$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/820efa47-8b84-3760-949a-545c9c09ab4a.roa File: 820efa47-8b84-3760-949a-545c9c09ab4a.roa (raw, json) Hash identifier: XM/Xi4/JzSfin3izt/vvYfapifZMkF6JOpFYJ/VWfBI= Subject key identifier: 47:28:9B:30:69:3E:35:47:85:6A:E2:FA:BF:E6:8A:90:A9:E5:30:6E Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584EED523A4FB1390C6781724780 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/820efa47-8b84-3760-949a-545c9c09ab4a.roa Signing time: Sun 23 Aug 2026 01:00:12 +0000 ROA not before: Sun 23 Aug 2026 01:00:12 +0000 ROA not after: Sat 21 Nov 2026 02:00:12 +0000 asID: 13335 IP address blocks: 172.68.160.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Sep 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ed:52:3a:4f:b1:39:0c:67:81:72:47:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 23 01:00:12 2026 GMT Not After : Nov 21 02:00:12 2026 GMT Subject: CN=f197839b-5444-4dc1-9a67-4732d9502887 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:a3:05:60:21:47:f4:29:c9:7b:04:ea:d6:32: 56:bf:cc:d9:2a:48:cf:71:e6:69:a5:61:f1:c4:97: 1b:19:a9:8f:10:6a:d1:41:9b:e9:2c:70:6a:a2:6e: f6:7e:75:56:bf:9e:0d:23:91:cc:69:91:0d:96:5e: 1f:67:81:6f:62:c3:5f:95:0f:ac:d6:55:b8:da:7e: 4c:3c:ec:53:61:59:60:9d:90:41:bc:4e:c9:6d:a7: 06:c3:c8:52:71:0c:57:20:2a:ee:bd:1d:52:5d:98: 17:7a:44:62:d7:01:54:16:10:57:1e:b4:98:9e:6e: 2a:6f:d9:80:07:13:db:cb:1e:db:95:5c:3f:57:b6: 8b:a7:74:1e:50:35:dd:49:a3:7a:d3:0f:da:bd:8f: c4:24:de:97:ce:e2:db:db:83:60:9b:d3:e2:9a:38: f2:33:83:a7:00:16:5c:90:1e:11:06:b7:63:cc:d2: 8e:5e:c5:ef:48:bf:a9:bf:6d:81:54:15:44:7c:28: 97:09:94:e4:12:ea:cb:b7:6d:3f:7f:17:90:7e:70: 51:98:8f:15:37:e8:a5:42:f1:8b:03:ba:3f:ae:19: 36:3c:27:7d:63:2c:91:3a:80:ad:4c:b8:f6:fc:d7: 47:53:7c:cb:c8:a4:7f:b3:82:d7:38:7d:f6:a7:00: c8:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:28:9B:30:69:3E:35:47:85:6A:E2:FA:BF:E6:8A:90:A9:E5:30:6E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/820efa47-8b84-3760-949a-545c9c09ab4a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.68.160.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ba:0d:29:45:9e:4d:f8:9c:2d:7d:3a:0f:12:d4:00:23:07:98: 85:31:ef:94:fb:38:cb:d9:9a:38:f8:05:ba:d9:67:0a:18:f5: 4c:36:d7:a1:12:57:e7:cf:a1:df:54:c8:5d:e2:61:1e:c1:83: de:4c:a8:95:c7:ee:52:84:ee:d4:1d:64:7a:fa:0c:38:23:f1: b2:2a:1d:4b:40:71:20:c8:31:f8:c9:b8:7a:81:d8:8a:7a:f4: b7:86:05:77:a6:de:f0:38:f4:6a:de:ba:e9:af:3d:18:4d:0b: 80:99:58:1e:48:3c:84:0d:3a:93:1e:f9:55:d9:a5:cf:2f:85: 94:bf:67:b3:a8:14:9c:fe:5f:90:49:03:4f:ba:89:82:84:68: 4d:0a:ac:7a:41:55:2d:7b:5f:21:7f:82:c2:83:fa:0e:0e:a8: 12:fe:48:23:22:b2:e7:d1:cb:f0:cf:9c:a0:62:dd:51:54:f2: 0b:56:cb:d4:ee:3c:a4:f5:e7:7b:0b:7f:87:ad:c3:f0:89:f4: b7:1e:78:8b:1a:54:0f:ef:3f:08:16:e9:10:f2:22:95:2c:30: 2a:4a:c2:a9:da:33:d1:58:ec:b9:49:d5:12:f0:57:9a:76:55: 8e:4c:68:e7:c6:35:b6:58:b8:1d:d7:21:7c:3d:5b:84:93:63: ea:12:a4:f3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7tUjpPsTkMZ4FyR4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDgyMzAxMDAxMloXDTI2MTEyMTAyMDAxMlowLzEtMCsGA1UEAxMk ZjE5NzgzOWItNTQ0NC00ZGMxLTlhNjctNDczMmQ5NTAyODg3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkaMFYCFH9CnJewTq1jJWv8zZKkjPceZppWHx xJcbGamPEGrRQZvpLHBqom72fnVWv54NI5HMaZENll4fZ4FvYsNflQ+s1lW42n5M POxTYVlgnZBBvE7JbacGw8hScQxXICruvR1SXZgXekRi1wFUFhBXHrSYnm4qb9mA BxPbyx7blVw/V7aLp3QeUDXdSaN60w/avY/EJN6XzuLb24Ngm9PimjjyM4OnABZc kB4RBrdjzNKOXsXvSL+pv22BVBVEfCiXCZTkEurLt20/fxeQfnBRmI8VN+ilQvGL A7o/rhk2PCd9YyyROoCtTLj2/NdHU3zLyKR/s4LXOH32pwDIeQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEcomzBpPjVHhWri+r/mipCp5TBuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvODIwZWZhNDctOGI4NC0z NzYwLTk0OWEtNTQ1YzljMDlhYjRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArESgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALoNKUWeTficLX06DxLUACMHmIUx75T7OMvZmjj4BbrZZwoY9Uw216ES V+fPod9UyF3iYR7Bg95MqJXH7lKE7tQdZHr6DDgj8bIqHUtAcSDIMfjJuHqB2Ip6 9LeGBXem3vA49GreuumvPRhNC4CZWB5IPIQNOpMe+VXZpc8vhZS/Z7OoFJz+X5BJ A0+6iYKEaE0KrHpBVS17XyF/gsKD+g4OqBL+SCMisufRy/DPnKBi3VFU8gtWy9Tu PKT153sLf4etw/CJ9LceeIsaVA/vPwgW6RDyIpUsMCpKwqnaM9FY7LlJ1RLwV5p2 VY5MaOfGNbZYuB3XIXw9W4STY+oSpPM= -----END CERTIFICATE-----Generated at Tue Sep 1 01:58:32 2026 by rpki-client