$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ba3a66fd-5fc5-3b87-acdc-52f4cfaa5e24.roa File: ba3a66fd-5fc5-3b87-acdc-52f4cfaa5e24.roa (raw, json) Hash identifier: ezKT9x91tenf5WE1gMQqwR/RKgdDBDehAfNY7O2Wdkk= Subject key identifier: 60:17:5A:77:64:7B:CE:F4:F3:52:56:86:87:AD:27:3F:63:EC:43:42 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584F3A17DECBC9F6D7C7E5F5FAC0 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ba3a66fd-5fc5-3b87-acdc-52f4cfaa5e24.roa Signing time: Sat 19 Sep 2026 13:00:12 +0000 ROA not before: Sat 19 Sep 2026 13:00:12 +0000 ROA not after: Fri 18 Dec 2026 14:00:12 +0000 asID: 14789 IP address blocks: 172.68.140.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3a:17:de:cb:c9:f6:d7:c7:e5:f5:fa:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Sep 19 13:00:12 2026 GMT Not After : Dec 18 14:00:12 2026 GMT Subject: CN=90e2de8d-5fe0-4f53-87a1-6972943feb71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:2e:b4:fb:4c:ec:4f:c5:98:2a:3b:57:9b:c3: 8a:62:8e:6f:73:5d:a5:a3:43:bb:af:34:fa:ca:11: c5:26:e3:34:01:0b:2d:70:e5:78:d7:59:3a:3d:c2: 17:33:ae:78:a2:b5:fc:50:98:86:2a:3d:95:57:0d: 45:4f:23:c3:a1:34:79:c0:df:97:08:2b:a9:23:91: 0e:5e:28:0e:ac:ac:2a:c7:b3:e7:a8:26:f7:bd:16: 2b:20:ca:c0:f5:d8:8f:79:44:20:63:97:6b:02:b8: 69:04:04:e4:3d:3a:ba:b2:62:7c:2f:08:d7:cd:a6: 68:b7:ce:09:da:cf:01:76:64:45:60:0a:42:7b:28: 87:ea:58:c9:b8:18:ba:cc:5a:75:6f:5d:4d:14:9f: e2:8b:13:0e:82:91:72:79:35:f8:64:17:34:0d:32: 92:e7:9e:31:c5:25:0d:39:f7:1a:3f:57:83:6b:cb: 49:f6:9e:51:67:1a:e0:2e:58:20:69:2b:90:42:22: 00:3b:a2:06:54:15:7f:19:a6:6c:5b:dd:34:be:0c: c6:5a:f2:51:e2:89:fa:65:59:51:b6:1f:e4:bd:cc: f8:0b:4e:44:90:57:1a:c2:34:4f:d1:92:84:52:27: bb:be:20:6a:1a:f6:2f:e6:5c:37:e6:18:63:3a:9f: 2b:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:17:5A:77:64:7B:CE:F4:F3:52:56:86:87:AD:27:3F:63:EC:43:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ba3a66fd-5fc5-3b87-acdc-52f4cfaa5e24.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.68.140.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:7f:0f:ff:1d:48:17:2b:3c:db:a7:b2:da:ae:b3:cc:0e:cf: ad:57:64:49:f8:8c:1b:74:ed:e8:0f:72:9d:e3:b9:19:c1:6f: 1c:8d:30:f9:e2:ed:ad:b0:dd:c9:e5:d0:a2:d7:b5:90:c3:cd: d0:11:35:a3:16:72:da:2e:cd:62:98:23:62:d4:01:b5:a7:88: 82:da:7f:af:b8:c2:48:bc:ec:ac:8d:18:44:06:7e:71:02:da: 97:38:41:9f:73:1e:3a:6d:36:e6:05:4e:6a:b2:03:44:f4:e2: ba:1b:a3:bd:8c:66:42:ce:43:29:91:23:65:85:1d:a3:5a:bd: 94:c3:c9:60:9f:3c:8d:fd:a0:cf:21:21:6e:a8:39:8b:fe:e0: 42:3e:d0:f5:da:b9:af:1a:0f:15:6b:e9:e8:eb:fb:90:5e:e5: d6:1a:bb:f9:96:7c:4c:c0:7c:e1:a2:91:21:d7:ff:a6:f5:14: 6b:ed:cb:1a:44:83:8e:4a:e4:17:cc:88:5e:11:91:27:c0:2a: 2e:f2:e1:68:b5:ff:73:a9:7c:5a:95:55:0d:3c:99:15:1b:64: 9c:38:d1:34:ec:db:4a:da:d4:5c:44:7b:a1:11:27:be:32:d9: 92:57:d1:b2:3a:d7:1a:ec:0b:ea:d7:ff:f4:d2:51:2d:65:08: 88:d5:d9:8b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE86F97LyfbXx+X1+sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDkxOTEzMDAxMloXDTI2MTIxODE0MDAxMlowLzEtMCsGA1UEAxMk OTBlMmRlOGQtNWZlMC00ZjUzLTg3YTEtNjk3Mjk0M2ZlYjcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0y60+0zsT8WYKjtXm8OKYo5vc12lo0O7rzT6 yhHFJuM0AQstcOV411k6PcIXM654orX8UJiGKj2VVw1FTyPDoTR5wN+XCCupI5EO XigOrKwqx7PnqCb3vRYrIMrA9diPeUQgY5drArhpBATkPTq6smJ8LwjXzaZot84J 2s8BdmRFYApCeyiH6ljJuBi6zFp1b11NFJ/iixMOgpFyeTX4ZBc0DTKS554xxSUN OfcaP1eDa8tJ9p5RZxrgLlggaSuQQiIAO6IGVBV/GaZsW900vgzGWvJR4on6ZVlR th/kvcz4C05EkFcawjRP0ZKEUie7viBqGvYv5lw35hhjOp8rgwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGAXWndke87081JWhoetJz9j7ENCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvYmEzYTY2ZmQtNWZjNS0z Yjg3LWFjZGMtNTJmNGNmYWE1ZTI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArESMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIR/D/8dSBcrPNunstqus8wOz61XZEn4jBt07egPcp3juRnBbxyNMPni 7a2w3cnl0KLXtZDDzdARNaMWctouzWKYI2LUAbWniILaf6+4wki87KyNGEQGfnEC 2pc4QZ9zHjptNuYFTmqyA0T04robo72MZkLOQymRI2WFHaNavZTDyWCfPI39oM8h IW6oOYv+4EI+0PXaua8aDxVr6ejr+5Be5dYau/mWfEzAfOGikSHX/6b1FGvtyxpE g45K5BfMiF4RkSfAKi7y4Wi1/3OpfFqVVQ08mRUbZJw40TTs20ra1FxEe6ERJ74y 2ZJX0bI61xrsC+rX//TSUS1lCIjV2Ys= -----END CERTIFICATE-----Generated at Sun Sep 20 12:53:50 2026 by rpki-client