$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a2cc6459-5130-369b-9b78-9fe51c849182.roa File: a2cc6459-5130-369b-9b78-9fe51c849182.roa (raw, json) Hash identifier: 8nOdS/rceH+6m814nnGINT+IXOygd02Emi0auJstrws= Subject key identifier: 8C:40:98:C5:AF:49:D7:93:8E:7B:68:B5:D1:F0:4B:94:4D:E1:52:C9 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584EEEB773D7195EF4D0A18232C0 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a2cc6459-5130-369b-9b78-9fe51c849182.roa Signing time: Sun 23 Aug 2026 13:00:12 +0000 ROA not before: Sun 23 Aug 2026 13:00:12 +0000 ROA not after: Sat 21 Nov 2026 14:00:12 +0000 asID: 13335 IP address blocks: 172.69.23.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ee:b7:73:d7:19:5e:f4:d0:a1:82:32:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 23 13:00:12 2026 GMT Not After : Nov 21 14:00:12 2026 GMT Subject: CN=be362316-a86f-4dd2-ac6c-442b694aa502 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:7d:96:c3:2c:d3:ed:c3:74:d9:8a:78:e4:c6: a1:9a:93:49:52:78:be:1c:e5:b8:f1:80:f3:2c:6a: 6f:52:db:37:b7:00:aa:49:fe:e6:c6:db:d0:35:3e: 45:c4:12:42:16:c8:4c:da:cc:9b:f4:57:fb:5d:c3: 7f:49:ec:d2:2b:19:4b:bf:09:0c:6d:1d:9e:4d:06: b2:84:c5:51:6b:89:2c:06:8f:aa:75:af:20:71:fb: 31:1d:82:70:6f:c3:38:fa:2a:0b:5d:06:2e:c3:5f: b5:96:e0:31:0e:35:58:b0:e5:6c:5c:7b:7b:d2:4f: a7:ae:85:f9:ee:41:53:da:fd:e1:68:f8:31:80:ee: 53:54:8a:33:99:5c:8e:15:d0:f0:f2:82:60:38:03: 38:03:b6:45:06:14:c9:8e:9e:55:2f:23:5c:d2:f4: c0:60:fc:5e:cf:87:60:c4:8f:ac:7f:da:98:89:44: 8f:fb:a5:af:08:88:9a:0b:bd:3b:b0:ed:b3:8b:a2: e6:fc:ea:2f:d7:f0:22:6a:92:ee:0b:18:f9:14:8b: d6:f4:2d:24:11:a5:19:9a:4d:5e:66:d8:26:82:92: 70:3b:67:92:97:46:58:98:9e:8f:90:90:ec:14:4c: ea:86:90:29:3d:ef:11:76:e2:c1:f4:7e:2f:37:c2: 30:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:40:98:C5:AF:49:D7:93:8E:7B:68:B5:D1:F0:4B:94:4D:E1:52:C9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a2cc6459-5130-369b-9b78-9fe51c849182.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.69.23.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:73:c0:c0:4b:2e:a9:c0:3b:62:8e:04:04:f0:88:75:95:d9: 68:82:5b:52:94:96:a7:4d:74:86:1e:da:56:03:91:39:fd:4f: 2a:03:63:1f:ee:59:fb:0f:45:5d:2f:b3:a7:bc:0b:99:ed:ae: 6c:54:66:08:bc:f5:ac:36:a9:8a:dc:2c:b1:02:2f:89:e7:6a: 28:66:bd:58:27:ba:14:9a:59:55:3b:57:77:a6:6b:89:66:fb: 54:29:3c:7f:7d:e8:a5:d8:78:96:f8:d6:5f:c7:37:b9:92:cb: c9:c7:31:c7:07:00:ac:8e:de:c7:43:cb:5f:9d:36:4b:1f:67: 84:01:70:78:d5:6c:e2:07:e6:5f:8f:a1:0f:ef:09:11:fb:44: 2e:58:9e:18:b1:a1:a5:7d:59:ad:4b:09:b5:48:57:e0:73:5c: 53:5c:15:8a:15:44:b5:74:6b:8f:1d:cd:bd:06:6d:35:08:f9: df:9d:13:88:04:5d:09:48:f9:8f:ed:ae:31:a8:4f:d0:b2:72: f8:1a:b1:72:ae:62:90:04:e6:05:6d:14:8b:9a:b6:21:e3:e7: 29:01:ba:2d:92:95:ef:84:a8:59:51:71:2a:57:85:3c:61:62: 17:c9:e8:ad:cd:52:15:ad:a0:e0:d4:21:d3:49:49:49:7a:d9: 26:d7:8e:97 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7ut3PXGV700KGCMsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDgyMzEzMDAxMloXDTI2MTEyMTE0MDAxMlowLzEtMCsGA1UEAxMk YmUzNjIzMTYtYTg2Zi00ZGQyLWFjNmMtNDQyYjY5NGFhNTAyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA432WwyzT7cN02Yp45MahmpNJUni+HOW48YDz LGpvUts3twCqSf7mxtvQNT5FxBJCFshM2syb9Ff7XcN/SezSKxlLvwkMbR2eTQay hMVRa4ksBo+qda8gcfsxHYJwb8M4+ioLXQYuw1+1luAxDjVYsOVsXHt70k+nroX5 7kFT2v3haPgxgO5TVIozmVyOFdDw8oJgOAM4A7ZFBhTJjp5VLyNc0vTAYPxez4dg xI+sf9qYiUSP+6WvCIiaC707sO2zi6Lm/Oov1/AiapLuCxj5FIvW9C0kEaUZmk1e ZtgmgpJwO2eSl0ZYmJ6PkJDsFEzqhpApPe8RduLB9H4vN8IwAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIxAmMWvSdeTjntotdHwS5RN4VLJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvYTJjYzY0NTktNTEzMC0z NjliLTliNzgtOWZlNTFjODQ5MTgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEUXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABtzwMBLLqnAO2KOBATwiHWV2WiCW1KUlqdNdIYe2lYDkTn9TyoDYx/u WfsPRV0vs6e8C5ntrmxUZgi89aw2qYrcLLECL4nnaihmvVgnuhSaWVU7V3ema4lm +1QpPH996KXYeJb41l/HN7mSy8nHMccHAKyO3sdDy1+dNksfZ4QBcHjVbOIH5l+P oQ/vCRH7RC5YnhixoaV9Wa1LCbVIV+BzXFNcFYoVRLV0a48dzb0GbTUI+d+dE4gE XQlI+Y/trjGoT9CycvgasXKuYpAE5gVtFIuatiHj5ykBui2Sle+EqFlRcSpXhTxh YhfJ6K3NUhWtoODUIdNJSUl62SbXjpc= -----END CERTIFICATE-----Generated at Sun Sep 20 16:04:08 2026 by rpki-client