$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5c9cdec7-0d7e-35d2-812d-ab69a5befae7.roa File: 5c9cdec7-0d7e-35d2-812d-ab69a5befae7.roa (raw, json) Hash identifier: 7KtREt5kOhtgw6AKfCq9I/TUsZEYwxiJsv2cW7bMZzI= Subject key identifier: EE:C4:1B:13:BB:C9:5D:34:C8:35:E2:CA:61:EE:AF:91:35:EC:4D:1D Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584F07D77C862A037866075D5200 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5c9cdec7-0d7e-35d2-812d-ab69a5befae7.roa Signing time: Tue 01 Sep 2026 13:00:12 +0000 ROA not before: Tue 01 Sep 2026 13:00:12 +0000 ROA not after: Mon 30 Nov 2026 14:00:12 +0000 asID: 14789 IP address blocks: 172.68.89.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:07:d7:7c:86:2a:03:78:66:07:5d:52:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Sep 1 13:00:12 2026 GMT Not After : Nov 30 14:00:12 2026 GMT Subject: CN=74241bca-f37f-4648-88d3-55d451e950b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:c7:8c:50:40:c5:d8:d0:38:8a:82:58:bf:a8: 32:61:17:71:d0:a9:b8:a5:56:b9:ca:4b:54:44:5c: 4a:67:44:d1:69:bf:8a:45:8d:cd:8c:12:19:83:f5: ab:fb:61:a7:db:2e:f2:05:2a:70:e2:41:0e:aa:2f: 3b:5a:81:e6:de:97:4b:a0:eb:5b:d5:f7:64:3e:4a: 92:53:67:fd:b1:b1:89:0b:56:d8:2a:9d:ac:1f:b3: 79:28:4a:69:38:a3:15:58:ac:30:91:7c:cb:9f:81: 09:69:b8:7e:af:a0:d9:dd:93:12:e7:0f:58:98:94: 41:82:c2:a6:fd:6a:d3:e2:5b:12:46:31:7f:cd:9c: f2:13:9e:88:5e:2d:f0:11:6e:20:12:2d:84:cc:e0: 83:e3:62:a3:a7:1e:9e:5a:f6:be:10:80:60:47:a4: b2:90:66:ec:f7:21:a3:fc:9f:2c:68:dd:1e:b6:4d: 06:51:a6:81:a4:a0:39:33:de:cf:7e:47:8c:91:fd: c6:60:57:b5:67:77:05:d3:33:10:71:9c:82:bf:97: 90:af:fd:27:c0:74:f8:27:6e:9d:29:e6:d5:aa:24: b6:49:eb:fe:cd:97:35:18:12:da:73:46:dd:9f:b9: 73:8b:ec:68:6d:8d:1f:5e:6f:83:aa:5b:46:ea:1b: 9d:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:C4:1B:13:BB:C9:5D:34:C8:35:E2:CA:61:EE:AF:91:35:EC:4D:1D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5c9cdec7-0d7e-35d2-812d-ab69a5befae7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.68.89.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:01:4c:02:29:5b:5a:e0:df:d1:ed:1e:e3:0c:38:39:44:47: 30:96:75:4b:cd:44:ee:5d:52:e9:8d:26:26:66:d8:43:57:5b: d9:c8:f5:3d:43:44:68:91:9f:1e:ba:5e:1b:e7:f5:36:61:79: 97:13:b1:a8:51:59:4a:8f:3a:e8:4f:0e:86:1f:9d:e9:87:24: 32:74:2b:41:3f:d2:4e:f7:5e:ea:35:54:81:0a:4e:af:b6:20: de:99:b2:8b:6b:17:4f:bf:03:df:0e:67:f7:8a:f6:53:78:c8: 78:ba:3e:bb:d9:df:8a:26:9f:10:82:b1:89:a4:33:48:ea:93: bb:4b:be:ad:09:36:aa:90:44:12:f8:8c:4e:f3:34:8e:28:5e: 43:c5:76:f4:39:c9:81:f7:0a:05:0c:23:cf:6a:9c:ba:2f:64: 9c:0a:8d:a9:b9:44:7c:ed:a6:72:a4:d8:d8:b3:3e:87:ad:ae: 78:1d:2e:71:7e:10:ac:7f:66:5b:6d:c5:50:14:fc:3c:05:e9: 9e:45:27:7b:4d:c9:2a:85:c7:3d:19:ec:9a:bc:ef:18:0a:a0: 72:cf:2c:38:6b:90:f1:00:4f:62:ca:62:80:30:9a:32:db:28: c0:e1:fc:21:1f:04:df:9f:40:2b:6d:e9:d1:ad:1d:b6:f5:2e: 01:a7:ae:da -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8H13yGKgN4ZgddUgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDkwMTEzMDAxMloXDTI2MTEzMDE0MDAxMlowLzEtMCsGA1UEAxMk NzQyNDFiY2EtZjM3Zi00NjQ4LTg4ZDMtNTVkNDUxZTk1MGI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnceMUEDF2NA4ioJYv6gyYRdx0Km4pVa5yktU RFxKZ0TRab+KRY3NjBIZg/Wr+2Gn2y7yBSpw4kEOqi87WoHm3pdLoOtb1fdkPkqS U2f9sbGJC1bYKp2sH7N5KEppOKMVWKwwkXzLn4EJabh+r6DZ3ZMS5w9YmJRBgsKm /WrT4lsSRjF/zZzyE56IXi3wEW4gEi2EzOCD42Kjpx6eWva+EIBgR6SykGbs9yGj /J8saN0etk0GUaaBpKA5M97PfkeMkf3GYFe1Z3cF0zMQcZyCv5eQr/0nwHT4J26d KebVqiS2Sev+zZc1GBLac0bdn7lzi+xobY0fXm+DqltG6hudCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO7EGxO7yV00yDXiymHur5E17E0dMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNWM5Y2RlYzctMGQ3ZS0z NWQyLTgxMmQtYWI2OWE1YmVmYWU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArERZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIwBTAIpW1rg39HtHuMMODlERzCWdUvNRO5dUumNJiZm2ENXW9nI9T1D RGiRnx66Xhvn9TZheZcTsahRWUqPOuhPDoYfnemHJDJ0K0E/0k73Xuo1VIEKTq+2 IN6ZsotrF0+/A98OZ/eK9lN4yHi6PrvZ34omnxCCsYmkM0jqk7tLvq0JNqqQRBL4 jE7zNI4oXkPFdvQ5yYH3CgUMI89qnLovZJwKjam5RHztpnKk2NizPoetrngdLnF+ EKx/ZlttxVAU/DwF6Z5FJ3tNySqFxz0Z7Jq87xgKoHLPLDhrkPEAT2LKYoAwmjLb KMDh/CEfBN+fQCtt6dGtHbb1LgGnrto= -----END CERTIFICATE-----Generated at Sun Sep 20 09:31:50 2026 by rpki-client