$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/88f60682-178e-3081-8a29-930c6e857939.roa File: 88f60682-178e-3081-8a29-930c6e857939.roa (raw, json) Hash identifier: LsyhFAWjpbFrAl2W65kA2em+XhwPCYQTs63xr/UePq8= Subject key identifier: A0:9E:96:FE:74:79:3D:69:FB:06:77:54:1D:7F:23:0F:71:F1:1F:8D Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584F49748E69B4617E5F46BEA080 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/88f60682-178e-3081-8a29-930c6e857939.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 13335 IP address blocks: 172.68.49.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:74:8e:69:b4:61:7e:5f:46:be:a0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=60db3277-42ae-4ec4-a146-5abadac7550d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:d5:71:74:4e:52:46:4a:30:4b:09:f7:52:c0: 6f:8e:6f:f9:d6:99:96:a2:39:5a:a8:d6:3b:d0:f5: b3:dd:18:04:b4:66:67:d1:3e:42:0b:56:4d:0a:a2: b3:1f:e4:63:06:8c:01:1b:a4:46:a4:6b:a9:0a:77: 6a:7e:7c:a6:98:81:e7:3d:fc:4c:c2:2b:80:f5:ed: c5:90:cb:38:59:9b:7a:0c:df:d3:46:80:25:6f:e7: bf:7a:92:e8:43:19:bd:0e:f8:89:37:fb:7e:5e:d5: d0:ea:4d:81:5b:35:74:d1:f7:fe:33:d1:f7:a6:1a: 7d:3e:ab:b1:8e:c6:dd:6b:83:11:f9:69:a0:38:aa: 1e:1f:0d:19:3a:e4:ae:27:e5:c5:0c:92:2d:5d:f0: 6f:94:e9:e3:0e:8a:6d:08:30:c7:76:36:7a:84:37: 61:c9:e5:cd:ac:8e:cd:77:74:dd:3d:70:2a:51:1f: 8c:1e:78:05:33:6d:4e:86:14:f1:cd:da:aa:e3:b1: 52:49:ce:a1:1a:28:2e:b7:78:c8:13:d9:0f:82:24: 32:c9:fb:0a:79:d3:cd:c3:02:92:64:6b:2d:38:c4: 9b:49:17:83:c8:f7:67:c3:c3:42:0d:3e:eb:cf:fc: d3:03:b3:57:fb:60:85:b9:99:d0:ce:22:f0:5e:bc: 04:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:9E:96:FE:74:79:3D:69:FB:06:77:54:1D:7F:23:0F:71:F1:1F:8D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/88f60682-178e-3081-8a29-930c6e857939.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.68.49.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:f0:f6:f2:2d:34:22:8a:77:81:33:94:9e:0e:64:07:a7:88: e7:7e:cd:27:bc:8f:14:b9:88:23:08:c9:26:ca:55:69:6b:0b: 5f:38:02:ff:fb:d0:98:92:ba:55:90:28:35:00:51:0e:cc:d2: fb:e1:e6:7b:db:2a:e8:39:6f:72:d1:d1:0d:0e:1e:40:93:d4: db:51:6f:32:70:16:61:55:61:d1:b8:79:49:3e:e0:74:9b:85: 82:e1:9c:54:d1:d5:09:91:22:5a:ee:1e:5d:17:2d:15:35:5c: b0:c1:b7:db:0d:75:1d:19:b7:56:eb:8f:01:a1:9b:dc:1d:6a: 4a:66:24:b5:1a:2b:71:bc:d1:16:b8:b7:d0:25:0f:2a:32:58: 9f:8e:9b:af:d7:c7:b6:1c:0b:7c:e3:26:1f:8e:e6:a3:0d:be: 90:fb:98:b1:e9:2b:5d:8e:b3:a9:dd:aa:0b:1c:68:7b:e0:3a: b1:8f:ee:33:b1:93:35:2e:ea:0e:b2:70:ef:5a:cd:7f:ba:29: 85:f4:3d:7e:44:82:7d:00:f7:29:40:2d:6a:e1:b6:63:a0:fc: 42:e8:7b:b6:2a:e4:9d:84:24:ab:97:2e:1a:78:ae:83:14:7f: ad:10:80:44:10:1a:8f:9f:fc:dc:5f:c2:82:ff:76:58:ce:ed: 1e:6c:cd:99 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdI5ptGF+X0a+oIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NjBkYjMyNzctNDJhZS00ZWM0LWExNDYtNWFiYWRhYzc1NTBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy9VxdE5SRkowSwn3UsBvjm/51pmWojlaqNY7 0PWz3RgEtGZn0T5CC1ZNCqKzH+RjBowBG6RGpGupCndqfnymmIHnPfxMwiuA9e3F kMs4WZt6DN/TRoAlb+e/epLoQxm9DviJN/t+XtXQ6k2BWzV00ff+M9H3php9Pqux jsbda4MR+WmgOKoeHw0ZOuSuJ+XFDJItXfBvlOnjDoptCDDHdjZ6hDdhyeXNrI7N d3TdPXAqUR+MHngFM21OhhTxzdqq47FSSc6hGigut3jIE9kPgiQyyfsKedPNwwKS ZGstOMSbSReDyPdnw8NCDT7rz/zTA7NX+2CFuZnQziLwXrwE0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKCelv50eT1p+wZ3VB1/Iw9x8R+NMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvODhmNjA2ODItMTc4ZS0z MDgxLThhMjktOTMwYzZlODU3OTM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEQxMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFvw9vItNCKKd4EzlJ4OZAeniOd+zSe8jxS5iCMIySbKVWlrC184Av/7 0JiSulWQKDUAUQ7M0vvh5nvbKug5b3LR0Q0OHkCT1NtRbzJwFmFVYdG4eUk+4HSb hYLhnFTR1QmRIlruHl0XLRU1XLDBt9sNdR0Zt1brjwGhm9wdakpmJLUaK3G80Ra4 t9AlDyoyWJ+Om6/Xx7YcC3zjJh+O5qMNvpD7mLHpK12Os6ndqgscaHvgOrGP7jOx kzUu6g6ycO9azX+6KYX0PX5Egn0A9ylALWrhtmOg/ELoe7Yq5J2EJKuXLhp4roMU f60QgEQQGo+f/NxfwoL/dljO7R5szZk= -----END CERTIFICATE-----Generated at Mon Sep 28 21:49:55 2026 by rpki-client