$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/fa5cde3e-a60b-3201-b968-498530b397f6.roa File: fa5cde3e-a60b-3201-b968-498530b397f6.roa (raw, json) Hash identifier: PwmvB46fvpA2sahGdklps/swNLDwe6tElaiNvKg7ut8= Subject key identifier: E0:43:94:8A:52:39:17:F6:65:47:63:2A:B3:9A:73:F6:CD:5C:65:E3 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584EED5239705AE3A41D0BFD0BC0 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/fa5cde3e-a60b-3201-b968-498530b397f6.roa Signing time: Sun 23 Aug 2026 01:00:12 +0000 ROA not before: Sun 23 Aug 2026 01:00:12 +0000 ROA not after: Sat 21 Nov 2026 02:00:12 +0000 asID: 13335 IP address blocks: 172.68.84.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ed:52:39:70:5a:e3:a4:1d:0b:fd:0b:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 23 01:00:12 2026 GMT Not After : Nov 21 02:00:12 2026 GMT Subject: CN=6f5efe4c-26ff-42dd-8321-60428b2b6928 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:9d:63:28:7a:30:c4:ef:a6:5f:93:bb:11:38: 93:55:2f:b5:f6:9d:a2:7c:e3:6d:06:c5:3b:39:1f: d4:21:8e:b4:69:07:e0:7e:c2:21:6e:83:a5:c7:27: a6:1d:e7:99:79:30:e6:5a:7b:7b:47:d3:f8:46:ff: a1:1b:45:90:4b:73:8e:45:43:08:ac:47:03:80:f0: 5f:a7:18:4c:2b:9f:90:eb:d0:6f:4b:37:e7:77:74: 96:89:9c:c4:45:06:c3:24:7c:a3:07:69:65:d0:73: 0f:3a:ca:90:23:00:d5:bc:b2:5d:fd:46:24:c9:b7: c9:1c:8f:81:42:10:1e:ba:62:ab:d1:eb:2e:d7:72: 65:0c:8b:41:35:d4:03:c6:61:8b:d4:1e:ca:44:d0: f7:24:ab:bd:90:c2:95:9e:41:00:4f:4c:47:65:78: b3:fe:9b:2c:7e:8d:ae:4e:ac:15:85:dd:85:0e:14: 9c:68:f1:78:64:24:e5:b3:57:35:e4:f6:3c:b8:cb: f2:84:05:94:34:87:62:f9:f5:35:49:30:0a:a2:88: 91:5f:e1:e4:52:e7:a3:ff:2d:a8:19:e4:36:bd:7a: 77:f6:dd:b8:c8:02:63:bb:7e:c2:0a:84:53:6a:d9: 96:1f:b6:ea:69:1c:cb:de:89:2b:6c:ac:a7:c7:6f: f7:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:43:94:8A:52:39:17:F6:65:47:63:2A:B3:9A:73:F6:CD:5C:65:E3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/fa5cde3e-a60b-3201-b968-498530b397f6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.68.84.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:43:f6:e2:8e:9a:f2:11:90:c0:38:e6:2e:6f:01:0d:ee:c6: 50:aa:ed:73:4a:37:15:74:f1:83:35:84:78:72:be:c9:18:74: 84:e2:ef:51:2e:ea:22:cb:38:bc:6d:b0:3c:f4:cb:42:1a:82: 09:91:6c:01:2e:82:63:ed:29:eb:e6:e5:7f:3f:92:e7:50:79: 72:83:a4:67:a5:cb:51:80:c6:f0:f8:ed:f3:54:b2:0c:b3:f4: 60:48:12:4a:47:c4:e8:13:02:9b:d7:f9:93:33:5f:9a:d4:2f: 70:3e:8d:58:69:e6:b4:b9:b8:42:1b:29:80:f9:77:b0:15:c7: 14:ba:fb:ce:20:fe:46:2e:07:3e:01:9f:ec:9a:4a:c2:30:c6: 63:72:42:6d:bb:2d:e2:13:86:20:ff:e8:c0:ea:9e:a7:a2:73: 32:79:07:fa:d2:d9:ca:4a:1c:8c:5e:c4:7a:2c:90:3e:a0:0e: 25:3d:4e:e5:56:6c:e8:9a:2b:ac:02:e4:54:6a:8c:e7:a1:a5: 15:8b:98:3e:0e:0e:c6:86:80:79:f4:c0:0c:61:cb:41:10:0d: c2:e0:80:4a:58:b0:14:35:65:7e:fe:4b:c1:49:2b:0b:8a:80: 33:4f:96:a6:ce:6a:c5:1f:8b:ef:01:47:f9:c6:e7:62:71:22: f5:56:e8:61 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7tUjlwWuOkHQv9C8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDgyMzAxMDAxMloXDTI2MTEyMTAyMDAxMlowLzEtMCsGA1UEAxMk NmY1ZWZlNGMtMjZmZi00MmRkLTgzMjEtNjA0MjhiMmI2OTI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAup1jKHowxO+mX5O7ETiTVS+19p2ifONtBsU7 OR/UIY60aQfgfsIhboOlxyemHeeZeTDmWnt7R9P4Rv+hG0WQS3OORUMIrEcDgPBf pxhMK5+Q69BvSzfnd3SWiZzERQbDJHyjB2ll0HMPOsqQIwDVvLJd/UYkybfJHI+B QhAeumKr0esu13JlDItBNdQDxmGL1B7KRND3JKu9kMKVnkEAT0xHZXiz/pssfo2u TqwVhd2FDhScaPF4ZCTls1c15PY8uMvyhAWUNIdi+fU1STAKooiRX+HkUuej/y2o GeQ2vXp39t24yAJju37CCoRTatmWH7bqaRzL3okrbKynx2/33QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOBDlIpSORf2ZUdjKrOac/bNXGXjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvZmE1Y2RlM2UtYTYwYi0z MjAxLWI5NjgtNDk4NTMwYjM5N2Y2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArERUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGxD9uKOmvIRkMA45i5vAQ3uxlCq7XNKNxV08YM1hHhyvskYdITi71Eu 6iLLOLxtsDz0y0IaggmRbAEugmPtKevm5X8/kudQeXKDpGely1GAxvD47fNUsgyz 9GBIEkpHxOgTApvX+ZMzX5rUL3A+jVhp5rS5uEIbKYD5d7AVxxS6+84g/kYuBz4B n+yaSsIwxmNyQm27LeIThiD/6MDqnqeiczJ5B/rS2cpKHIxexHoskD6gDiU9TuVW bOiaK6wC5FRqjOehpRWLmD4ODsaGgHn0wAxhy0EQDcLggEpYsBQ1ZX7+S8FJKwuK gDNPlqbOasUfi+8BR/nG52JxIvVW6GE= -----END CERTIFICATE-----Generated at Tue Sep 22 17:59:39 2026 by rpki-client