$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/144ffcfe-f508-3c6c-a0af-51b2cdf9406e.roa File: 144ffcfe-f508-3c6c-a0af-51b2cdf9406e.roa (raw, json) Hash identifier: h0GwkX3bfW//4F5Mt0gNNfPQ4pugPWHajWWU8vSzspY= Subject key identifier: 8B:46:E9:37:F6:6B:58:E0:77:91:1B:08:C3:E6:AB:F5:BE:22:24:08 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584EED522BBD83082F850999C740 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/144ffcfe-f508-3c6c-a0af-51b2cdf9406e.roa Signing time: Sun 23 Aug 2026 01:00:12 +0000 ROA not before: Sun 23 Aug 2026 01:00:12 +0000 ROA not after: Sat 21 Nov 2026 02:00:12 +0000 asID: 13335 IP address blocks: 172.68.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ed:52:2b:bd:83:08:2f:85:09:99:c7:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 23 01:00:12 2026 GMT Not After : Nov 21 02:00:12 2026 GMT Subject: CN=3760367c-25b9-42bc-a2b7-1b2406246c12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:85:1f:5b:c5:7e:98:d1:6e:16:93:94:b6:74: db:fe:69:0c:65:2f:3c:45:12:9e:56:2f:27:33:68: a9:bc:49:8e:ba:5d:12:81:1c:87:9b:37:22:89:ff: f2:66:50:48:27:74:92:cd:9d:1b:87:f6:a0:d5:32: e8:e2:fc:66:e1:fc:f5:4c:f6:cc:f7:43:b2:df:2b: ee:a9:20:38:ca:a3:5e:29:a3:c0:0a:3e:d2:4a:c7: 30:8e:cc:65:bd:c3:28:77:32:49:3a:4c:f4:8e:98: 9b:b8:46:8f:09:da:ce:de:91:6e:fa:76:b9:2e:da: 58:a1:04:83:50:6c:89:46:b6:ba:e9:70:46:17:30: 89:a9:51:04:8c:d3:cc:42:87:f2:12:4f:a5:ce:18: fb:64:df:62:98:68:e6:5a:37:f0:93:94:da:fc:58: 94:9f:ea:65:ac:22:4e:4f:bb:4b:d6:60:59:11:0e: a7:44:92:95:88:0a:2e:76:0c:fd:d5:98:89:79:c9: 3a:b4:c4:39:01:b4:f7:50:ad:9a:b9:d2:f2:04:20: a7:de:3f:ba:25:dc:d0:07:5a:74:98:8a:24:a9:09: 1a:9a:03:0f:c9:c2:b4:30:db:e9:e2:dc:b5:8a:65: 6d:9c:ac:c0:de:f8:33:27:f3:40:cd:b8:14:82:fe: 1c:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:46:E9:37:F6:6B:58:E0:77:91:1B:08:C3:E6:AB:F5:BE:22:24:08 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/144ffcfe-f508-3c6c-a0af-51b2cdf9406e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.68.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:48:1a:c1:25:7b:45:21:40:fc:a9:86:05:74:40:15:1f:a2: 32:d6:a0:2f:11:62:28:88:c2:5b:11:b5:4c:7d:7d:24:6b:3a: 5f:a9:46:d9:94:7e:85:0b:a4:01:d9:fb:ff:6f:e1:ed:8b:3b: 50:7f:d5:1c:3c:85:7c:86:85:9d:02:d9:31:36:50:ad:26:ba: ee:9f:12:d1:55:01:65:9b:7f:3c:9b:4e:d9:6f:25:d7:53:28: db:d6:ed:d7:44:4a:19:00:29:b9:7f:59:2f:0d:88:b1:34:79: 7c:5f:43:28:93:d2:01:a4:00:ac:47:28:b6:39:d3:12:40:69: 15:9f:39:bd:dc:f0:e7:4f:c9:d9:ae:d8:86:08:6b:5f:25:fd: 71:7a:0d:84:58:75:fb:86:e0:95:07:d1:31:91:85:4f:74:85: 92:5c:08:34:38:c8:f3:c9:ba:69:15:09:85:33:bb:5e:a0:d1: 29:ca:cf:a5:c1:f7:41:ba:85:52:00:f6:63:46:d9:cf:f2:b6: 79:59:26:2c:c9:41:30:7c:90:0d:89:86:f0:91:3a:dc:d4:f4: 7d:7d:eb:da:04:d4:9d:7e:79:fe:0b:ca:74:39:ea:ee:88:01: ad:4c:58:f5:3d:1f:c7:67:d3:77:36:ed:17:79:6c:13:7f:41: 3f:79:e6:90 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7tUiu9gwgvhQmZx0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDgyMzAxMDAxMloXDTI2MTEyMTAyMDAxMlowLzEtMCsGA1UEAxMk Mzc2MDM2N2MtMjViOS00MmJjLWEyYjctMWIyNDA2MjQ2YzEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx4UfW8V+mNFuFpOUtnTb/mkMZS88RRKeVi8n M2ipvEmOul0SgRyHmzciif/yZlBIJ3SSzZ0bh/ag1TLo4vxm4fz1TPbM90Oy3yvu qSA4yqNeKaPACj7SSscwjsxlvcModzJJOkz0jpibuEaPCdrO3pFu+na5LtpYoQSD UGyJRra66XBGFzCJqVEEjNPMQofyEk+lzhj7ZN9imGjmWjfwk5Ta/FiUn+plrCJO T7tL1mBZEQ6nRJKViAoudgz91ZiJeck6tMQ5AbT3UK2audLyBCCn3j+6JdzQB1p0 mIokqQkamgMPycK0MNvp4ty1imVtnKzA3vgzJ/NAzbgUgv4cGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFItG6Tf2a1jgd5EbCMPmq/W+IiQIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMTQ0ZmZjZmUtZjUwOC0z YzZjLWEwYWYtNTFiMmNkZjk0MDZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEQAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGZIGsEle0UhQPyphgV0QBUfojLWoC8RYiiIwlsRtUx9fSRrOl+pRtmU foULpAHZ+/9v4e2LO1B/1Rw8hXyGhZ0C2TE2UK0muu6fEtFVAWWbfzybTtlvJddT KNvW7ddEShkAKbl/WS8NiLE0eXxfQyiT0gGkAKxHKLY50xJAaRWfOb3c8OdPydmu 2IYIa18l/XF6DYRYdfuG4JUH0TGRhU90hZJcCDQ4yPPJumkVCYUzu16g0SnKz6XB 90G6hVIA9mNG2c/ytnlZJizJQTB8kA2JhvCROtzU9H1969oE1J1+ef4LynQ56u6I Aa1MWPU9H8dn03c27Rd5bBN/QT955pA= -----END CERTIFICATE-----Generated at Tue Sep 1 01:45:48 2026 by rpki-client