$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ba2da0de-d168-3ee6-b96e-683411bd56b6.roa File: ba2da0de-d168-3ee6-b96e-683411bd56b6.roa (raw, json) Hash identifier: OvXJIDqtTYVIlgx7vfufILfeTj3L+3tbKVebwyyw9og= Subject key identifier: C4:58:1B:17:2D:79:F2:72:B0:97:F7:E1:76:96:27:14:87:2B:32:63 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584F497331840ED75CECB7413800 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ba2da0de-d168-3ee6-b96e-683411bd56b6.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 14789 IP address blocks: 172.69.107.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:31:84:0e:d7:5c:ec:b7:41:38:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=d73911e2-c3d9-47d2-b709-e2cbebf14ac3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:dc:98:2e:d6:a8:88:ff:27:ef:1f:96:e8:e7: 46:7f:ac:70:c3:1d:79:ee:9c:34:bd:04:7a:28:d8: 9d:6e:2b:14:76:4e:47:12:c6:b1:64:dc:39:4e:69: 7f:27:11:7e:ef:cb:8e:8f:d3:fd:95:91:24:89:56: e6:39:61:71:83:5f:11:9d:1d:ec:37:42:38:1b:92: 19:7e:ff:cd:6e:84:fe:c5:c5:09:6e:00:5f:f7:4f: 6e:d9:88:21:26:57:30:87:27:7d:57:27:2e:72:33: f6:4d:4c:18:52:ad:f2:45:2a:43:b1:6c:c4:24:2b: cd:89:f3:80:4a:11:cf:ad:18:fb:fc:ad:59:31:eb: 36:80:b3:a3:99:d0:35:de:4f:3c:b1:83:a6:9d:b0: 32:8e:a5:a2:14:d5:be:a9:4b:d0:3a:b8:80:73:7e: e4:66:08:03:df:5c:0b:04:e9:c4:0f:48:ff:63:4b: 91:e1:d6:a6:07:d6:a9:ee:ce:ac:04:01:20:6e:ba: 76:b6:8e:63:01:80:6a:8e:98:31:a9:ba:95:d3:c7: d8:33:0b:44:42:db:b5:19:7f:98:bc:e1:7e:2f:7a: 6e:40:95:36:e8:65:7e:8a:47:41:c2:bd:c1:01:a8: b7:16:ce:c4:3e:b6:df:70:be:76:88:32:c8:60:c0: ce:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:58:1B:17:2D:79:F2:72:B0:97:F7:E1:76:96:27:14:87:2B:32:63 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ba2da0de-d168-3ee6-b96e-683411bd56b6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.69.107.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:09:95:e6:2d:dd:95:2c:f8:04:bb:32:6c:82:7b:81:3f:20: 5c:4f:4b:5d:44:3c:55:5d:30:52:18:cd:3c:96:84:53:cd:92: 6d:4c:46:2a:cc:d3:bb:a3:1d:69:73:21:ff:c6:52:b3:5f:ca: af:de:4a:d5:9a:5f:dc:0f:a2:59:a5:64:86:02:2d:b6:fd:27: 7f:41:c8:3f:ee:fa:5e:b0:f3:7a:dc:27:42:89:7d:d8:e0:41: 8a:f7:64:60:6d:ca:5e:8f:79:00:32:d4:f1:ff:03:4d:77:b0: 76:eb:50:41:05:b7:75:67:f5:6b:7a:9e:9c:34:65:4e:8a:f2: 1f:58:1d:5a:8e:cf:c6:ae:6a:19:b3:aa:f1:4a:1e:73:41:da: 03:ef:3c:5f:15:c5:19:58:0a:f6:a8:fa:47:25:65:80:45:a7: e8:0c:42:7d:e6:6d:86:bb:bb:cd:f0:b8:00:e2:2b:82:93:92: 2b:79:44:45:e3:26:37:2a:1e:15:6a:6a:65:7b:58:ff:73:54: f5:73:4a:9a:3c:d9:54:77:51:c0:dd:70:0c:e4:96:4b:ec:c8: f9:1e:21:68:3f:35:af:bc:09:05:f9:23:a4:01:30:e0:d0:d4: cb:e0:41:7d:80:b6:62:9e:52:c9:50:de:c6:d5:24:1a:8e:c8: a8:c5:53:b2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JczGEDtdc7LdBOAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZDczOTExZTItYzNkOS00N2QyLWI3MDktZTJjYmViZjE0YWMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjNyYLtaoiP8n7x+W6OdGf6xwwx157pw0vQR6 KNidbisUdk5HEsaxZNw5Tml/JxF+78uOj9P9lZEkiVbmOWFxg18RnR3sN0I4G5IZ fv/NboT+xcUJbgBf909u2YghJlcwhyd9VycucjP2TUwYUq3yRSpDsWzEJCvNifOA ShHPrRj7/K1ZMes2gLOjmdA13k88sYOmnbAyjqWiFNW+qUvQOriAc37kZggD31wL BOnED0j/Y0uR4damB9ap7s6sBAEgbrp2to5jAYBqjpgxqbqV08fYMwtEQtu1GX+Y vOF+L3puQJU26GV+ikdBwr3BAai3Fs7EPrbfcL52iDLIYMDOkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMRYGxctefJysJf34XaWJxSHKzJjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvYmEyZGEwZGUtZDE2OC0z ZWU2LWI5NmUtNjgzNDExYmQ1NmI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEVrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGcJleYt3ZUs+AS7MmyCe4E/IFxPS11EPFVdMFIYzTyWhFPNkm1MRirM 07ujHWlzIf/GUrNfyq/eStWaX9wPolmlZIYCLbb9J39ByD/u+l6w83rcJ0KJfdjg QYr3ZGBtyl6PeQAy1PH/A013sHbrUEEFt3Vn9Wt6npw0ZU6K8h9YHVqOz8auahmz qvFKHnNB2gPvPF8VxRlYCvao+kclZYBFp+gMQn3mbYa7u83wuADiK4KTkit5REXj JjcqHhVqamV7WP9zVPVzSpo82VR3UcDdcAzklkvsyPkeIWg/Na+8CQX5I6QBMODQ 1MvgQX2AtmKeUslQ3sbVJBqOyKjFU7I= -----END CERTIFICATE-----Generated at Tue Sep 29 13:08:34 2026 by rpki-client