$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/1ecf4788-110a-3b53-ae22-e44921f19a21.roa File: 1ecf4788-110a-3b53-ae22-e44921f19a21.roa (raw, json) Hash identifier: 6lGo5K5FJAW+2tJBdwCpqPJeQ9hRRO5H1+61zqBS3Yc= Subject key identifier: 93:97:53:F8:F9:7D:07:AB:13:26:28:D5:2F:18:27:C6:F3:7E:0D:9D Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584EED52394DA74616C85EB2E280 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/1ecf4788-110a-3b53-ae22-e44921f19a21.roa Signing time: Sun 23 Aug 2026 01:00:12 +0000 ROA not before: Sun 23 Aug 2026 01:00:12 +0000 ROA not after: Sat 21 Nov 2026 02:00:12 +0000 asID: 13335 IP address blocks: 172.68.81.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ed:52:39:4d:a7:46:16:c8:5e:b2:e2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 23 01:00:12 2026 GMT Not After : Nov 21 02:00:12 2026 GMT Subject: CN=4485448f-cf65-4b2a-a58b-e5ad4a8878f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:5e:b6:24:c9:6d:3e:ad:15:6f:44:69:b8:e1: 03:54:fe:b3:3a:05:56:8a:b5:35:a6:7a:0c:50:3c: f2:cf:b0:fd:0b:a8:2e:a8:b4:5d:5d:a1:a9:e5:59: be:36:38:b4:65:a7:73:75:24:e0:e6:fd:46:b1:a8: 9c:2a:15:77:e3:3f:5d:0a:ff:0a:2c:5d:4a:e9:1a: 36:a2:ae:7d:34:f7:c4:b0:c0:18:b2:77:03:15:86: 05:2c:ab:4d:55:16:86:a9:22:74:89:24:42:73:b2: 4e:5e:51:9d:84:0d:06:33:6d:c9:ac:0d:93:62:8a: 50:9e:88:43:89:ae:42:16:26:12:dc:ee:04:40:07: 1a:02:62:3f:e2:5c:22:bf:75:a8:65:a4:8b:9c:67: f6:1e:98:b8:e8:b1:e1:32:7b:e7:0e:28:c0:cd:09: 36:47:4b:73:6c:71:c6:62:49:e7:39:ae:7d:85:4f: 2f:fd:50:17:12:f0:45:51:7c:17:56:db:24:9b:63: 94:8a:e1:f7:48:b1:e9:04:7b:83:dc:b3:9d:32:7a: 15:f3:e2:a2:10:23:82:21:e2:60:7b:4b:a6:87:ee: 9b:24:21:2b:4f:39:58:83:ec:98:7f:56:88:d0:db: 4f:e2:72:99:67:eb:0b:ad:9c:51:e0:69:41:00:6b: b0:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:97:53:F8:F9:7D:07:AB:13:26:28:D5:2F:18:27:C6:F3:7E:0D:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/1ecf4788-110a-3b53-ae22-e44921f19a21.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.68.81.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9d:f0:dd:53:30:39:cc:8a:60:95:95:ae:df:bf:9a:a8:4d:04: 09:e3:fe:98:79:cd:25:91:fd:2a:60:ae:14:d5:25:25:05:2b: cf:c5:bc:35:22:71:db:3b:33:b2:d5:64:20:ad:3d:00:f1:cc: 5a:b9:92:2c:b9:b8:3f:ee:d5:aa:8f:cf:ab:0e:3e:9a:95:fd: 72:95:6c:39:ed:87:b5:d7:da:31:48:90:ce:00:ff:0d:4c:94: 77:3d:4e:46:27:4e:77:04:aa:23:32:21:44:59:48:e4:43:6e: ba:ca:8a:4f:b9:35:40:e0:b5:f4:96:8e:dc:b7:53:00:36:97: 4e:06:51:1a:93:f5:79:19:02:c9:48:5c:55:7a:7b:f5:72:7a: 81:b1:cd:64:e0:0f:2e:9b:3a:68:f0:3a:cf:57:09:8e:b3:c5: 7d:21:5e:ae:1c:32:d5:24:35:15:78:48:44:c7:07:23:68:fc: 46:7c:3a:4e:69:67:b9:9e:5b:02:d8:79:4e:3b:ea:a1:53:70: 2d:f7:65:03:f8:d6:18:6c:a6:df:3d:71:c0:da:79:19:06:96: 51:7c:05:ef:a8:bb:9e:9e:7e:29:3e:f1:6a:41:75:d8:4b:06: 3f:33:7e:03:60:97:71:e9:d0:54:16:a2:7e:25:32:b1:f2:68: f7:ec:3d:ea -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7tUjlNp0YWyF6y4oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDgyMzAxMDAxMloXDTI2MTEyMTAyMDAxMlowLzEtMCsGA1UEAxMk NDQ4NTQ0OGYtY2Y2NS00YjJhLWE1OGItZTVhZDRhODg3OGYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4V62JMltPq0Vb0RpuOEDVP6zOgVWirU1pnoM UDzyz7D9C6guqLRdXaGp5Vm+Nji0ZadzdSTg5v1GsaicKhV34z9dCv8KLF1K6Ro2 oq59NPfEsMAYsncDFYYFLKtNVRaGqSJ0iSRCc7JOXlGdhA0GM23JrA2TYopQnohD ia5CFiYS3O4EQAcaAmI/4lwiv3WoZaSLnGf2Hpi46LHhMnvnDijAzQk2R0tzbHHG YknnOa59hU8v/VAXEvBFUXwXVtskm2OUiuH3SLHpBHuD3LOdMnoV8+KiECOCIeJg e0umh+6bJCErTzlYg+yYf1aI0NtP4nKZZ+sLrZxR4GlBAGuwtwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJOXU/j5fQerEyYo1S8YJ8bzfg2dMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMWVjZjQ3ODgtMTEwYS0z YjUzLWFlMjItZTQ0OTIxZjE5YTIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArERRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ3w3VMwOcyKYJWVrt+/mqhNBAnj/ph5zSWR/SpgrhTVJSUFK8/FvDUi cds7M7LVZCCtPQDxzFq5kiy5uD/u1aqPz6sOPpqV/XKVbDnth7XX2jFIkM4A/w1M lHc9TkYnTncEqiMyIURZSORDbrrKik+5NUDgtfSWjty3UwA2l04GURqT9XkZAslI XFV6e/VyeoGxzWTgDy6bOmjwOs9XCY6zxX0hXq4cMtUkNRV4SETHByNo/EZ8Ok5p Z7meWwLYeU476qFTcC33ZQP41hhspt89ccDaeRkGllF8Be+ou56efik+8WpBddhL Bj8zfgNgl3Hp0FQWon4lMrHyaPfsPeo= -----END CERTIFICATE-----Generated at Sun Sep 20 17:46:41 2026 by rpki-client