$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/efd0da62-170f-3a0e-b80d-9db169fdb224.roa File: efd0da62-170f-3a0e-b80d-9db169fdb224.roa (raw, json) Hash identifier: AYnou3xNvEoKkSlcx3nYIT26OnEBuzxnH7sZd9kq3qc= Subject key identifier: C8:F2:FC:DC:33:A4:53:D4:F4:B9:85:32:36:78:3C:1B:63:E1:36:B0 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584EEEB765C104810CDA7053C1A8 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/efd0da62-170f-3a0e-b80d-9db169fdb224.roa Signing time: Sun 23 Aug 2026 13:00:12 +0000 ROA not before: Sun 23 Aug 2026 13:00:12 +0000 ROA not after: Sat 21 Nov 2026 14:00:12 +0000 asID: 13335 IP address blocks: 172.68.237.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ee:b7:65:c1:04:81:0c:da:70:53:c1:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 23 13:00:12 2026 GMT Not After : Nov 21 14:00:12 2026 GMT Subject: CN=1809fcbd-18f1-4ba0-b66d-da4d738d9e2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:98:43:49:71:91:7d:57:e1:fb:c9:1c:03:cc: 97:62:ed:a6:4b:a9:c7:71:18:dc:b6:16:71:fa:91: d7:c9:b8:1a:00:a3:04:52:96:cf:9b:17:54:01:b8: ed:99:82:11:43:77:ee:51:0d:e8:c1:f1:b8:c0:ff: 08:5e:5e:1a:a7:52:d0:2a:2f:c5:98:59:47:56:35: f1:eb:ec:47:b8:60:04:8c:88:e8:21:78:40:e8:5c: 42:a1:32:85:d1:81:93:e0:3b:20:76:b9:a7:02:58: 3f:d1:84:10:37:d5:21:f4:d8:b0:15:4f:53:7f:4f: e4:11:ca:47:a8:8e:09:65:3c:8e:d3:99:1b:4e:6d: 1e:31:66:ad:5e:03:e6:59:58:e5:a1:52:99:cf:84: 63:84:a8:a1:44:29:92:3c:e0:a1:21:af:f8:0c:8a: f7:aa:98:1b:66:ba:ed:cb:33:b7:5d:b3:87:29:64: 3b:ea:73:5b:f4:82:30:9e:f1:5e:5a:02:2d:d7:96: d7:3e:a5:9c:ea:41:a2:4e:85:61:92:c5:55:d9:1e: bc:f4:6d:ab:7b:b4:39:22:dd:ce:54:83:c3:21:bb: 69:cf:df:34:60:90:52:7d:70:5a:95:c0:ac:fb:dd: cd:8d:f5:46:86:f2:a1:c9:c4:0a:02:f8:20:00:d1: f8:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:F2:FC:DC:33:A4:53:D4:F4:B9:85:32:36:78:3C:1B:63:E1:36:B0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/efd0da62-170f-3a0e-b80d-9db169fdb224.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.68.237.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:13:89:b4:31:2a:fa:d3:f1:ef:69:ca:df:d9:67:c9:5d:6b: da:88:cf:46:6c:cd:4c:b5:93:6e:00:61:ad:c8:46:ee:db:5c: b1:8f:0e:aa:55:54:44:54:fe:ec:35:37:e5:2f:6e:7a:44:df: 23:8a:9c:45:2b:19:3b:59:ee:07:a4:24:9c:27:55:5d:83:fb: 51:ac:2f:1a:13:ca:70:5d:62:1e:87:33:d9:0a:b6:fd:ee:cb: 5d:87:21:a9:db:aa:ce:85:4b:59:dd:53:13:99:2c:fb:63:0f: ac:6e:38:e3:9d:17:e2:32:7f:2c:b8:60:1c:e2:19:a3:32:0e: 57:88:59:c1:85:d3:ac:b4:77:0f:c4:4d:b3:a9:8a:3c:ca:d3: 82:55:04:eb:20:0a:35:c5:03:e4:d4:35:ed:c4:2f:f2:9c:7c: f0:b4:c0:48:17:a8:d0:78:20:1d:b1:c6:a9:a6:c1:e7:4b:4d: 8b:f4:28:67:d8:e5:8e:d4:28:c0:50:47:d6:00:82:93:f0:99: 11:f3:73:9d:36:7f:56:05:21:d2:73:2f:c3:4d:c0:e3:21:c5: 3a:7b:eb:fe:1e:31:46:ca:09:27:e5:06:39:06:33:21:57:47: 98:57:0b:a3:71:9f:8f:f6:b9:28:78:dd:dd:80:ac:db:de:f4: 3d:cb:5e:7a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7ut2XBBIEM2nBTwagwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDgyMzEzMDAxMloXDTI2MTEyMTE0MDAxMlowLzEtMCsGA1UEAxMk MTgwOWZjYmQtMThmMS00YmEwLWI2NmQtZGE0ZDczOGQ5ZTJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgZhDSXGRfVfh+8kcA8yXYu2mS6nHcRjcthZx +pHXybgaAKMEUpbPmxdUAbjtmYIRQ3fuUQ3owfG4wP8IXl4ap1LQKi/FmFlHVjXx 6+xHuGAEjIjoIXhA6FxCoTKF0YGT4DsgdrmnAlg/0YQQN9Uh9NiwFU9Tf0/kEcpH qI4JZTyO05kbTm0eMWatXgPmWVjloVKZz4RjhKihRCmSPOChIa/4DIr3qpgbZrrt yzO3XbOHKWQ76nNb9IIwnvFeWgIt15bXPqWc6kGiToVhksVV2R689G2re7Q5It3O VIPDIbtpz980YJBSfXBalcCs+93NjfVGhvKhycQKAvggANH44QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMjy/NwzpFPU9LmFMjZ4PBtj4TawMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvZWZkMGRhNjItMTcwZi0z YTBlLWI4MGQtOWRiMTY5ZmRiMjI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArETtMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHsTibQxKvrT8e9pyt/ZZ8lda9qIz0ZszUy1k24AYa3IRu7bXLGPDqpV VERU/uw1N+UvbnpE3yOKnEUrGTtZ7gekJJwnVV2D+1GsLxoTynBdYh6HM9kKtv3u y12HIanbqs6FS1ndUxOZLPtjD6xuOOOdF+Iyfyy4YBziGaMyDleIWcGF06y0dw/E TbOpijzK04JVBOsgCjXFA+TUNe3EL/KcfPC0wEgXqNB4IB2xxqmmwedLTYv0KGfY 5Y7UKMBQR9YAgpPwmRHzc502f1YFIdJzL8NNwOMhxTp76/4eMUbKCSflBjkGMyFX R5hXC6Nxn4/2uSh43d2ArNve9D3LXno= -----END CERTIFICATE-----Generated at Tue Sep 22 11:50:20 2026 by rpki-client