$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/90736358-6a58-3bbc-834d-85c81a6db290.roa File: 90736358-6a58-3bbc-834d-85c81a6db290.roa (raw, json) Hash identifier: drpqjlhijIGcdVqBVeQLgPELEXsiUFlhKjyqWCc+p1Q= Subject key identifier: B9:0E:16:D3:E7:87:BA:61:F6:A4:6C:BF:4B:01:35:DF:1B:F6:C3:A7 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584EE423359F9F311FC018176480 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/90736358-6a58-3bbc-834d-85c81a6db290.roa Signing time: Wed 19 Aug 2026 18:03:46 +0000 ROA not before: Wed 19 Aug 2026 18:03:46 +0000 ROA not after: Sat 27 Nov 2027 05:00:00 +0000 asID: 13335 IP address blocks: 172.68.232.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e4:23:35:9f:9f:31:1f:c0:18:17:64:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 19 18:03:46 2026 GMT Not After : Nov 27 05:00:00 2027 GMT Subject: CN=58bca628-7d0e-4f98-97c6-bf6f1d4b633d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:97:0f:c4:09:44:c4:5d:0c:72:19:f9:e6:24: a2:0b:96:98:58:d1:b0:8c:8d:ea:08:ad:9f:09:db: ed:b1:4d:67:bd:15:45:95:63:59:51:19:b0:4f:bd: fa:68:76:66:b4:e3:5d:07:7c:fd:6d:d2:c4:cd:02: 08:3d:99:74:70:12:1e:0f:67:83:e3:1e:5f:66:7c: 00:ea:6a:87:8b:fe:f7:b0:11:b8:4e:87:c3:58:4f: 59:a3:35:c8:b8:fe:1f:22:76:ef:76:35:28:9e:d5: 78:09:98:ac:36:e0:5c:e4:31:cd:1c:1f:93:6f:25: ac:ee:7f:d3:bc:5a:0c:eb:cf:eb:f6:fd:84:cd:01: e8:1f:3b:4a:a9:8b:06:75:01:0b:fa:ab:b8:7f:ba: a8:07:2f:ca:86:ef:21:6e:69:dd:25:bc:cb:b3:32: 47:1b:3b:de:c7:f1:ba:88:df:d8:e0:77:4f:ed:3a: 76:b2:fd:69:6b:9b:d6:91:1f:74:46:7b:9b:a2:5f: fc:5e:7c:b3:8e:35:90:10:34:68:11:f3:e5:f1:b7: a0:e7:9d:c6:4a:f5:3b:9d:a1:df:9a:59:5c:e7:32: 49:85:76:6b:86:54:a9:7f:5e:db:c4:94:6a:31:7a: 12:7a:58:a6:27:ff:1f:2a:cb:96:55:a8:fd:56:8b: 4d:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:0E:16:D3:E7:87:BA:61:F6:A4:6C:BF:4B:01:35:DF:1B:F6:C3:A7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/90736358-6a58-3bbc-834d-85c81a6db290.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.68.232.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:ff:e5:2d:6b:f5:ef:f0:dd:3b:ee:c2:1e:a3:1c:c5:5b:07: 06:c2:f2:b7:1a:79:0e:f1:a8:99:3a:ea:d1:83:88:d1:9e:bd: f7:4d:a8:2c:f5:d9:4b:cb:00:dd:df:b4:12:77:fb:bc:c1:41: 60:63:8c:1a:2c:e8:5a:35:f8:56:02:5d:04:71:4b:02:46:2b: 4c:ab:b2:90:3e:c7:f6:2c:78:56:2e:34:73:9d:98:28:47:b9: c4:26:11:60:6c:24:d5:e7:9c:fd:27:99:86:39:3a:26:d0:49: 41:7a:21:73:06:f1:fe:9f:37:79:5a:fe:b7:7e:48:b3:d9:c8: 50:cd:cf:ae:01:97:7c:ab:dd:bc:f0:17:a4:51:bf:b8:a2:d1: f7:02:b0:bc:33:3e:8c:05:27:d0:3e:88:ea:87:b5:ed:19:46: 22:a3:5a:cf:48:75:61:5e:90:d7:f0:b1:8b:b6:2d:b3:b9:a5: 7c:45:49:9a:e6:e5:92:b9:26:9e:7b:2b:8f:d8:7f:d1:90:57: 34:3b:2a:95:6b:85:95:3a:dc:9c:71:a8:37:99:1b:b3:85:ac: 37:19:82:7a:0c:98:7c:98:a2:74:ec:2c:e0:5c:3a:25:16:54: b5:57:76:5b:b5:ad:d0:c5:21:0f:48:aa:fd:51:d8:dc:96:ec: 33:04:96:f0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7kIzWfnzEfwBgXZIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDgxOTE4MDM0NloXDTI3MTEyNzA1MDAwMFowLzEtMCsGA1UEAxMk NThiY2E2MjgtN2QwZS00Zjk4LTk3YzYtYmY2ZjFkNGI2MzNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlZcPxAlExF0Mchn55iSiC5aYWNGwjI3qCK2f CdvtsU1nvRVFlWNZURmwT736aHZmtONdB3z9bdLEzQIIPZl0cBIeD2eD4x5fZnwA 6mqHi/73sBG4TofDWE9ZozXIuP4fInbvdjUontV4CZisNuBc5DHNHB+TbyWs7n/T vFoM68/r9v2EzQHoHztKqYsGdQEL+qu4f7qoBy/Khu8hbmndJbzLszJHGzvex/G6 iN/Y4HdP7Tp2sv1pa5vWkR90Rnubol/8XnyzjjWQEDRoEfPl8beg553GSvU7naHf mllc5zJJhXZrhlSpf17bxJRqMXoSelimJ/8fKsuWVaj9VotNVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLkOFtPnh7ph9qRsv0sBNd8b9sOnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvOTA3MzYzNTgtNmE1OC0z YmJjLTgzNGQtODVjODFhNmRiMjkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrEToMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGX/5S1r9e/w3Tvuwh6jHMVbBwbC8rcaeQ7xqJk66tGDiNGevfdNqCz1 2UvLAN3ftBJ3+7zBQWBjjBos6Fo1+FYCXQRxSwJGK0yrspA+x/YseFYuNHOdmChH ucQmEWBsJNXnnP0nmYY5OibQSUF6IXMG8f6fN3la/rd+SLPZyFDNz64Bl3yr3bzw F6RRv7ii0fcCsLwzPowFJ9A+iOqHte0ZRiKjWs9IdWFekNfwsYu2LbO5pXxFSZrm 5ZK5Jp57K4/Yf9GQVzQ7KpVrhZU63JxxqDeZG7OFrDcZgnoMmHyYonTsLOBcOiUW VLVXdlu1rdDFIQ9Iqv1R2NyW7DMElvA= -----END CERTIFICATE-----Generated at Tue Sep 22 23:55:25 2026 by rpki-client