$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2894efb2-4e88-3727-8c10-8499d0a11d3c.roa File: 2894efb2-4e88-3727-8c10-8499d0a11d3c.roa (raw, json) Hash identifier: s1Isb22Z9QfKhOaVZifKgqdlHEnaxGjDMYI4zrEeqbA= Subject key identifier: 4B:BC:FD:3E:3E:E5:10:81:55:EC:E0:DC:AE:00:B8:8B:66:2D:7F:E1 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584EAC3018BD92E5807B71FBE6C0 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2894efb2-4e88-3727-8c10-8499d0a11d3c.roa Signing time: Thu 30 Jul 2026 17:04:27 +0000 ROA not before: Thu 30 Jul 2026 17:04:27 +0000 ROA not after: Wed 28 Oct 2026 17:04:27 +0000 asID: 14789 IP address blocks: 172.68.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 09 Aug 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ac:30:18:bd:92:e5:80:7b:71:fb:e6:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Jul 30 17:04:27 2026 GMT Not After : Oct 28 17:04:27 2026 GMT Subject: CN=9313e67f-3d05-4d28-9d5f-9309ce8dad24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:1b:d4:7a:0f:54:04:2d:e6:5c:61:30:af:ec: 77:f3:2f:ce:d8:0e:d6:3a:6b:13:68:f5:8b:fa:3d: 07:c5:5e:79:e5:47:ca:b4:e9:a2:ff:7c:03:00:88: 10:4d:53:08:39:72:01:81:5e:1c:d7:ab:df:ae:ae: 72:5b:39:7e:89:5a:ab:d3:1a:6e:46:40:82:6c:ae: 31:4a:54:d0:55:ce:c2:1c:dd:07:dd:d4:dc:b2:bb: a0:d6:05:f0:1f:48:91:9c:3b:3d:df:c5:dc:b8:8b: 1f:75:5e:0d:20:79:bb:7e:00:d1:20:02:c2:ed:99: 76:86:e9:18:fa:26:cf:5f:fa:55:b0:dd:79:62:09: 96:64:3b:0f:7b:03:24:4d:e1:87:6d:5a:66:d9:ab: aa:bb:cc:30:43:e8:a3:0a:0e:d7:f2:36:24:65:4b: 2a:db:65:61:c2:0c:93:b8:e0:11:8e:d2:b8:f0:db: cf:6c:45:bf:cc:98:df:19:ef:9a:88:ad:9d:8d:81: 77:63:b6:27:24:c6:4e:e1:ea:ef:eb:b8:63:21:5a: 4d:2d:51:7b:4a:59:9b:34:f2:d9:5e:df:94:52:0a: 1b:d4:69:08:8b:f9:b8:b9:95:88:d5:86:96:84:17: 69:98:d1:0d:f1:ff:8a:5c:4f:73:7e:58:0e:9d:c0: 66:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:BC:FD:3E:3E:E5:10:81:55:EC:E0:DC:AE:00:B8:8B:66:2D:7F:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2894efb2-4e88-3727-8c10-8499d0a11d3c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.68.191.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:a5:ee:35:ba:40:c0:72:7c:5b:d2:ae:4d:27:75:29:0e:5c: 80:27:72:cb:83:ad:6d:1b:64:e8:12:0f:08:9f:3f:b7:d9:17: 6c:95:56:d3:6f:d3:0e:56:1f:f9:c9:31:66:24:79:3e:22:32: 06:64:25:f1:4a:ef:11:82:7a:52:6d:21:47:7c:ae:cd:6b:fa: fe:6a:8c:9f:42:a0:64:7f:99:a4:3f:1e:08:9d:71:aa:87:dd: 48:6d:59:91:6b:e7:77:19:f6:d4:ee:f6:9e:7b:c1:04:d5:43: 44:ee:81:8a:02:5c:06:21:f7:41:89:61:ee:60:a7:f7:e3:4d: 46:83:f1:ad:b3:3a:1c:e2:fe:b8:b1:61:d6:9f:c0:f5:f7:b6: 7f:fd:1d:fe:25:89:f6:b5:35:78:1b:52:f5:7b:b5:68:34:ac: 05:6e:0c:92:c2:68:a5:fc:2c:50:78:35:2a:a7:7f:c8:2c:cb: 05:c0:b9:6e:a5:c3:a0:2e:14:da:fe:2e:de:4f:c0:e3:2f:a5: 98:0e:eb:3a:00:25:2a:7f:c0:a8:e0:5f:43:64:b3:1d:be:4a: fc:59:7c:91:36:ff:42:47:3d:f1:db:93:ec:d8:22:8f:74:38: 90:62:25:f1:fb:3d:24:33:a5:d9:c4:cd:1d:4d:5b:63:d1:33: 79:72:24:0d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6sMBi9kuWAe3H75sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDczMDE3MDQyN1oXDTI2MTAyODE3MDQyN1owLzEtMCsGA1UEAxMk OTMxM2U2N2YtM2QwNS00ZDI4LTlkNWYtOTMwOWNlOGRhZDI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwhvUeg9UBC3mXGEwr+x38y/O2A7WOmsTaPWL +j0HxV555UfKtOmi/3wDAIgQTVMIOXIBgV4c16vfrq5yWzl+iVqr0xpuRkCCbK4x SlTQVc7CHN0H3dTcsrug1gXwH0iRnDs938XcuIsfdV4NIHm7fgDRIALC7Zl2hukY +ibPX/pVsN15YgmWZDsPewMkTeGHbVpm2auqu8wwQ+ijCg7X8jYkZUsq22VhwgyT uOARjtK48NvPbEW/zJjfGe+aiK2djYF3Y7YnJMZO4erv67hjIVpNLVF7SlmbNPLZ Xt+UUgob1GkIi/m4uZWI1YaWhBdpmNEN8f+KXE9zflgOncBm2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEu8/T4+5RCBVezg3K4AuItmLX/hMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMjg5NGVmYjItNGU4OC0z NzI3LThjMTAtODQ5OWQwYTExZDNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArES/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE+l7jW6QMByfFvSrk0ndSkOXIAncsuDrW0bZOgSDwifP7fZF2yVVtNv 0w5WH/nJMWYkeT4iMgZkJfFK7xGCelJtIUd8rs1r+v5qjJ9CoGR/maQ/HgidcaqH 3UhtWZFr53cZ9tTu9p57wQTVQ0TugYoCXAYh90GJYe5gp/fjTUaD8a2zOhzi/rix YdafwPX3tn/9Hf4lifa1NXgbUvV7tWg0rAVuDJLCaKX8LFB4NSqnf8gsywXAuW6l w6AuFNr+Lt5PwOMvpZgO6zoAJSp/wKjgX0Nksx2+SvxZfJE2/0JHPfHbk+zYIo90 OJBiJfH7PSQzpdnEzR1NW2PRM3lyJA0= -----END CERTIFICATE-----Generated at Sat Aug 8 02:49:21 2026 by rpki-client