$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/6fa42392-3a81-32f4-801e-4ad52544dc8a.roa File: 6fa42392-3a81-32f4-801e-4ad52544dc8a.roa (raw, json) Hash identifier: MEyAccCCwqX1NfjMGVkgAcyl7tyqS8JwFEaUp06L4eQ= Subject key identifier: 50:DB:43:76:60:88:EC:DA:8E:9C:19:A4:7B:E7:4E:8D:A5:3C:FC:5B Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584F1EB0BB91A12A5B1A7CB3BEC0 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/6fa42392-3a81-32f4-801e-4ad52544dc8a.roa Signing time: Wed 09 Sep 2026 17:25:48 +0000 ROA not before: Wed 09 Sep 2026 17:25:48 +0000 ROA not after: Tue 08 Dec 2026 18:25:48 +0000 asID: 14789 IP address blocks: 172.68.198.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:1e:b0:bb:91:a1:2a:5b:1a:7c:b3:be:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Sep 9 17:25:48 2026 GMT Not After : Dec 8 18:25:48 2026 GMT Subject: CN=8c449aa1-e875-40c7-8c2d-8c0dd8a5b4b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:21:01:27:ab:96:a3:95:c8:27:76:99:92:96: 34:e3:3e:92:93:2b:0b:7e:74:96:a9:99:40:bb:b7: 03:b1:f7:70:b3:0a:f3:29:31:99:79:55:c9:be:e8: f8:fe:80:1b:46:65:d9:e5:a3:29:25:98:d1:2f:3c: 35:cc:ff:7b:6b:d4:15:db:98:ca:29:ed:a8:78:8c: d7:1a:ed:ed:00:48:b0:d6:d0:13:c9:27:98:5f:29: 39:b4:aa:8b:b8:e9:8a:b1:fa:5d:ed:eb:76:4f:95: e0:8d:91:72:ec:f2:3f:15:4f:ad:3e:ce:54:8b:58: 7f:65:3f:da:f6:0f:21:c3:91:47:16:ed:c8:64:77: 67:5a:08:51:4e:35:e1:db:af:0f:b0:e6:49:f5:d7: 21:61:59:f2:85:16:34:2d:10:46:8f:6b:d0:28:85: 52:6f:c5:2e:07:ef:5c:48:67:f5:76:05:99:6f:73: 35:86:8a:d8:00:71:a7:53:0d:73:64:17:51:fb:44: 04:0e:84:60:15:dc:c7:46:40:46:6f:fe:b4:9e:b8: 57:fa:01:0a:3f:ed:8f:2e:74:59:19:85:92:01:95: 86:05:12:36:9c:08:51:82:9e:22:30:e2:0f:d9:cf: 02:1f:b8:e9:38:2f:38:51:a5:fc:f1:b7:f0:b0:a8: a0:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:DB:43:76:60:88:EC:DA:8E:9C:19:A4:7B:E7:4E:8D:A5:3C:FC:5B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/6fa42392-3a81-32f4-801e-4ad52544dc8a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.68.198.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:b1:e2:76:c8:0b:9f:9d:49:51:15:d1:8e:70:31:e5:e5:6a: e6:e0:44:b5:f3:f7:50:c8:d6:5b:2a:f3:3b:a5:8d:9e:4f:28: e4:67:05:0f:4e:63:1b:b2:4b:c6:8c:c0:62:9c:15:36:0e:8c: 3a:7c:ce:f2:66:8a:24:ba:66:f6:e9:4d:fe:f7:46:35:de:f2: 78:43:f6:ae:e9:b4:aa:37:42:f8:f9:1d:2a:c2:31:12:4c:67: b6:2f:0b:b7:6d:62:08:0d:69:2e:ad:03:be:f2:46:4b:a2:09: 63:15:88:c3:33:a8:c5:1d:7c:21:4f:53:39:d1:f7:6a:bd:5f: bf:f5:ab:7d:ff:74:66:45:8c:7f:87:be:f1:ba:ef:59:dd:5c: 47:c3:e7:c5:59:f7:b0:5e:f2:54:1f:8c:86:fe:f8:28:98:5b: 7b:d8:cb:a2:a6:10:69:24:33:c8:61:14:dd:d8:29:fd:8c:5a: 9a:42:a3:86:02:ca:b3:04:06:2b:01:cf:10:67:a4:89:67:4c: 66:c2:6f:71:90:37:5d:11:02:1a:b4:de:df:fd:ff:ff:29:73: c7:70:3c:cf:02:72:27:40:de:d0:71:39:92:1f:7c:3d:35:00: cf:b5:9f:e1:a7:ab:ba:80:fa:0d:e2:e1:0f:c7:21:9d:69:e6: c2:2e:d0:73 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8esLuRoSpbGnyzvsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDkwOTE3MjU0OFoXDTI2MTIwODE4MjU0OFowLzEtMCsGA1UEAxMk OGM0NDlhYTEtZTg3NS00MGM3LThjMmQtOGMwZGQ4YTViNGI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArCEBJ6uWo5XIJ3aZkpY04z6SkysLfnSWqZlA u7cDsfdwswrzKTGZeVXJvuj4/oAbRmXZ5aMpJZjRLzw1zP97a9QV25jKKe2oeIzX Gu3tAEiw1tATySeYXyk5tKqLuOmKsfpd7et2T5XgjZFy7PI/FU+tPs5Ui1h/ZT/a 9g8hw5FHFu3IZHdnWghRTjXh268PsOZJ9dchYVnyhRY0LRBGj2vQKIVSb8UuB+9c SGf1dgWZb3M1horYAHGnUw1zZBdR+0QEDoRgFdzHRkBGb/60nrhX+gEKP+2PLnRZ GYWSAZWGBRI2nAhRgp4iMOIP2c8CH7jpOC84UaX88bfwsKigwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFDbQ3ZgiOzajpwZpHvnTo2lPPxbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNmZhNDIzOTItM2E4MS0z MmY0LTgwMWUtNGFkNTI1NDRkYzhhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArETGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADKx4nbIC5+dSVEV0Y5wMeXlaubgRLXz91DI1lsq8zuljZ5PKORnBQ9O YxuyS8aMwGKcFTYOjDp8zvJmiiS6ZvbpTf73RjXe8nhD9q7ptKo3Qvj5HSrCMRJM Z7YvC7dtYggNaS6tA77yRkuiCWMViMMzqMUdfCFPUznR92q9X7/1q33/dGZFjH+H vvG671ndXEfD58VZ97Be8lQfjIb++CiYW3vYy6KmEGkkM8hhFN3YKf2MWppCo4YC yrMEBisBzxBnpIlnTGbCb3GQN10RAhq03t/9//8pc8dwPM8CcidA3tBxOZIffD01 AM+1n+Gnq7qA+g3i4Q/HIZ1p5sIu0HM= -----END CERTIFICATE-----Generated at Mon Sep 21 21:09:50 2026 by rpki-client