$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/65591e67-0914-3f45-985e-ed195ce13ef4.roa File: 65591e67-0914-3f45-985e-ed195ce13ef4.roa (raw, json) Hash identifier: ChVZ+7wgss56hOi4Y47jnzLClETBgyHiwozBlkCE264= Subject key identifier: 68:2A:88:BB:72:E3:A5:33:99:B2:D5:11:F3:19:8A:38:14:59:35:58 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584EED52387442C8BF90B705744C Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/65591e67-0914-3f45-985e-ed195ce13ef4.roa Signing time: Sun 23 Aug 2026 01:00:12 +0000 ROA not before: Sun 23 Aug 2026 01:00:12 +0000 ROA not after: Sat 21 Nov 2026 02:00:12 +0000 asID: 13335 IP address blocks: 172.68.38.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ed:52:38:74:42:c8:bf:90:b7:05:74:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 23 01:00:12 2026 GMT Not After : Nov 21 02:00:12 2026 GMT Subject: CN=3e124bcf-10e2-41f2-84c1-be563617d51f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:36:1e:01:23:a8:cb:b9:e0:d2:00:04:fa:f4: 9c:12:0d:29:3d:60:50:36:dc:a2:33:07:34:38:24: 01:06:be:92:71:d6:b0:10:3c:f6:b9:bb:a4:2b:30: c4:0d:24:00:3a:6f:9a:0a:3d:07:95:2f:f8:d0:f4: ba:4f:75:1d:ec:b1:d3:d5:93:e6:cc:cd:4a:2a:98: ae:26:1c:b1:45:c0:7c:f9:f0:04:22:e2:fa:ff:47: 42:a4:74:45:ff:90:a1:ae:77:7f:f1:c1:75:23:2e: e2:a5:7c:5c:67:bf:66:e2:94:a4:34:f5:18:2e:ef: 6a:56:b7:63:3b:9c:ae:9b:d7:89:df:d7:06:8c:12: 0f:e9:67:6a:f0:38:df:1a:fa:97:38:bd:8d:79:45: f9:45:0b:9b:84:2e:64:c8:84:01:14:e3:ed:17:44: d0:b4:3d:fa:5d:50:7d:6d:bc:47:81:e8:b8:c6:ef: 95:92:db:a0:c8:db:f6:f9:6a:a0:a2:dc:27:4b:8d: 67:ce:86:86:ec:e7:e9:28:75:26:0b:0a:a7:ef:ef: 79:ec:fd:29:2c:af:bc:89:72:11:65:ab:bd:66:40: 75:87:30:d9:50:b4:35:c6:91:96:b0:8d:41:14:9e: 5d:4b:3f:50:c4:c8:12:ff:20:bd:76:c0:97:05:a0: 55:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:2A:88:BB:72:E3:A5:33:99:B2:D5:11:F3:19:8A:38:14:59:35:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/65591e67-0914-3f45-985e-ed195ce13ef4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.68.38.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:85:65:7a:42:ab:90:09:16:7f:07:cc:80:3b:5b:c1:1b:b9: c4:51:87:2c:46:19:38:6f:30:45:65:35:06:bb:9a:28:0a:80: 12:0f:aa:b6:aa:18:59:bb:a0:ec:6c:a8:5a:80:44:e0:ab:6f: 6e:55:e9:65:e6:82:69:9b:3c:b2:25:40:9e:a6:9a:99:e9:26: 42:c1:18:e4:65:62:da:6e:ac:47:45:a7:a0:11:0c:e9:7f:38: bd:37:38:7e:ff:a7:2a:6a:6b:73:3b:38:85:58:30:1b:44:4f: 00:15:9f:d2:c3:bd:b4:f4:b6:7f:9a:24:69:ef:c0:1e:b0:bd: d5:56:c1:0c:0b:2e:86:c3:39:c8:bd:99:38:96:ec:6d:04:96: 4c:4a:87:a8:60:3b:d4:f9:63:98:80:3f:46:1a:56:d6:d5:83: a9:9d:00:03:27:bc:98:6b:04:c3:39:bc:e2:ce:82:cd:48:25: 99:19:86:5d:46:bd:eb:2f:27:d4:65:f9:59:05:47:b2:06:eb: 10:09:3e:d0:89:22:5c:37:f5:5e:3a:a2:db:eb:5d:ef:ee:9c: 72:8f:c4:ce:55:b5:27:07:dc:1f:21:49:d7:b1:55:ab:2a:83: d8:7b:3e:cc:8d:f3:d5:9c:2f:12:a2:62:76:18:8c:00:fb:b1: 3f:b0:b5:56 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7tUjh0Qsi/kLcFdEwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDgyMzAxMDAxMloXDTI2MTEyMTAyMDAxMlowLzEtMCsGA1UEAxMk M2UxMjRiY2YtMTBlMi00MWYyLTg0YzEtYmU1NjM2MTdkNTFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlzYeASOoy7ng0gAE+vScEg0pPWBQNtyiMwc0 OCQBBr6ScdawEDz2ubukKzDEDSQAOm+aCj0HlS/40PS6T3Ud7LHT1ZPmzM1KKpiu JhyxRcB8+fAEIuL6/0dCpHRF/5Chrnd/8cF1Iy7ipXxcZ79m4pSkNPUYLu9qVrdj O5yum9eJ39cGjBIP6Wdq8DjfGvqXOL2NeUX5RQubhC5kyIQBFOPtF0TQtD36XVB9 bbxHgei4xu+VktugyNv2+WqgotwnS41nzoaG7OfpKHUmCwqn7+957P0pLK+8iXIR Zau9ZkB1hzDZULQ1xpGWsI1BFJ5dSz9QxMgS/yC9dsCXBaBVDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGgqiLty46UzmbLVEfMZijgUWTVYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNjU1OTFlNjctMDkxNC0z ZjQ1LTk4NWUtZWQxOTVjZTEzZWY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEQmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA6FZXpCq5AJFn8HzIA7W8EbucRRhyxGGThvMEVlNQa7migKgBIPqraq GFm7oOxsqFqAROCrb25V6WXmgmmbPLIlQJ6mmpnpJkLBGORlYtpurEdFp6ARDOl/ OL03OH7/pypqa3M7OIVYMBtETwAVn9LDvbT0tn+aJGnvwB6wvdVWwQwLLobDOci9 mTiW7G0ElkxKh6hgO9T5Y5iAP0YaVtbVg6mdAAMnvJhrBMM5vOLOgs1IJZkZhl1G vesvJ9Rl+VkFR7IG6xAJPtCJIlw39V46otvrXe/unHKPxM5VtScH3B8hSdexVasq g9h7PsyN89WcLxKiYnYYjAD7sT+wtVY= -----END CERTIFICATE-----Generated at Tue Sep 22 10:04:47 2026 by rpki-client