$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b936e453-d0e2-3bfb-b80d-6fef940a9001.roa File: b936e453-d0e2-3bfb-b80d-6fef940a9001.roa (raw, json) Hash identifier: ORZjoIKeV09w2kEgwWie7UzRl6L+OgGSYnUDFWRO40Y= Subject key identifier: 01:BA:9B:0B:28:6C:47:E7:F9:FD:BE:F6:86:95:9D:30:57:36:14:CE Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584F9E986AC78AC622337BA290C0 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b936e453-d0e2-3bfb-b80d-6fef940a9001.roa Signing time: Sun 25 Oct 2026 13:00:13 +0000 ROA not before: Sun 25 Oct 2026 13:00:13 +0000 ROA not after: Sat 23 Jan 2027 14:00:13 +0000 asID: 14789 IP address blocks: 172.68.169.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 07 Nov 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:9e:98:6a:c7:8a:c6:22:33:7b:a2:90:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 25 13:00:13 2026 GMT Not After : Jan 23 14:00:13 2027 GMT Subject: CN=72f55ec4-2ad2-46c2-be4e-2963276d1c51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:da:a2:a6:ae:d7:91:fc:01:d0:eb:a8:ef:48: b5:3f:44:db:86:59:e5:49:b4:54:f7:d2:a1:4b:5b: 0d:43:d2:92:90:86:e1:b9:b5:1b:39:5a:58:82:b4: f9:e4:72:0e:51:93:9e:3d:08:c1:be:ec:fe:f6:a0: 13:23:4e:a3:47:56:f3:53:cf:ec:a6:c5:9d:9a:cb: fe:d5:8e:ae:91:e2:37:5c:26:a7:6d:d3:d5:dd:0d: b2:f1:77:64:ca:f2:8d:13:60:0b:74:87:b1:df:a3: 5b:00:9b:4b:32:17:6b:1f:43:40:89:c4:d1:5b:c8: 0f:cc:1e:e9:73:3a:04:c6:e7:84:87:0a:46:49:64: b9:26:1c:18:0a:72:d5:02:6b:60:81:4b:8e:88:0e: 24:8e:8a:40:e6:5b:ab:31:14:85:c3:dd:43:df:a7: 8e:10:43:46:2b:ee:23:1a:46:58:f5:f6:a7:d0:16: 53:3c:67:43:8c:26:07:51:e8:2c:25:d1:c4:c5:e8: 26:9a:69:c9:6e:90:d7:be:9a:48:aa:c7:bc:b0:53: 5e:10:ab:d2:d6:dd:ed:66:80:60:83:0a:67:7e:f7: 44:6d:c7:44:67:78:cb:b4:6b:e8:05:a0:cd:db:59: a6:66:33:8b:37:3c:b8:a5:17:58:18:bc:6e:a9:1e: f5:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:BA:9B:0B:28:6C:47:E7:F9:FD:BE:F6:86:95:9D:30:57:36:14:CE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b936e453-d0e2-3bfb-b80d-6fef940a9001.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.68.169.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:20:6b:5c:af:71:03:cb:4a:71:73:e1:72:04:aa:4d:30:48: ab:70:31:35:81:3f:df:bb:df:4d:ed:ae:b4:e5:d3:73:1b:c7: 7a:0d:bc:3b:9b:c4:93:94:cd:69:2d:20:d3:15:c8:9b:8b:03: 63:e8:d5:78:96:dd:fd:67:67:a4:80:e0:cd:e2:c1:19:38:af: fa:2b:bb:0a:b1:0a:11:57:e3:82:99:5e:08:05:a9:a1:8c:a6: 4e:5e:b3:12:df:d7:20:47:a9:01:ad:be:d2:8a:4c:96:cf:02: b4:57:17:24:d2:57:a7:17:42:f1:c2:01:74:84:c6:a5:fe:32: a9:a2:fe:9b:bf:a6:80:38:75:99:54:a9:0b:2a:88:bf:67:3e: e0:ed:f1:ea:e2:66:23:8f:49:c6:80:e7:96:85:f5:77:34:a2: 27:2d:67:9b:d9:e1:e1:6f:a8:ed:65:99:22:5a:1f:7b:36:1b: 17:ef:30:a6:15:13:be:85:5b:99:ba:a3:b0:62:e5:db:51:c4: e4:8c:74:98:a7:60:8f:54:02:f7:b2:ef:a6:a2:9b:02:d7:3e: 64:a2:f6:ec:8b:5f:34:4d:08:b6:c4:ae:2f:91:88:d0:23:f8: da:4f:5a:0f:a7:32:04:4e:b0:a4:fc:a7:e0:9c:89:b9:e6:02: b3:69:0f:69 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+emGrHisYiM3uikMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MTAyNTEzMDAxM1oXDTI3MDEyMzE0MDAxM1owLzEtMCsGA1UEAxMk NzJmNTVlYzQtMmFkMi00NmMyLWJlNGUtMjk2MzI3NmQxYzUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAltqipq7XkfwB0Ouo70i1P0TbhlnlSbRU99Kh S1sNQ9KSkIbhubUbOVpYgrT55HIOUZOePQjBvuz+9qATI06jR1bzU8/spsWdmsv+ 1Y6ukeI3XCanbdPV3Q2y8XdkyvKNE2ALdIex36NbAJtLMhdrH0NAicTRW8gPzB7p czoExueEhwpGSWS5JhwYCnLVAmtggUuOiA4kjopA5lurMRSFw91D36eOEENGK+4j GkZY9fan0BZTPGdDjCYHUegsJdHExegmmmnJbpDXvppIqse8sFNeEKvS1t3tZoBg gwpnfvdEbcdEZ3jLtGvoBaDN21mmZjOLNzy4pRdYGLxuqR71RwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAG6mwsobEfn+f2+9oaVnTBXNhTOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvYjkzNmU0NTMtZDBlMi0z YmZiLWI4MGQtNmZlZjk0MGE5MDAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArESpMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHQga1yvcQPLSnFz4XIEqk0wSKtwMTWBP9+7303trrTl03Mbx3oNvDub xJOUzWktINMVyJuLA2Po1XiW3f1nZ6SA4M3iwRk4r/oruwqxChFX44KZXggFqaGM pk5esxLf1yBHqQGtvtKKTJbPArRXFyTSV6cXQvHCAXSExqX+Mqmi/pu/poA4dZlU qQsqiL9nPuDt8eriZiOPScaA55aF9Xc0oictZ5vZ4eFvqO1lmSJaH3s2GxfvMKYV E76FW5m6o7Bi5dtRxOSMdJinYI9UAvey76aimwLXPmSi9uyLXzRNCLbEri+RiNAj +NpPWg+nMgROsKT8p+CcibnmArNpD2k= -----END CERTIFICATE-----Generated at Thu Nov 5 12:10:49 2026 by rpki-client