$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5432ee6c-0860-369f-8d9e-e84bbac5e6a3.roa File: 5432ee6c-0860-369f-8d9e-e84bbac5e6a3.roa (raw, json) Hash identifier: JuZdTix/6hv5YiRPeqALLN6HRAanohgiBg+cVURxZM8= Subject key identifier: C8:FA:EE:F9:0F:47:BD:C4:17:83:59:84:0F:F3:D6:55:D0:77:02:EB Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584EEEB774A97164F3AAAA03F980 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5432ee6c-0860-369f-8d9e-e84bbac5e6a3.roa Signing time: Sun 23 Aug 2026 13:00:12 +0000 ROA not before: Sun 23 Aug 2026 13:00:12 +0000 ROA not after: Sat 21 Nov 2026 14:00:12 +0000 asID: 13335 IP address blocks: 172.68.238.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ee:b7:74:a9:71:64:f3:aa:aa:03:f9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 23 13:00:12 2026 GMT Not After : Nov 21 14:00:12 2026 GMT Subject: CN=dcb4cba2-ff4e-4a93-a578-cbbf4174575c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:82:40:e3:ab:7a:73:4c:ab:49:9c:a7:9b:ac: dc:08:15:a4:96:e6:c1:ec:22:c5:e8:e8:78:d6:a7: 13:2c:c8:58:4f:10:0b:76:32:a2:6c:e5:b2:03:a0: dd:20:82:4d:8c:e7:69:a4:12:a1:d8:db:d3:92:bc: 35:52:d2:65:a1:dd:6c:f1:d2:3d:26:e2:6b:82:44: 59:65:ed:da:01:c5:78:0d:8e:fb:28:04:a6:03:78: 18:dc:cb:f7:86:97:90:1f:a0:dc:9a:e3:af:e0:05: fc:a7:e5:63:43:bd:e9:39:d2:12:11:16:39:a5:4d: fd:e6:7c:a8:6b:8f:e8:10:5c:c4:a3:5a:9e:16:7b: 61:a8:3d:2e:59:51:e2:d7:e0:9b:d6:fe:78:16:bd: dc:52:5a:00:13:09:b5:87:27:68:69:65:3e:a7:1b: 15:8b:07:91:b2:a1:3d:a4:a2:78:95:42:a3:aa:13: 10:05:f8:6e:32:43:00:7d:65:69:b7:3d:30:1d:34: 6b:32:70:d8:d9:6c:f4:17:a5:1a:4e:16:b7:7e:b5: 10:ab:b8:45:46:ae:75:ed:33:93:3f:f8:b0:ad:e5: c0:91:5b:69:b8:61:7a:af:03:82:e1:39:a3:26:14: ef:68:3a:59:14:bc:17:8e:eb:bb:00:de:a2:f7:eb: c8:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:FA:EE:F9:0F:47:BD:C4:17:83:59:84:0F:F3:D6:55:D0:77:02:EB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5432ee6c-0860-369f-8d9e-e84bbac5e6a3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.68.238.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:e9:8c:2e:bb:12:2e:2d:ac:1b:94:a2:62:69:57:be:3d:be: 19:f5:8a:d4:fb:35:58:2f:d6:cf:c6:af:93:23:6e:e2:e9:af: 56:e3:2d:2a:fc:55:80:38:96:9b:53:3d:ff:2d:d0:56:27:b9: bd:e2:f1:cb:4f:ef:73:80:f7:d6:00:67:30:66:1e:31:79:a6: 73:78:74:d0:ee:0a:14:cc:3b:24:58:81:3a:46:8f:da:69:af: 44:cf:65:ec:c2:4f:88:03:c1:82:23:70:b4:22:ed:3a:b1:b2: 2f:ba:5a:ce:27:3f:f2:6a:63:21:16:9a:31:dc:8f:ee:cf:3a: ca:89:9e:9a:de:88:a9:53:b7:98:8d:f2:ca:e6:f9:cc:5a:06: 49:a1:40:b1:c6:da:88:8b:07:73:ba:37:31:52:73:20:02:17: 25:26:67:a9:28:67:61:1e:47:26:50:7a:f9:20:15:11:29:2f: c1:d5:1c:f6:60:2e:b5:1b:a3:27:72:1e:bc:94:d3:d7:5e:6c: fd:8c:b9:89:fb:64:0f:3f:86:e6:db:64:a5:12:df:04:aa:b3: 07:68:b2:7d:ae:af:b6:c8:e7:51:7c:0f:d5:aa:9d:3c:06:6f: eb:4d:64:81:ea:ed:3a:f7:e9:81:6a:24:b5:c2:5c:75:2c:58: eb:0f:4c:b0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7ut3SpcWTzqqoD+YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDgyMzEzMDAxMloXDTI2MTEyMTE0MDAxMlowLzEtMCsGA1UEAxMk ZGNiNGNiYTItZmY0ZS00YTkzLWE1NzgtY2JiZjQxNzQ1NzVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhIJA46t6c0yrSZynm6zcCBWklubB7CLF6Oh4 1qcTLMhYTxALdjKibOWyA6DdIIJNjOdppBKh2NvTkrw1UtJlod1s8dI9JuJrgkRZ Ze3aAcV4DY77KASmA3gY3Mv3hpeQH6DcmuOv4AX8p+VjQ73pOdISERY5pU395nyo a4/oEFzEo1qeFnthqD0uWVHi1+Cb1v54Fr3cUloAEwm1hydoaWU+pxsViweRsqE9 pKJ4lUKjqhMQBfhuMkMAfWVptz0wHTRrMnDY2Wz0F6UaTha3frUQq7hFRq517TOT P/iwreXAkVtpuGF6rwOC4TmjJhTvaDpZFLwXjuu7AN6i9+vIuwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMj67vkPR73EF4NZhA/z1lXQdwLrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNTQzMmVlNmMtMDg2MC0z NjlmLThkOWUtZTg0YmJhYzVlNmEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArETuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIHpjC67Ei4trBuUomJpV749vhn1itT7NVgv1s/Gr5MjbuLpr1bjLSr8 VYA4lptTPf8t0FYnub3i8ctP73OA99YAZzBmHjF5pnN4dNDuChTMOyRYgTpGj9pp r0TPZezCT4gDwYIjcLQi7Tqxsi+6Ws4nP/JqYyEWmjHcj+7POsqJnpreiKlTt5iN 8srm+cxaBkmhQLHG2oiLB3O6NzFScyACFyUmZ6koZ2EeRyZQevkgFREpL8HVHPZg LrUboydyHryU09debP2MuYn7ZA8/hubbZKUS3wSqswdosn2ur7bI51F8D9WqnTwG b+tNZIHq7Tr36YFqJLXCXHUsWOsPTLA= -----END CERTIFICATE-----Generated at Tue Sep 22 15:17:44 2026 by rpki-client