$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/9881220c-9ede-3293-a734-f3010f86829e.roa File: 9881220c-9ede-3293-a734-f3010f86829e.roa (raw, json) Hash identifier: glL9V4kU/V4+N5+Tov2hRCKezJM7MXl5IvS5N//VN88= Subject key identifier: 72:B3:55:69:6C:10:06:B1:4F:50:F4:EA:41:A4:60:58:9B:02:0B:24 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584EED522E150E18EC0BE3285700 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/9881220c-9ede-3293-a734-f3010f86829e.roa Signing time: Sun 23 Aug 2026 01:00:12 +0000 ROA not before: Sun 23 Aug 2026 01:00:12 +0000 ROA not after: Sat 21 Nov 2026 02:00:12 +0000 asID: 13335 IP address blocks: 172.68.97.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ed:52:2e:15:0e:18:ec:0b:e3:28:57:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 23 01:00:12 2026 GMT Not After : Nov 21 02:00:12 2026 GMT Subject: CN=9b3b4eea-3241-411c-91c3-bde62f2cfd07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:8f:2e:ee:7c:c7:e7:95:c5:b3:91:8a:c8:b0: f1:1d:01:ce:2d:8c:c6:0f:7b:a2:95:38:c1:dd:1e: c3:e0:85:b2:05:44:30:85:50:26:0d:b8:07:91:cd: 54:47:72:b4:a2:a6:eb:14:62:b2:86:b6:81:d8:07: 92:3a:90:43:8f:36:77:00:e5:91:5b:b8:c1:c3:7c: 15:1b:28:30:c4:00:11:5e:a2:c6:84:34:f2:6a:ad: 14:f3:c4:08:03:78:52:ab:5b:a7:55:3e:fb:62:73: a0:55:e9:08:70:4b:a4:9f:83:cd:d5:b5:7d:f0:cf: 51:e3:7e:1a:68:65:f2:57:9b:50:5f:49:51:4d:3c: 76:29:10:4a:9a:a3:6a:b6:3f:43:c5:9e:10:fd:c7: f7:d4:d5:c4:9b:5a:48:f9:28:a8:66:93:c3:da:c1: 6c:8d:75:b3:81:de:f4:9e:f5:d3:cf:fb:1c:ab:e8: 4f:83:92:38:f3:c1:dc:e2:0b:90:8d:7d:01:35:3c: f4:9a:8f:f7:be:4d:3f:fb:51:c3:e1:95:ec:e2:00: 3d:14:40:c9:53:52:48:08:59:09:4b:62:e1:bb:4f: 61:71:d2:8f:c8:2f:44:bd:4f:ac:a2:90:64:2a:82: 79:42:89:a2:2b:1b:3d:bd:8f:7c:db:ba:db:73:26: 47:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:B3:55:69:6C:10:06:B1:4F:50:F4:EA:41:A4:60:58:9B:02:0B:24 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/9881220c-9ede-3293-a734-f3010f86829e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.68.97.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:ef:8b:e7:11:e3:04:9a:3e:dd:e8:be:67:41:7c:e9:21:32: ac:e1:a7:f9:70:f2:06:31:64:5e:be:fd:9a:5d:3f:67:18:0f: 27:a3:65:42:05:da:f3:4f:c7:1c:59:00:e7:dc:68:5f:47:30: 33:53:c1:fe:c4:dd:de:c1:7a:69:a5:af:b4:cb:01:30:67:a6: 17:2f:d1:1e:4e:57:c5:b0:8a:d5:4a:b8:ac:7b:9d:21:e6:9a: 98:e0:a0:cb:23:df:50:3d:5a:d2:5f:fb:78:03:fa:ef:30:72: 0d:9a:c8:d8:07:4a:fb:c7:b0:94:15:66:02:44:ef:9c:de:5e: c3:7c:2e:35:17:f0:37:35:91:11:86:31:41:8b:60:83:06:66: 81:3a:cd:2e:10:c4:47:0f:48:7d:d0:d8:28:6b:92:48:87:4f: 4a:eb:12:19:45:e8:52:3b:4c:64:c4:0a:b1:94:1d:33:5a:88: b5:c3:40:68:a3:de:be:67:c5:69:ce:c6:70:53:e5:01:d9:bf: b1:fd:48:19:c8:42:3b:64:99:14:21:fe:6d:45:5d:7c:bd:1e: b1:c6:9e:ed:5c:58:db:2a:4f:df:46:e9:1c:19:ab:8f:cf:12: 6d:bb:85:56:6a:71:68:ec:4b:59:fa:43:cc:23:c0:ca:b6:74: f7:fd:a3:8a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7tUi4VDhjsC+MoVwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDgyMzAxMDAxMloXDTI2MTEyMTAyMDAxMlowLzEtMCsGA1UEAxMk OWIzYjRlZWEtMzI0MS00MTFjLTkxYzMtYmRlNjJmMmNmZDA3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm48u7nzH55XFs5GKyLDxHQHOLYzGD3uilTjB 3R7D4IWyBUQwhVAmDbgHkc1UR3K0oqbrFGKyhraB2AeSOpBDjzZ3AOWRW7jBw3wV GygwxAARXqLGhDTyaq0U88QIA3hSq1unVT77YnOgVekIcEukn4PN1bV98M9R434a aGXyV5tQX0lRTTx2KRBKmqNqtj9DxZ4Q/cf31NXEm1pI+SioZpPD2sFsjXWzgd70 nvXTz/scq+hPg5I488Hc4guQjX0BNTz0mo/3vk0/+1HD4ZXs4gA9FEDJU1JICFkJ S2Lhu09hcdKPyC9EvU+sopBkKoJ5QomiKxs9vY9827rbcyZHhQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHKzVWlsEAaxT1D06kGkYFibAgskMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvOTg4MTIyMGMtOWVkZS0z MjkzLWE3MzQtZjMwMTBmODY4MjllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArERhMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACbvi+cR4wSaPt3ovmdBfOkhMqzhp/lw8gYxZF6+/ZpdP2cYDyejZUIF 2vNPxxxZAOfcaF9HMDNTwf7E3d7Bemmlr7TLATBnphcv0R5OV8WwitVKuKx7nSHm mpjgoMsj31A9WtJf+3gD+u8wcg2ayNgHSvvHsJQVZgJE75zeXsN8LjUX8Dc1kRGG MUGLYIMGZoE6zS4QxEcPSH3Q2ChrkkiHT0rrEhlF6FI7TGTECrGUHTNaiLXDQGij 3r5nxWnOxnBT5QHZv7H9SBnIQjtkmRQh/m1FXXy9HrHGnu1cWNsqT99G6RwZq4/P Em27hVZqcWjsS1n6Q8wjwMq2dPf9o4o= -----END CERTIFICATE-----Generated at Mon Sep 28 10:38:34 2026 by rpki-client