$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/8e39d174-0132-38c7-8666-3ddfd10c3f12.roa File: 8e39d174-0132-38c7-8666-3ddfd10c3f12.roa (raw, json) Hash identifier: rT4D9juuqNnGKHiGXoAd5kwIhcATs70syY4vOU6BsgU= Subject key identifier: A7:31:6E:85:79:84:09:4F:17:21:F9:32:80:00:52:D8:13:BF:3F:49 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584EED523A444D15AF9585EC0398 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/8e39d174-0132-38c7-8666-3ddfd10c3f12.roa Signing time: Sun 23 Aug 2026 01:00:12 +0000 ROA not before: Sun 23 Aug 2026 01:00:12 +0000 ROA not after: Sat 21 Nov 2026 02:00:12 +0000 asID: 13335 IP address blocks: 172.68.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ed:52:3a:44:4d:15:af:95:85:ec:03:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 23 01:00:12 2026 GMT Not After : Nov 21 02:00:12 2026 GMT Subject: CN=6f118324-1daf-48c5-9cd7-84883d18774d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:ef:ea:6e:35:8c:ee:e2:79:ce:cd:68:12:62: 2b:f5:21:d1:bd:50:75:62:39:c2:7b:82:4b:d9:5d: 58:d3:6b:34:fe:04:e8:f9:72:2b:53:c5:e1:1f:db: 6c:0a:1c:bd:d1:87:24:6b:28:12:b7:70:3c:dc:c4: 44:1d:bf:b8:83:10:91:ec:38:b0:33:9c:2b:ea:21: 02:4f:f0:53:83:8a:06:6d:78:5f:55:98:13:6f:ba: 61:1f:2d:bc:79:72:33:1a:47:7e:b7:28:68:f2:c1: b0:49:de:59:95:e5:a2:6e:78:58:07:d3:d5:a4:8d: 35:e0:1b:42:8d:33:00:b5:cb:ae:58:a9:fb:81:de: 46:3c:c6:ef:81:18:d8:b9:11:c1:36:45:8e:b1:4c: 66:b0:81:4f:41:a2:7a:a6:54:76:a9:14:0f:a7:84: 38:62:de:20:ec:dc:b5:03:57:69:d1:00:32:6e:b5: 5a:94:47:bb:8b:9f:54:7e:a0:75:9e:a2:8c:41:ac: 64:d4:8b:c9:9f:40:19:39:13:08:8f:c0:ec:d0:06: e2:25:23:e2:d0:01:ee:a0:3c:90:db:f6:42:c4:d8: dc:1e:c9:d7:4e:46:db:a9:16:81:1a:5f:65:e0:c4: 1b:cd:5f:4c:f9:03:34:70:3f:17:31:db:9e:0f:ba: f0:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:31:6E:85:79:84:09:4F:17:21:F9:32:80:00:52:D8:13:BF:3F:49 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/8e39d174-0132-38c7-8666-3ddfd10c3f12.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.68.153.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9b:7f:95:ec:9a:bc:4b:89:27:84:63:40:0b:e3:10:f6:ea:82: 79:7e:ac:ff:d2:cb:2b:83:b5:86:db:f1:5e:21:bb:85:96:90: cf:d3:15:42:5c:0c:33:59:4f:80:60:61:cc:07:91:a0:bc:41: c7:ee:12:95:c4:19:db:b3:5f:11:2d:da:ad:c3:79:f2:f9:88: 35:57:65:11:8a:0a:ba:c7:3e:2b:53:c5:a2:78:81:71:85:5c: eb:8d:72:22:d6:2b:9c:2b:37:dc:bc:7c:c6:88:7c:35:5b:85: 09:14:70:78:f8:9a:05:8f:7e:fc:62:56:b6:a9:89:b9:34:6f: aa:65:fd:10:08:18:3d:2f:7c:92:51:72:a6:c9:16:63:fa:59: 17:00:0b:e0:65:46:a3:42:e7:f9:ec:e3:d0:58:dc:cc:46:34: f4:f0:e3:42:54:b0:26:1c:f9:d0:c1:e9:d9:e4:71:78:9f:a1: 09:78:28:f9:2d:42:ee:5f:35:54:11:4c:f0:2f:16:e9:74:d2: 97:67:83:bf:3a:ff:eb:61:40:e0:6a:8a:93:41:cc:86:66:83: 21:35:18:4e:ca:ca:b6:05:54:b3:6a:85:ae:25:52:8e:1d:fe: 92:f5:cd:d0:ab:d8:93:7a:f6:7e:c4:4b:fd:e7:de:b7:28:f1: b3:ef:64:37 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7tUjpETRWvlYXsA5gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDgyMzAxMDAxMloXDTI2MTEyMTAyMDAxMlowLzEtMCsGA1UEAxMk NmYxMTgzMjQtMWRhZi00OGM1LTljZDctODQ4ODNkMTg3NzRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiu/qbjWM7uJ5zs1oEmIr9SHRvVB1YjnCe4JL 2V1Y02s0/gTo+XIrU8XhH9tsChy90YckaygSt3A83MREHb+4gxCR7DiwM5wr6iEC T/BTg4oGbXhfVZgTb7phHy28eXIzGkd+tyho8sGwSd5ZleWibnhYB9PVpI014BtC jTMAtcuuWKn7gd5GPMbvgRjYuRHBNkWOsUxmsIFPQaJ6plR2qRQPp4Q4Yt4g7Ny1 A1dp0QAybrValEe7i59UfqB1nqKMQaxk1IvJn0AZORMIj8Ds0AbiJSPi0AHuoDyQ 2/ZCxNjcHsnXTkbbqRaBGl9l4MQbzV9M+QM0cD8XMdueD7rwXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKcxboV5hAlPFyH5MoAAUtgTvz9JMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvOGUzOWQxNzQtMDEzMi0z OGM3LTg2NjYtM2RkZmQxMGMzZjEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArESZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJt/leyavEuJJ4RjQAvjEPbqgnl+rP/SyyuDtYbb8V4hu4WWkM/TFUJc DDNZT4BgYcwHkaC8QcfuEpXEGduzXxEt2q3DefL5iDVXZRGKCrrHPitTxaJ4gXGF XOuNciLWK5wrN9y8fMaIfDVbhQkUcHj4mgWPfvxiVrapibk0b6pl/RAIGD0vfJJR cqbJFmP6WRcAC+BlRqNC5/ns49BY3MxGNPTw40JUsCYc+dDB6dnkcXifoQl4KPkt Qu5fNVQRTPAvFul00pdng786/+thQOBqipNBzIZmgyE1GE7KyrYFVLNqha4lUo4d /pL1zdCr2JN69n7ES/3n3rco8bPvZDc= -----END CERTIFICATE-----Generated at Tue Sep 22 13:19:28 2026 by rpki-client