$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/98b5ce17-378e-3e63-ba11-da47f580b202.roa File: 98b5ce17-378e-3e63-ba11-da47f580b202.roa (raw, json) Hash identifier: YMEwqhBLKeTPQglMxV0gTftSC4TZ8NmQDQXFdP8wt2M= Subject key identifier: 10:91:EE:80:AD:2D:7F:AE:3E:30:61:42:16:29:C7:14:91:05:A1:63 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584EED5238519C38DF9577D60880 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/98b5ce17-378e-3e63-ba11-da47f580b202.roa Signing time: Sun 23 Aug 2026 01:00:12 +0000 ROA not before: Sun 23 Aug 2026 01:00:12 +0000 ROA not after: Sat 21 Nov 2026 02:00:12 +0000 asID: 13335 IP address blocks: 172.68.25.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ed:52:38:51:9c:38:df:95:77:d6:08:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 23 01:00:12 2026 GMT Not After : Nov 21 02:00:12 2026 GMT Subject: CN=4e887a4e-85ad-469f-9040-afbf8b91312d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:4c:c4:e5:02:c8:f1:1f:22:0a:8b:77:6e:15: 5c:18:16:1e:1d:e8:0f:13:a5:44:68:fb:28:ce:58: 06:dd:b7:ee:af:f7:6f:f2:1d:4c:d3:be:a8:0f:a2: 9a:b3:56:55:fb:cd:a3:f4:3a:de:96:06:e1:1d:28: 89:5b:11:6a:94:e2:2d:b3:a4:9b:56:3b:37:d4:de: fa:3d:0f:1e:7d:c2:1a:30:08:93:67:1f:de:ec:df: 08:53:e6:6e:cc:a4:81:c1:63:c7:cb:8e:f6:42:3f: cb:5b:24:b8:e6:d7:20:92:22:c3:ad:fa:94:76:73: 1b:93:5a:4b:3b:5b:94:25:2f:28:a6:f6:d5:90:f9: 4c:e4:24:2d:4a:64:0f:7d:fb:78:cd:07:3f:be:75: c1:4b:22:3c:b8:e5:7a:db:21:58:e8:fd:98:71:8b: 29:63:78:4d:cb:15:24:4d:f8:ee:d7:e8:25:a7:84: e3:91:bc:04:29:02:1b:5f:0e:f4:e4:cf:f4:ef:94: 0e:73:1e:e5:12:8b:d8:46:22:9a:82:26:2b:5a:94: 76:cf:bf:e1:80:ec:0f:8f:37:30:98:60:b6:3f:24: e8:86:53:54:6a:d1:8a:f1:7e:87:1b:1c:83:c3:ef: 07:30:74:50:6f:f2:83:5e:17:b4:35:d0:06:eb:69: 0b:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:91:EE:80:AD:2D:7F:AE:3E:30:61:42:16:29:C7:14:91:05:A1:63 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/98b5ce17-378e-3e63-ba11-da47f580b202.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.68.25.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:fb:71:25:c0:9b:f2:cf:28:cb:ea:78:52:1c:92:f0:7d:ba: 68:82:3e:cb:7a:74:4e:5d:43:60:e8:62:e2:bd:d4:44:cf:c1: 1f:21:aa:c6:0a:57:cb:6c:9f:c8:f1:7c:c5:7d:94:46:c6:8d: 1e:df:2b:13:7e:b2:98:b4:e0:5b:af:96:e8:f2:39:04:90:c0: cd:3e:4c:11:8c:da:c3:db:ec:e2:6c:5c:58:f9:0d:77:cb:f2: 56:4e:ef:19:93:be:3e:00:da:27:c4:52:fc:85:7d:7f:85:e0: 90:b1:19:4b:43:92:ec:9f:b5:d2:11:48:fe:59:a3:12:3e:a1: 95:a8:9f:0e:9f:68:b0:ed:8a:21:2d:63:88:32:1a:85:a7:2a: a8:03:90:9a:ca:56:8c:19:b0:8d:13:b2:70:ee:35:2f:a5:c5: bf:2b:62:2b:18:f5:42:64:4f:ac:be:28:67:44:ed:4b:a3:94: 48:ab:59:4d:9c:3d:02:1d:5a:8d:fa:b1:16:e1:29:f0:44:3e: a3:fc:0b:3b:95:ca:52:5e:64:80:12:8e:7b:c6:ce:c8:de:9d: 5f:0a:9b:08:04:b6:f5:be:6c:55:f0:ae:8f:6d:d9:83:93:7b: 8b:20:70:7c:b1:f4:1d:77:d5:1a:35:4f:39:49:fb:35:f5:4a: b9:a2:18:bc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7tUjhRnDjflXfWCIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDgyMzAxMDAxMloXDTI2MTEyMTAyMDAxMlowLzEtMCsGA1UEAxMk NGU4ODdhNGUtODVhZC00NjlmLTkwNDAtYWZiZjhiOTEzMTJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnkzE5QLI8R8iCot3bhVcGBYeHegPE6VEaPso zlgG3bfur/dv8h1M076oD6Kas1ZV+82j9DrelgbhHSiJWxFqlOIts6SbVjs31N76 PQ8efcIaMAiTZx/e7N8IU+ZuzKSBwWPHy472Qj/LWyS45tcgkiLDrfqUdnMbk1pL O1uUJS8opvbVkPlM5CQtSmQPfft4zQc/vnXBSyI8uOV62yFY6P2YcYspY3hNyxUk Tfju1+glp4TjkbwEKQIbXw705M/075QOcx7lEovYRiKagiYrWpR2z7/hgOwPjzcw mGC2PyTohlNUatGK8X6HGxyDw+8HMHRQb/KDXhe0NdAG62kLvwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBCR7oCtLX+uPjBhQhYpxxSRBaFjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvOThiNWNlMTctMzc4ZS0z ZTYzLWJhMTEtZGE0N2Y1ODBiMjAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEQZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABT7cSXAm/LPKMvqeFIckvB9umiCPst6dE5dQ2DoYuK91ETPwR8hqsYK V8tsn8jxfMV9lEbGjR7fKxN+spi04FuvlujyOQSQwM0+TBGM2sPb7OJsXFj5DXfL 8lZO7xmTvj4A2ifEUvyFfX+F4JCxGUtDkuyftdIRSP5ZoxI+oZWonw6faLDtiiEt Y4gyGoWnKqgDkJrKVowZsI0TsnDuNS+lxb8rYisY9UJkT6y+KGdE7UujlEirWU2c PQIdWo36sRbhKfBEPqP8CzuVylJeZIASjnvGzsjenV8KmwgEtvW+bFXwro9t2YOT e4sgcHyx9B131Ro1TzlJ+zX1SrmiGLw= -----END CERTIFICATE-----Generated at Tue Sep 1 04:08:34 2026 by rpki-client