$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a1c163f5-29eb-3c03-ac55-d66c2cb881d8.roa File: a1c163f5-29eb-3c03-ac55-d66c2cb881d8.roa (raw, json) Hash identifier: nsVs+u7BUZ2+3oZ2l5gSLz0uDJ+ZwqIckF/S57nv5BM= Subject key identifier: 5D:7D:D0:78:32:9F:19:45:89:67:CE:E2:23:21:3E:64:5C:B3:A9:08 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584F8DD8831466D20C5088584500 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a1c163f5-29eb-3c03-ac55-d66c2cb881d8.roa Signing time: Mon 19 Oct 2026 13:00:12 +0000 ROA not before: Mon 19 Oct 2026 13:00:12 +0000 ROA not after: Sun 17 Jan 2027 14:00:12 +0000 asID: 13335 IP address blocks: 172.68.22.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 28 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:8d:d8:83:14:66:d2:0c:50:88:58:45:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 19 13:00:12 2026 GMT Not After : Jan 17 14:00:12 2027 GMT Subject: CN=39e28f6b-27c7-4778-b6c2-57fb64b631c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:73:a2:6a:5e:b4:99:1a:b5:4b:c0:5c:31:2f: 5d:0e:b9:a3:d7:ae:f6:5d:15:ef:27:a0:73:43:31: 16:72:67:79:d2:72:63:fd:d0:f6:5c:9d:3f:f0:f3: 58:77:70:ed:95:84:4c:a2:c1:6d:56:ed:53:27:40: 07:36:5a:56:68:1d:87:29:ae:0b:5d:0c:2f:c3:85: 71:4e:5d:11:0a:48:f7:9b:44:52:b0:3f:aa:b7:b5: dc:82:58:ab:0a:93:14:c1:63:8d:c6:bb:56:02:a6: 49:ec:73:76:fe:8d:b2:61:72:48:44:8f:a0:5f:b7: 1b:3e:56:4f:9d:90:ce:b7:31:9f:12:f2:52:0f:4a: 58:3a:c2:0e:7f:89:70:4d:db:84:a4:c0:87:25:40: 70:d0:a5:7b:1d:d2:a2:12:fa:62:73:ac:0c:e9:47: a6:f1:71:80:9e:44:ca:81:8c:01:14:8e:df:6c:cd: 4e:c8:85:40:63:72:bc:f9:cc:23:7f:21:e8:39:6c: f8:f5:84:46:5f:ab:72:c8:c0:00:44:b6:d5:6a:f8: b0:6c:ff:88:c1:cb:a1:a7:57:fd:bc:42:2a:4e:ea: ed:c3:bc:61:64:39:eb:30:cc:fe:28:cb:56:b0:54: 68:5b:dc:74:5a:89:a1:a5:e6:a6:cd:82:dd:ad:2d: dd:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:7D:D0:78:32:9F:19:45:89:67:CE:E2:23:21:3E:64:5C:B3:A9:08 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a1c163f5-29eb-3c03-ac55-d66c2cb881d8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.68.22.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a9:a0:6b:05:8e:90:65:3e:9f:aa:22:5d:4c:8e:2c:cd:4b:85: 8c:a1:9f:be:c7:50:8f:64:71:55:3a:18:7d:4f:44:e0:c8:d7: 75:8d:3a:2c:77:56:5f:d6:a3:a6:b1:06:db:c2:4a:31:8e:ae: 3b:6a:bd:98:6b:f2:7c:7b:b0:4b:a7:7e:be:f5:f9:66:68:e1: 9e:72:c0:a9:a7:5c:96:08:e3:e9:2d:e1:94:c8:19:a2:05:52: 9a:f7:2e:32:de:fc:1e:d6:0c:3e:2d:be:69:5a:cb:b0:5d:2e: b7:96:e9:20:40:58:2d:bd:e3:f4:ac:8f:0e:db:3c:97:22:2f: a0:f2:f2:87:7b:47:ab:db:cf:bb:76:26:3a:2a:97:61:76:d8: 59:9b:5b:ab:69:29:a2:63:d4:bf:e7:85:b2:6e:35:1d:8d:6e: e5:29:06:a3:6a:5d:4b:1c:c1:fb:b6:a6:7b:f0:5e:86:d9:c5: cd:76:cf:b5:a0:ba:e1:b5:c2:31:64:7d:97:81:ad:6c:0e:7f: 36:40:db:66:83:ef:5c:bc:72:c6:10:d7:8b:b2:ac:72:3b:b6: 96:4b:50:b0:69:40:51:d9:e7:ef:11:a0:d3:66:8a:2c:b1:5f: ff:d5:c2:85:b6:e5:dd:23:cd:4e:b6:67:7f:58:2f:2b:85:75: 21:9e:09:6a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+N2IMUZtIMUIhYRQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MTAxOTEzMDAxMloXDTI3MDExNzE0MDAxMlowLzEtMCsGA1UEAxMk MzllMjhmNmItMjdjNy00Nzc4LWI2YzItNTdmYjY0YjYzMWMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx3Oial60mRq1S8BcMS9dDrmj1672XRXvJ6Bz QzEWcmd50nJj/dD2XJ0/8PNYd3DtlYRMosFtVu1TJ0AHNlpWaB2HKa4LXQwvw4Vx Tl0RCkj3m0RSsD+qt7XcglirCpMUwWONxrtWAqZJ7HN2/o2yYXJIRI+gX7cbPlZP nZDOtzGfEvJSD0pYOsIOf4lwTduEpMCHJUBw0KV7HdKiEvpic6wM6Uem8XGAnkTK gYwBFI7fbM1OyIVAY3K8+cwjfyHoOWz49YRGX6tyyMAARLbVaviwbP+Iwcuhp1f9 vEIqTurtw7xhZDnrMMz+KMtWsFRoW9x0WomhpeamzYLdrS3d7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF190HgynxlFiWfO4iMhPmRcs6kIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvYTFjMTYzZjUtMjllYi0z YzAzLWFjNTUtZDY2YzJjYjg4MWQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEQWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKmgawWOkGU+n6oiXUyOLM1LhYyhn77HUI9kcVU6GH1PRODI13WNOix3 Vl/Wo6axBtvCSjGOrjtqvZhr8nx7sEunfr71+WZo4Z5ywKmnXJYI4+kt4ZTIGaIF Upr3LjLe/B7WDD4tvmlay7BdLreW6SBAWC294/Ssjw7bPJciL6Dy8od7R6vbz7t2 Jjoql2F22FmbW6tpKaJj1L/nhbJuNR2NbuUpBqNqXUscwfu2pnvwXobZxc12z7Wg uuG1wjFkfZeBrWwOfzZA22aD71y8csYQ14uyrHI7tpZLULBpQFHZ5+8RoNNmiiyx X//VwoW25d0jzU62Z39YLyuFdSGeCWo= -----END CERTIFICATE-----Generated at Tue Oct 27 13:06:50 2026 by rpki-client