$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/9d97061d-b2c5-3b8b-9009-f596f0ac7f07.roa File: 9d97061d-b2c5-3b8b-9009-f596f0ac7f07.roa (raw, json) Hash identifier: be7p2mH/aCY7MpI6GXcEsMYe21yAk/jRMwaEnRGDKLY= Subject key identifier: A3:BD:6D:2C:24:C9:75:28:D7:5D:57:60:99:89:91:69:91:37:08:A0 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584EE7BCC82990F9A4CC195D3180 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/9d97061d-b2c5-3b8b-9009-f596f0ac7f07.roa Signing time: Fri 21 Aug 2026 01:00:12 +0000 ROA not before: Fri 21 Aug 2026 01:00:12 +0000 ROA not after: Thu 19 Nov 2026 02:00:12 +0000 asID: 13335 IP address blocks: 172.68.43.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e7:bc:c8:29:90:f9:a4:cc:19:5d:31:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 21 01:00:12 2026 GMT Not After : Nov 19 02:00:12 2026 GMT Subject: CN=aa4e1977-648d-413c-8a4a-704b8db0ed27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:ce:9d:42:19:52:cf:ac:42:5f:84:9f:9b:df: 07:58:ea:bb:ae:b4:6b:fd:73:51:7d:7a:43:f0:80: 5e:2d:fc:7e:46:99:00:8f:64:a1:2d:7b:44:5a:da: 9d:0e:4e:7e:36:ed:0c:78:0e:44:dd:9e:e6:10:7b: de:f9:bd:79:02:d0:82:2b:ca:aa:cb:7c:ba:10:11: 07:17:e1:1a:b7:77:c5:f2:65:92:7d:98:b7:64:7a: ce:1a:b3:22:92:2a:d0:b7:dd:f2:2d:3b:ac:57:cd: 6e:56:b5:7e:fe:b4:94:8e:0b:2e:5c:c9:1e:f6:b2: cd:11:57:fd:e5:6d:e7:b8:37:27:f1:3a:13:75:23: 23:6e:24:c5:a3:f0:d7:cd:99:57:63:fd:ab:88:b0: 93:38:9d:45:b4:d5:bf:db:51:01:49:aa:cc:03:2b: b4:47:c4:fb:2d:90:5c:14:42:f2:68:7f:59:23:75: 6e:c1:e4:23:11:b9:b9:11:86:a3:05:78:e4:a0:e9: 4c:55:fd:c4:7d:14:c1:c0:97:32:21:d3:66:09:2e: bd:f9:21:61:fe:b9:39:41:14:02:83:5d:49:86:5e: 6c:b0:b9:94:35:a7:59:1f:30:91:e8:cf:45:ea:1b: 74:9e:ef:5f:10:a9:9a:c1:58:b7:61:7f:8f:37:50: d5:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:BD:6D:2C:24:C9:75:28:D7:5D:57:60:99:89:91:69:91:37:08:A0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/9d97061d-b2c5-3b8b-9009-f596f0ac7f07.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.68.43.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:f2:ed:1c:24:9c:fc:54:fd:bc:5f:e2:4f:4f:9d:ad:c3:63: 56:0b:7d:69:22:f4:69:9e:fb:ec:8d:8e:67:5e:86:8f:a5:32: 10:24:75:c8:0d:16:21:64:49:c9:65:80:2a:c5:5b:bf:86:6a: 06:3e:13:e1:25:b2:b5:25:63:b3:3b:5d:4c:5d:59:50:60:97: d6:d3:77:68:f9:ec:1f:7d:80:fe:d1:90:e4:5e:4c:50:ae:4c: 23:4a:1d:84:bb:a0:39:90:58:70:a4:f3:71:b4:10:80:3f:11: 5c:d1:bb:1e:52:b2:c3:63:9d:e5:b1:6e:5c:57:6b:24:3b:34: 9b:5b:73:bf:5d:4d:2f:42:69:da:b8:20:e1:e1:3f:36:51:cc: cf:c7:98:b2:eb:65:2a:6e:02:59:54:53:40:c5:ab:73:4d:53: 42:b1:27:d1:bd:72:8d:1d:02:a2:e6:5f:fb:22:f6:c5:95:6b: e4:ff:d1:a7:93:f1:a6:8e:85:78:16:da:23:cc:a5:ea:14:81: d6:e8:66:79:95:47:5d:43:c0:a1:4f:b7:04:63:5b:84:05:2f: 73:37:28:5d:0b:bd:69:38:d5:57:c6:b3:24:b6:0a:13:35:da: df:00:32:4b:11:13:3e:a5:07:96:cb:0a:32:43:e6:e2:d8:38: fc:45:08:f8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7nvMgpkPmkzBldMYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDgyMTAxMDAxMloXDTI2MTExOTAyMDAxMlowLzEtMCsGA1UEAxMk YWE0ZTE5NzctNjQ4ZC00MTNjLThhNGEtNzA0YjhkYjBlZDI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApM6dQhlSz6xCX4Sfm98HWOq7rrRr/XNRfXpD 8IBeLfx+RpkAj2ShLXtEWtqdDk5+Nu0MeA5E3Z7mEHve+b15AtCCK8qqy3y6EBEH F+Eat3fF8mWSfZi3ZHrOGrMikirQt93yLTusV81uVrV+/rSUjgsuXMke9rLNEVf9 5W3nuDcn8ToTdSMjbiTFo/DXzZlXY/2riLCTOJ1FtNW/21EBSarMAyu0R8T7LZBc FELyaH9ZI3VuweQjEbm5EYajBXjkoOlMVf3EfRTBwJcyIdNmCS69+SFh/rk5QRQC g11Jhl5ssLmUNadZHzCR6M9F6ht0nu9fEKmawVi3YX+PN1DVmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKO9bSwkyXUo111XYJmJkWmRNwigMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvOWQ5NzA2MWQtYjJjNS0z YjhiLTkwMDktZjU5NmYwYWM3ZjA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEQrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD/y7RwknPxU/bxf4k9Pna3DY1YLfWki9Gme++yNjmdeho+lMhAkdcgN FiFkScllgCrFW7+GagY+E+ElsrUlY7M7XUxdWVBgl9bTd2j57B99gP7RkOReTFCu TCNKHYS7oDmQWHCk83G0EIA/EVzRux5SssNjneWxblxXayQ7NJtbc79dTS9Cadq4 IOHhPzZRzM/HmLLrZSpuAllUU0DFq3NNU0KxJ9G9co0dAqLmX/si9sWVa+T/0aeT 8aaOhXgW2iPMpeoUgdboZnmVR11DwKFPtwRjW4QFL3M3KF0LvWk41VfGsyS2ChM1 2t8AMksREz6lB5bLCjJD5uLYOPxFCPg= -----END CERTIFICATE-----Generated at Tue Sep 22 06:39:25 2026 by rpki-client