$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/8a331a07-1163-38d3-8065-2a8f61a01ff3.roa File: 8a331a07-1163-38d3-8065-2a8f61a01ff3.roa (raw, json) Hash identifier: lkdByCWihGTfLRN9/ooh0qZxC9zyJOrIVqkxccXqlp8= Subject key identifier: DC:AF:E9:5D:A2:F6:66:55:28:64:F1:7C:A1:06:DC:99:6D:60:E3:5A Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584ED9C739A3192D3F1F5266D080 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/8a331a07-1163-38d3-8065-2a8f61a01ff3.roa Signing time: Sun 16 Aug 2026 01:00:14 +0000 ROA not before: Sun 16 Aug 2026 01:00:14 +0000 ROA not after: Sat 14 Nov 2026 02:00:14 +0000 asID: 14789 IP address blocks: 172.69.18.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:d9:c7:39:a3:19:2d:3f:1f:52:66:d0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 16 01:00:14 2026 GMT Not After : Nov 14 02:00:14 2026 GMT Subject: CN=51b6fd9e-6121-4dd6-b016-f694b4b86856 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:63:35:02:da:3a:49:d4:89:1c:71:81:87:6d: ce:b8:82:32:9e:3f:d5:8a:6d:25:52:ab:86:2e:e3: c4:eb:08:37:ba:f3:d0:1d:a0:ad:90:f1:c2:b9:d8: 73:a9:9e:30:a3:8f:5a:09:b0:13:f4:bb:8c:90:96: a9:a7:36:ac:9a:9e:dd:b7:8b:e3:81:0c:7f:71:26: b6:07:1b:6a:d6:29:7e:1b:13:b9:01:76:ae:4c:9f: ab:a6:9d:66:3b:09:f7:9a:28:89:3f:35:f6:df:71: cf:35:85:29:f1:aa:30:ba:75:31:4c:ea:97:57:30: 54:fb:44:96:78:b5:10:52:85:20:b0:78:56:38:68: 41:1a:7c:11:7f:6e:3d:1c:bf:73:2f:4e:d1:0a:d5: 2b:69:b8:8d:16:b5:24:b9:fe:be:a2:56:37:a3:85: ad:ed:c1:95:c6:07:11:64:b6:27:2f:d8:b4:3b:c6: 03:18:ec:b6:82:2d:c7:8e:bc:03:03:a9:b2:fa:aa: 72:30:54:0c:b3:07:77:01:16:2c:48:9d:90:a3:ee: 49:af:aa:07:7d:ec:d9:54:2b:c5:6c:7e:eb:61:6a: 53:f2:f4:3e:04:b9:5f:cf:d4:02:25:c8:50:db:00: 67:8e:cd:4a:8d:79:51:bb:6d:b4:ec:ef:11:2f:15: 05:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:AF:E9:5D:A2:F6:66:55:28:64:F1:7C:A1:06:DC:99:6D:60:E3:5A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/8a331a07-1163-38d3-8065-2a8f61a01ff3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.69.18.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:29:db:d2:a5:d9:23:1c:78:af:10:d9:16:6a:da:9d:59:aa: 85:1c:96:9c:74:b2:86:fb:6d:88:90:df:e2:47:3e:d6:a7:32: a9:74:24:ed:a7:9c:15:2c:45:26:b4:9b:b7:bb:0e:0c:01:d5: 9a:c2:dc:be:50:1a:1c:fc:9a:2e:4f:a8:2a:42:99:e0:0d:d1: 14:48:11:f2:a0:00:ad:18:37:e0:4e:f2:95:4e:4f:a7:fc:28: 63:05:e4:8b:d1:10:b2:5b:ea:ba:8d:2a:69:01:6f:e9:38:b3: f0:6b:79:49:43:d9:54:61:2b:36:0f:d4:b6:9d:d9:a0:39:f6: 05:bb:3f:ff:2e:06:30:7f:9a:55:fc:aa:3a:20:60:38:ec:db: b2:8d:57:d4:90:06:16:43:52:58:ba:60:bb:31:73:c5:41:8f: d1:9e:0b:64:42:fb:05:05:a6:0f:e9:11:b8:c1:30:a2:ba:e7: b0:55:a2:a0:11:b8:76:f0:25:c7:b0:27:db:d7:9c:f3:5c:50: 0b:bb:85:0b:3d:43:60:c5:17:69:7c:5b:31:75:6b:13:b0:ad: 7c:18:8d:20:70:e0:6e:33:36:30:3b:83:8e:ff:82:6a:53:38: 65:dc:ed:72:3f:05:a9:f1:29:f3:36:4c:54:04:2c:14:8e:93: 36:c5:e2:e7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7ZxzmjGS0/H1Jm0IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDgxNjAxMDAxNFoXDTI2MTExNDAyMDAxNFowLzEtMCsGA1UEAxMk NTFiNmZkOWUtNjEyMS00ZGQ2LWIwMTYtZjY5NGI0Yjg2ODU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhWM1Ato6SdSJHHGBh23OuIIynj/Vim0lUquG LuPE6wg3uvPQHaCtkPHCudhzqZ4wo49aCbAT9LuMkJappzasmp7dt4vjgQx/cSa2 Bxtq1il+GxO5AXauTJ+rpp1mOwn3miiJPzX233HPNYUp8aowunUxTOqXVzBU+0SW eLUQUoUgsHhWOGhBGnwRf249HL9zL07RCtUrabiNFrUkuf6+olY3o4Wt7cGVxgcR ZLYnL9i0O8YDGOy2gi3HjrwDA6my+qpyMFQMswd3ARYsSJ2Qo+5Jr6oHfezZVCvF bH7rYWpT8vQ+BLlfz9QCJchQ2wBnjs1KjXlRu2207O8RLxUFjwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNyv6V2i9mZVKGTxfKEG3JltYONaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvOGEzMzFhMDctMTE2My0z OGQzLTgwNjUtMmE4ZjYxYTAxZmYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEUSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFgp29Kl2SMceK8Q2RZq2p1ZqoUclpx0sob7bYiQ3+JHPtanMql0JO2n nBUsRSa0m7e7DgwB1ZrC3L5QGhz8mi5PqCpCmeAN0RRIEfKgAK0YN+BO8pVOT6f8 KGMF5IvRELJb6rqNKmkBb+k4s/BreUlD2VRhKzYP1Lad2aA59gW7P/8uBjB/mlX8 qjogYDjs27KNV9SQBhZDUli6YLsxc8VBj9GeC2RC+wUFpg/pEbjBMKK657BVoqAR uHbwJcewJ9vXnPNcUAu7hQs9Q2DFF2l8WzF1axOwrXwYjSBw4G4zNjA7g47/gmpT OGXc7XI/BanxKfM2TFQELBSOkzbF4uc= -----END CERTIFICATE-----Generated at Sun Sep 20 10:23:21 2026 by rpki-client