$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/bd8f593f-fcaa-336e-9184-adfebab76fc2.roa File: bd8f593f-fcaa-336e-9184-adfebab76fc2.roa (raw, json) Hash identifier: bWXYJtJPr99BBl79Hc7Tp8oCjzjuMuIIzUbHWj6RPFk= Subject key identifier: BE:E4:EC:59:3B:CA:61:73:C6:0F:BB:F6:F1:EE:BB:78:B0:78:25:5B Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584F0B9BD4C97DF4F6465501D600 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/bd8f593f-fcaa-336e-9184-adfebab76fc2.roa Signing time: Wed 02 Sep 2026 21:23:19 +0000 ROA not before: Wed 02 Sep 2026 21:23:19 +0000 ROA not after: Tue 01 Dec 2026 22:23:19 +0000 asID: 14789 IP address blocks: 172.68.105.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:0b:9b:d4:c9:7d:f4:f6:46:55:01:d6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Sep 2 21:23:19 2026 GMT Not After : Dec 1 22:23:19 2026 GMT Subject: CN=937eb67b-626f-4a2d-8270-6a42fe2c8c5c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:27:a4:3a:49:47:a9:3b:03:9d:2d:77:39:b3: 9b:b0:f9:4b:98:77:7b:a2:84:f5:d1:d4:00:d2:87: ce:e1:fd:b7:e1:56:35:61:ce:48:06:2e:a0:34:e6: da:4b:c6:77:d3:27:1d:76:74:e2:50:cd:8a:8c:0a: 2c:c6:5c:0b:6a:d1:7f:02:e0:8f:ad:dd:d0:6a:62: 99:ad:aa:5d:b3:06:41:75:77:92:4e:e1:76:39:6b: 35:4e:b0:49:c6:65:3f:f7:85:c6:04:99:d9:5b:51: 85:31:2d:32:46:13:a1:65:29:da:c3:8d:12:94:a0: 44:bd:52:ba:44:29:94:5b:f3:3b:8d:bf:82:92:ed: 56:b4:24:49:f2:3e:ba:87:b0:cd:e1:e6:53:4b:fd: b4:b6:ce:c0:aa:69:0d:2b:ad:8c:5d:66:65:17:30: 00:9c:18:b5:29:1b:7c:7b:87:39:66:ad:a3:97:9b: e5:6d:a4:93:2b:d5:1b:fd:dc:57:76:e7:93:38:4f: d3:0d:ab:a3:77:fd:7b:f4:3b:46:80:bd:f6:ca:d3: 93:c0:f6:22:87:92:39:05:ce:ff:bf:c1:3e:29:c1: 19:b7:cd:a9:ba:05:ed:c0:ff:cf:bf:5b:27:9a:16: 47:b1:83:e0:4a:bf:49:24:1e:5a:74:2b:65:f6:1d: bf:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:E4:EC:59:3B:CA:61:73:C6:0F:BB:F6:F1:EE:BB:78:B0:78:25:5B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/bd8f593f-fcaa-336e-9184-adfebab76fc2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.68.105.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:ae:61:63:91:e6:59:d8:79:19:bd:2c:81:a8:a6:35:74:86: c4:3b:cd:b1:10:52:f9:bd:6f:73:2e:12:16:b9:6b:97:01:44: b9:e0:36:84:ee:9a:ea:d7:3a:bf:ee:8b:de:f3:96:f9:bb:37: f8:9f:32:52:e7:88:72:fd:cd:99:dd:22:cf:f2:95:a6:8d:c8: 4c:8b:34:1c:1d:93:f9:d8:be:9a:f1:b2:7b:b1:7d:24:d1:73: bc:6b:28:b3:1c:97:c6:64:e3:ef:b6:66:94:c3:20:9e:e2:52: 20:8f:a6:ff:cc:07:f3:b2:88:e7:95:08:88:d5:61:da:7a:6d: 88:1c:95:04:ce:20:e3:9a:0e:38:f0:56:d8:c7:d3:24:9b:24: 84:c5:3e:2b:61:db:55:91:8c:b5:9b:76:40:5b:4c:26:18:59: d6:76:c8:b3:64:b9:99:79:05:11:c2:f2:14:31:40:8d:b6:4a: 42:27:85:70:3d:bc:49:ac:db:e1:ac:73:5d:e5:78:0c:27:78: 43:e7:c4:fb:64:e9:a6:a5:ec:ce:e3:25:0d:f4:7d:46:a6:60: d9:07:d2:70:7e:fc:c6:75:61:04:18:8d:75:41:d1:98:27:c2: bd:ec:ba:fd:13:d7:22:f7:bf:22:cf:68:46:97:01:64:60:86: 86:9f:05:4f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8Lm9TJffT2RlUB1gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDkwMjIxMjMxOVoXDTI2MTIwMTIyMjMxOVowLzEtMCsGA1UEAxMk OTM3ZWI2N2ItNjI2Zi00YTJkLTgyNzAtNmE0MmZlMmM4YzVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxyekOklHqTsDnS13ObObsPlLmHd7ooT10dQA 0ofO4f234VY1Yc5IBi6gNObaS8Z30ycddnTiUM2KjAosxlwLatF/AuCPrd3QamKZ rapdswZBdXeSTuF2OWs1TrBJxmU/94XGBJnZW1GFMS0yRhOhZSnaw40SlKBEvVK6 RCmUW/M7jb+Cku1WtCRJ8j66h7DN4eZTS/20ts7AqmkNK62MXWZlFzAAnBi1KRt8 e4c5Zq2jl5vlbaSTK9Ub/dxXdueTOE/TDaujd/179DtGgL32ytOTwPYih5I5Bc7/ v8E+KcEZt82pugXtwP/Pv1snmhZHsYPgSr9JJB5adCtl9h2/CwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL7k7Fk7ymFzxg+79vHuu3iweCVbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvYmQ4ZjU5M2YtZmNhYS0z MzZlLTkxODQtYWRmZWJhYjc2ZmMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArERpMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGmuYWOR5lnYeRm9LIGopjV0hsQ7zbEQUvm9b3MuEha5a5cBRLngNoTu murXOr/ui97zlvm7N/ifMlLniHL9zZndIs/ylaaNyEyLNBwdk/nYvprxsnuxfSTR c7xrKLMcl8Zk4++2ZpTDIJ7iUiCPpv/MB/OyiOeVCIjVYdp6bYgclQTOIOOaDjjw VtjH0ySbJITFPith21WRjLWbdkBbTCYYWdZ2yLNkuZl5BRHC8hQxQI22SkInhXA9 vEms2+Gsc13leAwneEPnxPtk6aal7M7jJQ30fUamYNkH0nB+/MZ1YQQYjXVB0Zgn wr3suv0T1yL3vyLPaEaXAWRghoafBU8= -----END CERTIFICATE-----Generated at Sun Sep 20 14:32:42 2026 by rpki-client