$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f9946000-cb57-39d8-88ce-a727304500bf.roa File: f9946000-cb57-39d8-88ce-a727304500bf.roa (raw, json) Hash identifier: 2YoUNriwZfK6XNKx3zGoIftWlXSE9ZM1aU0w6m/Hwy4= Subject key identifier: E9:6B:D0:E3:9C:E0:70:B7:8D:16:8C:F0:0C:B6:D2:21:D3:EB:D3:C4 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584EEA87831C1D1CADB121DA9880 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f9946000-cb57-39d8-88ce-a727304500bf.roa Signing time: Sat 22 Aug 2026 01:00:12 +0000 ROA not before: Sat 22 Aug 2026 01:00:12 +0000 ROA not after: Fri 20 Nov 2026 02:00:12 +0000 asID: 13335 IP address blocks: 172.68.150.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ea:87:83:1c:1d:1c:ad:b1:21:da:98:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 22 01:00:12 2026 GMT Not After : Nov 20 02:00:12 2026 GMT Subject: CN=75e9c419-bf75-40a6-912d-f1a40a49ed0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:b8:00:3f:02:c5:3f:46:0f:5d:de:6b:f1:42: 02:a3:28:b8:43:4d:e7:0a:68:13:3c:2d:d8:b9:67: 2d:90:17:5e:33:93:0c:92:9c:e8:01:bc:56:df:0a: 14:44:a1:93:25:3d:73:db:ef:2c:c8:e9:a0:92:63: d6:0d:5c:f5:b0:c2:e3:96:ca:92:50:2f:7c:6c:47: 52:73:73:83:87:cc:ba:31:9c:35:3f:80:d6:a8:ce: c8:1a:08:d2:46:b4:64:00:5d:2f:50:f7:71:b9:08: a4:54:a8:84:8c:77:bf:d4:4d:1d:89:0a:49:04:6b: 46:91:0c:90:7d:f7:35:89:22:7b:c5:80:31:f8:b3: 21:0b:82:8e:fd:bf:8b:dc:44:18:c1:de:1d:ac:b6: 04:c6:02:b5:f2:35:0d:a0:84:69:3b:2a:fb:5e:bf: 2c:5d:80:9f:1a:12:99:46:d3:c8:76:ae:85:56:9e: 3b:01:5d:a7:c1:fd:bc:bb:53:16:86:18:e9:16:2e: 2c:5b:b4:fa:c4:a2:63:be:32:38:0d:55:e5:19:76: 97:00:23:f0:a1:75:e0:4e:29:7d:93:d7:56:cb:75: ac:41:36:6c:11:c5:65:8b:1e:f6:2a:be:76:ee:11: ef:48:ac:34:a8:7c:e4:2c:0f:07:1c:16:45:f1:03: 7f:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:6B:D0:E3:9C:E0:70:B7:8D:16:8C:F0:0C:B6:D2:21:D3:EB:D3:C4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f9946000-cb57-39d8-88ce-a727304500bf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.68.150.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:9c:13:81:01:2d:73:ad:e8:67:a9:5b:7f:8b:50:e7:8b:7c: 17:c9:3c:91:8b:72:e6:3e:72:54:f1:7e:ef:8b:2d:4b:60:a7: 48:7f:87:56:92:c5:a1:46:e6:4b:c1:a4:d9:86:8a:69:73:50: 51:8a:3f:c9:a8:ec:8d:62:4e:c9:14:7c:1c:2b:5f:09:a6:39: 48:2a:26:44:16:43:de:62:7d:fe:b1:47:23:07:b1:39:d9:bb: e6:47:a1:ed:f6:95:77:82:10:97:8f:1e:4d:0b:2d:75:5b:92: 81:eb:81:98:91:53:22:a9:82:15:da:2f:57:55:2d:43:54:4b: bd:74:0e:b2:e8:62:8f:00:03:08:af:bb:cb:d2:8c:69:57:58: 86:77:e1:e8:93:02:e0:42:e5:8d:65:59:7c:2a:42:c1:93:dc: b0:ca:e3:de:ce:78:3e:d0:2a:0e:2c:b7:dd:47:5d:21:ab:67: 7f:ba:36:fe:4a:b2:29:fe:53:95:57:26:be:ad:78:35:07:85: b9:01:df:b5:42:3f:ab:98:7e:1c:a4:63:f6:e8:77:a2:d8:a9: 4b:e6:6d:e4:2e:34:12:99:bf:1c:cc:7b:b9:67:29:9c:69:93: 2a:ce:43:fe:de:95:cf:48:7b:d7:ac:d0:8f:84:48:23:50:68: 80:3a:61:8e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7qh4McHRytsSHamIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDgyMjAxMDAxMloXDTI2MTEyMDAyMDAxMlowLzEtMCsGA1UEAxMk NzVlOWM0MTktYmY3NS00MGE2LTkxMmQtZjFhNDBhNDllZDBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhLgAPwLFP0YPXd5r8UICoyi4Q03nCmgTPC3Y uWctkBdeM5MMkpzoAbxW3woURKGTJT1z2+8syOmgkmPWDVz1sMLjlsqSUC98bEdS c3ODh8y6MZw1P4DWqM7IGgjSRrRkAF0vUPdxuQikVKiEjHe/1E0diQpJBGtGkQyQ ffc1iSJ7xYAx+LMhC4KO/b+L3EQYwd4drLYExgK18jUNoIRpOyr7Xr8sXYCfGhKZ RtPIdq6FVp47AV2nwf28u1MWhhjpFi4sW7T6xKJjvjI4DVXlGXaXACPwoXXgTil9 k9dWy3WsQTZsEcVlix72Kr527hHvSKw0qHzkLA8HHBZF8QN/IwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOlr0OOc4HC3jRaM8Ay20iHT69PEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvZjk5NDYwMDAtY2I1Ny0z OWQ4LTg4Y2UtYTcyNzMwNDUwMGJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArESWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGacE4EBLXOt6GepW3+LUOeLfBfJPJGLcuY+clTxfu+LLUtgp0h/h1aS xaFG5kvBpNmGimlzUFGKP8mo7I1iTskUfBwrXwmmOUgqJkQWQ95iff6xRyMHsTnZ u+ZHoe32lXeCEJePHk0LLXVbkoHrgZiRUyKpghXaL1dVLUNUS710DrLoYo8AAwiv u8vSjGlXWIZ34eiTAuBC5Y1lWXwqQsGT3LDK497OeD7QKg4st91HXSGrZ3+6Nv5K sin+U5VXJr6teDUHhbkB37VCP6uYfhykY/bod6LYqUvmbeQuNBKZvxzMe7lnKZxp kyrOQ/7elc9Ie9es0I+ESCNQaIA6YY4= -----END CERTIFICATE-----Generated at Tue Sep 22 12:51:51 2026 by rpki-client