$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/99e99c01-71d7-38b0-b504-024bec7c6183.roa File: 99e99c01-71d7-38b0-b504-024bec7c6183.roa (raw, json) Hash identifier: 2l0bfjHTJVEeP+4m1TPLp23C+EaCCFmB8qK5jetzPR8= Subject key identifier: 8B:DF:0D:82:60:20:88:76:AC:D5:CA:6E:B6:48:6A:D7:7B:3E:72:13 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584EED52302E4EE2E0F446584A80 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/99e99c01-71d7-38b0-b504-024bec7c6183.roa Signing time: Sun 23 Aug 2026 01:00:12 +0000 ROA not before: Sun 23 Aug 2026 01:00:12 +0000 ROA not after: Sat 21 Nov 2026 02:00:12 +0000 asID: 13335 IP address blocks: 172.68.129.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ed:52:30:2e:4e:e2:e0:f4:46:58:4a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 23 01:00:12 2026 GMT Not After : Nov 21 02:00:12 2026 GMT Subject: CN=c0e26895-50f9-4ef4-ad9b-618db7ac4661 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:fe:b6:a7:1b:e4:b3:18:20:98:9e:44:8f:2b: 27:5d:24:2c:e5:75:0b:fa:01:05:ca:13:f9:bc:c6: 28:e7:9f:3e:71:af:9f:ce:01:30:63:31:3c:41:6c: 04:03:91:37:9f:cd:5d:03:89:fe:e6:04:05:cc:02: 77:66:42:46:17:e6:67:36:d9:61:66:6d:ed:8e:f7: 89:d4:df:d4:3e:cc:54:81:7d:09:f6:3d:3f:9f:e3: 1e:6c:ec:f1:c7:c0:05:a2:0c:f9:8b:67:31:47:b4: 87:d5:bc:cd:c3:19:dc:fb:8f:ce:c6:0b:8d:4a:89: ec:92:b2:27:6f:34:ab:6a:76:4e:38:82:c4:d1:de: 5f:5e:ee:77:9e:58:eb:67:29:b5:5c:0a:fd:13:b2: b6:36:7c:3e:09:39:c4:13:1e:2b:89:e0:67:e7:6c: 88:96:5d:82:3d:64:62:dd:d7:4e:36:4e:29:8b:4b: 21:1f:f3:f8:7a:c4:35:64:55:41:2e:e2:02:91:cf: 07:c3:aa:8d:1d:1c:d6:82:82:79:e0:14:07:a4:b5: 72:bd:2b:74:60:70:b7:ad:04:27:23:16:93:d4:0e: 01:1e:b8:36:b5:c3:20:57:cd:b9:f1:ae:40:4a:4d: 67:cc:be:56:82:ed:45:36:e6:7c:76:01:5d:f6:09: 66:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:DF:0D:82:60:20:88:76:AC:D5:CA:6E:B6:48:6A:D7:7B:3E:72:13 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/99e99c01-71d7-38b0-b504-024bec7c6183.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.68.129.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b6:44:c4:82:f1:4b:87:5e:b5:a3:b3:6a:9d:4f:dc:96:a5:03: 66:94:13:98:ea:05:7b:ce:b8:c3:f3:d3:db:a5:77:19:98:90: 1c:d9:27:a5:a1:e3:08:0d:81:57:fe:a8:9d:f3:e4:93:dc:6a: 62:d5:35:df:aa:db:25:9a:4e:97:1e:a5:25:77:ae:8a:e5:fd: 27:08:b4:97:f8:bd:fb:6b:aa:94:96:13:44:6b:37:08:66:00: a8:a4:de:c7:f3:74:81:44:fa:67:33:c7:f3:13:7a:1e:6d:8c: 05:44:cd:88:b1:80:ed:58:26:74:cc:03:63:b5:bb:0a:00:67: 3b:a4:d5:96:4d:e5:ba:5a:d4:6c:b7:07:b1:16:f8:cc:47:36: 71:0a:a7:e9:18:eb:9e:18:0b:bc:9f:6b:86:b6:30:e3:5a:1f: d9:4e:6f:c3:c7:fe:64:9a:63:b1:53:a2:34:36:4a:75:0a:14: 19:7d:63:49:cf:4d:5c:94:80:df:a4:cd:2a:8b:86:72:74:02: 27:12:20:27:df:fa:7e:df:0c:60:79:57:6d:52:21:f6:a7:d9: 7f:0a:6e:50:7e:1c:dc:7f:92:79:b2:68:e9:f4:b1:5e:a1:a5: 8f:69:1a:09:17:62:e4:9f:ca:29:10:32:a2:a3:41:dc:b8:7e: 6a:e6:a5:e6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7tUjAuTuLg9EZYSoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDgyMzAxMDAxMloXDTI2MTEyMTAyMDAxMlowLzEtMCsGA1UEAxMk YzBlMjY4OTUtNTBmOS00ZWY0LWFkOWItNjE4ZGI3YWM0NjYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnP62pxvksxggmJ5EjysnXSQs5XUL+gEFyhP5 vMYo558+ca+fzgEwYzE8QWwEA5E3n81dA4n+5gQFzAJ3ZkJGF+ZnNtlhZm3tjveJ 1N/UPsxUgX0J9j0/n+MebOzxx8AFogz5i2cxR7SH1bzNwxnc+4/OxguNSonskrIn bzSranZOOILE0d5fXu53nljrZym1XAr9E7K2Nnw+CTnEEx4rieBn52yIll2CPWRi 3ddONk4pi0shH/P4esQ1ZFVBLuICkc8Hw6qNHRzWgoJ54BQHpLVyvSt0YHC3rQQn IxaT1A4BHrg2tcMgV8258a5ASk1nzL5Wgu1FNuZ8dgFd9glmewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIvfDYJgIIh2rNXKbrZIatd7PnITMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvOTllOTljMDEtNzFkNy0z OGIwLWI1MDQtMDI0YmVjN2M2MTgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArESBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALZExILxS4detaOzap1P3JalA2aUE5jqBXvOuMPz09uldxmYkBzZJ6Wh 4wgNgVf+qJ3z5JPcamLVNd+q2yWaTpcepSV3rorl/ScItJf4vftrqpSWE0RrNwhm AKik3sfzdIFE+mczx/MTeh5tjAVEzYixgO1YJnTMA2O1uwoAZzuk1ZZN5bpa1Gy3 B7EW+MxHNnEKp+kY654YC7yfa4a2MONaH9lOb8PH/mSaY7FTojQ2SnUKFBl9Y0nP TVyUgN+kzSqLhnJ0AicSICff+n7fDGB5V21SIfan2X8KblB+HNx/knmyaOn0sV6h pY9pGgkXYuSfyikQMqKjQdy4fmrmpeY= -----END CERTIFICATE-----Generated at Sun Sep 20 19:17:00 2026 by rpki-client