$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8212a53-b17e-300e-bc3b-50bdc6ba5219.roa File: b8212a53-b17e-300e-bc3b-50bdc6ba5219.roa (raw, json) Hash identifier: JFjkd7pKiZC4xTd4tqTSUSIaduIIBblpMA3FAkKaiFI= Subject key identifier: ED:83:49:B9:24:63:4A:4C:3E:13:D0:FD:BD:A7:3B:89:53:74:71:36 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584EEA878354821AEC3E0E3FC580 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8212a53-b17e-300e-bc3b-50bdc6ba5219.roa Signing time: Sat 22 Aug 2026 01:00:12 +0000 ROA not before: Sat 22 Aug 2026 01:00:12 +0000 ROA not after: Fri 20 Nov 2026 02:00:12 +0000 asID: 13335 IP address blocks: 172.68.32.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ea:87:83:54:82:1a:ec:3e:0e:3f:c5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 22 01:00:12 2026 GMT Not After : Nov 20 02:00:12 2026 GMT Subject: CN=45606857-c0a9-4a4b-bf93-f3b51057d184 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:c0:d7:b3:25:8e:18:1b:09:02:9e:bb:4c:03: 61:f7:a4:c5:d2:e0:b7:31:a5:69:38:19:78:59:ce: d2:31:42:0f:9b:9d:2a:b4:54:c9:b7:3d:92:80:1b: 74:43:4c:04:a2:88:4e:69:e1:df:50:1d:46:a0:6c: 20:c4:bc:88:22:35:b6:63:25:00:a9:af:ed:aa:07: 0c:6f:bb:68:4e:71:95:60:d0:d0:48:65:f4:50:63: 82:ab:64:2f:46:ae:de:5d:e8:1d:75:7c:54:7c:b8: 24:96:2f:fc:93:b4:bb:de:b7:81:08:c8:b1:1b:fe: e4:82:d5:56:af:41:b7:2b:24:7d:5c:3a:77:fc:2b: 9c:49:7e:81:34:a6:25:d5:87:53:a4:83:8c:a7:0b: 6d:55:7b:2b:32:57:f7:2d:54:71:09:e2:cd:30:c2: 3b:a8:40:8c:30:f9:cf:ab:84:86:5f:13:85:b4:fa: 52:d8:ad:05:fd:75:34:f1:f3:2e:74:95:e1:e9:31: 63:4c:80:38:e7:4a:9b:46:d9:15:c7:e7:cd:29:ab: d7:77:2a:dc:33:d5:43:c6:92:da:3a:fb:25:07:f1: 19:bd:8c:ca:79:d3:1e:69:85:1f:4a:68:01:f1:e7: ed:72:33:f1:84:44:8c:df:d6:fe:af:ae:49:c8:db: f0:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:83:49:B9:24:63:4A:4C:3E:13:D0:FD:BD:A7:3B:89:53:74:71:36 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8212a53-b17e-300e-bc3b-50bdc6ba5219.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.68.32.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:87:14:10:f0:f1:f7:1b:32:99:14:9d:fe:46:77:2d:40:f6: 38:be:7d:1c:5b:98:f5:26:6d:66:64:3a:b3:6a:b8:79:5b:25: 9b:3b:b3:f0:a5:ba:05:36:a4:c6:51:88:c3:c5:24:39:72:10: 20:9f:1d:e8:b9:8c:2c:47:0b:6c:2e:6b:b3:dd:99:86:7a:9b: 04:66:bf:e7:90:18:2e:e8:d0:ce:53:12:ac:d4:e7:3b:76:4b: ee:61:b4:fe:8e:8c:d7:6e:e4:a6:44:06:ca:0d:a4:78:32:25: d2:95:d8:d1:93:fb:35:ea:0e:0f:03:cf:83:fe:a9:62:ae:90: 7b:42:0d:08:70:ff:63:f2:21:d9:7e:69:15:d1:47:8c:92:83: e3:a1:49:0b:31:61:05:43:a1:e1:49:25:49:51:d0:24:7c:94: b4:45:04:ae:20:84:1b:52:8b:23:93:08:f7:5a:6c:a9:cc:45: 7d:14:f7:a9:3c:b2:03:90:98:f2:6e:a1:5d:c2:68:88:9d:3e: 13:6f:bd:4d:e3:02:d9:f8:01:c1:6e:00:e0:d2:80:b8:5f:4c: fe:7a:4e:9e:f4:6a:c9:1b:58:98:a0:fc:55:41:a4:6f:14:87: 09:aa:cd:c5:10:d3:be:fc:88:8d:81:86:9e:dd:1b:63:64:5a: 98:d2:ea:07 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7qh4NUghrsPg4/xYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDgyMjAxMDAxMloXDTI2MTEyMDAyMDAxMlowLzEtMCsGA1UEAxMk NDU2MDY4NTctYzBhOS00YTRiLWJmOTMtZjNiNTEwNTdkMTg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAusDXsyWOGBsJAp67TANh96TF0uC3MaVpOBl4 Wc7SMUIPm50qtFTJtz2SgBt0Q0wEoohOaeHfUB1GoGwgxLyIIjW2YyUAqa/tqgcM b7toTnGVYNDQSGX0UGOCq2QvRq7eXegddXxUfLgkli/8k7S73reBCMixG/7kgtVW r0G3KyR9XDp3/CucSX6BNKYl1YdTpIOMpwttVXsrMlf3LVRxCeLNMMI7qECMMPnP q4SGXxOFtPpS2K0F/XU08fMudJXh6TFjTIA450qbRtkVx+fNKavXdyrcM9VDxpLa OvslB/EZvYzKedMeaYUfSmgB8eftcjPxhESM39b+r65JyNvwzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO2DSbkkY0pMPhPQ/b2nO4lTdHE2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvYjgyMTJhNTMtYjE3ZS0z MDBlLWJjM2ItNTBiZGM2YmE1MjE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEQgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIKHFBDw8fcbMpkUnf5Gdy1A9ji+fRxbmPUmbWZkOrNquHlbJZs7s/Cl ugU2pMZRiMPFJDlyECCfHei5jCxHC2wua7PdmYZ6mwRmv+eQGC7o0M5TEqzU5zt2 S+5htP6OjNdu5KZEBsoNpHgyJdKV2NGT+zXqDg8Dz4P+qWKukHtCDQhw/2PyIdl+ aRXRR4ySg+OhSQsxYQVDoeFJJUlR0CR8lLRFBK4ghBtSiyOTCPdabKnMRX0U96k8 sgOQmPJuoV3CaIidPhNvvU3jAtn4AcFuAODSgLhfTP56Tp70askbWJig/FVBpG8U hwmqzcUQ0778iI2Bhp7dG2NkWpjS6gc= -----END CERTIFICATE-----Generated at Tue Sep 1 04:35:45 2026 by rpki-client