$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/60eeb3fc-9a16-3e18-80fc-9ef633bc08db.roa File: 60eeb3fc-9a16-3e18-80fc-9ef633bc08db.roa (raw, json) Hash identifier: SxCoRcunZpoQLFYK+NV32G/OzcQjXpwvl92dYQJD60I= Subject key identifier: 22:16:ED:97:C4:07:3C:5D:4C:98:AE:C7:66:E6:FC:E3:2F:49:8D:5D Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584F0D6CFA82A8D2C25C9125D580 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/60eeb3fc-9a16-3e18-80fc-9ef633bc08db.roa Signing time: Thu 03 Sep 2026 13:00:12 +0000 ROA not before: Thu 03 Sep 2026 13:00:12 +0000 ROA not after: Wed 02 Dec 2026 14:00:12 +0000 asID: 395747 IP address blocks: 172.68.136.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:0d:6c:fa:82:a8:d2:c2:5c:91:25:d5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Sep 3 13:00:12 2026 GMT Not After : Dec 2 14:00:12 2026 GMT Subject: CN=ffa55ce2-c620-4f7b-82c7-60e61475e509 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:84:29:94:c8:71:52:e5:13:fe:43:14:a5:62: 94:84:72:e9:04:c9:2d:d0:ef:16:fa:5e:24:7c:07: c7:51:17:6f:6d:95:65:54:4c:30:44:22:c0:3a:d3: 19:55:3c:c7:8d:84:50:2f:39:13:d9:28:72:bf:00: 16:b1:eb:11:f5:4c:52:d0:ab:50:b3:f8:e0:7f:83: 9c:da:6b:cc:2a:67:e2:26:21:0f:32:f1:59:a7:81: d9:60:4b:16:91:f9:9f:6d:a8:73:97:07:2a:a0:3d: 47:42:44:4e:87:f9:26:35:b0:4b:9c:22:c6:f7:9e: 2f:c4:9d:c4:d9:fb:18:c1:7d:4f:3d:1a:10:91:30: 0d:cf:f9:47:0b:55:0a:25:04:c5:ae:92:d6:0d:28: 5e:ba:99:4a:85:94:3b:f9:0f:51:4c:02:43:7e:00: 04:f5:82:11:44:93:ef:3d:6b:09:27:b7:64:6d:cc: ed:63:45:18:62:c5:af:a2:0d:ee:6c:96:a1:bd:00: 3e:26:bf:a0:e0:45:15:a2:70:47:b4:9c:47:f1:b1: cd:e3:d6:d7:0b:41:69:b3:45:b5:a2:91:ce:83:79: 23:af:d4:16:ae:a1:bd:d2:45:73:10:4f:61:ec:52: c8:b6:a7:71:36:6d:7c:cb:98:b9:a3:c5:fc:af:57: 57:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:16:ED:97:C4:07:3C:5D:4C:98:AE:C7:66:E6:FC:E3:2F:49:8D:5D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/60eeb3fc-9a16-3e18-80fc-9ef633bc08db.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.68.136.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b8:a9:82:3d:fe:0c:3f:54:ef:26:09:78:6c:46:d7:95:99:28: 29:29:a9:2d:c7:59:04:8a:21:54:42:f6:e0:15:ab:18:d7:a3: 4e:35:0c:15:08:bc:04:88:90:18:cb:8d:1f:54:88:dc:98:59: fe:e6:9c:53:93:96:34:73:f9:7e:47:29:e2:3e:5f:46:aa:cd: 2f:b0:2d:4d:24:af:f8:cb:45:95:40:b8:7f:27:ba:6b:27:76: 66:65:33:be:37:22:0e:e3:59:45:0b:7a:2e:bd:51:67:28:a0: 1a:69:5e:1b:ad:d1:14:55:69:f7:60:1d:7f:02:8b:1d:5b:6d: 86:02:30:e0:0b:ef:f8:fa:e7:93:2c:a8:d0:83:0b:01:2c:ea: 46:41:b3:19:08:64:d0:98:3e:02:b0:b0:65:97:0e:c7:34:82: 85:11:fb:55:c5:71:70:19:ca:02:c8:1d:ff:c4:27:04:36:f5: a4:20:e0:70:ac:5f:e0:87:cc:0e:1c:6e:71:36:25:5d:19:a1: 52:97:48:bb:bf:d6:96:e2:c6:15:fc:29:61:88:fa:ee:cf:6f: 8c:6c:dc:5a:dd:ad:74:c3:92:a0:46:4d:73:93:de:ec:6d:26: da:3b:f0:1e:02:c8:03:33:5a:01:74:ee:f9:de:68:dc:6d:24: 51:b2:49:0d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8NbPqCqNLCXJEl1YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDkwMzEzMDAxMloXDTI2MTIwMjE0MDAxMlowLzEtMCsGA1UEAxMk ZmZhNTVjZTItYzYyMC00ZjdiLTgyYzctNjBlNjE0NzVlNTA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw4QplMhxUuUT/kMUpWKUhHLpBMkt0O8W+l4k fAfHURdvbZVlVEwwRCLAOtMZVTzHjYRQLzkT2ShyvwAWsesR9UxS0KtQs/jgf4Oc 2mvMKmfiJiEPMvFZp4HZYEsWkfmfbahzlwcqoD1HQkROh/kmNbBLnCLG954vxJ3E 2fsYwX1PPRoQkTANz/lHC1UKJQTFrpLWDSheuplKhZQ7+Q9RTAJDfgAE9YIRRJPv PWsJJ7dkbcztY0UYYsWvog3ubJahvQA+Jr+g4EUVonBHtJxH8bHN49bXC0Fps0W1 opHOg3kjr9QWrqG90kVzEE9h7FLItqdxNm18y5i5o8X8r1dX1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCIW7ZfEBzxdTJiux2bm/OMvSY1dMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNjBlZWIzZmMtOWExNi0z ZTE4LTgwZmMtOWVmNjMzYmMwOGRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArESIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALipgj3+DD9U7yYJeGxG15WZKCkpqS3HWQSKIVRC9uAVqxjXo041DBUI vASIkBjLjR9UiNyYWf7mnFOTljRz+X5HKeI+X0aqzS+wLU0kr/jLRZVAuH8numsn dmZlM743Ig7jWUULei69UWcooBppXhut0RRVafdgHX8Cix1bbYYCMOAL7/j655Ms qNCDCwEs6kZBsxkIZNCYPgKwsGWXDsc0goUR+1XFcXAZygLIHf/EJwQ29aQg4HCs X+CHzA4cbnE2JV0ZoVKXSLu/1pbixhX8KWGI+u7Pb4xs3FrdrXTDkqBGTXOT3uxt Jto78B4CyAMzWgF07vneaNxtJFGySQ0= -----END CERTIFICATE-----Generated at Tue Sep 22 21:55:32 2026 by rpki-client