$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/e74883a6-f1c5-310a-bf33-adc88b0a7c90.roa File: e74883a6-f1c5-310a-bf33-adc88b0a7c90.roa (raw, json) Hash identifier: IO4MWW0hENgZTCNMZbrr+5JJgUPlUtwbHkTDnOXDiqo= Subject key identifier: 22:8A:13:4D:1B:5C:8E:47:F7:EE:AB:81:D2:17:6B:F5:F2:A9:A6:C5 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584EEEB768D53DADC80A2D2746E0 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/e74883a6-f1c5-310a-bf33-adc88b0a7c90.roa Signing time: Sun 23 Aug 2026 13:00:12 +0000 ROA not before: Sun 23 Aug 2026 13:00:12 +0000 ROA not after: Sat 21 Nov 2026 14:00:12 +0000 asID: 13335 IP address blocks: 172.69.124.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ee:b7:68:d5:3d:ad:c8:0a:2d:27:46:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 23 13:00:12 2026 GMT Not After : Nov 21 14:00:12 2026 GMT Subject: CN=1725e891-9254-45d0-8a6a-9b287f590209 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:9b:6b:b1:6b:75:5b:27:f0:06:c8:5b:a4:ee: a3:26:46:13:0e:3a:d6:8e:a2:0b:3d:44:59:49:44: e3:cd:26:3a:2a:c5:47:a8:28:38:7f:bf:07:66:c2: d0:82:24:05:99:ea:c1:34:cb:5a:8a:2a:9a:7b:61: 2e:b2:01:6b:a4:1f:2f:51:75:68:f2:86:ac:60:85: d0:bd:e9:ae:ad:ee:7a:44:0e:18:ad:8d:fd:d5:d4: ca:72:82:7d:2c:50:0b:1f:57:28:4c:7d:18:65:a5: cd:3a:0d:30:c7:dd:ba:17:04:05:98:4c:e3:36:23: 45:da:ab:a0:a7:e3:a6:5e:5f:9e:78:a4:8c:0a:6f: 52:a3:0c:0b:ac:c0:82:a1:2b:4f:85:69:76:ce:71: 49:ab:80:47:84:ee:3e:16:98:66:cd:07:67:10:e6: e9:8e:18:b9:9e:cc:da:10:3e:84:e7:22:44:88:54: 6d:b2:b8:76:77:31:a8:12:74:d6:a7:f5:82:7a:be: c9:ec:ea:3d:45:7b:df:eb:cf:9f:39:a4:4a:cd:c8: 20:03:c6:88:2b:f9:ce:d5:15:f9:f4:c7:7a:85:be: 92:88:c0:dd:88:19:29:43:7b:4a:9a:91:cf:52:8d: 0a:b5:a2:62:f5:58:b2:5c:c4:7d:72:bd:c8:0b:e9: 0d:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:8A:13:4D:1B:5C:8E:47:F7:EE:AB:81:D2:17:6B:F5:F2:A9:A6:C5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/e74883a6-f1c5-310a-bf33-adc88b0a7c90.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.69.124.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c8:95:14:a9:fe:3f:e2:8b:f3:03:7f:83:9e:b7:fd:f3:36:88: 77:d1:61:80:19:ad:68:c0:22:5d:92:04:58:96:60:69:67:4c: 54:ff:cb:b5:d6:66:57:64:ec:38:b8:a1:11:bb:16:65:17:bc: af:13:62:ef:0b:8d:cd:ed:a0:56:f2:97:78:ae:e8:1d:d6:85: 55:f8:f8:11:8a:79:27:ad:23:78:0e:67:dd:9b:f6:21:90:7c: fb:65:6f:de:50:06:38:65:cd:ac:c7:59:ea:0d:22:20:74:30: 3e:d2:d5:f7:44:01:e4:25:1f:8d:a8:e2:89:83:88:ea:ce:f9: e6:8c:f9:70:4e:6b:47:df:ed:f8:a9:e4:dc:53:2a:64:5f:6b: 41:7a:80:90:6e:02:0e:5c:ef:23:91:a2:9c:86:f3:46:5b:5d: 98:e2:bd:be:36:57:d5:29:31:fa:26:60:1c:e0:63:52:fe:a2: 05:83:f2:68:ef:04:07:d4:30:d6:ee:93:0d:ff:db:56:4a:2b: 14:f5:10:fb:05:e4:04:31:20:a1:0c:91:85:f8:db:61:98:76: 1e:78:48:8d:a6:6f:d2:cf:3b:62:32:f1:2f:6a:88:d3:27:3f: 4e:ec:92:b5:40:d1:a3:51:80:b7:11:65:ca:43:e9:66:f0:88: 6c:d3:15:56 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7ut2jVPa3ICi0nRuAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDgyMzEzMDAxMloXDTI2MTEyMTE0MDAxMlowLzEtMCsGA1UEAxMk MTcyNWU4OTEtOTI1NC00NWQwLThhNmEtOWIyODdmNTkwMjA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmJtrsWt1WyfwBshbpO6jJkYTDjrWjqILPURZ SUTjzSY6KsVHqCg4f78HZsLQgiQFmerBNMtaiiqae2EusgFrpB8vUXVo8oasYIXQ vemure56RA4YrY391dTKcoJ9LFALH1coTH0YZaXNOg0wx926FwQFmEzjNiNF2qug p+OmXl+eeKSMCm9SowwLrMCCoStPhWl2znFJq4BHhO4+FphmzQdnEObpjhi5nsza ED6E5yJEiFRtsrh2dzGoEnTWp/WCer7J7Oo9RXvf68+fOaRKzcggA8aIK/nO1RX5 9Md6hb6SiMDdiBkpQ3tKmpHPUo0KtaJi9ViyXMR9cr3IC+kNewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCKKE00bXI5H9+6rgdIXa/XyqabFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvZTc0ODgzYTYtZjFjNS0z MTBhLWJmMzMtYWRjODhiMGE3YzkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEV8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMiVFKn+P+KL8wN/g563/fM2iHfRYYAZrWjAIl2SBFiWYGlnTFT/y7XW Zldk7Di4oRG7FmUXvK8TYu8Ljc3toFbyl3iu6B3WhVX4+BGKeSetI3gOZ92b9iGQ fPtlb95QBjhlzazHWeoNIiB0MD7S1fdEAeQlH42o4omDiOrO+eaM+XBOa0ff7fip 5NxTKmRfa0F6gJBuAg5c7yORopyG80ZbXZjivb42V9UpMfomYBzgY1L+ogWD8mjv BAfUMNbukw3/21ZKKxT1EPsF5AQxIKEMkYX422GYdh54SI2mb9LPO2Iy8S9qiNMn P07skrVA0aNRgLcRZcpD6WbwiGzTFVY= -----END CERTIFICATE-----Generated at Sun Sep 20 16:05:47 2026 by rpki-client