$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5be14a37-b219-3c75-8c68-d8a5bc8ec38d.roa File: 5be14a37-b219-3c75-8c68-d8a5bc8ec38d.roa (raw, json) Hash identifier: yblUpDH4MxbXCKAs2/fo9NqXsd1D6qpqOx76PGZstp0= Subject key identifier: 72:D3:7B:CA:59:BD:AE:4F:CB:40:27:B6:F5:B6:87:B6:1B:1B:91:75 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584EC7A1C024A9444F9A5C51B0C8 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5be14a37-b219-3c75-8c68-d8a5bc8ec38d.roa Signing time: Sun 09 Aug 2026 13:00:12 +0000 ROA not before: Sun 09 Aug 2026 13:00:12 +0000 ROA not after: Sat 07 Nov 2026 14:00:12 +0000 asID: 13335 IP address blocks: 172.68.101.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:c7:a1:c0:24:a9:44:4f:9a:5c:51:b0:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 9 13:00:12 2026 GMT Not After : Nov 7 14:00:12 2026 GMT Subject: CN=08b8f844-1184-4788-b9fc-c2588ceb6015 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:ba:49:ea:a5:5b:e4:66:a6:fa:4b:b0:62:d0: d4:2d:c8:31:8d:32:2f:ee:a8:cd:81:57:32:0a:11: 5f:35:d5:9c:68:fb:d4:2c:01:d4:fe:fa:2d:9d:2d: 45:57:33:5e:ee:f9:10:41:6b:9d:0a:f8:b1:5b:8f: 26:8c:9d:b9:88:6b:e7:2f:12:89:ec:ce:82:9a:dc: e8:d0:dc:f2:73:04:4f:90:bb:ea:17:a8:ad:0a:22: 10:ee:d0:59:1e:45:b0:82:0a:6b:ae:3a:95:58:4b: 64:bb:fb:54:90:aa:86:55:51:13:e4:db:3a:de:81: 78:68:d2:81:02:e7:56:46:4d:12:ea:64:f6:6b:dd: a3:88:d9:5f:d9:55:68:5c:b5:61:d9:f9:77:80:d4: db:bd:f9:24:2a:3d:33:c2:94:ea:dd:8d:50:a8:88: d7:2a:3e:c3:d5:66:c8:d4:c6:ae:ea:a0:f2:46:56: 38:0a:0f:ab:c4:b0:f9:33:65:5a:18:47:35:76:44: 85:f8:6e:c7:ba:5e:04:36:cb:32:9f:b5:44:e6:5a: c9:92:1e:31:c2:6b:7a:ce:91:d0:6f:42:db:d2:d5: 80:d8:8c:f9:74:bc:24:8b:cb:da:5e:0b:38:46:d0: d5:35:15:dc:19:03:07:a3:e8:a5:b1:c5:3b:b0:d7: 62:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:D3:7B:CA:59:BD:AE:4F:CB:40:27:B6:F5:B6:87:B6:1B:1B:91:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5be14a37-b219-3c75-8c68-d8a5bc8ec38d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.68.101.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:28:93:a6:b8:ca:6a:90:4c:a1:78:af:8a:51:01:89:dc:6d: 09:c9:85:fa:2b:c7:fd:3b:7b:e4:dc:4a:ac:53:76:5c:4e:79: 2a:2f:19:97:e3:0e:51:4c:6a:9c:72:11:eb:5b:20:0f:30:23: 4f:21:ee:ed:fc:20:2c:38:96:0f:23:48:c4:f4:3a:69:04:80: 80:88:06:74:fc:21:5a:8a:bf:a8:a3:31:d7:6f:b6:52:31:5f: 06:0b:69:a0:a9:47:0c:c9:cc:61:cd:2f:d0:26:11:af:71:ef: 39:61:7a:99:eb:57:d5:03:65:45:e6:cf:77:00:48:14:a8:c7: a9:05:8e:0f:45:f1:88:81:cd:6d:c7:00:9b:6c:c5:31:eb:14: 0c:66:62:a3:b9:2f:ed:db:ea:6e:1e:74:3e:4d:8d:e9:7f:69: d9:f9:78:55:c9:10:8c:d2:15:49:a4:77:47:49:05:0c:54:7b: dc:b6:c3:7e:6b:ca:3b:fd:06:43:b9:51:ad:65:3d:77:42:6f: 4e:ee:d7:1c:b6:83:8d:91:8a:8f:34:4e:ea:48:29:d7:31:06: de:c3:8b:df:bd:3d:aa:a8:57:c2:df:99:ce:6b:3f:fc:9a:0c: f6:5b:f6:a3:01:de:41:14:d5:27:b7:cc:12:b7:94:ec:b7:fd: 55:c1:bd:6c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7HocAkqURPmlxRsMgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDgwOTEzMDAxMloXDTI2MTEwNzE0MDAxMlowLzEtMCsGA1UEAxMk MDhiOGY4NDQtMTE4NC00Nzg4LWI5ZmMtYzI1ODhjZWI2MDE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxLpJ6qVb5Gam+kuwYtDULcgxjTIv7qjNgVcy ChFfNdWcaPvULAHU/votnS1FVzNe7vkQQWudCvixW48mjJ25iGvnLxKJ7M6Cmtzo 0NzycwRPkLvqF6itCiIQ7tBZHkWwggprrjqVWEtku/tUkKqGVVET5Ns63oF4aNKB AudWRk0S6mT2a92jiNlf2VVoXLVh2fl3gNTbvfkkKj0zwpTq3Y1QqIjXKj7D1WbI 1Mau6qDyRlY4Cg+rxLD5M2VaGEc1dkSF+G7Hul4ENssyn7VE5lrJkh4xwmt6zpHQ b0Lb0tWA2Iz5dLwki8vaXgs4RtDVNRXcGQMHo+ilscU7sNdi8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHLTe8pZva5Py0AntvW2h7YbG5F1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNWJlMTRhMzctYjIxOS0z Yzc1LThjNjgtZDhhNWJjOGVjMzhkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArERlMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE4ok6a4ymqQTKF4r4pRAYncbQnJhforx/07e+TcSqxTdlxOeSovGZfj DlFMapxyEetbIA8wI08h7u38ICw4lg8jSMT0OmkEgICIBnT8IVqKv6ijMddvtlIx XwYLaaCpRwzJzGHNL9AmEa9x7zlhepnrV9UDZUXmz3cASBSox6kFjg9F8YiBzW3H AJtsxTHrFAxmYqO5L+3b6m4edD5Njel/adn5eFXJEIzSFUmkd0dJBQxUe9y2w35r yjv9BkO5Ua1lPXdCb07u1xy2g42Rio80TupIKdcxBt7Di9+9PaqoV8Lfmc5rP/ya DPZb9qMB3kEU1Se3zBK3lOy3/VXBvWw= -----END CERTIFICATE-----Generated at Tue Sep 1 01:44:11 2026 by rpki-client