$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/66c9c9be-2257-3d46-9997-7f944eb71855.roa File: 66c9c9be-2257-3d46-9997-7f944eb71855.roa (raw, json) Hash identifier: d+rUTa506QeUsATBhYtnfRk17gUnKIbsp+DPR//I708= Subject key identifier: 5A:BA:C9:9A:BA:CC:73:DB:0D:61:E1:2C:C2:46:45:4E:A3:06:00:C7 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584EED523A737AAF0777B8E8D740 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/66c9c9be-2257-3d46-9997-7f944eb71855.roa Signing time: Sun 23 Aug 2026 01:00:12 +0000 ROA not before: Sun 23 Aug 2026 01:00:12 +0000 ROA not after: Sat 21 Nov 2026 02:00:12 +0000 asID: 13335 IP address blocks: 172.68.164.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ed:52:3a:73:7a:af:07:77:b8:e8:d7:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 23 01:00:12 2026 GMT Not After : Nov 21 02:00:12 2026 GMT Subject: CN=f08400bb-f6c5-40fc-bb73-0faee6c84b33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:4f:b4:1b:93:c0:29:72:81:ae:e3:99:b7:a9: 5f:d4:f4:02:1b:fa:98:61:60:90:00:e1:27:bf:c7: d8:2b:b7:0d:27:5d:72:14:a9:49:56:48:be:c6:bf: 52:52:bf:cf:52:ee:c4:e6:d3:b2:99:31:38:05:b0: db:9a:71:b2:80:be:96:95:2e:da:f2:40:8a:8a:f2: e3:b0:06:33:09:c1:98:44:5f:3f:ae:2b:8f:3e:07: 6b:e2:da:a4:39:e7:39:1b:2d:13:77:db:92:8d:b0: 94:c1:db:a1:c7:d2:b0:32:6e:67:6f:2d:51:82:da: 94:a1:44:be:00:09:d0:68:32:a9:e4:ef:6b:8e:31: 79:28:58:0f:ca:e4:a4:02:03:96:f1:cb:58:c8:71: 4b:37:26:fe:ea:88:b0:71:b2:98:46:90:ad:ce:f6: 93:50:c9:03:82:35:33:9d:b0:5d:78:b2:2a:1e:16: 3f:80:af:04:3f:cb:cb:01:df:d0:ea:99:e6:4a:ac: f9:ae:1b:9d:b6:6b:68:97:a1:61:fd:2d:34:52:5b: 58:94:79:60:97:1f:6f:69:a9:0f:8a:90:ed:fa:6f: 95:ab:b1:0e:1a:fe:4a:d9:c6:62:1a:8b:4b:50:42: 19:34:1a:64:a5:48:5a:25:ea:cd:e6:dd:83:ff:99: 24:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:BA:C9:9A:BA:CC:73:DB:0D:61:E1:2C:C2:46:45:4E:A3:06:00:C7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/66c9c9be-2257-3d46-9997-7f944eb71855.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.68.164.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:b0:3e:df:15:98:c6:6a:f2:6d:48:51:36:2c:43:15:af:28: 7f:2f:d4:4b:1e:05:74:8d:43:d6:96:8c:79:01:30:ab:23:9c: 30:d7:f0:93:1a:52:5e:51:9a:bf:e0:26:a6:a4:cb:bb:eb:7c: e9:ef:81:21:fa:48:05:a7:fe:fe:66:50:14:e6:11:79:ec:ba: 84:bc:fd:0d:d7:95:c9:be:59:a2:19:a3:cf:41:94:b3:dd:2c: c3:62:f1:30:03:b8:87:50:8e:53:41:53:65:1e:f5:00:34:e9: 96:72:cc:1d:2d:19:11:dd:66:47:cb:81:24:37:cc:b3:c0:ca: 89:f1:0c:7c:60:d9:fd:1c:c3:c7:55:4c:ce:b0:f9:1a:63:68: c8:bc:bf:47:eb:50:d8:d7:65:12:54:fa:9f:20:0b:a6:23:47: fb:55:de:24:ea:cd:84:93:e0:d3:1b:26:4e:42:49:a6:5a:c6: a6:de:5c:67:6e:12:90:21:bd:70:a4:47:c0:4b:99:40:66:73: 07:a5:75:f6:9b:55:bc:64:75:3c:00:ce:08:94:19:a8:5b:bc: e9:e4:0e:b2:bf:31:8e:d0:82:1b:84:84:e2:11:30:a6:b2:f3: bc:3d:86:b1:1e:09:ab:54:0f:a5:7c:a8:c7:c8:04:dd:99:15: 56:e8:5d:67 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7tUjpzeq8Hd7jo10AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDgyMzAxMDAxMloXDTI2MTEyMTAyMDAxMlowLzEtMCsGA1UEAxMk ZjA4NDAwYmItZjZjNS00MGZjLWJiNzMtMGZhZWU2Yzg0YjMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyU+0G5PAKXKBruOZt6lf1PQCG/qYYWCQAOEn v8fYK7cNJ11yFKlJVki+xr9SUr/PUu7E5tOymTE4BbDbmnGygL6WlS7a8kCKivLj sAYzCcGYRF8/riuPPgdr4tqkOec5Gy0Td9uSjbCUwduhx9KwMm5nby1RgtqUoUS+ AAnQaDKp5O9rjjF5KFgPyuSkAgOW8ctYyHFLNyb+6oiwcbKYRpCtzvaTUMkDgjUz nbBdeLIqHhY/gK8EP8vLAd/Q6pnmSqz5rhudtmtol6Fh/S00UltYlHlglx9vaakP ipDt+m+Vq7EOGv5K2cZiGotLUEIZNBpkpUhaJerN5t2D/5kkHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFq6yZq6zHPbDWHhLMJGRU6jBgDHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNjZjOWM5YmUtMjI1Ny0z ZDQ2LTk5OTctN2Y5NDRlYjcxODU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrESkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABqwPt8VmMZq8m1IUTYsQxWvKH8v1EseBXSNQ9aWjHkBMKsjnDDX8JMa Ul5Rmr/gJqaky7vrfOnvgSH6SAWn/v5mUBTmEXnsuoS8/Q3Xlcm+WaIZo89BlLPd LMNi8TADuIdQjlNBU2Ue9QA06ZZyzB0tGRHdZkfLgSQ3zLPAyonxDHxg2f0cw8dV TM6w+RpjaMi8v0frUNjXZRJU+p8gC6YjR/tV3iTqzYST4NMbJk5CSaZaxqbeXGdu EpAhvXCkR8BLmUBmcweldfabVbxkdTwAzgiUGahbvOnkDrK/MY7QghuEhOIRMKay 87w9hrEeCatUD6V8qMfIBN2ZFVboXWc= -----END CERTIFICATE-----Generated at Tue Sep 22 15:17:39 2026 by rpki-client