$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/0108a716-38be-31f8-b06e-ed9f9486b106.roa File: 0108a716-38be-31f8-b06e-ed9f9486b106.roa (raw, json) Hash identifier: hxXXK+/o86pWLmzuOYltOIhITU34w2mKuIgOemDaRQc= Subject key identifier: FB:AB:7C:3E:6F:E9:F6:4C:A4:AC:C2:C6:37:CB:3A:ED:4E:A6:66:B6 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584EEEB76534A6E6356AD6568E00 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/0108a716-38be-31f8-b06e-ed9f9486b106.roa Signing time: Sun 23 Aug 2026 13:00:12 +0000 ROA not before: Sun 23 Aug 2026 13:00:12 +0000 ROA not after: Sat 21 Nov 2026 14:00:12 +0000 asID: 13335 IP address blocks: 172.68.196.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ee:b7:65:34:a6:e6:35:6a:d6:56:8e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 23 13:00:12 2026 GMT Not After : Nov 21 14:00:12 2026 GMT Subject: CN=e68d570b-885f-4f3f-b753-ab2112f82f56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:28:f9:c4:4f:72:23:a8:29:5a:23:ed:a1:75: b5:ce:9d:68:e4:6a:94:06:6a:83:79:12:bc:9e:6a: ee:37:a0:27:a5:b6:63:1b:76:0e:1e:3c:fd:7d:9a: c7:eb:42:d6:29:9c:21:72:7d:76:07:1a:43:2a:8b: 07:f0:14:c1:17:8c:05:72:f5:f9:81:33:70:ad:73: 22:49:c3:c0:f6:b1:36:1c:28:42:0d:6c:dc:dc:97: 86:2c:bd:0e:13:77:67:ed:e7:31:7a:0c:95:e4:74: c0:61:59:88:27:af:ea:3c:07:8c:b1:f9:29:c2:ff: ec:53:f4:0d:01:c2:b8:5c:ff:69:a3:33:5e:21:b7: be:84:96:77:76:83:2a:d4:81:c4:62:34:fd:49:15: 41:e9:c6:b4:e5:0e:23:d7:e5:a4:9a:f2:78:ac:4e: b8:b9:8c:5d:cf:9c:6b:13:6e:cb:58:93:a8:e7:78: b4:78:c0:d0:54:7d:61:14:cc:4e:bb:e7:f1:30:d9: a8:cd:72:50:13:bf:46:54:16:f7:3b:57:95:b4:b0: 19:c5:ee:04:e3:42:54:fa:49:c4:29:6d:a8:ee:1a: 10:7a:52:ac:9e:73:77:a7:98:57:4f:d7:10:a5:ed: 08:42:c5:2e:c2:7a:e5:86:e9:5c:68:9c:43:34:41: d4:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:AB:7C:3E:6F:E9:F6:4C:A4:AC:C2:C6:37:CB:3A:ED:4E:A6:66:B6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/0108a716-38be-31f8-b06e-ed9f9486b106.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.68.196.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bc:7b:1f:55:ad:77:cb:10:e0:cb:b9:d3:5f:ba:7e:9d:80:31: c0:67:c5:03:7d:94:bb:29:91:a0:4f:a3:5d:96:d1:51:b8:8f: ce:0b:56:af:ac:bd:a3:29:a7:11:f1:24:02:3c:29:6d:15:b5: 30:d8:4d:47:1a:c9:5a:c9:c5:b5:0b:6c:7e:9d:af:c5:a5:14: f0:9e:2a:ce:dc:59:53:cc:ed:a5:f0:d4:91:95:3a:0e:0d:07: 6a:fc:5e:38:f1:8f:08:77:90:93:ec:3e:f0:e7:7e:47:8f:81: 59:69:41:e6:0a:d0:87:e4:1b:fa:4d:d5:3e:fc:97:ae:3c:31: 65:42:bc:fd:78:ec:88:a7:e1:ea:d7:f4:3f:80:98:07:b0:a8: 52:32:12:ea:75:e9:d2:70:50:fa:8c:ef:84:c8:4d:c0:4b:18: ae:cd:58:ff:65:cb:d1:87:cd:f5:bc:ab:9f:b8:9e:b1:9c:52: c5:cb:af:3a:f7:f1:c4:b1:41:af:1e:ec:0e:e5:62:ba:13:2d: 38:4a:83:7c:cc:f0:28:58:5c:14:81:4b:af:1d:69:b8:53:5c: b4:83:ad:f1:3b:3a:73:10:34:7b:de:07:70:32:9a:c1:21:31: ca:55:ec:99:b4:9d:8f:72:d2:85:82:94:56:eb:13:d1:da:75: da:d7:95:1e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7ut2U0puY1atZWjgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDgyMzEzMDAxMloXDTI2MTEyMTE0MDAxMlowLzEtMCsGA1UEAxMk ZTY4ZDU3MGItODg1Zi00ZjNmLWI3NTMtYWIyMTEyZjgyZjU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgCj5xE9yI6gpWiPtoXW1zp1o5GqUBmqDeRK8 nmruN6AnpbZjG3YOHjz9fZrH60LWKZwhcn12BxpDKosH8BTBF4wFcvX5gTNwrXMi ScPA9rE2HChCDWzc3JeGLL0OE3dn7ecxegyV5HTAYVmIJ6/qPAeMsfkpwv/sU/QN AcK4XP9pozNeIbe+hJZ3doMq1IHEYjT9SRVB6ca05Q4j1+WkmvJ4rE64uYxdz5xr E27LWJOo53i0eMDQVH1hFMxOu+fxMNmozXJQE79GVBb3O1eVtLAZxe4E40JU+knE KW2o7hoQelKsnnN3p5hXT9cQpe0IQsUuwnrlhulcaJxDNEHUAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPurfD5v6fZMpKzCxjfLOu1Opma2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMDEwOGE3MTYtMzhiZS0z MWY4LWIwNmUtZWQ5Zjk0ODZiMTA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArETEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALx7H1Wtd8sQ4Mu501+6fp2AMcBnxQN9lLspkaBPo12W0VG4j84LVq+s vaMppxHxJAI8KW0VtTDYTUcayVrJxbULbH6dr8WlFPCeKs7cWVPM7aXw1JGVOg4N B2r8Xjjxjwh3kJPsPvDnfkePgVlpQeYK0IfkG/pN1T78l648MWVCvP147Iin4erX 9D+AmAewqFIyEup16dJwUPqM74TITcBLGK7NWP9ly9GHzfW8q5+4nrGcUsXLrzr3 8cSxQa8e7A7lYroTLThKg3zM8ChYXBSBS68dabhTXLSDrfE7OnMQNHveB3AymsEh McpV7Jm0nY9y0oWClFbrE9HaddrXlR4= -----END CERTIFICATE-----Generated at Tue Sep 1 04:47:16 2026 by rpki-client