$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2306646f-071a-3b9e-bb5b-590c23e068b8.roa File: 2306646f-071a-3b9e-bb5b-590c23e068b8.roa (raw, json) Hash identifier: T+TbIDeoT4ye67EAlqSFCcDASRFzTh98bk6OvP2IpbE= Subject key identifier: 70:D6:CD:D5:2F:69:5D:77:4E:2F:79:9E:CB:D0:2D:46:F1:F2:0E:4A Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584F2D87E391733ABC50704E7E40 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2306646f-071a-3b9e-bb5b-590c23e068b8.roa Signing time: Tue 15 Sep 2026 01:00:12 +0000 ROA not before: Tue 15 Sep 2026 01:00:12 +0000 ROA not after: Mon 14 Dec 2026 02:00:12 +0000 asID: 14789 IP address blocks: 172.68.160.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:2d:87:e3:91:73:3a:bc:50:70:4e:7e:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Sep 15 01:00:12 2026 GMT Not After : Dec 14 02:00:12 2026 GMT Subject: CN=3b4dfb52-1c5b-4921-9530-c9fd09ba84b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:e1:b5:57:82:c5:d1:8a:32:3f:87:1d:af:da: b1:66:13:cb:98:e3:b3:69:82:c6:fb:6f:14:ab:e8: df:a6:0f:de:06:9d:af:83:ce:fe:e9:38:2c:52:65: e9:a3:70:36:4f:2c:58:18:29:64:72:f9:3f:be:0d: 8f:c5:a9:79:6f:51:3a:67:75:41:ed:b7:7a:dd:86: 12:bc:ab:30:97:6a:3f:ff:28:3f:a3:a8:ee:75:35: db:14:d3:02:92:df:56:36:77:f1:3a:0e:27:e8:57: e9:09:b3:f1:9e:6c:2e:97:b6:93:f9:b0:b5:84:58: b5:24:6e:52:69:3c:a5:f1:86:2e:6f:eb:8c:f5:04: ca:94:02:cb:f2:d7:64:9e:03:8c:21:6e:2c:a4:0a: 9a:ca:6a:62:c0:46:e0:cf:97:81:c8:e5:31:e5:ab: 46:9d:57:3a:44:c9:00:7d:83:1b:17:fc:f7:ac:ea: 8d:47:df:ea:74:ab:ab:d0:c9:43:1c:74:dd:ab:84: 13:5f:62:13:3c:51:b9:3c:3c:12:1b:f3:83:cb:5d: 64:ff:3b:40:cd:9b:53:e5:ff:79:6b:dc:11:4c:13: e5:36:d5:08:e7:35:22:2f:1b:a1:ac:c0:8c:f9:c5: a8:74:c5:85:04:1d:e3:a7:4e:5a:18:24:59:b4:8d: d3:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:D6:CD:D5:2F:69:5D:77:4E:2F:79:9E:CB:D0:2D:46:F1:F2:0E:4A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2306646f-071a-3b9e-bb5b-590c23e068b8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.68.160.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:c2:04:bb:ff:63:90:e0:ca:eb:65:a7:c4:39:c9:b0:5d:b0: 1a:60:53:b5:5c:92:5f:04:5c:e1:c1:2e:ea:cb:65:98:f8:fd: 2f:4a:c2:85:9f:c0:b0:44:51:12:64:c3:bc:15:39:fd:74:f9: f7:cf:13:3b:f1:87:8a:59:0a:99:02:aa:5a:87:76:0a:99:02: 9d:ff:cb:1d:c0:51:98:73:73:1d:0c:f7:45:5f:9c:47:ae:12: 75:ef:1d:81:96:77:55:76:b6:5a:f1:64:dd:72:ae:1c:4d:26: ff:5d:71:4d:6f:96:02:58:4e:eb:c5:19:81:95:1c:26:d0:7c: 85:0b:11:7d:c0:a5:b9:9d:01:5e:ca:83:b0:80:b4:1d:f5:0f: 85:c8:16:ba:39:76:0c:48:2e:f8:09:f1:c4:9f:9b:19:bd:2c: b7:2a:fb:ea:14:c9:2a:ad:20:7a:e8:30:d2:49:5d:fd:28:78: fd:e4:4d:d2:41:01:c0:60:a8:03:4a:aa:bc:da:a4:4f:67:89: af:93:02:dd:9b:08:0a:cd:c6:dd:37:a2:44:b5:27:83:7f:7a: 4e:76:3e:9a:a3:bc:02:89:54:08:e5:52:26:4b:a3:3a:81:88: c2:88:53:5a:e6:3a:90:46:c8:8a:01:62:8b:28:79:e5:e7:79: 1a:ec:18:88 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8th+ORczq8UHBOfkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDkxNTAxMDAxMloXDTI2MTIxNDAyMDAxMlowLzEtMCsGA1UEAxMk M2I0ZGZiNTItMWM1Yi00OTIxLTk1MzAtYzlmZDA5YmE4NGI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmuG1V4LF0YoyP4cdr9qxZhPLmOOzaYLG+28U q+jfpg/eBp2vg87+6TgsUmXpo3A2TyxYGClkcvk/vg2Pxal5b1E6Z3VB7bd63YYS vKswl2o//yg/o6judTXbFNMCkt9WNnfxOg4n6FfpCbPxnmwul7aT+bC1hFi1JG5S aTyl8YYub+uM9QTKlALL8tdkngOMIW4spAqaympiwEbgz5eByOUx5atGnVc6RMkA fYMbF/z3rOqNR9/qdKur0MlDHHTdq4QTX2ITPFG5PDwSG/ODy11k/ztAzZtT5f95 a9wRTBPlNtUI5zUiLxuhrMCM+cWodMWFBB3jp05aGCRZtI3TcwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHDWzdUvaV13Ti95nsvQLUbx8g5KMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMjMwNjY0NmYtMDcxYS0z YjllLWJiNWItNTkwYzIzZTA2OGI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArESgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFHCBLv/Y5Dgyutlp8Q5ybBdsBpgU7Vckl8EXOHBLurLZZj4/S9KwoWf wLBEURJkw7wVOf10+ffPEzvxh4pZCpkCqlqHdgqZAp3/yx3AUZhzcx0M90VfnEeu EnXvHYGWd1V2tlrxZN1yrhxNJv9dcU1vlgJYTuvFGYGVHCbQfIULEX3ApbmdAV7K g7CAtB31D4XIFro5dgxILvgJ8cSfmxm9LLcq++oUySqtIHroMNJJXf0oeP3kTdJB AcBgqANKqrzapE9nia+TAt2bCArNxt03okS1J4N/ek52PpqjvAKJVAjlUiZLozqB iMKIU1rmOpBGyIoBYosoeeXneRrsGIg= -----END CERTIFICATE-----Generated at Tue Sep 22 17:05:13 2026 by rpki-client