$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c5f23253-4793-3aa6-bef3-3f8c0fc89adb.roa File: c5f23253-4793-3aa6-bef3-3f8c0fc89adb.roa (raw, json) Hash identifier: OnXordtvk2Z+dosSGOQzQk0k+JR+SiSEXH4sNClfQ0I= Subject key identifier: F2:BB:B4:77:61:AD:0E:99:60:C2:52:11:AA:94:57:97:16:D1:41:85 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584EED52272EEEAAD4E316EA6280 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c5f23253-4793-3aa6-bef3-3f8c0fc89adb.roa Signing time: Sun 23 Aug 2026 01:00:12 +0000 ROA not before: Sun 23 Aug 2026 01:00:12 +0000 ROA not after: Sat 21 Nov 2026 02:00:12 +0000 asID: 13335 IP address blocks: 172.68.4.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ed:52:27:2e:ee:aa:d4:e3:16:ea:62:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 23 01:00:12 2026 GMT Not After : Nov 21 02:00:12 2026 GMT Subject: CN=7fcb3035-acc8-499b-a435-104a7719c85a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:09:18:91:b7:8d:a4:fe:20:58:12:7f:20:7c: 9c:6b:72:7c:20:4c:9f:4b:09:cf:f1:86:90:ff:75: e3:44:a9:b5:27:95:b0:05:bf:83:76:0e:2a:b3:67: c2:a3:17:94:b9:69:f2:12:26:0f:af:9d:c5:9e:ec: 5c:30:89:b8:ef:92:c3:32:f3:d3:82:42:a1:46:84: ca:9f:a0:f8:e8:30:6f:7e:79:91:2e:2e:1d:10:82: 39:d1:09:6e:b0:34:c9:d3:63:68:57:42:d9:ff:23: ff:c0:27:a3:61:55:8a:cb:19:5d:84:17:c2:38:a7: 98:34:70:b1:bc:52:78:c1:db:3c:75:27:cb:1f:6d: 77:26:03:d4:f1:37:73:e6:60:cc:ca:95:a5:da:b9: 01:5d:bb:89:af:03:b3:96:3b:1a:9d:6a:7b:0e:50: 10:43:86:15:95:c7:e1:25:8a:d7:bd:b9:8d:e4:4b: f5:7b:d1:22:f9:70:1f:cf:fe:f6:17:21:05:62:40: 57:82:bd:cd:02:d9:e2:10:84:10:97:d8:8f:65:65: 12:1b:9e:d0:d1:9c:ab:2b:f4:ee:9e:9b:7d:c0:91: 7a:09:2d:31:ec:18:61:a8:bd:00:31:d8:df:98:9b: 41:97:a6:26:a8:cf:d0:a1:5a:05:c3:2e:ae:0c:0b: 5f:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:BB:B4:77:61:AD:0E:99:60:C2:52:11:AA:94:57:97:16:D1:41:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c5f23253-4793-3aa6-bef3-3f8c0fc89adb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.68.4.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:d4:8d:7a:85:46:b8:9b:ef:dc:97:44:65:67:97:ef:60:8f: d7:ae:02:b2:06:0e:cf:21:08:54:ad:60:df:0d:dd:99:46:fe: cf:61:a2:ae:d1:87:c6:b7:2e:44:18:bd:29:f9:a2:82:0a:d7: 65:c3:e7:b3:87:6a:da:2f:e0:c7:7c:d6:c2:7c:26:57:3b:55: 76:d2:d2:98:63:b0:10:72:45:f7:11:75:45:1e:f5:dc:b2:a9: 0a:d4:f8:7f:ae:52:c0:18:fe:ca:8b:0b:2b:ae:92:06:9f:dc: 12:b8:0a:59:6a:36:e9:b8:c8:78:9a:81:66:ee:14:cf:f7:e2: 06:ff:51:fb:19:75:0c:c9:33:05:2f:05:d4:0b:fd:38:ab:1f: 07:93:ca:df:e1:98:be:1a:ed:f6:db:ca:b1:f8:10:7a:b1:e1: ea:03:1d:3d:ab:0c:1a:63:06:56:63:3e:d1:dc:c2:de:ec:eb: bf:e8:02:f4:83:09:3c:ff:15:f4:80:8f:f6:0b:e3:2d:e4:c7: 92:f4:b6:f0:48:a5:2d:0c:d0:d0:a7:ba:cd:6f:60:1d:ad:b7: 9b:64:1c:04:89:51:fe:5e:34:b9:a1:9b:68:17:12:8c:8f:88: b4:15:e2:b8:72:8d:74:e9:16:c2:fd:b0:9d:02:ea:38:5b:26: 8e:e3:ad:cb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7tUicu7qrU4xbqYoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDgyMzAxMDAxMloXDTI2MTEyMTAyMDAxMlowLzEtMCsGA1UEAxMk N2ZjYjMwMzUtYWNjOC00OTliLWE0MzUtMTA0YTc3MTljODVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmgkYkbeNpP4gWBJ/IHyca3J8IEyfSwnP8YaQ /3XjRKm1J5WwBb+Ddg4qs2fCoxeUuWnyEiYPr53FnuxcMIm475LDMvPTgkKhRoTK n6D46DBvfnmRLi4dEII50QlusDTJ02NoV0LZ/yP/wCejYVWKyxldhBfCOKeYNHCx vFJ4wds8dSfLH213JgPU8Tdz5mDMypWl2rkBXbuJrwOzljsanWp7DlAQQ4YVlcfh JYrXvbmN5Ev1e9Ei+XAfz/72FyEFYkBXgr3NAtniEIQQl9iPZWUSG57Q0ZyrK/Tu npt9wJF6CS0x7BhhqL0AMdjfmJtBl6YmqM/QoVoFwy6uDAtfjQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPK7tHdhrQ6ZYMJSEaqUV5cW0UGFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvYzVmMjMyNTMtNDc5My0z YWE2LWJlZjMtM2Y4YzBmYzg5YWRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEQEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEfUjXqFRrib79yXRGVnl+9gj9euArIGDs8hCFStYN8N3ZlG/s9hoq7R h8a3LkQYvSn5ooIK12XD57OHatov4Md81sJ8Jlc7VXbS0phjsBByRfcRdUUe9dyy qQrU+H+uUsAY/sqLCyuukgaf3BK4CllqNum4yHiagWbuFM/34gb/UfsZdQzJMwUv BdQL/TirHweTyt/hmL4a7fbbyrH4EHqx4eoDHT2rDBpjBlZjPtHcwt7s67/oAvSD CTz/FfSAj/YL4y3kx5L0tvBIpS0M0NCnus1vYB2tt5tkHASJUf5eNLmhm2gXEoyP iLQV4rhyjXTpFsL9sJ0C6jhbJo7jrcs= -----END CERTIFICATE-----Generated at Tue Sep 22 11:43:16 2026 by rpki-client