$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/8951cdf5-ce90-391e-81ed-4ff99db0c9de.roa File: 8951cdf5-ce90-391e-81ed-4ff99db0c9de.roa (raw, json) Hash identifier: 9nS4mP4ac99svXPmb5zoK3nexUbc6po/M0aUZ3X7FG4= Subject key identifier: B4:69:0A:5D:27:D8:A4:AE:B3:7E:8A:E0:B8:9E:A3:F7:88:26:42:84 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584E4AEF66E128226ECD5248B380 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/8951cdf5-ce90-391e-81ed-4ff99db0c9de.roa Signing time: Thu 25 Jun 2026 21:00:12 +0000 ROA not before: Thu 25 Jun 2026 21:00:12 +0000 ROA not after: Wed 23 Sep 2026 21:00:12 +0000 asID: 13335 IP address blocks: 172.69.189.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Jul 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:4a:ef:66:e1:28:22:6e:cd:52:48:b3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Jun 25 21:00:12 2026 GMT Not After : Sep 23 21:00:12 2026 GMT Subject: CN=c29aee03-54d8-4336-8636-aa063a43f9ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:05:1a:6b:4d:45:ee:52:a0:d8:97:dc:39:3f: 04:85:5e:ac:66:7a:b2:0e:9e:f1:14:9d:c8:3b:6d: 46:15:90:ad:69:cf:68:cb:e6:20:a4:7d:63:12:3c: b5:10:6d:92:dd:5b:91:e3:ee:16:1a:d0:ab:9e:20: 0d:a2:ef:2d:37:e6:42:39:29:ec:78:3a:4b:12:ac: 05:b6:59:c9:93:17:3a:34:0f:de:6c:08:6b:4c:c2: a2:f5:19:e0:c7:fd:ed:c0:49:81:72:f0:ce:75:27: b7:6f:9b:00:1d:8f:1f:2a:6c:ff:a6:07:b7:a2:dc: 56:f4:b5:a9:58:f0:fd:5c:87:08:dc:fc:4d:9c:13: 87:49:26:cc:57:78:0f:2e:85:04:b8:c1:70:20:3d: b0:c5:6f:7c:2c:1b:e3:ab:26:78:b0:a6:15:c1:30: e2:6c:07:f3:3a:93:23:67:be:2e:3b:6f:3c:23:71: c0:81:38:3d:04:cd:eb:3d:bd:b8:91:dd:43:fc:f6: d2:49:1f:96:e4:60:bc:1d:00:48:a2:f5:66:e5:53: f4:de:cb:99:7f:10:af:dd:1e:38:d0:c7:60:a2:77: 47:8b:54:35:4e:86:85:cc:76:14:da:0c:a2:ec:a8: 7f:77:7a:2e:a5:9d:5b:a1:6c:e0:ae:70:7e:de:64: 35:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:69:0A:5D:27:D8:A4:AE:B3:7E:8A:E0:B8:9E:A3:F7:88:26:42:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/8951cdf5-ce90-391e-81ed-4ff99db0c9de.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.69.189.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:bf:de:21:ec:89:0b:91:8e:60:69:96:90:0c:b2:ba:e3:7f: 5e:ec:59:8a:20:76:3c:1f:b3:dc:60:e4:b3:6c:55:26:4e:41: 60:3b:34:a1:2e:b0:53:8c:09:19:be:00:2f:d6:1c:d4:72:38: 03:52:4c:f1:98:85:20:01:e3:36:04:86:28:b5:f4:83:de:5f: 63:dd:22:db:34:64:9c:0d:f2:d7:d3:c4:cf:05:69:b9:da:07: 3d:30:a7:aa:17:3a:19:95:90:2e:a8:10:cf:29:4e:13:3e:98: 40:4d:8a:f8:c9:ae:0a:d9:59:04:24:b3:b5:68:4c:57:21:9c: 26:a6:f6:6d:c3:46:0c:f1:7d:21:e8:a5:43:6c:5c:63:d2:80: ff:7c:43:b6:f6:f6:59:2e:b0:b2:c9:d0:45:5d:81:58:15:39: 50:48:2c:e2:ea:19:ee:8d:b7:bc:23:65:e6:f7:fe:d3:96:08: f6:72:a3:11:ee:6f:95:5b:bc:ee:60:b7:07:80:22:c3:58:bd: 04:7a:9f:2d:31:e2:95:13:0f:4d:b5:a9:da:d2:a8:01:17:94: 4c:64:d8:65:d0:17:f6:26:96:11:b3:4e:fa:5e:9d:1b:ff:be: c2:4c:ae:f6:22:18:98:19:f5:d5:93:8f:b8:88:56:1f:6a:f0: ba:3e:bf:be -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5K72bhKCJuzVJIs4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDYyNTIxMDAxMloXDTI2MDkyMzIxMDAxMlowLzEtMCsGA1UEAxMk YzI5YWVlMDMtNTRkOC00MzM2LTg2MzYtYWEwNjNhNDNmOWVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlwUaa01F7lKg2JfcOT8EhV6sZnqyDp7xFJ3I O21GFZCtac9oy+YgpH1jEjy1EG2S3VuR4+4WGtCrniANou8tN+ZCOSnseDpLEqwF tlnJkxc6NA/ebAhrTMKi9Rngx/3twEmBcvDOdSe3b5sAHY8fKmz/pge3otxW9LWp WPD9XIcI3PxNnBOHSSbMV3gPLoUEuMFwID2wxW98LBvjqyZ4sKYVwTDibAfzOpMj Z74uO288I3HAgTg9BM3rPb24kd1D/PbSSR+W5GC8HQBIovVm5VP03suZfxCv3R44 0MdgondHi1Q1ToaFzHYU2gyi7Kh/d3oupZ1boWzgrnB+3mQ11QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLRpCl0n2KSus36K4Lieo/eIJkKEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvODk1MWNkZjUtY2U5MC0z OTFlLTgxZWQtNGZmOTlkYjBjOWRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEW9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIy/3iHsiQuRjmBplpAMsrrjf17sWYogdjwfs9xg5LNsVSZOQWA7NKEu sFOMCRm+AC/WHNRyOANSTPGYhSAB4zYEhii19IPeX2PdIts0ZJwN8tfTxM8Fabna Bz0wp6oXOhmVkC6oEM8pThM+mEBNivjJrgrZWQQks7VoTFchnCam9m3DRgzxfSHo pUNsXGPSgP98Q7b29lkusLLJ0EVdgVgVOVBILOLqGe6Nt7wjZeb3/tOWCPZyoxHu b5VbvO5gtweAIsNYvQR6ny0x4pUTD021qdrSqAEXlExk2GXQF/YmlhGzTvpenRv/ vsJMrvYiGJgZ9dWTj7iIVh9q8Lo+v74= -----END CERTIFICATE-----Generated at Fri Jul 24 11:46:16 2026 by rpki-client