$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/bf3bc2e4-4cb8-3ed2-9db5-9fc174589dca.roa File: bf3bc2e4-4cb8-3ed2-9db5-9fc174589dca.roa (raw, json) Hash identifier: Pw6y/4y/n6z7aKzwFUJ6VWXx4udGVrZYnp/RCpldSuI= Subject key identifier: 19:9B:80:17:2A:59:B2:40:3A:A0:B0:F3:59:C0:87:D7:1A:80:90:D0 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584F549D45C0CE2EDBE349433480 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/bf3bc2e4-4cb8-3ed2-9db5-9fc174589dca.roa Signing time: Tue 29 Sep 2026 01:00:12 +0000 ROA not before: Tue 29 Sep 2026 01:00:12 +0000 ROA not after: Mon 28 Dec 2026 02:00:12 +0000 asID: 14789 IP address blocks: 172.68.171.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Nov 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:54:9d:45:c0:ce:2e:db:e3:49:43:34:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Sep 29 01:00:12 2026 GMT Not After : Dec 28 02:00:12 2026 GMT Subject: CN=73b3e8cd-51fd-4e3c-ba98-94d3900f322a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:6f:33:1a:96:60:b5:15:b9:ed:dc:b0:41:44: 10:f9:5e:ab:6b:0d:0f:37:1f:41:b6:45:4a:b0:8d: ce:37:7c:d8:e2:5e:90:3c:07:d3:9c:bf:e3:74:09: b1:59:5a:8c:cb:ae:8a:48:28:9c:8d:07:58:2c:fa: 19:1b:ce:e6:2d:f5:57:15:50:ba:93:f3:67:8b:86: 51:d0:2e:57:95:ba:62:4c:e9:c4:cb:bf:7f:45:3d: 53:bf:1b:53:0f:94:21:fa:84:95:89:0f:5d:8a:22: b2:7d:41:eb:26:9c:70:a8:66:56:2a:50:77:1e:b9: c3:c3:63:d9:19:e3:aa:c3:bd:17:3a:5e:1e:66:2b: 1a:96:99:f0:6d:1d:72:03:fa:b3:71:77:4a:4b:67: ef:e0:c1:55:c1:78:c3:87:59:53:d9:f1:a9:be:d3: f0:8b:cf:7b:48:d8:67:44:52:ac:67:bb:28:0b:82: 56:78:62:d6:e6:17:63:ed:ab:91:65:ed:63:04:ef: 2a:c1:d0:57:ad:01:7d:9c:cd:37:26:37:19:21:31: 96:18:d1:9b:d4:43:41:52:1d:df:54:15:43:cd:b5: 2f:6a:ce:be:b2:92:fd:ff:5f:84:ca:80:34:c3:25: ff:78:be:8e:44:d5:4f:e6:d8:75:4f:17:af:31:37: 26:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:9B:80:17:2A:59:B2:40:3A:A0:B0:F3:59:C0:87:D7:1A:80:90:D0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/bf3bc2e4-4cb8-3ed2-9db5-9fc174589dca.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.68.171.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:cd:7c:eb:06:63:94:01:57:08:1d:ad:b8:ba:6a:0d:86:b8: a5:6d:00:6a:6d:59:20:b3:91:b9:a7:80:06:ea:6f:09:43:04: 92:94:75:5e:92:07:69:b9:3a:53:8a:6d:52:33:5b:54:ed:c3: a2:ea:e4:79:4b:75:42:53:5e:c0:cb:cc:06:c0:a5:bb:68:1f: c1:dd:3a:06:39:a7:a5:66:e0:82:94:6e:cf:6a:c7:f9:ff:f5: 4f:7a:b8:0a:7d:cc:44:f2:31:73:44:ab:3b:6a:d8:5d:01:27: 46:84:a8:a6:5e:0f:be:90:6f:be:46:93:c9:d4:6c:65:1f:ff: 8d:a6:dc:ef:a8:47:a2:43:7c:4b:95:fe:de:ce:51:1d:6d:06: 11:85:36:62:66:fa:78:2c:72:57:b8:e8:53:26:a5:2e:02:7e: a7:ad:5d:f4:e0:9e:27:09:f1:3d:cb:92:35:65:05:5b:ad:11: 44:3e:f6:3f:08:ce:b4:74:7c:1b:81:61:53:c7:36:5c:30:0a: bf:76:68:87:db:74:a0:bc:a1:e4:73:8d:3d:a9:79:5b:97:e8: 53:e6:e6:b6:2c:15:78:0d:13:56:76:49:4d:62:9f:ec:ce:62: 9e:44:83:bf:d5:f4:74:b2:61:59:65:23:7f:4d:c9:12:85:4c: 51:4b:97:1f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9UnUXAzi7b40lDNIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDkyOTAxMDAxMloXDTI2MTIyODAyMDAxMlowLzEtMCsGA1UEAxMk NzNiM2U4Y2QtNTFmZC00ZTNjLWJhOTgtOTRkMzkwMGYzMjJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjW8zGpZgtRW57dywQUQQ+V6raw0PNx9BtkVK sI3ON3zY4l6QPAfTnL/jdAmxWVqMy66KSCicjQdYLPoZG87mLfVXFVC6k/Nni4ZR 0C5XlbpiTOnEy79/RT1TvxtTD5Qh+oSViQ9diiKyfUHrJpxwqGZWKlB3HrnDw2PZ GeOqw70XOl4eZisalpnwbR1yA/qzcXdKS2fv4MFVwXjDh1lT2fGpvtPwi897SNhn RFKsZ7soC4JWeGLW5hdj7auRZe1jBO8qwdBXrQF9nM03JjcZITGWGNGb1ENBUh3f VBVDzbUvas6+spL9/1+EyoA0wyX/eL6ORNVP5th1TxevMTcmTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBmbgBcqWbJAOqCw81nAh9cagJDQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvYmYzYmMyZTQtNGNiOC0z ZWQyLTlkYjUtOWZjMTc0NTg5ZGNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArESrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFvNfOsGY5QBVwgdrbi6ag2GuKVtAGptWSCzkbmngAbqbwlDBJKUdV6S B2m5OlOKbVIzW1Ttw6Lq5HlLdUJTXsDLzAbApbtoH8HdOgY5p6Vm4IKUbs9qx/n/ 9U96uAp9zETyMXNEqztq2F0BJ0aEqKZeD76Qb75Gk8nUbGUf/42m3O+oR6JDfEuV /t7OUR1tBhGFNmJm+ngscle46FMmpS4CfqetXfTgnicJ8T3LkjVlBVutEUQ+9j8I zrR0fBuBYVPHNlwwCr92aIfbdKC8oeRzjT2peVuX6FPm5rYsFXgNE1Z2SU1in+zO Yp5Eg7/V9HSyYVllI39NyRKFTFFLlx8= -----END CERTIFICATE-----Generated at Sun Nov 15 20:52:45 2026 by rpki-client