$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c5349d3e-37c0-306c-b1d2-90619d5fe639.roa File: c5349d3e-37c0-306c-b1d2-90619d5fe639.roa (raw, json) Hash identifier: 2/r7FK7TiH136T420vk+KhI69l9/+0y+BgYqMbNnhs8= Subject key identifier: 38:6B:AA:7F:1C:80:5A:A2:68:09:06:A3:8B:C3:F6:E5:0C:39:40:6A Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584EED52257B9DDDB25335B05C00 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c5349d3e-37c0-306c-b1d2-90619d5fe639.roa Signing time: Sun 23 Aug 2026 01:00:12 +0000 ROA not before: Sun 23 Aug 2026 01:00:12 +0000 ROA not after: Sat 21 Nov 2026 02:00:12 +0000 asID: 13335 IP address blocks: 172.68.163.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ed:52:25:7b:9d:dd:b2:53:35:b0:5c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 23 01:00:12 2026 GMT Not After : Nov 21 02:00:12 2026 GMT Subject: CN=76056685-9dd5-42d9-ae7c-f6f6199a4452 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:0c:9a:88:8e:a7:30:54:45:64:39:44:2d:54: b3:80:95:f4:b2:16:b1:e9:2b:ee:17:42:7b:31:ec: bc:1a:df:01:4e:09:a9:99:4d:74:dc:b8:0f:45:40: d5:d6:ec:27:12:9a:c2:23:97:f7:eb:a4:80:97:13: cf:c6:4d:10:14:a9:c4:e5:80:5b:50:40:29:a9:3d: d2:8a:1e:be:51:e7:15:c3:27:5a:8d:b3:ba:8c:7f: 7a:e1:c5:fb:c6:cf:9d:2c:91:96:7f:17:f1:0c:94: 3c:89:1b:85:59:02:cc:60:37:f4:8f:c1:a4:79:52: 4b:81:ad:1f:86:b3:8c:30:01:0f:01:92:01:a5:62: 43:a0:b3:17:53:f7:2e:f6:bd:64:d1:00:f7:33:7c: 04:43:d2:4d:6f:12:9d:c5:c7:e7:47:8c:0f:b5:47: ba:61:c2:4b:74:e4:22:e7:72:5a:c7:3a:12:66:3e: 56:a7:c7:7b:de:65:8c:28:fd:b9:88:9d:68:19:a5: c9:5d:b6:15:72:1e:88:88:f4:18:19:f7:57:c5:ee: a8:92:46:83:94:48:3f:3b:1f:71:d3:19:45:cc:f9: aa:86:6d:27:f2:10:88:3f:9e:3b:8d:87:96:d4:90: 0f:a1:ce:a3:b8:2d:fe:88:b1:d8:b9:e8:97:02:e3: 33:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:6B:AA:7F:1C:80:5A:A2:68:09:06:A3:8B:C3:F6:E5:0C:39:40:6A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c5349d3e-37c0-306c-b1d2-90619d5fe639.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.68.163.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:5d:51:58:c6:6b:10:ed:4c:64:3b:b9:9b:33:da:2c:14:6b: da:4c:75:82:d7:4a:47:2a:da:03:32:86:df:81:4c:db:0f:47: 43:8c:f2:c3:a6:8f:57:cb:5b:9a:e7:48:21:63:27:1e:83:7a: a6:d9:5a:89:87:ba:1a:b8:18:c1:6e:b7:81:db:0b:df:74:ec: 37:05:e3:7c:ff:d8:e2:f8:e5:4a:89:a5:b8:c1:97:c6:c6:73: 73:1a:cc:15:19:5f:29:0e:7f:fa:dc:39:fb:01:45:f7:3e:c0: fa:1d:5f:2e:0b:ce:47:4d:de:22:7f:36:6a:52:d8:de:cf:b6: 51:49:00:e2:a0:e5:6d:74:0e:da:2c:ba:d9:f9:ff:e1:04:36: 5a:29:05:b2:84:70:d7:e5:96:55:03:f1:01:8d:2f:4a:b9:92: f7:15:3a:ec:87:18:40:f2:b2:86:c5:be:df:da:65:08:9b:ea: 05:84:f6:e3:df:bc:3b:76:ad:70:a6:51:3d:5c:a0:33:c3:67: cc:dc:c8:c6:fc:e1:05:15:e9:00:af:96:ed:2a:a5:8b:e1:2b: 52:8b:bd:1d:26:77:e6:2f:28:a4:49:4a:ac:bd:25:d4:48:f9: ff:b5:b6:a6:93:71:af:be:1d:65:d2:72:d4:ae:06:0e:f5:12: e4:92:a5:70 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7tUiV7nd2yUzWwXAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDgyMzAxMDAxMloXDTI2MTEyMTAyMDAxMlowLzEtMCsGA1UEAxMk NzYwNTY2ODUtOWRkNS00MmQ5LWFlN2MtZjZmNjE5OWE0NDUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApAyaiI6nMFRFZDlELVSzgJX0shax6SvuF0J7 Mey8Gt8BTgmpmU103LgPRUDV1uwnEprCI5f366SAlxPPxk0QFKnE5YBbUEApqT3S ih6+UecVwydajbO6jH964cX7xs+dLJGWfxfxDJQ8iRuFWQLMYDf0j8GkeVJLga0f hrOMMAEPAZIBpWJDoLMXU/cu9r1k0QD3M3wEQ9JNbxKdxcfnR4wPtUe6YcJLdOQi 53JaxzoSZj5Wp8d73mWMKP25iJ1oGaXJXbYVch6IiPQYGfdXxe6okkaDlEg/Ox9x 0xlFzPmqhm0n8hCIP547jYeW1JAPoc6juC3+iLHYueiXAuMzBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDhrqn8cgFqiaAkGo4vD9uUMOUBqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvYzUzNDlkM2UtMzdjMC0z MDZjLWIxZDItOTA2MTlkNWZlNjM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArESjMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF1dUVjGaxDtTGQ7uZsz2iwUa9pMdYLXSkcq2gMyht+BTNsPR0OM8sOm j1fLW5rnSCFjJx6DeqbZWomHuhq4GMFut4HbC9907DcF43z/2OL45UqJpbjBl8bG c3MazBUZXykOf/rcOfsBRfc+wPodXy4LzkdN3iJ/NmpS2N7PtlFJAOKg5W10Dtos utn5/+EENlopBbKEcNflllUD8QGNL0q5kvcVOuyHGEDysobFvt/aZQib6gWE9uPf vDt2rXCmUT1coDPDZ8zcyMb84QUV6QCvlu0qpYvhK1KLvR0md+YvKKRJSqy9JdRI +f+1tqaTca++HWXSctSuBg71EuSSpXA= -----END CERTIFICATE-----Generated at Tue Sep 22 21:24:00 2026 by rpki-client