$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/293a8324-84b2-38ca-9a4a-257c518aba8d.roa File: 293a8324-84b2-38ca-9a4a-257c518aba8d.roa (raw, json) Hash identifier: S5uWwibGpSy2or3+X2KLfovy0uxMt6UL96KCrstImk0= Subject key identifier: 05:2B:39:99:E5:D0:07:EA:35:94:F6:67:AC:F1:2A:50:B8:DF:40:70 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584EE42333F1BD7BBD301AE5E280 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/293a8324-84b2-38ca-9a4a-257c518aba8d.roa Signing time: Wed 19 Aug 2026 18:03:45 +0000 ROA not before: Wed 19 Aug 2026 18:03:45 +0000 ROA not after: Sat 27 Nov 2027 05:00:00 +0000 asID: 13335 IP address blocks: 172.68.58.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e4:23:33:f1:bd:7b:bd:30:1a:e5:e2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 19 18:03:45 2026 GMT Not After : Nov 27 05:00:00 2027 GMT Subject: CN=b3ecfe92-8271-44d0-9b9c-252e1131c602 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:fc:88:5d:16:c7:31:27:4d:91:2b:a6:52:07: 84:46:82:4b:55:eb:ca:06:cf:dc:2e:19:38:e4:8c: ff:48:97:08:5d:cc:df:49:a1:50:e8:84:b2:8d:95: 3e:11:07:d6:bc:8d:f7:f9:31:52:5c:33:58:8a:b5: 2b:be:ce:74:c1:f3:13:4c:eb:6c:5f:44:7b:67:74: a3:b0:42:71:bc:7e:0b:ba:48:ee:b4:00:80:12:b7: d7:36:b5:1e:b9:cf:65:b4:1e:b6:2c:f3:58:6d:1e: b7:bf:7c:d1:e6:2b:c0:90:a3:b2:49:27:04:20:8b: 2b:b1:c9:e2:ea:22:d5:ee:50:63:1a:42:9e:2c:0d: a2:cb:2a:4c:92:9c:dd:ab:ac:7d:48:a1:37:21:c5: bc:e3:c6:03:1c:91:d6:2d:06:89:e9:6b:94:0d:75: db:54:66:87:ba:27:20:f2:70:f6:4d:7b:3c:63:82: 7a:cc:06:b0:3d:ce:e6:d3:85:fe:f5:7c:71:8b:6b: ea:e5:38:82:79:6c:72:2d:97:9f:ad:91:f3:ff:58: 39:34:62:a2:a9:03:e4:ed:6f:70:d3:b2:c3:43:8e: fd:37:15:16:19:7e:b3:89:74:03:1f:35:ec:d8:a4: 0b:78:ba:bd:76:31:00:48:3b:43:37:92:0e:5b:ba: 78:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:2B:39:99:E5:D0:07:EA:35:94:F6:67:AC:F1:2A:50:B8:DF:40:70 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/293a8324-84b2-38ca-9a4a-257c518aba8d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.68.58.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:08:8c:ca:74:af:88:d9:6e:98:7d:51:57:81:4d:b8:b1:2d: bd:e3:e8:42:e7:24:80:2a:8f:0c:9e:da:b7:b4:28:a2:12:0d: c1:c4:91:28:1a:59:a1:82:75:f3:1f:88:25:87:6e:14:b0:16: 5e:ee:47:b2:60:02:d4:94:bb:db:3b:3b:38:75:1b:a5:31:ca: 7e:b0:ae:a0:69:35:2b:23:80:d3:23:5b:5f:b0:0c:0c:41:16: 80:dd:01:0a:b4:e5:e7:e5:cd:e8:a9:1b:f1:b9:f1:a3:24:08: 36:17:42:80:15:34:94:f3:33:0a:34:53:a9:4e:b1:7c:c7:68: 8b:3a:68:08:29:bf:53:f3:f2:fe:22:5f:b6:2c:03:31:6d:0c: 73:de:c8:30:99:b8:81:8d:85:a2:62:1c:14:fc:a4:ac:29:14: 72:1e:47:2e:0e:51:11:90:dc:ff:5d:b8:ad:f3:02:ac:27:d6: ba:21:a8:98:82:53:1b:19:c9:97:a3:f3:37:51:45:a9:41:10: 3a:4f:26:b9:8a:50:3f:78:ff:81:9e:bf:7c:23:af:b6:21:fb: 64:f9:23:84:7c:92:d2:ac:d0:ed:90:fa:79:af:fd:e6:2d:c4: 86:ee:d5:95:7b:eb:79:d9:78:c4:65:f1:30:75:68:de:44:b7: cf:1f:aa:86 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7kIzPxvXu9MBrl4oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDgxOTE4MDM0NVoXDTI3MTEyNzA1MDAwMFowLzEtMCsGA1UEAxMk YjNlY2ZlOTItODI3MS00NGQwLTliOWMtMjUyZTExMzFjNjAyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu/yIXRbHMSdNkSumUgeERoJLVevKBs/cLhk4 5Iz/SJcIXczfSaFQ6ISyjZU+EQfWvI33+TFSXDNYirUrvs50wfMTTOtsX0R7Z3Sj sEJxvH4LukjutACAErfXNrUeuc9ltB62LPNYbR63v3zR5ivAkKOySScEIIsrscni 6iLV7lBjGkKeLA2iyypMkpzdq6x9SKE3IcW848YDHJHWLQaJ6WuUDXXbVGaHuicg 8nD2TXs8Y4J6zAawPc7m04X+9Xxxi2vq5TiCeWxyLZefrZHz/1g5NGKiqQPk7W9w 07LDQ479NxUWGX6ziXQDHzXs2KQLeLq9djEASDtDN5IOW7p4UQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAUrOZnl0AfqNZT2Z6zxKlC430BwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMjkzYTgzMjQtODRiMi0z OGNhLTlhNGEtMjU3YzUxOGFiYThkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEQ6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHAIjMp0r4jZbph9UVeBTbixLb3j6ELnJIAqjwye2re0KKISDcHEkSga WaGCdfMfiCWHbhSwFl7uR7JgAtSUu9s7Ozh1G6Uxyn6wrqBpNSsjgNMjW1+wDAxB FoDdAQq05eflzeipG/G58aMkCDYXQoAVNJTzMwo0U6lOsXzHaIs6aAgpv1Pz8v4i X7YsAzFtDHPeyDCZuIGNhaJiHBT8pKwpFHIeRy4OURGQ3P9duK3zAqwn1rohqJiC UxsZyZej8zdRRalBEDpPJrmKUD94/4Gev3wjr7Yh+2T5I4R8ktKs0O2Q+nmv/eYt xIbu1ZV763nZeMRl8TB1aN5Et88fqoY= -----END CERTIFICATE-----Generated at Tue Sep 22 11:55:20 2026 by rpki-client