$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/e1db1ef5-8875-37b0-a87d-5f3f1abd148d.roa File: e1db1ef5-8875-37b0-a87d-5f3f1abd148d.roa (raw, json) Hash identifier: tj/ZGymsv+GRCvRfueizQsnob13aXZ2ItgRSNvD4FJs= Subject key identifier: 5E:8E:4E:A5:A1:AE:28:38:36:8A:93:D8:9C:AA:C5:25:5B:4C:20:66 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584EEEB773E42024B2F4D9EF8380 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/e1db1ef5-8875-37b0-a87d-5f3f1abd148d.roa Signing time: Sun 23 Aug 2026 13:00:12 +0000 ROA not before: Sun 23 Aug 2026 13:00:12 +0000 ROA not after: Sat 21 Nov 2026 14:00:12 +0000 asID: 13335 IP address blocks: 172.68.188.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ee:b7:73:e4:20:24:b2:f4:d9:ef:83:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 23 13:00:12 2026 GMT Not After : Nov 21 14:00:12 2026 GMT Subject: CN=8425de88-c797-4b73-8c3c-75b9ed1d1c55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:38:93:1d:7a:e4:9f:6a:ea:ff:2b:31:a8:82: 6d:5f:43:1f:21:38:8f:92:4e:bf:1d:d2:ed:e0:f7: 81:4b:e0:14:d5:95:78:bf:59:e0:64:6e:d2:6b:98: 38:a1:a3:9b:bb:01:92:27:56:65:0a:0d:5a:5d:44: 20:ff:bc:66:8a:3e:e9:fb:75:34:41:7d:2f:d8:95: f1:b3:e5:5e:e7:d3:b5:f8:96:d3:4c:56:85:4f:b6: be:b1:34:74:a9:cd:f3:01:ae:70:62:a1:64:db:12: b0:91:91:6b:d7:06:d0:f1:54:be:38:b3:a0:f7:99: d2:01:fc:64:21:8b:1a:38:5a:5b:90:62:c7:9d:1f: 7d:15:ea:d3:25:0a:2f:aa:b3:5f:3e:40:17:53:40: 23:60:2a:61:7a:d2:05:85:1b:d2:cb:5f:68:11:5f: 75:1b:fd:18:31:d3:87:12:37:8f:1d:b1:23:f5:da: 33:74:85:47:b6:ba:a9:54:8e:be:1f:22:d4:13:ba: 77:86:88:57:aa:56:21:fc:1d:a7:95:1b:0a:66:8f: 97:6a:b9:10:0a:cf:1a:52:83:3f:71:4d:42:1d:09: ce:ff:5d:4e:d9:e1:ef:5d:c3:4e:5f:e0:66:a7:a1: 39:c9:55:79:cf:49:b4:24:ec:96:3b:bb:ad:b1:85: 49:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:8E:4E:A5:A1:AE:28:38:36:8A:93:D8:9C:AA:C5:25:5B:4C:20:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/e1db1ef5-8875-37b0-a87d-5f3f1abd148d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.68.188.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ac:9c:e0:1d:b6:38:f2:bc:40:42:43:92:a9:0b:33:e8:b8:d6: ee:26:61:2b:a2:39:cc:16:7c:43:61:8b:01:ee:e7:44:e4:05: 60:fe:36:5c:50:a6:56:05:4b:f3:26:0f:41:54:51:e8:95:52: af:5f:cd:6f:07:f8:82:a5:29:93:f9:f8:36:88:cf:a1:a3:5a: f6:1d:6f:9f:da:60:06:c8:d4:26:0e:b8:7b:c7:26:5e:24:e7: 75:3f:d8:61:cd:c1:f2:7c:c9:4c:0b:c4:be:fa:09:ab:ff:8c: e3:e4:de:7d:2d:99:55:a3:32:dc:ad:da:a3:1a:54:91:6b:fb: eb:ae:54:1b:44:2c:3d:dd:1c:d9:1f:d5:25:86:28:d7:b6:c9: 5e:06:fb:88:0c:0d:f6:f1:87:36:06:33:72:20:23:a2:12:1c: c9:43:3c:d9:9d:c0:27:9f:62:bf:9b:1d:2f:b3:af:3c:13:22: a8:6d:74:19:16:05:43:63:d8:92:99:cb:6a:a1:3b:3a:40:12: e7:69:3c:e4:c7:b4:90:49:0a:c9:4d:2d:80:04:38:e5:8b:dc: 90:73:39:6f:4b:24:fd:9d:f7:93:b9:47:03:5a:b0:bd:64:c7: d0:e3:7e:30:81:a9:3a:fc:3d:a6:dd:ff:c2:20:18:93:72:97: 19:92:9f:69 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7ut3PkICSy9Nnvg4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDgyMzEzMDAxMloXDTI2MTEyMTE0MDAxMlowLzEtMCsGA1UEAxMk ODQyNWRlODgtYzc5Ny00YjczLThjM2MtNzViOWVkMWQxYzU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiDiTHXrkn2rq/ysxqIJtX0MfITiPkk6/HdLt 4PeBS+AU1ZV4v1ngZG7Sa5g4oaObuwGSJ1ZlCg1aXUQg/7xmij7p+3U0QX0v2JXx s+Ve59O1+JbTTFaFT7a+sTR0qc3zAa5wYqFk2xKwkZFr1wbQ8VS+OLOg95nSAfxk IYsaOFpbkGLHnR99FerTJQovqrNfPkAXU0AjYCphetIFhRvSy19oEV91G/0YMdOH EjePHbEj9dozdIVHtrqpVI6+HyLUE7p3hohXqlYh/B2nlRsKZo+XarkQCs8aUoM/ cU1CHQnO/11O2eHvXcNOX+Bmp6E5yVV5z0m0JOyWO7utsYVJNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF6OTqWhrig4NoqT2JyqxSVbTCBmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvZTFkYjFlZjUtODg3NS0z N2IwLWE4N2QtNWYzZjFhYmQxNDhkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrES8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKyc4B22OPK8QEJDkqkLM+i41u4mYSuiOcwWfENhiwHu50TkBWD+NlxQ plYFS/MmD0FUUeiVUq9fzW8H+IKlKZP5+DaIz6GjWvYdb5/aYAbI1CYOuHvHJl4k 53U/2GHNwfJ8yUwLxL76Cav/jOPk3n0tmVWjMtyt2qMaVJFr++uuVBtELD3dHNkf 1SWGKNe2yV4G+4gMDfbxhzYGM3IgI6ISHMlDPNmdwCefYr+bHS+zrzwTIqhtdBkW BUNj2JKZy2qhOzpAEudpPOTHtJBJCslNLYAEOOWL3JBzOW9LJP2d95O5RwNasL1k x9DjfjCBqTr8Pabd/8IgGJNylxmSn2k= -----END CERTIFICATE-----Generated at Tue Sep 1 01:44:25 2026 by rpki-client