3137-b92e-822c18e6fe3c.roa File: 0abf13f8-cec7-3137-b92e-822c18e6fe3c.roa (raw, json) Hash identifier: B33SFlV1r16BwaPKsMA3Wy2VC3LhYQGvWHk7gyhO5tQ= Subject key identifier: 15:3F:BC:E4:24:D0:04:81:72:55:05:B7:6E:9C:B4:20:56:90:EF:7D Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584EEA877066A61880C0F8AAD3C0 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/0abf13f8-cec7-3137-b92e-822c18e6fe3c.roa Signing time: Sat 22 Aug 2026 01:00:12 +0000 ROA not before: Sat 22 Aug 2026 01:00:12 +0000 ROA not after: Fri 20 Nov 2026 02:00:12 +0000 asID: 13335 IP address blocks: 172.69.57.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ea:87:70:66:a6:18:80:c0:f8:aa:d3:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 22 01:00:12 2026 GMT Not After : Nov 20 02:00:12 2026 GMT Subject: CN=e7caac5b-df5c-4d36-82e4-5bf778bf3514 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:63:b9:ee:0a:ff:43:d3:46:1e:01:28:8e:18: 74:af:11:cf:07:0f:a1:0b:f5:6b:d2:63:e8:08:33: ea:37:34:a0:78:ae:50:a8:2b:63:c8:80:6e:ca:08: 56:1e:7e:f4:ea:fb:03:61:e0:95:53:c4:73:8a:4f: d4:86:26:ea:44:cd:91:4a:f4:32:d8:95:bd:f3:54: 54:fe:16:eb:76:ff:9f:b0:81:85:9e:b1:72:42:87: 17:16:0a:e0:89:e0:de:32:a4:60:c1:70:d3:c1:1b: 5e:6f:04:39:9c:c9:c6:33:c0:95:a3:3b:9e:e9:68: ad:2c:e8:4a:51:1f:80:0d:e9:6a:22:5a:46:bc:db: 08:f3:21:0e:47:2c:af:5e:0c:07:60:ed:55:6d:90: 60:b5:08:e3:59:85:83:3b:8e:b4:01:57:70:17:cd: 1a:00:5f:a6:e9:45:50:f1:43:39:c4:ee:b7:54:ca: b0:8f:88:4b:ee:a5:45:24:41:47:be:84:b0:b2:f2: 72:f7:45:58:14:28:d0:33:1c:98:89:bd:5b:ef:c0: 43:9c:4b:33:c6:fc:7e:eb:74:39:d9:ed:83:1a:d4: 4d:20:d0:c7:05:5f:9b:ed:c1:f6:f0:12:aa:94:19: dc:88:d8:17:3e:4e:a6:3e:34:67:4b:ae:28:b5:e8: 75:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:3F:BC:E4:24:D0:04:81:72:55:05:B7:6E:9C:B4:20:56:90:EF:7D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/0abf13f8-cec7-3137-b92e-822c18e6fe3c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.69.57.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:ae:71:7c:5d:a5:37:a4:d1:97:a2:61:c6:f6:d1:60:b9:70: 1c:e7:81:de:91:83:ff:e1:86:31:40:c0:56:ee:61:7d:bd:2d: b2:28:09:e5:6f:42:9c:cd:40:48:2d:24:95:58:99:82:7e:b8: a2:7a:a4:25:91:e6:22:12:ec:47:78:39:09:6d:94:71:2c:0a: db:2e:b7:3c:53:68:4b:fc:89:f7:9b:8c:17:4d:70:62:bc:18: 99:49:c0:34:de:43:b5:5a:73:cd:a2:ff:7b:a0:15:22:b4:76: 66:9c:05:4a:18:05:b9:f7:43:96:c6:cb:31:d1:69:c8:56:3f: 25:6d:ce:d8:b6:70:7b:59:02:66:0f:7c:74:3c:99:4f:54:27: 4a:52:6b:ca:f2:35:6f:4f:96:03:04:bc:24:7b:8d:54:f2:ee: bc:e0:2e:c6:22:b1:02:a1:e5:c3:a3:7f:da:da:07:bc:79:f5: 5c:9e:52:cc:b1:56:72:3d:72:c0:26:c8:6f:e0:fc:8c:7b:19: f4:29:cd:5f:ef:c6:81:89:59:af:38:2e:d1:b2:17:58:f8:a1: 74:f8:94:48:3a:80:33:1d:83:e6:a4:f6:d9:d2:45:f2:cd:eb: 88:60:b1:19:29:ca:2a:c4:ca:ce:6f:9a:e2:2f:42:c5:de:7a: 0f:4c:ee:da -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7qh3BmphiAwPiq08AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDgyMjAxMDAxMloXDTI2MTEyMDAyMDAxMlowLzEtMCsGA1UEAxMk ZTdjYWFjNWItZGY1Yy00ZDM2LTgyZTQtNWJmNzc4YmYzNTE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAumO57gr/Q9NGHgEojhh0rxHPBw+hC/Vr0mPo CDPqNzSgeK5QqCtjyIBuyghWHn706vsDYeCVU8Rzik/UhibqRM2RSvQy2JW981RU /hbrdv+fsIGFnrFyQocXFgrgieDeMqRgwXDTwRtebwQ5nMnGM8CVozue6WitLOhK UR+ADelqIlpGvNsI8yEORyyvXgwHYO1VbZBgtQjjWYWDO460AVdwF80aAF+m6UVQ 8UM5xO63VMqwj4hL7qVFJEFHvoSwsvJy90VYFCjQMxyYib1b78BDnEszxvx+63Q5 2e2DGtRNINDHBV+b7cH28BKqlBnciNgXPk6mPjRnS64oteh1nwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBU/vOQk0ASBclUFt26ctCBWkO99MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMGFiZjEzZjgtY2VjNy0z MTM3LWI5MmUtODIyYzE4ZTZmZTNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEU5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABaucXxdpTek0ZeiYcb20WC5cBzngd6Rg//hhjFAwFbuYX29LbIoCeVv QpzNQEgtJJVYmYJ+uKJ6pCWR5iIS7Ed4OQltlHEsCtsutzxTaEv8ifebjBdNcGK8 GJlJwDTeQ7Vac82i/3ugFSK0dmacBUoYBbn3Q5bGyzHRachWPyVtzti2cHtZAmYP fHQ8mU9UJ0pSa8ryNW9PlgMEvCR7jVTy7rzgLsYisQKh5cOjf9raB7x59VyeUsyx VnI9csAmyG/g/Ix7GfQpzV/vxoGJWa84LtGyF1j4oXT4lEg6gDMdg+ak9tnSRfLN 64hgsRkpyirEys5vmuIvQsXeeg9M7to= -----END CERTIFICATE-----Generated at Sun Sep 20 19:18:17 2026 by rpki-client