$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/8627e138-18eb-3240-b2e2-3617e6053b50.roa File: 8627e138-18eb-3240-b2e2-3617e6053b50.roa (raw, json) Hash identifier: W54iFRWz7DVHxPpPAS7k7oFGeJI3EJw6anowAFbHAuY= Subject key identifier: 56:4B:54:9A:CB:12:81:3F:C7:60:5A:12:89:73:4F:84:C5:F7:AF:14 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584F10379350F4BB55527311BF00 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/8627e138-18eb-3240-b2e2-3617e6053b50.roa Signing time: Fri 04 Sep 2026 13:00:12 +0000 ROA not before: Fri 04 Sep 2026 13:00:12 +0000 ROA not after: Thu 03 Dec 2026 14:00:12 +0000 asID: 14789 IP address blocks: 172.68.233.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:10:37:93:50:f4:bb:55:52:73:11:bf:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Sep 4 13:00:12 2026 GMT Not After : Dec 3 14:00:12 2026 GMT Subject: CN=fda71d33-caeb-4ce6-b288-d31fcf88de26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:8d:89:ea:50:6c:25:98:68:dd:45:20:04:fa: 0a:ce:92:5f:58:f7:43:c4:c1:48:d1:60:94:4e:73: 1b:17:77:3a:7f:d2:18:a3:56:0a:76:8f:2a:6e:ce: 4b:17:e9:c9:d1:f6:e9:f2:1a:25:63:11:53:a4:ba: a3:f1:c5:70:54:d3:c0:60:72:91:22:71:9a:58:27: b5:ed:a8:72:e1:be:a2:a9:aa:3c:cd:a6:82:0d:7a: 2c:9e:fd:b7:11:03:9f:0f:e0:7f:af:bc:bf:f3:61: ad:70:4f:2b:ce:24:a9:eb:17:96:81:58:14:a1:02: a9:36:ca:eb:26:29:20:a3:b8:3a:94:df:30:15:37: 0d:26:00:8f:ff:2d:2e:42:11:9a:49:fb:7f:9f:5b: 93:13:f3:b9:d1:40:15:c4:b2:8d:d4:56:8d:4e:95: 82:ee:5e:c6:e9:a1:f9:a3:0f:9e:a7:c0:5d:31:73: 1a:51:de:5c:a0:b1:c7:49:c7:1f:b4:b8:f9:af:73: 77:cd:e3:ff:72:6c:46:63:d7:c3:d2:82:3a:d8:56: 87:04:c2:23:64:03:b5:23:fb:cc:c9:3a:3b:d3:4f: 21:a5:2f:83:14:98:1d:6a:10:ad:c8:db:33:b8:94: d9:54:bb:11:2f:1f:9e:5f:c7:0a:2d:97:14:33:09: f2:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:4B:54:9A:CB:12:81:3F:C7:60:5A:12:89:73:4F:84:C5:F7:AF:14 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/8627e138-18eb-3240-b2e2-3617e6053b50.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.68.233.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:a6:95:be:79:a4:51:0e:98:51:e6:f9:2f:ae:b7:60:4d:30: 41:29:74:41:fd:09:93:52:12:2f:99:9d:20:20:e1:74:a9:8d: aa:b3:82:c1:c6:89:90:a1:22:38:a9:5e:ff:cb:03:1d:8e:2a: 29:d9:3d:25:61:a6:4f:35:a0:08:bc:df:8c:c8:76:ae:80:76: f4:9e:cf:33:27:24:e3:01:2f:85:c0:dd:f3:e2:80:a0:eb:5c: 77:4c:30:56:a3:5b:5c:e3:ed:8d:b8:c3:71:19:d4:ab:98:22: 4f:26:24:49:ef:73:38:89:03:c4:8d:0e:78:4b:ce:f2:3e:7c: c5:50:86:d7:b0:78:a6:17:ae:51:8c:db:27:e3:b7:2f:35:26: 39:09:de:2b:1f:d7:01:53:69:68:9b:a7:29:f9:b3:5e:55:4b: f9:24:3e:86:a4:a1:ab:09:fc:d4:1b:36:95:4b:0c:c5:2d:15: bb:fe:f9:c8:67:88:30:13:c9:9f:fa:ac:9b:6b:98:db:20:e4: b4:4f:b3:2e:1e:ab:cb:11:f6:34:53:5d:e9:21:1d:55:83:c4: 18:db:5c:41:b1:cc:78:27:75:f1:67:6d:56:ff:b8:03:00:0a: 7c:b3:13:47:fd:cf:59:14:8c:35:c9:53:77:6d:e2:27:30:58: e1:b3:80:d4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8QN5NQ9LtVUnMRvwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDkwNDEzMDAxMloXDTI2MTIwMzE0MDAxMlowLzEtMCsGA1UEAxMk ZmRhNzFkMzMtY2FlYi00Y2U2LWIyODgtZDMxZmNmODhkZTI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0o2J6lBsJZho3UUgBPoKzpJfWPdDxMFI0WCU TnMbF3c6f9IYo1YKdo8qbs5LF+nJ0fbp8holYxFTpLqj8cVwVNPAYHKRInGaWCe1 7ahy4b6iqao8zaaCDXosnv23EQOfD+B/r7y/82GtcE8rziSp6xeWgVgUoQKpNsrr Jikgo7g6lN8wFTcNJgCP/y0uQhGaSft/n1uTE/O50UAVxLKN1FaNTpWC7l7G6aH5 ow+ep8BdMXMaUd5coLHHSccftLj5r3N3zeP/cmxGY9fD0oI62FaHBMIjZAO1I/vM yTo7008hpS+DFJgdahCtyNszuJTZVLsRLx+eX8cKLZcUMwnyRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFZLVJrLEoE/x2BaEolzT4TF968UMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvODYyN2UxMzgtMThlYi0z MjQwLWIyZTItMzYxN2U2MDUzYjUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArETpMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABymlb55pFEOmFHm+S+ut2BNMEEpdEH9CZNSEi+ZnSAg4XSpjaqzgsHG iZChIjipXv/LAx2OKinZPSVhpk81oAi834zIdq6AdvSezzMnJOMBL4XA3fPigKDr XHdMMFajW1zj7Y24w3EZ1KuYIk8mJEnvcziJA8SNDnhLzvI+fMVQhteweKYXrlGM 2yfjty81JjkJ3isf1wFTaWibpyn5s15VS/kkPoakoasJ/NQbNpVLDMUtFbv++chn iDATyZ/6rJtrmNsg5LRPsy4eq8sR9jRTXekhHVWDxBjbXEGxzHgndfFnbVb/uAMA CnyzE0f9z1kUjDXJU3dt4icwWOGzgNQ= -----END CERTIFICATE-----Generated at Sun Sep 20 13:05:34 2026 by rpki-client