$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ae6fa773-9177-396c-a066-b77fbe30b7ba.roa File: ae6fa773-9177-396c-a066-b77fbe30b7ba.roa (raw, json) Hash identifier: nxFdovoGbeJIdKKiqAsEMJCPM8ClJnsA17ImBsoORAs= Subject key identifier: 63:6F:8C:D1:E0:75:28:75:3C:AD:48:75:EE:0B:20:CF:62:A1:B9:DC Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584EEEB76528B1DF8BE6C9CB0E00 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ae6fa773-9177-396c-a066-b77fbe30b7ba.roa Signing time: Sun 23 Aug 2026 13:00:12 +0000 ROA not before: Sun 23 Aug 2026 13:00:12 +0000 ROA not after: Sat 21 Nov 2026 14:00:12 +0000 asID: 13335 IP address blocks: 172.68.196.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ee:b7:65:28:b1:df:8b:e6:c9:cb:0e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 23 13:00:12 2026 GMT Not After : Nov 21 14:00:12 2026 GMT Subject: CN=68ccfbe6-c0fb-47fa-975a-1e690bc37757 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:db:60:01:7b:39:cf:0e:b6:08:a4:b8:17:23: 41:a9:8a:c2:b6:03:3b:11:2d:5f:6d:54:1d:ee:fe: 91:84:7c:04:1b:a0:5e:74:3f:6a:04:82:6d:9d:74: ec:ba:dc:ac:83:00:a7:b5:f0:2a:53:2c:cf:c4:fe: b8:0c:7f:65:44:9d:32:e4:d0:3d:5e:ad:bf:ba:a2: b4:cc:c7:44:35:cf:9d:0b:44:b2:84:b5:29:4b:92: fe:99:06:3f:5f:96:5e:82:c6:85:d8:bb:48:3d:1d: 36:9d:0d:aa:ff:81:5c:1d:c9:90:a6:51:ec:b6:2e: 3d:60:6d:8a:cd:01:8a:7b:2b:ff:e1:34:de:71:e5: 0e:0e:4e:6d:b1:b6:0d:28:d0:f3:cc:58:f1:0d:d4: 09:3b:a1:c5:06:28:25:84:ca:6a:1e:56:0e:3d:e4: f9:d0:3b:96:a8:d0:ae:8d:c7:ac:54:9b:ee:65:ee: ee:54:1b:82:75:e6:2a:19:d7:6b:af:df:24:4c:2e: bc:56:d1:4e:71:90:8d:15:6a:23:8d:96:4b:07:34: c7:04:c3:2d:c1:98:61:a4:f0:ed:f2:3c:84:04:92: 0e:5e:23:cf:53:c7:08:8f:8c:44:be:48:d2:84:73: 5e:4d:19:29:60:81:a5:1d:78:1e:13:b5:b8:ba:0c: 8f:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:6F:8C:D1:E0:75:28:75:3C:AD:48:75:EE:0B:20:CF:62:A1:B9:DC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ae6fa773-9177-396c-a066-b77fbe30b7ba.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.68.196.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:70:1a:3f:40:fc:08:f0:d8:06:6e:99:b2:40:58:2e:d8:d2: 83:83:ba:09:7e:42:4b:93:bd:50:dd:45:c8:b3:80:70:6a:bc: e4:b9:fa:5e:1c:12:be:73:5d:67:4d:b4:d1:b4:d0:9f:aa:b2: dc:06:f9:5a:ab:ec:16:3d:98:13:c1:bf:32:57:2a:52:30:60: bd:78:10:32:7f:97:24:02:4b:cd:4b:92:84:29:bf:5c:35:5b: d7:8c:bb:a5:96:20:ca:dd:f6:6e:30:f4:61:fd:93:e1:23:2f: 50:6d:3f:5c:12:09:51:9f:90:14:5b:8f:2f:23:81:df:99:b1: ca:3d:4a:a4:e0:72:21:f2:b4:3e:df:a6:a1:db:fa:92:0c:9f: 18:e7:c9:98:50:85:e4:2d:a7:d5:bb:d1:f2:68:64:07:01:4d: b1:76:36:f7:f0:ba:65:ef:5f:72:8c:73:8d:a5:44:c5:3e:d0: e1:f3:73:96:e0:44:ea:9a:b7:52:6c:a0:00:fc:34:5f:a4:9b: 4c:2f:e8:b8:f4:c9:5f:44:b2:5e:4d:60:a3:3a:8b:6b:c7:a8: 02:ee:8a:ac:9e:d1:f7:df:4d:64:49:ea:51:c6:b8:ba:25:df: d9:fe:b8:15:bb:9f:77:ef:71:19:0a:15:df:c8:fc:df:a4:e6: a6:a1:ac:1b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7ut2Uosd+L5snLDgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDgyMzEzMDAxMloXDTI2MTEyMTE0MDAxMlowLzEtMCsGA1UEAxMk NjhjY2ZiZTYtYzBmYi00N2ZhLTk3NWEtMWU2OTBiYzM3NzU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkttgAXs5zw62CKS4FyNBqYrCtgM7ES1fbVQd 7v6RhHwEG6BedD9qBIJtnXTsutysgwCntfAqUyzPxP64DH9lRJ0y5NA9Xq2/uqK0 zMdENc+dC0SyhLUpS5L+mQY/X5ZegsaF2LtIPR02nQ2q/4FcHcmQplHsti49YG2K zQGKeyv/4TTeceUODk5tsbYNKNDzzFjxDdQJO6HFBiglhMpqHlYOPeT50DuWqNCu jcesVJvuZe7uVBuCdeYqGddrr98kTC68VtFOcZCNFWojjZZLBzTHBMMtwZhhpPDt 8jyEBJIOXiPPU8cIj4xEvkjShHNeTRkpYIGlHXgeE7W4ugyPKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGNvjNHgdSh1PK1Ide4LIM9iobncMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvYWU2ZmE3NzMtOTE3Ny0z OTZjLWEwNjYtYjc3ZmJlMzBiN2JhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrETEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAVwGj9A/Ajw2AZumbJAWC7Y0oODugl+QkuTvVDdRcizgHBqvOS5+l4c Er5zXWdNtNG00J+qstwG+Vqr7BY9mBPBvzJXKlIwYL14EDJ/lyQCS81LkoQpv1w1 W9eMu6WWIMrd9m4w9GH9k+EjL1BtP1wSCVGfkBRbjy8jgd+Zsco9SqTgciHytD7f pqHb+pIMnxjnyZhQheQtp9W70fJoZAcBTbF2NvfwumXvX3KMc42lRMU+0OHzc5bg ROqat1JsoAD8NF+km0wv6Lj0yV9Esl5NYKM6i2vHqALuiqye0fffTWRJ6lHGuLol 39n+uBW7n3fvcRkKFd/I/N+k5qahrBs= -----END CERTIFICATE-----Generated at Tue Sep 22 07:18:06 2026 by rpki-client