$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/4a2f5d04-e289-35fe-9b9f-88f13df58639.roa File: 4a2f5d04-e289-35fe-9b9f-88f13df58639.roa (raw, json) Hash identifier: 9ZFPAuGdINCxaNH/dYsUSNRUQh8MqVU1EYvCTrS4nCw= Subject key identifier: D5:B0:A9:9A:CA:FE:12:73:76:5E:70:C6:E4:61:E6:E5:EE:F9:66:74 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584EB2B200A4252C0D90BD52E4E8 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/4a2f5d04-e289-35fe-9b9f-88f13df58639.roa Signing time: Sun 02 Aug 2026 01:00:11 +0000 ROA not before: Sun 02 Aug 2026 01:00:11 +0000 ROA not after: Sat 31 Oct 2026 01:00:11 +0000 asID: 14789 IP address blocks: 172.68.163.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 09 Aug 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:b2:b2:00:a4:25:2c:0d:90:bd:52:e4:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 2 01:00:11 2026 GMT Not After : Oct 31 01:00:11 2026 GMT Subject: CN=440fa17a-f005-4032-b38d-575a88ea9377 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:0a:26:ed:88:50:70:e6:22:df:0e:4a:99:a6: 59:a5:32:5a:ee:c9:2c:8f:39:40:5c:37:b2:4d:c1: 82:36:2b:8c:d7:3d:75:96:ef:93:90:4a:1f:92:72: be:80:82:56:83:99:ed:66:61:66:f2:8d:01:08:7b: 8c:7a:17:6b:36:ce:1a:6e:a2:d9:e5:f9:69:31:1f: ed:05:50:2c:24:81:ee:7a:32:e5:b9:b6:f8:54:4f: f2:89:29:3c:b4:a7:c4:0c:1c:8a:a0:49:0d:5f:e2: 06:b4:bc:bd:71:0c:05:17:c4:15:96:71:5d:09:cc: 63:ec:b5:8d:3c:ad:0d:7a:87:87:86:c1:53:5c:6b: 5d:e8:12:e2:8e:5c:ae:1f:eb:bb:33:53:fb:cd:19: 2a:d7:28:3c:38:b5:b7:ce:40:06:ed:45:24:7c:db: 0d:31:8d:bb:55:69:c4:f1:6e:6a:ff:af:9b:f8:3c: 3f:19:61:fd:69:8b:cc:b0:60:0b:e6:87:1d:7a:34: 2c:79:68:15:61:45:78:cd:14:60:00:10:07:d5:b1: 9c:4f:9c:da:cc:02:81:79:97:0d:d6:1e:19:2e:8c: 47:f0:58:6c:45:a6:d1:16:18:e7:4f:c7:f9:62:e7: c5:29:22:a3:f0:a5:4b:05:c5:af:22:23:20:0a:b7: ce:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:B0:A9:9A:CA:FE:12:73:76:5E:70:C6:E4:61:E6:E5:EE:F9:66:74 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/4a2f5d04-e289-35fe-9b9f-88f13df58639.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.68.163.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:61:e1:75:7e:e9:d7:2e:be:0a:ae:94:2c:1a:a0:c1:bc:8a: 64:73:88:70:1a:ad:71:48:e8:80:71:c3:58:18:08:4a:53:3c: 8e:23:61:e5:9d:c6:63:d5:ef:ec:09:a9:1c:ae:34:fd:f5:07: 18:36:7f:07:ae:70:c8:8a:8d:57:7e:8e:5f:04:a1:ad:81:f4: 74:2a:fa:1c:9b:f4:bd:11:a7:ee:03:ea:bc:f6:c2:6b:ed:a0: 36:b9:cd:51:2f:2d:89:dd:3f:64:dc:41:96:4d:52:d8:46:4f: ef:9e:16:79:1e:00:50:80:9c:84:76:e1:c0:d3:d2:af:d6:60: c0:d6:d8:0f:bd:0d:c0:1c:5c:e2:f3:66:83:64:7a:e9:60:9d: b4:e7:1b:17:7d:8d:29:a6:5b:ba:57:f6:8a:01:d5:f2:79:9d: b9:8c:8f:da:4e:cc:ee:26:1c:e8:03:b1:dc:e3:5e:55:b9:f0: c1:28:03:0c:74:16:a0:46:0b:18:46:73:d8:29:fe:16:4d:3c: 45:78:55:4d:99:91:3f:35:b0:32:c6:f3:ba:d7:44:10:6d:a6: 08:45:f0:42:fd:4a:da:b3:f7:04:9a:d0:10:38:77:6f:90:6f: 4b:39:1b:e1:dc:5f:2c:75:1a:27:e9:93:1f:fe:65:7b:2c:65: 21:62:74:08 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6ysgCkJSwNkL1S5OgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDgwMjAxMDAxMVoXDTI2MTAzMTAxMDAxMVowLzEtMCsGA1UEAxMk NDQwZmExN2EtZjAwNS00MDMyLWIzOGQtNTc1YTg4ZWE5Mzc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmAom7YhQcOYi3w5KmaZZpTJa7sksjzlAXDey TcGCNiuM1z11lu+TkEofknK+gIJWg5ntZmFm8o0BCHuMehdrNs4abqLZ5flpMR/t BVAsJIHuejLlubb4VE/yiSk8tKfEDByKoEkNX+IGtLy9cQwFF8QVlnFdCcxj7LWN PK0NeoeHhsFTXGtd6BLijlyuH+u7M1P7zRkq1yg8OLW3zkAG7UUkfNsNMY27VWnE 8W5q/6+b+Dw/GWH9aYvMsGAL5ocdejQseWgVYUV4zRRgABAH1bGcT5zazAKBeZcN 1h4ZLoxH8FhsRabRFhjnT8f5YufFKSKj8KVLBcWvIiMgCrfO4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNWwqZrK/hJzdl5wxuRh5uXu+WZ0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNGEyZjVkMDQtZTI4OS0z NWZlLTliOWYtODhmMTNkZjU4NjM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArESjMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAINh4XV+6dcuvgqulCwaoMG8imRziHAarXFI6IBxw1gYCEpTPI4jYeWd xmPV7+wJqRyuNP31Bxg2fweucMiKjVd+jl8Eoa2B9HQq+hyb9L0Rp+4D6rz2wmvt oDa5zVEvLYndP2TcQZZNUthGT++eFnkeAFCAnIR24cDT0q/WYMDW2A+9DcAcXOLz ZoNkeulgnbTnGxd9jSmmW7pX9ooB1fJ5nbmMj9pOzO4mHOgDsdzjXlW58MEoAwx0 FqBGCxhGc9gp/hZNPEV4VU2ZkT81sDLG87rXRBBtpghF8EL9Stqz9wSa0BA4d2+Q b0s5G+HcXyx1Gifpkx/+ZXssZSFidAg= -----END CERTIFICATE-----Generated at Sat Aug 8 02:51:58 2026 by rpki-client