$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/af61db74-12c5-3a2b-850a-7a280acd87e2.roa File: af61db74-12c5-3a2b-850a-7a280acd87e2.roa (raw, json) Hash identifier: U2Q1AmrTpfK3B8X74N85pBY+SlOcYUfAbbLkdFer3FA= Subject key identifier: 4D:C4:1B:8F:74:C9:0B:53:5B:55:E3:C8:CB:B5:74:74:C9:66:C0:82 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584EE42333E53D1B8F699B5BB440 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/af61db74-12c5-3a2b-850a-7a280acd87e2.roa Signing time: Wed 19 Aug 2026 18:03:45 +0000 ROA not before: Wed 19 Aug 2026 18:03:45 +0000 ROA not after: Sat 27 Nov 2027 05:00:00 +0000 asID: 13335 IP address blocks: 172.68.48.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e4:23:33:e5:3d:1b:8f:69:9b:5b:b4:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 19 18:03:45 2026 GMT Not After : Nov 27 05:00:00 2027 GMT Subject: CN=6b4adf53-b515-4cd9-81e5-57a9d243b766 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:46:99:85:42:b0:90:70:6c:e8:65:c5:61:89: 6e:4c:78:79:13:37:c9:40:50:aa:e1:6d:38:d0:38: 02:3e:70:70:f0:2b:9d:c4:5a:6c:02:7b:de:d8:89: 4a:3a:97:44:68:29:a1:4f:3d:7b:8b:30:f3:76:b5: 4e:6f:41:5a:7a:9f:e9:6d:2d:f4:f2:ac:24:44:f7: 8a:1a:6d:f7:c4:02:1c:12:66:92:01:54:a1:93:4d: 38:67:bd:b9:2c:c8:11:77:9a:43:5d:22:7e:04:9f: f7:25:a7:9c:d3:24:47:73:11:a0:34:c5:f4:3e:16: 19:fd:cd:6b:d8:f6:5c:df:ba:c1:6c:6d:d2:35:bd: 54:12:6a:58:80:55:17:e2:dc:27:73:7a:f6:5c:16: f1:5f:7f:9b:c3:18:a9:f1:41:3e:36:48:28:9b:9e: d4:22:1b:16:30:fa:03:05:cd:cc:cb:1c:9c:7b:11: ee:a9:8c:3c:2b:98:06:8b:b3:b1:0c:9f:01:87:db: 6d:3a:50:94:3a:ca:0c:bd:c4:f5:57:51:b7:bf:b2: fe:9f:e6:f6:81:a8:09:e9:1a:36:f0:fe:1e:64:35: 37:2f:63:be:3a:f8:98:ea:b6:12:c5:ab:ae:7f:5b: 1e:aa:be:3c:c7:88:61:84:37:9c:39:a2:ef:92:4c: 6e:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:C4:1B:8F:74:C9:0B:53:5B:55:E3:C8:CB:B5:74:74:C9:66:C0:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/af61db74-12c5-3a2b-850a-7a280acd87e2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.68.48.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9a:15:f0:58:6a:32:e9:f0:4f:db:4e:bc:5e:db:da:63:c6:0c: 73:59:1e:2f:e3:51:6e:a7:16:0c:52:b6:2b:13:ed:c1:18:a1: 7e:e7:6b:5e:48:ae:c2:81:03:b3:78:b2:41:2e:e6:e7:51:ef: cd:01:6a:aa:26:31:25:64:8f:87:35:74:99:7e:65:d3:a6:a8: ca:d9:a1:c8:c3:07:46:86:dd:b2:fa:c3:b4:ea:70:e0:18:5b: f6:eb:6f:d1:57:76:c2:e1:13:8e:8e:d3:4c:e3:58:fd:f6:82: 01:86:2d:45:93:91:3a:6f:5f:90:39:cf:ae:8e:14:f8:68:f5: 76:46:9d:1e:fd:a0:91:84:54:cc:4c:00:9d:e9:65:a9:ac:81: db:4b:c5:e8:33:82:d6:c7:cd:38:e3:2a:d4:b8:68:a4:ec:1b: 06:53:8a:d5:69:db:b6:31:94:20:36:40:cf:f7:b3:bf:7d:40: f2:d4:52:7d:f8:97:0f:da:c4:41:4a:4c:e1:f3:7e:63:43:64: dd:d4:c0:9d:a9:e0:70:3f:4f:25:f8:14:a4:0b:ee:51:02:3b: 59:4d:40:b2:d2:fd:a0:b9:33:75:60:4d:76:ce:f4:28:88:14: f8:6e:72:29:27:24:a9:07:ff:8c:ce:3a:7a:b9:39:a6:48:9f: 60:e4:5f:d3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7kIzPlPRuPaZtbtEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDgxOTE4MDM0NVoXDTI3MTEyNzA1MDAwMFowLzEtMCsGA1UEAxMk NmI0YWRmNTMtYjUxNS00Y2Q5LTgxZTUtNTdhOWQyNDNiNzY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj0aZhUKwkHBs6GXFYYluTHh5EzfJQFCq4W04 0DgCPnBw8CudxFpsAnve2IlKOpdEaCmhTz17izDzdrVOb0Faep/pbS308qwkRPeK Gm33xAIcEmaSAVShk004Z725LMgRd5pDXSJ+BJ/3Jaec0yRHcxGgNMX0PhYZ/c1r 2PZc37rBbG3SNb1UEmpYgFUX4twnc3r2XBbxX3+bwxip8UE+Nkgom57UIhsWMPoD Bc3MyxycexHuqYw8K5gGi7OxDJ8Bh9ttOlCUOsoMvcT1V1G3v7L+n+b2gagJ6Ro2 8P4eZDU3L2O+OviY6rYSxauuf1seqr48x4hhhDecOaLvkkxuWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE3EG490yQtTW1XjyMu1dHTJZsCCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvYWY2MWRiNzQtMTJjNS0z YTJiLTg1MGEtN2EyODBhY2Q4N2UyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrEQwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJoV8FhqMunwT9tOvF7b2mPGDHNZHi/jUW6nFgxStisT7cEYoX7na15I rsKBA7N4skEu5udR780BaqomMSVkj4c1dJl+ZdOmqMrZocjDB0aG3bL6w7TqcOAY W/brb9FXdsLhE46O00zjWP32ggGGLUWTkTpvX5A5z66OFPho9XZGnR79oJGEVMxM AJ3pZamsgdtLxegzgtbHzTjjKtS4aKTsGwZTitVp27YxlCA2QM/3s799QPLUUn34 lw/axEFKTOHzfmNDZN3UwJ2p4HA/TyX4FKQL7lECO1lNQLLS/aC5M3VgTXbO9CiI FPhuciknJKkH/4zOOnq5OaZIn2DkX9M= -----END CERTIFICATE-----Generated at Tue Sep 22 10:45:22 2026 by rpki-client