$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/8b2b9c48-cb03-3d74-9e6a-cd74d451a252.roa File: 8b2b9c48-cb03-3d74-9e6a-cd74d451a252.roa (raw, json) Hash identifier: NzPkPSCoLI9f2+zQa0d2bP5Wtw9sr9s/xlCg7SyBcCQ= Subject key identifier: CB:30:35:09:41:3A:9E:5B:2E:C7:AF:4D:20:79:09:6E:C4:4F:9C:57 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584F8F3DDAA7B07F8A426841D380 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/8b2b9c48-cb03-3d74-9e6a-cd74d451a252.roa Signing time: Tue 20 Oct 2026 01:00:12 +0000 ROA not before: Tue 20 Oct 2026 01:00:12 +0000 ROA not after: Mon 18 Jan 2027 02:00:12 +0000 asID: 13335 IP address blocks: 172.68.115.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 26 Oct 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:8f:3d:da:a7:b0:7f:8a:42:68:41:d3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 20 01:00:12 2026 GMT Not After : Jan 18 02:00:12 2027 GMT Subject: CN=2d501b87-8e60-4778-8b0c-7b66c6e9908c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:82:2f:b3:1b:9d:08:f1:41:79:8b:2d:39:7f: 81:31:19:31:94:93:a5:f0:e7:bc:1b:cc:a1:47:66: 2e:3c:73:77:7d:dc:2d:32:9c:88:99:1f:0f:1d:f5: a0:78:33:b6:8d:4e:91:c2:00:ae:63:a1:db:67:3b: 73:e2:92:5d:d3:d0:44:f5:4f:2d:1a:77:de:e1:73: 87:86:8b:7f:96:33:09:28:d3:be:9d:44:7f:12:f6: 87:97:bc:74:05:8e:5a:14:b4:fb:2f:52:d1:6d:f6: 9e:d4:a1:1a:a1:16:5a:69:0f:81:3f:03:6b:12:9d: 54:52:1d:a5:f0:b9:d3:0b:20:27:87:8b:4d:52:b9: f9:2a:71:7a:aa:21:d8:f5:5d:7f:1b:86:59:c0:4c: 61:90:5d:12:f3:7d:c4:41:03:78:40:68:e4:5a:a6: 1f:69:09:12:99:cc:d6:c5:24:f8:a9:4b:52:ce:b3: 8a:83:50:7a:1f:1d:bd:c7:1d:ce:a5:29:37:85:60: 73:c5:fa:f5:e3:fa:c3:c5:80:94:17:51:f8:e9:70: 48:06:98:2e:3e:c4:fa:cf:39:48:c2:08:3e:db:cf: 21:ac:4c:d6:dc:6c:ac:17:4e:f3:8c:3f:4e:60:fd: a4:f2:2a:97:eb:30:11:33:c1:79:23:13:c0:22:44: b7:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:30:35:09:41:3A:9E:5B:2E:C7:AF:4D:20:79:09:6E:C4:4F:9C:57 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/8b2b9c48-cb03-3d74-9e6a-cd74d451a252.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.68.115.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:11:e1:0f:86:69:cb:35:17:0b:2e:c4:17:53:06:42:98:3d: 5d:80:3a:f2:3d:14:89:54:6f:1c:7b:6e:f9:fc:1a:16:5d:19: 76:7d:6c:56:a4:21:77:ff:17:22:a8:cd:f0:7f:24:c7:f5:bc: 66:6c:fd:b2:f0:04:c9:e0:35:57:a1:f1:8f:f2:7d:b4:db:e1: dc:52:ea:4c:9a:13:56:38:bf:c3:d5:bc:dc:b4:42:cc:1d:fe: 33:86:70:9e:b8:ef:67:2a:57:f1:f5:aa:a5:7e:ee:41:1e:79: 61:4b:b7:4c:ee:b7:9c:1f:c4:ad:01:ba:d7:03:b4:e4:06:97: db:25:6b:31:10:ae:f8:da:81:13:54:bd:00:4e:87:72:57:ec: d5:71:22:53:00:02:d0:c3:ed:c2:ad:ef:fa:68:48:75:b4:a7: a2:3c:c2:49:f7:1f:70:a7:e2:0a:bb:41:de:de:4c:80:26:5e: 5a:f3:40:e9:06:fb:9c:ea:51:53:e5:16:51:cb:a3:2c:7a:9e: bf:dc:cf:fc:55:ad:d1:d0:43:1e:b7:01:2e:66:36:dd:6a:de: ff:ef:14:e3:22:13:76:c2:b3:35:b4:8d:7c:5e:24:bc:72:4d: e7:0d:71:78:56:36:70:4b:96:39:a2:e5:1c:15:99:6a:ab:5c: f3:0f:f4:87 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+PPdqnsH+KQmhB04AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MTAyMDAxMDAxMloXDTI3MDExODAyMDAxMlowLzEtMCsGA1UEAxMk MmQ1MDFiODctOGU2MC00Nzc4LThiMGMtN2I2NmM2ZTk5MDhjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu4IvsxudCPFBeYstOX+BMRkxlJOl8Oe8G8yh R2YuPHN3fdwtMpyImR8PHfWgeDO2jU6RwgCuY6HbZztz4pJd09BE9U8tGnfe4XOH hot/ljMJKNO+nUR/EvaHl7x0BY5aFLT7L1LRbfae1KEaoRZaaQ+BPwNrEp1UUh2l 8LnTCyAnh4tNUrn5KnF6qiHY9V1/G4ZZwExhkF0S833EQQN4QGjkWqYfaQkSmczW xST4qUtSzrOKg1B6Hx29xx3OpSk3hWBzxfr14/rDxYCUF1H46XBIBpguPsT6zzlI wgg+288hrEzW3GysF07zjD9OYP2k8iqX6zARM8F5IxPAIkS3NQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMswNQlBOp5bLsevTSB5CW7ET5xXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvOGIyYjljNDgtY2IwMy0z ZDc0LTllNmEtY2Q3NGQ0NTFhMjUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArERzMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHgR4Q+Gacs1FwsuxBdTBkKYPV2AOvI9FIlUbxx7bvn8GhZdGXZ9bFak IXf/FyKozfB/JMf1vGZs/bLwBMngNVeh8Y/yfbTb4dxS6kyaE1Y4v8PVvNy0Qswd /jOGcJ6472cqV/H1qqV+7kEeeWFLt0zut5wfxK0ButcDtOQGl9slazEQrvjagRNU vQBOh3JX7NVxIlMAAtDD7cKt7/poSHW0p6I8wkn3H3Cn4gq7Qd7eTIAmXlrzQOkG +5zqUVPlFlHLoyx6nr/cz/xVrdHQQx63AS5mNt1q3v/vFOMiE3bCszW0jXxeJLxy TecNcXhWNnBLljmi5RwVmWqrXPMP9Ic= -----END CERTIFICATE-----Generated at Sat Oct 24 10:36:14 2026 by rpki-client