$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/84665c0e-b5dc-3279-b434-f2a70bb2c2f8.roa File: 84665c0e-b5dc-3279-b434-f2a70bb2c2f8.roa (raw, json) Hash identifier: 8hmqsYNfeCGHR8wlkYjvx8nXct2KQuk+vnpkTWVDFvQ= Subject key identifier: FE:06:8D:7A:08:B7:0C:AC:5A:B8:19:17:80:58:D4:E4:39:97:71:3A Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584EED52421A9D885F4D2EABB6A8 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/84665c0e-b5dc-3279-b434-f2a70bb2c2f8.roa Signing time: Sun 23 Aug 2026 01:00:12 +0000 ROA not before: Sun 23 Aug 2026 01:00:12 +0000 ROA not after: Sat 21 Nov 2026 02:00:12 +0000 asID: 14789 IP address blocks: 172.68.132.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ed:52:42:1a:9d:88:5f:4d:2e:ab:b6:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 23 01:00:12 2026 GMT Not After : Nov 21 02:00:12 2026 GMT Subject: CN=cbe668a1-c1c7-4a62-bdcd-a16d66d074e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:4f:f1:92:ea:de:6b:be:3e:bf:e1:db:ab:2c: f1:97:ec:5f:b9:e3:47:e1:f2:09:84:d2:43:d2:e8: c4:62:0f:b6:a7:8c:41:a1:ac:62:d8:22:4e:b5:47: 3d:7c:19:7b:ff:03:db:96:82:31:fd:cf:d5:85:b1: d3:18:2d:e6:11:cd:4a:fe:de:53:01:89:e3:25:59: 79:92:b4:82:e1:a4:04:69:8a:6a:97:56:df:87:62: d2:42:c2:26:6a:47:8a:73:29:6b:22:b2:e5:a1:d5: d1:df:84:32:4a:2f:aa:8c:ed:92:ff:6b:3e:94:86: d7:0c:1f:aa:d2:b4:bb:ae:53:6a:dd:2a:79:58:28: e6:6d:9b:82:77:f4:8f:db:16:2d:d7:31:cf:f7:22: 50:e3:8c:4f:bb:85:92:85:40:71:cd:2c:9f:0c:34: ef:a9:2f:51:f0:b5:31:97:bc:a1:33:a8:84:dc:2a: c9:fe:ee:a9:d6:82:b8:58:5d:e8:37:a1:7f:26:58: 4a:2c:10:2e:f6:46:2c:ba:2a:82:6d:1f:92:31:67: e3:82:4b:55:98:5a:38:4d:e0:f2:c4:88:05:cf:28: b4:48:64:51:0c:20:b1:2c:95:b5:8b:b8:76:15:94: c3:15:c7:b1:3e:90:7e:8c:84:ad:c8:9e:8f:43:89: 69:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:06:8D:7A:08:B7:0C:AC:5A:B8:19:17:80:58:D4:E4:39:97:71:3A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/84665c0e-b5dc-3279-b434-f2a70bb2c2f8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.68.132.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a6:9c:a1:a5:4a:eb:a1:bb:45:15:b6:75:f2:91:15:04:43:1b: de:3b:0c:7a:e1:d2:f5:29:be:09:54:c3:1d:00:80:d4:c5:df: 7b:9b:89:38:aa:03:ab:61:de:2a:9e:15:c8:bb:00:3b:94:33: 85:25:b3:f0:a5:9b:a8:25:74:c7:b0:75:6c:fb:b2:22:b5:1b: 89:65:46:6e:68:31:a2:43:b9:4b:90:14:44:e1:d6:cd:db:0b: 01:5a:fa:5f:37:3c:39:69:e8:82:cb:ac:86:ff:7f:19:a0:e7: 8a:3b:ab:93:97:e5:ae:6c:18:2d:21:bd:d2:79:bd:10:fc:7e: 2c:92:16:3e:3d:3f:74:d3:ee:14:bc:f5:45:ff:78:66:9b:be: 09:b0:f3:9d:b4:b3:3b:5b:8c:92:08:d9:f2:20:74:79:bf:29: b9:ea:e1:b5:d3:55:31:c9:1e:1e:a4:6f:d0:81:7a:75:1c:f2: 70:12:d9:c5:74:b2:05:43:4c:a6:ff:04:69:8a:d3:2c:a3:2f: e9:be:a7:d2:57:6e:ee:bc:8f:7d:23:37:22:41:ee:e9:35:2c: dc:0e:9f:de:44:14:6d:de:f5:07:3f:bb:4c:21:1d:b6:a0:c7: 3d:e4:b5:34:e6:93:e4:29:09:cd:55:bb:70:ea:88:f8:b1:80: 6c:72:5b:e8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7tUkIanYhfTS6rtqgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDgyMzAxMDAxMloXDTI2MTEyMTAyMDAxMlowLzEtMCsGA1UEAxMk Y2JlNjY4YTEtYzFjNy00YTYyLWJkY2QtYTE2ZDY2ZDA3NGU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlE/xkurea74+v+Hbqyzxl+xfueNH4fIJhNJD 0ujEYg+2p4xBoaxi2CJOtUc9fBl7/wPbloIx/c/VhbHTGC3mEc1K/t5TAYnjJVl5 krSC4aQEaYpql1bfh2LSQsImakeKcylrIrLlodXR34QySi+qjO2S/2s+lIbXDB+q 0rS7rlNq3Sp5WCjmbZuCd/SP2xYt1zHP9yJQ44xPu4WShUBxzSyfDDTvqS9R8LUx l7yhM6iE3CrJ/u6p1oK4WF3oN6F/JlhKLBAu9kYsuiqCbR+SMWfjgktVmFo4TeDy xIgFzyi0SGRRDCCxLJW1i7h2FZTDFcexPpB+jIStyJ6PQ4lpYwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP4GjXoItwysWrgZF4BY1OQ5l3E6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvODQ2NjVjMGUtYjVkYy0z Mjc5LWI0MzQtZjJhNzBiYjJjMmY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArESEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKacoaVK66G7RRW2dfKRFQRDG947DHrh0vUpvglUwx0AgNTF33ubiTiq A6th3iqeFci7ADuUM4Uls/Clm6gldMewdWz7siK1G4llRm5oMaJDuUuQFETh1s3b CwFa+l83PDlp6ILLrIb/fxmg54o7q5OX5a5sGC0hvdJ5vRD8fiySFj49P3TT7hS8 9UX/eGabvgmw8520sztbjJII2fIgdHm/Kbnq4bXTVTHJHh6kb9CBenUc8nAS2cV0 sgVDTKb/BGmK0yyjL+m+p9JXbu68j30jNyJB7uk1LNwOn95EFG3e9Qc/u0whHbag xz3ktTTmk+QpCc1Vu3DqiPixgGxyW+g= -----END CERTIFICATE-----Generated at Sun Sep 20 23:07:44 2026 by rpki-client