$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/6e36c325-7741-3e9e-aea6-f64e9bd2fe55.roa File: 6e36c325-7741-3e9e-aea6-f64e9bd2fe55.roa (raw, json) Hash identifier: pEmJKBrBRsUb18hKVOUn/BfJ8mHg3QU7ElCFG18v8ak= Subject key identifier: 55:7A:B2:46:90:84:FD:70:98:F0:FB:AF:10:A4:4E:5A:2A:49:D0:30 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584EEA876E90A2E9F226DDC80980 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/6e36c325-7741-3e9e-aea6-f64e9bd2fe55.roa Signing time: Sat 22 Aug 2026 01:00:12 +0000 ROA not before: Sat 22 Aug 2026 01:00:12 +0000 ROA not after: Fri 20 Nov 2026 02:00:12 +0000 asID: 13335 IP address blocks: 172.68.16.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ea:87:6e:90:a2:e9:f2:26:dd:c8:09:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 22 01:00:12 2026 GMT Not After : Nov 20 02:00:12 2026 GMT Subject: CN=86a00b62-661a-435d-8f58-2b2f5c14402c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:4a:14:b6:06:e9:7a:78:5e:72:4e:a0:7b:d3: 83:3a:57:63:7b:ce:56:b4:05:50:94:e5:03:1a:41: c4:c4:8f:13:d5:d8:53:6d:e3:2d:61:a4:2b:41:4e: 2f:c1:4e:88:7c:12:c5:66:7d:d7:40:be:81:a3:40: 02:66:76:5b:c6:ff:83:57:e4:63:ab:c9:8a:ee:98: 64:6f:85:64:93:1a:12:51:7d:47:51:15:d5:12:22: 9c:5c:a4:cf:a4:3b:53:dc:49:09:1b:87:1d:dc:d8: 65:ab:6a:fa:da:2f:e3:ab:d1:a1:c7:57:65:e3:27: 96:78:dc:f8:6c:65:b4:d8:97:b0:7e:d8:11:15:a2: c4:85:cc:4b:e2:7c:66:b4:6a:79:4e:46:69:36:e5: d4:6f:d2:c0:6f:88:f7:f9:5a:9d:e0:52:29:3d:2b: 2d:eb:5d:28:17:15:ef:6b:5e:d9:b4:f4:a5:e0:40: 08:c4:78:7f:2b:49:5b:40:3b:22:8f:67:fe:1c:40: 7c:35:9c:b3:b7:ee:57:70:29:ac:1b:b0:dc:72:0e: ce:26:68:2c:10:3e:33:f3:8b:19:87:6f:67:4e:70: 49:34:27:af:bf:8a:7d:8c:11:20:e1:1e:ad:40:3e: 73:a9:be:3f:21:9d:75:2b:4e:c5:b8:dc:41:71:ba: 2b:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:7A:B2:46:90:84:FD:70:98:F0:FB:AF:10:A4:4E:5A:2A:49:D0:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/6e36c325-7741-3e9e-aea6-f64e9bd2fe55.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.68.16.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:58:d3:eb:6c:f8:1a:a1:85:e8:ea:93:69:9f:7b:2f:e4:a0: bc:d4:06:89:0c:b9:fd:9f:3f:31:c0:2d:41:38:fe:e9:93:46: f9:2f:d4:45:fa:1c:dc:55:9b:4f:15:be:79:29:3c:c9:95:b7: 49:4e:91:72:9d:68:82:9d:84:22:39:e7:9f:60:2a:14:b8:22: 45:83:7e:bb:3a:6c:c6:35:9f:f4:9c:35:92:36:06:72:f7:dd: 60:8e:15:e6:c6:71:e4:fb:4c:8a:f8:b8:84:75:4a:92:64:83: e6:01:0f:5f:b2:ef:25:d5:45:6a:7a:d7:cb:91:2a:69:65:8c: 5a:f4:ab:ea:cc:0f:ac:89:27:87:e2:36:b6:35:b2:b1:c7:86: bf:30:10:83:7c:0a:cc:da:5c:3b:b5:af:18:06:20:e0:d0:b8: 5f:ed:d8:52:02:11:54:c3:d4:dc:d8:d8:1a:39:16:08:10:54: f9:a7:b2:0b:42:f6:95:aa:bc:34:ef:39:38:ee:6c:85:6e:88: e8:36:00:ec:10:99:9e:b1:8c:55:dc:0d:60:0e:65:e6:0f:cd: 6d:b5:7d:f0:09:68:f6:8b:7e:a7:18:29:98:7f:29:8d:b3:1e: 49:c2:d4:8e:08:c0:82:bc:23:37:86:b4:9d:b5:98:a9:d0:3a: e9:07:dd:cf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7qh26QounyJt3ICYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDgyMjAxMDAxMloXDTI2MTEyMDAyMDAxMlowLzEtMCsGA1UEAxMk ODZhMDBiNjItNjYxYS00MzVkLThmNTgtMmIyZjVjMTQ0MDJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmkoUtgbpenheck6ge9ODOldje85WtAVQlOUD GkHExI8T1dhTbeMtYaQrQU4vwU6IfBLFZn3XQL6Bo0ACZnZbxv+DV+Rjq8mK7phk b4VkkxoSUX1HURXVEiKcXKTPpDtT3EkJG4cd3Nhlq2r62i/jq9Ghx1dl4yeWeNz4 bGW02JewftgRFaLEhcxL4nxmtGp5TkZpNuXUb9LAb4j3+Vqd4FIpPSst610oFxXv a17ZtPSl4EAIxHh/K0lbQDsij2f+HEB8NZyzt+5XcCmsG7Dccg7OJmgsED4z84sZ h29nTnBJNCevv4p9jBEg4R6tQD5zqb4/IZ11K07FuNxBcborbwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFV6skaQhP1wmPD7rxCkTloqSdAwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNmUzNmMzMjUtNzc0MS0z ZTllLWFlYTYtZjY0ZTliZDJmZTU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEQQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABxY0+ts+Bqhhejqk2mfey/koLzUBokMuf2fPzHALUE4/umTRvkv1EX6 HNxVm08VvnkpPMmVt0lOkXKdaIKdhCI5559gKhS4IkWDfrs6bMY1n/ScNZI2BnL3 3WCOFebGceT7TIr4uIR1SpJkg+YBD1+y7yXVRWp618uRKmlljFr0q+rMD6yJJ4fi NrY1srHHhr8wEIN8CszaXDu1rxgGIODQuF/t2FICEVTD1NzY2Bo5FggQVPmnsgtC 9pWqvDTvOTjubIVuiOg2AOwQmZ6xjFXcDWAOZeYPzW21ffAJaPaLfqcYKZh/KY2z HknC1I4IwIK8IzeGtJ21mKnQOukH3c8= -----END CERTIFICATE-----Generated at Tue Sep 1 01:45:25 2026 by rpki-client