$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/eba0db58-d94c-3f37-9ed9-f2cf22885b08.roa File: eba0db58-d94c-3f37-9ed9-f2cf22885b08.roa (raw, json) Hash identifier: I8A+w02KdAp0yKvG7O520iwwiWT1rr8GXL+dQ78P0fQ= Subject key identifier: 87:9C:A7:BB:98:A6:AE:BE:67:0F:01:CC:72:7E:05:AD:E7:C9:75:0B Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584EED52392365D1181C04B66380 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/eba0db58-d94c-3f37-9ed9-f2cf22885b08.roa Signing time: Sun 23 Aug 2026 01:00:12 +0000 ROA not before: Sun 23 Aug 2026 01:00:12 +0000 ROA not after: Sat 21 Nov 2026 02:00:12 +0000 asID: 13335 IP address blocks: 172.68.76.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ed:52:39:23:65:d1:18:1c:04:b6:63:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 23 01:00:12 2026 GMT Not After : Nov 21 02:00:12 2026 GMT Subject: CN=963fb75d-c9b3-4604-a2ea-cd9e39181da9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:c9:67:c7:bb:d8:13:75:53:69:61:30:ec:0d: 8a:1c:bf:ae:79:9b:5d:c3:49:96:09:4b:39:5d:d9: 00:cb:59:51:16:d6:3a:d3:2f:18:f8:69:c7:08:2f: 8c:a0:d5:cd:50:9d:85:18:85:a9:5b:9e:aa:31:b6: c7:85:29:6c:47:67:16:72:af:56:5c:b0:e9:7e:a8: 5f:cb:26:73:b5:75:5c:66:1a:ca:bc:fb:d3:8c:db: 46:94:8a:80:de:a1:d7:f6:c6:8f:0c:bf:b8:0a:9e: d3:cb:5a:37:64:54:42:f0:0f:5f:69:11:2e:ef:e4: 59:89:59:30:13:aa:13:d7:3f:49:70:bf:a1:dc:4c: 7f:97:4a:ed:7a:1f:e3:a5:d9:a2:68:2d:f1:ef:1a: bd:52:02:e3:0a:f2:7a:55:53:50:b6:32:ba:34:21: 5b:3f:61:b8:3b:4a:d6:1a:c3:5b:5f:ef:7b:86:f3: eb:e1:f9:12:c0:dd:8b:04:12:e3:b5:5e:54:fd:8f: 0e:80:96:5e:50:41:d0:cd:70:0f:03:e9:f5:59:13: 7f:38:b0:2a:85:73:72:87:cc:a1:1d:20:ef:b0:eb: b6:ba:e7:21:4b:62:2f:29:5c:15:29:68:57:b7:fe: cc:b5:fd:c2:66:37:a9:03:b8:3e:0b:fc:db:35:d7: 6d:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:9C:A7:BB:98:A6:AE:BE:67:0F:01:CC:72:7E:05:AD:E7:C9:75:0B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/eba0db58-d94c-3f37-9ed9-f2cf22885b08.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.68.76.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:2b:c9:3d:78:be:f8:17:95:61:f9:35:cb:45:63:3c:18:c4: c8:b1:cf:aa:42:e7:23:da:7d:87:18:e2:cd:d2:d3:c3:1b:ed: 5e:f0:59:16:39:d8:5a:ce:99:a4:74:90:2a:c9:cb:c1:a8:dc: 54:63:c2:0d:46:d4:db:99:3b:98:f8:e5:b8:45:06:76:25:25: 91:5d:bf:85:c8:c0:49:88:7e:c7:b9:11:89:ff:ba:32:61:47: ec:2c:c7:ec:e2:a6:4a:1f:c0:67:68:a3:c4:3b:d8:aa:2a:bf: 50:d3:b6:a9:25:52:31:10:d4:9c:1f:31:34:5d:58:99:c8:33: 4a:79:88:45:ed:f5:08:db:e3:cb:df:3e:69:5f:74:44:1f:79: d1:c0:b3:2d:83:60:58:26:96:de:2d:d5:b5:53:4b:3d:61:14: a5:ff:cc:80:fe:17:ce:ff:9d:3f:51:9b:3d:e7:00:f0:7d:8d: ef:47:60:f4:72:06:50:f1:0f:7f:c4:fb:90:cd:0b:8a:45:16: d5:f8:fc:66:ca:92:2b:4d:60:80:11:70:30:6f:0e:2a:bb:39: 52:07:f9:ac:90:da:cf:94:b2:b6:ef:4b:66:d4:53:72:db:5f: 97:ca:cf:5f:d1:be:bc:b9:6b:2d:d9:d5:a3:42:e0:0e:d1:ad: b6:cb:a3:6e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7tUjkjZdEYHAS2Y4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDgyMzAxMDAxMloXDTI2MTEyMTAyMDAxMlowLzEtMCsGA1UEAxMk OTYzZmI3NWQtYzliMy00NjA0LWEyZWEtY2Q5ZTM5MTgxZGE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjclnx7vYE3VTaWEw7A2KHL+ueZtdw0mWCUs5 XdkAy1lRFtY60y8Y+GnHCC+MoNXNUJ2FGIWpW56qMbbHhSlsR2cWcq9WXLDpfqhf yyZztXVcZhrKvPvTjNtGlIqA3qHX9saPDL+4Cp7Ty1o3ZFRC8A9faREu7+RZiVkw E6oT1z9JcL+h3Ex/l0rteh/jpdmiaC3x7xq9UgLjCvJ6VVNQtjK6NCFbP2G4O0rW GsNbX+97hvPr4fkSwN2LBBLjtV5U/Y8OgJZeUEHQzXAPA+n1WRN/OLAqhXNyh8yh HSDvsOu2uuchS2IvKVwVKWhXt/7Mtf3CZjepA7g+C/zbNddtxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIecp7uYpq6+Zw8BzHJ+Ba3nyXULMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvZWJhMGRiNTgtZDk0Yy0z ZjM3LTllZDktZjJjZjIyODg1YjA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrERMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGIryT14vvgXlWH5NctFYzwYxMixz6pC5yPafYcY4s3S08Mb7V7wWRY5 2FrOmaR0kCrJy8Go3FRjwg1G1NuZO5j45bhFBnYlJZFdv4XIwEmIfse5EYn/ujJh R+wsx+zipkofwGdoo8Q72Koqv1DTtqklUjEQ1JwfMTRdWJnIM0p5iEXt9Qjb48vf PmlfdEQfedHAsy2DYFgmlt4t1bVTSz1hFKX/zID+F87/nT9Rmz3nAPB9je9HYPRy BlDxD3/E+5DNC4pFFtX4/GbKkitNYIARcDBvDiq7OVIH+ayQ2s+UsrbvS2bUU3Lb X5fKz1/Rvry5ay3Z1aNC4A7RrbbLo24= -----END CERTIFICATE-----Generated at Tue Sep 22 08:27:58 2026 by rpki-client