$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/0c88f35f-6e17-3c5e-b570-21d26061ab90.roa File: 0c88f35f-6e17-3c5e-b570-21d26061ab90.roa (raw, json) Hash identifier: fB10WbvxXk3uDquJBc157WLGvgkv0pJsGtkAxfq2qeI= Subject key identifier: D1:8E:89:59:4A:A6:44:A1:C1:F5:96:F0:A8:07:23:6D:88:37:63:07 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584EEA8786AE1684D45AAA25D040 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/0c88f35f-6e17-3c5e-b570-21d26061ab90.roa Signing time: Sat 22 Aug 2026 01:00:12 +0000 ROA not before: Sat 22 Aug 2026 01:00:12 +0000 ROA not after: Fri 20 Nov 2026 02:00:12 +0000 asID: 13335 IP address blocks: 172.68.205.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ea:87:86:ae:16:84:d4:5a:aa:25:d0:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 22 01:00:12 2026 GMT Not After : Nov 20 02:00:12 2026 GMT Subject: CN=8a478bce-9148-4469-a0c8-b832ed6ddfe3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:42:c2:14:4c:c7:92:a5:c9:81:3c:6b:77:4d: 2e:30:11:c8:da:e1:5d:99:a9:5f:f0:59:4f:53:36: 79:99:e3:75:55:98:a5:87:68:ca:b7:87:13:ae:69: 56:67:4d:18:a4:d7:89:5a:fe:ee:a7:07:25:bf:17: 1b:51:9d:8f:b2:3a:db:d7:62:bf:5a:f1:9c:01:80: 7e:78:dd:20:3c:c3:d5:ba:a0:37:44:d4:99:54:32: 21:ef:53:5c:2a:d5:88:65:b5:3d:bf:ff:a9:b2:84: f6:37:91:0b:af:7e:a4:ba:6d:ff:25:6d:b1:43:ef: 71:7f:3d:aa:d8:91:f2:34:73:54:1c:94:16:7e:09: 9c:96:b8:a7:9e:ac:fa:31:d4:9a:c8:5f:1c:cf:83: 50:4f:98:93:cb:cb:ac:21:2d:d8:0a:83:fc:ae:05: 0b:fc:31:87:c6:aa:d2:08:a0:ae:68:43:92:10:7b: 0a:b3:01:80:9f:82:4c:d1:71:57:40:0a:f3:c4:17: 62:cb:be:0f:b0:85:25:47:5d:8f:ad:55:91:eb:ee: 16:a8:8c:94:31:20:5c:f2:c1:37:33:d4:d0:2d:38: 30:47:eb:0d:8b:28:5c:6a:2c:cd:8c:2a:f2:de:41: 83:ec:ef:a4:82:74:dc:24:ba:a6:15:a2:c4:f7:8d: 38:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:8E:89:59:4A:A6:44:A1:C1:F5:96:F0:A8:07:23:6D:88:37:63:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/0c88f35f-6e17-3c5e-b570-21d26061ab90.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.68.205.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:d8:e7:65:b2:bc:db:39:50:1d:a5:d2:ef:55:be:61:77:2b: 3f:ec:05:73:f5:9e:a8:a6:69:42:f6:fb:ab:e5:0c:08:41:a7: 0c:22:6d:dd:94:e1:4b:b4:64:8e:5a:b7:fd:da:59:be:36:9d: 08:0d:b1:e9:08:9d:c2:40:13:a6:ac:0f:78:41:bf:e3:c4:78: ca:c6:1e:a4:83:d5:79:45:df:b7:d2:4d:f3:31:bb:c1:06:c6: 64:72:24:d8:78:a9:92:2f:39:ee:ac:b4:47:72:ce:77:61:b3: 23:31:5e:cf:06:c1:67:52:c6:18:0e:75:33:4b:02:eb:e3:33: e8:68:c6:d8:60:d9:41:c5:eb:cc:5a:ac:58:78:05:31:90:a2: 97:da:f6:52:13:3c:64:be:11:1f:75:a8:30:c6:f5:8e:3b:c8: 3c:91:73:dd:b0:67:17:5b:61:8b:ac:ac:6b:e1:ff:6f:c1:45: 9b:f8:bd:5f:fa:aa:91:66:a9:10:10:7d:01:6e:28:7a:39:97: dd:32:84:5e:be:e9:5f:c8:08:6c:2e:4a:43:31:1b:96:2d:98: 10:90:62:0b:40:3e:b7:ab:d0:e1:d9:9d:7f:cb:57:0a:bb:a1: 94:b7:8d:0a:e6:7d:57:9a:df:42:b9:bb:ed:7b:70:a9:3d:d9: 9b:e2:47:6a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7qh4auFoTUWqol0EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDgyMjAxMDAxMloXDTI2MTEyMDAyMDAxMlowLzEtMCsGA1UEAxMk OGE0NzhiY2UtOTE0OC00NDY5LWEwYzgtYjgzMmVkNmRkZmUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzkLCFEzHkqXJgTxrd00uMBHI2uFdmalf8FlP UzZ5meN1VZilh2jKt4cTrmlWZ00YpNeJWv7upwclvxcbUZ2Psjrb12K/WvGcAYB+ eN0gPMPVuqA3RNSZVDIh71NcKtWIZbU9v/+psoT2N5ELr36kum3/JW2xQ+9xfz2q 2JHyNHNUHJQWfgmclrinnqz6MdSayF8cz4NQT5iTy8usIS3YCoP8rgUL/DGHxqrS CKCuaEOSEHsKswGAn4JM0XFXQArzxBdiy74PsIUlR12PrVWR6+4WqIyUMSBc8sE3 M9TQLTgwR+sNiyhcaizNjCry3kGD7O+kgnTcJLqmFaLE9404uwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNGOiVlKpkShwfWW8KgHI22IN2MHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMGM4OGYzNWYtNmUxNy0z YzVlLWI1NzAtMjFkMjYwNjFhYjkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArETNMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGXY52WyvNs5UB2l0u9VvmF3Kz/sBXP1nqimaUL2+6vlDAhBpwwibd2U 4Uu0ZI5at/3aWb42nQgNsekIncJAE6asD3hBv+PEeMrGHqSD1XlF37fSTfMxu8EG xmRyJNh4qZIvOe6stEdyzndhsyMxXs8GwWdSxhgOdTNLAuvjM+hoxthg2UHF68xa rFh4BTGQopfa9lITPGS+ER91qDDG9Y47yDyRc92wZxdbYYusrGvh/2/BRZv4vV/6 qpFmqRAQfQFuKHo5l90yhF6+6V/ICGwuSkMxG5YtmBCQYgtAPrer0OHZnX/LVwq7 oZS3jQrmfVea30K5u+17cKk92ZviR2o= -----END CERTIFICATE-----Generated at Tue Sep 22 06:28:50 2026 by rpki-client