$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/17c6f27c-a53d-33a1-929c-74e0ae7d8470.roa File: 17c6f27c-a53d-33a1-929c-74e0ae7d8470.roa (raw, json) Hash identifier: TmGDO+WKs5rj2UK6FTGwpDSgKK3y2uMj3yCnWEa0UMA= Subject key identifier: 91:A6:1B:ED:45:12:2E:4F:35:6F:90:63:CE:80:AA:84:2B:1E:98:79 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584EED52374D64107D6480B60A80 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/17c6f27c-a53d-33a1-929c-74e0ae7d8470.roa Signing time: Sun 23 Aug 2026 01:00:12 +0000 ROA not before: Sun 23 Aug 2026 01:00:12 +0000 ROA not after: Sat 21 Nov 2026 02:00:12 +0000 asID: 13335 IP address blocks: 172.66.0.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ed:52:37:4d:64:10:7d:64:80:b6:0a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 23 01:00:12 2026 GMT Not After : Nov 21 02:00:12 2026 GMT Subject: CN=96ca7a68-1529-4723-b85d-c0412158dd94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:7c:71:f3:6f:f9:2d:3a:08:58:3a:c1:61:0e: a8:20:5e:2d:9f:22:cc:60:7b:34:f4:d2:a3:47:46: 93:74:c7:da:6b:6a:2f:1a:71:60:e6:36:2c:6b:63: 81:0b:85:7e:cc:93:3b:65:a7:9f:79:af:73:4e:05: 14:4a:75:3d:7a:77:5d:89:57:06:50:c1:a4:33:cf: a1:29:af:a3:57:2a:fa:70:79:56:61:c2:68:17:87: 09:aa:56:7a:1b:a9:f7:aa:e9:d9:35:33:9b:3a:8c: ff:7a:8b:5b:0d:68:1d:28:68:06:50:a4:f4:1f:65: 01:69:2a:3b:cc:ca:ef:cc:9f:28:b9:28:85:9f:3d: cb:40:81:a6:67:c9:fd:5f:f3:58:04:10:41:42:41: 08:2c:5a:be:3c:0b:6a:60:5e:2f:8d:5f:df:a7:0e: 3e:55:55:fc:af:29:20:58:3e:53:a5:42:f1:ca:40: f1:b1:80:64:ff:90:3b:e4:2b:32:5b:f5:ba:45:d6: a3:37:22:85:67:49:6f:23:fc:b6:89:56:c9:4f:f7: 03:14:66:5c:87:7d:ef:4e:af:9b:1c:f6:eb:ae:cd: 74:fa:b1:bd:64:ce:31:b6:4c:84:7f:87:75:3e:32: 14:d4:c9:32:7c:f7:29:07:28:75:ef:07:b7:4a:68: 54:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:A6:1B:ED:45:12:2E:4F:35:6F:90:63:CE:80:AA:84:2B:1E:98:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/17c6f27c-a53d-33a1-929c-74e0ae7d8470.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.66.0.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:10:e5:da:86:09:97:4f:cc:a1:26:aa:f4:06:3a:54:94:b1: 12:67:92:57:0b:7f:1e:ae:b5:d2:95:cb:39:71:f5:24:93:ba: 76:1b:fc:c5:19:bc:40:53:c9:38:60:4f:b6:6e:82:18:91:05: 11:2e:1f:80:d0:da:16:f9:17:70:c0:d1:3f:05:a5:54:67:11: 70:6c:af:3f:b9:36:e1:f2:ef:86:91:ce:d2:b7:ca:b8:0c:a4: f9:c6:f2:e7:f6:2e:f5:63:cc:14:f7:25:35:cd:d2:5d:05:90: ea:45:02:f4:3e:b5:ed:18:7e:92:d8:56:81:88:96:5f:2e:2c: dc:29:5b:c4:ae:3f:3e:da:0d:1a:db:b1:19:1f:fd:f8:24:fd: 23:de:b8:a5:26:68:f0:e2:e6:4d:ad:67:9f:3c:7e:75:18:b7: 9c:a1:4e:25:77:bb:23:82:0e:9e:94:e9:5f:ff:f8:85:9e:88: b1:5a:42:0e:a4:f6:c2:93:3a:08:0b:0b:5c:61:1d:63:6d:f7: da:f7:80:d6:12:ac:41:55:24:a4:34:ea:c8:26:8e:63:a8:bc: 2c:e0:69:8b:46:a6:75:4f:0d:2d:3d:d0:5f:2c:95:eb:c8:dd: fb:ca:54:f8:ca:34:f4:ce:bf:b0:cd:d3:0e:e2:98:0a:5e:59: e3:99:2a:5f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7tUjdNZBB9ZIC2CoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDgyMzAxMDAxMloXDTI2MTEyMTAyMDAxMlowLzEtMCsGA1UEAxMk OTZjYTdhNjgtMTUyOS00NzIzLWI4NWQtYzA0MTIxNThkZDk0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh3xx82/5LToIWDrBYQ6oIF4tnyLMYHs09NKj R0aTdMfaa2ovGnFg5jYsa2OBC4V+zJM7Zaefea9zTgUUSnU9enddiVcGUMGkM8+h Ka+jVyr6cHlWYcJoF4cJqlZ6G6n3qunZNTObOoz/eotbDWgdKGgGUKT0H2UBaSo7 zMrvzJ8ouSiFnz3LQIGmZ8n9X/NYBBBBQkEILFq+PAtqYF4vjV/fpw4+VVX8rykg WD5TpULxykDxsYBk/5A75CsyW/W6RdajNyKFZ0lvI/y2iVbJT/cDFGZch33vTq+b HPbrrs10+rG9ZM4xtkyEf4d1PjIU1MkyfPcpByh17we3SmhUrQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJGmG+1FEi5PNW+QY86AqoQrHph5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMTdjNmYyN2MtYTUzZC0z M2ExLTkyOWMtNzRlMGFlN2Q4NDcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrEIAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFkQ5dqGCZdPzKEmqvQGOlSUsRJnklcLfx6utdKVyzlx9SSTunYb/MUZ vEBTyThgT7ZughiRBREuH4DQ2hb5F3DA0T8FpVRnEXBsrz+5NuHy74aRztK3yrgM pPnG8uf2LvVjzBT3JTXN0l0FkOpFAvQ+te0YfpLYVoGIll8uLNwpW8SuPz7aDRrb sRkf/fgk/SPeuKUmaPDi5k2tZ588fnUYt5yhTiV3uyOCDp6U6V//+IWeiLFaQg6k 9sKTOggLC1xhHWNt99r3gNYSrEFVJKQ06sgmjmOovCzgaYtGpnVPDS090F8slevI 3fvKVPjKNPTOv7DN0w7imApeWeOZKl8= -----END CERTIFICATE-----Generated at Sun Sep 20 19:15:23 2026 by rpki-client