$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/1ace37fc-2d70-31ae-b158-30bae66bd2de.roa File: 1ace37fc-2d70-31ae-b158-30bae66bd2de.roa (raw, json) Hash identifier: vacxIaz8UUaaDfkM6UzWkGj2mnTk2VOcX9oeVcFMef4= Subject key identifier: DE:6A:1F:09:A2:64:19:5C:37:03:97:96:1A:32:D0:7F:57:05:72:F7 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584ED9C7671FF5137C617F41B280 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/1ace37fc-2d70-31ae-b158-30bae66bd2de.roa Signing time: Sun 16 Aug 2026 01:00:14 +0000 ROA not before: Sun 16 Aug 2026 01:00:14 +0000 ROA not after: Sat 14 Nov 2026 02:00:14 +0000 asID: 14789 IP address blocks: 172.69.157.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:d9:c7:67:1f:f5:13:7c:61:7f:41:b2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 16 01:00:14 2026 GMT Not After : Nov 14 02:00:14 2026 GMT Subject: CN=f396acb1-f1df-4296-8e7b-72ae35f6233c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:9e:a1:c3:26:b5:6b:e6:9f:52:d4:85:11:3d: 17:3e:f1:c5:2c:d7:fa:d8:0c:07:73:31:1d:cd:17: 48:88:ab:c1:a1:ba:4b:f3:d2:fc:8e:72:c8:4c:14: 93:f6:2c:d2:90:32:1e:ac:7b:d6:6f:ae:e2:e2:af: 30:13:f4:57:71:76:e4:a7:e8:ac:e3:c0:59:03:e6: 54:1b:0a:89:8e:c5:3d:2b:b8:0f:48:55:12:20:52: 38:3a:36:c6:77:2a:c7:76:b5:b0:e3:17:01:71:14: ec:4f:0b:86:0e:a4:1c:16:cb:d7:3a:18:28:f0:a5: c0:c6:31:75:1a:3e:d8:94:2f:bd:e5:28:a4:61:0a: c8:bf:2e:b0:66:41:61:88:3a:b8:95:ae:c8:80:e6: d3:13:aa:c4:4f:92:f9:fb:56:05:8f:61:d8:db:a8: 69:df:69:3d:cb:00:45:80:f0:26:1f:28:7b:97:4e: 37:38:67:9e:cd:8f:ce:32:2f:fe:44:24:64:ab:56: 02:b8:d7:49:21:d4:82:78:39:94:31:94:32:c7:9f: 8b:ff:b4:ed:a7:a4:7e:ee:17:ec:ba:8f:ea:01:03: 0c:8b:23:ef:c3:a0:39:d4:6c:09:0b:1a:13:21:31: 0c:d5:e7:d3:2e:cc:fe:66:d0:16:59:6f:80:d2:f8: aa:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:6A:1F:09:A2:64:19:5C:37:03:97:96:1A:32:D0:7F:57:05:72:F7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/1ace37fc-2d70-31ae-b158-30bae66bd2de.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.69.157.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b5:70:a2:9b:1e:ac:f8:9f:cc:fa:24:98:57:56:50:9e:63:d5: 08:5b:89:89:ad:b3:35:a7:b7:9b:f6:21:18:2a:36:95:42:bb: a3:0e:0b:9c:78:c6:e4:06:7b:57:7a:2f:55:65:32:ad:dc:83: 2d:96:ad:fd:80:83:97:bb:05:e9:a6:1c:79:f3:9b:09:51:44: 9f:42:5f:b8:11:75:57:0c:ed:e8:4a:7c:69:1c:95:8d:85:54: 37:e1:ab:84:fa:3c:ea:54:60:97:03:9e:4b:bf:f1:06:7e:fa: 8b:17:eb:dc:1b:3b:4f:2d:74:d7:9f:2f:4b:37:e2:c8:c8:97: 6b:4c:4c:d0:ac:2f:6a:6e:04:8c:99:73:9e:03:9d:87:70:cd: 1c:8c:a5:ee:5f:7b:03:94:14:15:ad:b2:d2:3c:af:3b:52:8f: 57:34:ea:83:f1:0c:d3:32:01:34:0f:18:50:3e:67:b4:5f:99: f3:a3:ad:dd:65:10:a2:bb:b8:43:59:f9:c7:4e:65:e8:91:44: 21:6b:1d:16:71:67:41:fe:4f:61:80:38:13:74:64:72:40:cc: 8b:b2:57:24:05:b3:e7:64:c5:1e:db:8c:39:60:2e:f9:be:84: 5d:25:39:19:c7:09:1f:da:cf:e2:15:40:98:17:3c:19:e6:6f: 4f:da:93:fb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7Zx2cf9RN8YX9BsoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDgxNjAxMDAxNFoXDTI2MTExNDAyMDAxNFowLzEtMCsGA1UEAxMk ZjM5NmFjYjEtZjFkZi00Mjk2LThlN2ItNzJhZTM1ZjYyMzNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn56hwya1a+afUtSFET0XPvHFLNf62AwHczEd zRdIiKvBobpL89L8jnLITBST9izSkDIerHvWb67i4q8wE/RXcXbkp+is48BZA+ZU GwqJjsU9K7gPSFUSIFI4OjbGdyrHdrWw4xcBcRTsTwuGDqQcFsvXOhgo8KXAxjF1 Gj7YlC+95SikYQrIvy6wZkFhiDq4la7IgObTE6rET5L5+1YFj2HY26hp32k9ywBF gPAmHyh7l043OGeezY/OMi/+RCRkq1YCuNdJIdSCeDmUMZQyx5+L/7Ttp6R+7hfs uo/qAQMMiyPvw6A51GwJCxoTITEM1efTLsz+ZtAWWW+A0viqBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN5qHwmiZBlcNwOXlhoy0H9XBXL3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMWFjZTM3ZmMtMmQ3MC0z MWFlLWIxNTgtMzBiYWU2NmJkMmRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEWdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALVwopserPifzPokmFdWUJ5j1QhbiYmtszWnt5v2IRgqNpVCu6MOC5x4 xuQGe1d6L1VlMq3cgy2Wrf2Ag5e7BemmHHnzmwlRRJ9CX7gRdVcM7ehKfGkclY2F VDfhq4T6POpUYJcDnku/8QZ++osX69wbO08tdNefL0s34sjIl2tMTNCsL2puBIyZ c54DnYdwzRyMpe5fewOUFBWtstI8rztSj1c06oPxDNMyATQPGFA+Z7RfmfOjrd1l EKK7uENZ+cdOZeiRRCFrHRZxZ0H+T2GAOBN0ZHJAzIuyVyQFs+dkxR7bjDlgLvm+ hF0lORnHCR/az+IVQJgXPBnmb0/ak/s= -----END CERTIFICATE-----Generated at Sun Sep 20 12:57:47 2026 by rpki-client