$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/61b209cc-7de1-38df-8941-d276c447ab92.roa File: 61b209cc-7de1-38df-8941-d276c447ab92.roa (raw, json) Hash identifier: nniKrKluuryTVYAdQcv8xgQsqzs+9i9SdLw/ui+kUsQ= Subject key identifier: 09:77:FD:91:3B:2C:AB:74:B1:27:10:D0:E6:9B:FA:E4:9D:53:C4:25 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584EED522D62B483B318A5013180 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/61b209cc-7de1-38df-8941-d276c447ab92.roa Signing time: Sun 23 Aug 2026 01:00:12 +0000 ROA not before: Sun 23 Aug 2026 01:00:12 +0000 ROA not after: Sat 21 Nov 2026 02:00:12 +0000 asID: 13335 IP address blocks: 172.68.224.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ed:52:2d:62:b4:83:b3:18:a5:01:31:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 23 01:00:12 2026 GMT Not After : Nov 21 02:00:12 2026 GMT Subject: CN=c712ef4b-85ec-4050-b344-2716f0af786c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:9f:b6:73:fb:c6:5e:47:d8:92:53:73:68:da: 03:2a:e0:3e:ca:b9:ff:00:0b:1f:40:07:93:96:88: 4b:41:e0:6e:be:2b:96:53:69:e4:30:7b:70:8d:84: a7:f9:b6:e6:23:34:78:43:79:d1:18:5b:22:9c:d7: 47:02:7b:e6:6f:f5:38:c8:89:18:9f:2d:8e:04:e0: b8:29:bf:12:cb:13:31:bb:81:85:43:4a:13:d3:6f: 19:90:16:fb:da:81:78:4c:a2:19:4f:d6:f9:b6:5d: c1:60:24:67:01:e2:0d:1a:c3:76:ee:9b:9e:e1:25: b7:19:05:0c:7a:70:5c:2b:df:cc:7c:fb:18:e7:64: 67:dd:4f:f3:95:22:ee:26:69:44:c8:b7:05:96:49: d2:9e:35:79:dc:c6:4e:38:03:ab:0d:37:80:8e:0e: 68:cd:7c:3c:dc:0c:72:0e:ab:8b:a8:49:a7:43:b3: 69:83:1c:82:b6:5e:46:34:81:7c:a5:1b:20:73:f7: 14:89:f9:16:52:c1:8c:a0:23:31:41:ee:61:4c:7d: 3d:9f:d2:b1:03:52:94:dc:aa:37:8f:8c:2a:c7:7b: 0e:8a:16:8c:ce:fd:ad:16:d9:95:0e:cd:da:3a:9c: dd:87:4e:8f:ba:66:59:85:96:0e:72:a5:4d:16:46: 6d:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:77:FD:91:3B:2C:AB:74:B1:27:10:D0:E6:9B:FA:E4:9D:53:C4:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/61b209cc-7de1-38df-8941-d276c447ab92.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.68.224.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b9:04:8f:e7:fe:ed:70:7c:f2:2a:cb:ae:2f:66:a1:25:70:23: ba:fb:35:26:35:61:dd:65:98:73:62:3b:d1:b8:e5:db:48:40: 83:19:0e:c9:b8:09:25:f6:91:42:9a:84:0a:dd:dc:8e:0a:cd: d2:43:06:63:3f:2d:74:15:54:53:5c:60:f4:ba:cc:c3:a1:bb: 25:55:ad:64:f8:97:38:54:86:58:4b:bc:92:b4:51:10:d3:86: 5b:5b:bf:23:20:09:6f:0d:bd:f4:17:c9:a9:5e:36:7c:0e:7f: fd:15:b3:be:4d:fc:29:6b:85:ce:68:cf:d8:07:48:e1:dc:26: c3:94:6b:d7:be:75:bc:4c:a5:7a:90:9c:fd:66:ac:7b:98:e3: 44:32:f4:e4:b1:0b:01:78:50:7b:f5:6f:e9:6c:eb:70:68:da: 3d:c2:3d:f2:95:20:66:cc:ee:98:86:ab:75:5a:69:34:ab:31: 88:b2:a3:a9:86:ba:48:5b:bc:ae:0d:63:2d:11:1d:e2:28:b1: 5b:09:e1:f1:8a:d7:a2:fd:cb:ab:89:79:8c:7d:d9:7e:d3:c2: 6b:5d:1f:12:cc:55:e3:7b:9c:e7:6e:c6:f6:b5:c0:44:2c:46: 08:cd:ab:a6:fc:bf:8f:42:96:06:40:91:91:6d:e6:ae:72:53: 0f:9c:be:92 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7tUi1itIOzGKUBMYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDgyMzAxMDAxMloXDTI2MTEyMTAyMDAxMlowLzEtMCsGA1UEAxMk YzcxMmVmNGItODVlYy00MDUwLWIzNDQtMjcxNmYwYWY3ODZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzJ+2c/vGXkfYklNzaNoDKuA+yrn/AAsfQAeT lohLQeBuviuWU2nkMHtwjYSn+bbmIzR4Q3nRGFsinNdHAnvmb/U4yIkYny2OBOC4 Kb8SyxMxu4GFQ0oT028ZkBb72oF4TKIZT9b5tl3BYCRnAeINGsN27pue4SW3GQUM enBcK9/MfPsY52Rn3U/zlSLuJmlEyLcFlknSnjV53MZOOAOrDTeAjg5ozXw83Axy DquLqEmnQ7NpgxyCtl5GNIF8pRsgc/cUifkWUsGMoCMxQe5hTH09n9KxA1KU3Ko3 j4wqx3sOihaMzv2tFtmVDs3aOpzdh06PumZZhZYOcqVNFkZtDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAl3/ZE7LKt0sScQ0Oab+uSdU8QlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNjFiMjA5Y2MtN2RlMS0z OGRmLTg5NDEtZDI3NmM0NDdhYjkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArETgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALkEj+f+7XB88irLri9moSVwI7r7NSY1Yd1lmHNiO9G45dtIQIMZDsm4 CSX2kUKahArd3I4KzdJDBmM/LXQVVFNcYPS6zMOhuyVVrWT4lzhUhlhLvJK0URDT hltbvyMgCW8NvfQXyaleNnwOf/0Vs75N/Clrhc5oz9gHSOHcJsOUa9e+dbxMpXqQ nP1mrHuY40Qy9OSxCwF4UHv1b+ls63Bo2j3CPfKVIGbM7piGq3VaaTSrMYiyo6mG ukhbvK4NYy0RHeIosVsJ4fGK16L9y6uJeYx92X7TwmtdHxLMVeN7nOduxva1wEQs RgjNq6b8v49ClgZAkZFt5q5yUw+cvpI= -----END CERTIFICATE-----Generated at Tue Sep 1 01:58:15 2026 by rpki-client