$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/294e6507-2749-3e55-9ae7-2e5d2535f5b9.roa File: 294e6507-2749-3e55-9ae7-2e5d2535f5b9.roa (raw, json) Hash identifier: Nfr6wKL9WIDYFN36n7JbboYl+c5QHayjLjYJxwd7hrQ= Subject key identifier: F6:A1:D8:B8:50:6E:1C:CE:F4:CB:03:2D:AF:98:82:9E:6C:6A:5A:62 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584F497388F619AE1D406AC59D60 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/294e6507-2749-3e55-9ae7-2e5d2535f5b9.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 14789 IP address blocks: 172.68.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:88:f6:19:ae:1d:40:6a:c5:9d:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=55f5c216-8c4b-4917-a6b3-9bba89119452 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:29:c4:ea:0c:4d:af:34:21:41:27:c5:a8:c9: fa:17:1b:db:d1:5e:d3:aa:93:b0:d3:fd:a6:1d:17: 67:85:55:50:11:74:4b:9e:71:67:2f:97:e3:6b:09: 68:af:11:af:e3:82:be:cc:93:49:77:23:2e:59:59: ef:03:41:b0:60:52:d8:ef:5e:06:2c:2a:87:21:44: 16:ca:ca:97:99:e5:50:2f:03:5c:7c:b6:f0:95:1b: 4e:f3:56:16:30:1a:bb:af:c5:70:aa:2c:1a:f9:01: c4:20:03:bd:00:73:05:7b:62:70:72:8d:a7:5b:08: 59:a8:f3:e6:c9:ed:bb:b8:92:a5:89:78:69:75:aa: 8a:46:41:bf:96:99:49:4d:7d:9a:44:ee:6b:90:85: 1f:b5:13:70:8d:aa:91:c5:95:a1:9f:65:67:75:3b: df:a9:c6:2c:68:91:f8:68:98:e9:2a:dd:7b:69:8e: ec:ad:e4:d8:0e:b9:27:5d:36:4f:80:5a:a6:91:6f: 07:2e:4a:05:b2:ee:5f:e2:07:b7:b2:73:ba:fc:2f: 84:67:61:30:a0:f6:23:fe:88:08:78:9a:d1:bc:0a: 92:b8:c1:9f:0c:34:bd:85:cf:2a:54:ed:3c:15:9a: 6b:12:77:5a:c8:7c:af:4b:42:8c:58:a0:09:49:38: 93:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:A1:D8:B8:50:6E:1C:CE:F4:CB:03:2D:AF:98:82:9E:6C:6A:5A:62 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/294e6507-2749-3e55-9ae7-2e5d2535f5b9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.68.221.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:50:f7:64:ca:d3:99:4e:9e:20:21:e8:68:3d:76:6a:d4:d0: 24:84:41:3a:6a:3b:92:37:36:31:2f:e9:af:a7:1e:a7:f8:b2: 48:70:9e:ae:c3:f2:b0:da:57:91:45:a8:dc:fe:68:7b:2a:c4: 5e:92:b8:96:9c:e0:bf:3a:ad:3f:2e:03:3c:2c:3c:8f:7e:c1: 48:00:89:03:ec:45:d8:bb:a0:b0:0a:52:43:ed:7c:bd:30:9d: 28:59:e8:3d:1a:ee:b7:1e:fc:cc:1a:bf:b8:cd:2c:85:a9:8c: f8:77:78:95:11:5d:ae:a5:6c:d8:b6:1b:5f:7b:e2:1a:ce:77: 4b:09:85:d7:e3:c1:e8:89:9f:ab:2c:5c:43:65:76:34:b2:3d: b9:1c:fa:53:10:56:e6:5d:6b:52:da:75:c1:20:30:3b:35:1c: a9:a6:f5:61:32:20:b4:60:18:91:58:3a:99:4f:65:6e:5b:9d: 02:90:62:1b:7f:fc:99:62:7d:6c:8d:b4:79:c3:f9:4f:a3:ad: 68:19:8d:29:b8:9c:e5:8a:4e:53:c3:13:70:86:74:49:e1:80: 85:68:7f:72:cf:af:3a:03:24:21:9c:84:ef:eb:49:ad:05:ed: b0:29:20:36:9c:c3:e5:cc:5c:6b:7f:0c:96:b9:79:5c:14:11: af:65:96:05 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jc4j2Ga4dQGrFnWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NTVmNWMyMTYtOGM0Yi00OTE3LWE2YjMtOWJiYTg5MTE5NDUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtynE6gxNrzQhQSfFqMn6Fxvb0V7TqpOw0/2m HRdnhVVQEXRLnnFnL5fjawlorxGv44K+zJNJdyMuWVnvA0GwYFLY714GLCqHIUQW ysqXmeVQLwNcfLbwlRtO81YWMBq7r8Vwqiwa+QHEIAO9AHMFe2Jwco2nWwhZqPPm ye27uJKliXhpdaqKRkG/lplJTX2aRO5rkIUftRNwjaqRxZWhn2VndTvfqcYsaJH4 aJjpKt17aY7sreTYDrknXTZPgFqmkW8HLkoFsu5f4ge3snO6/C+EZ2EwoPYj/ogI eJrRvAqSuMGfDDS9hc8qVO08FZprEndayHyvS0KMWKAJSTiTmQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPah2LhQbhzO9MsDLa+Ygp5salpiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMjk0ZTY1MDctMjc0OS0z ZTU1LTlhZTctMmU1ZDI1MzVmNWI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArETdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG1Q92TK05lOniAh6Gg9dmrU0CSEQTpqO5I3NjEv6a+nHqf4skhwnq7D 8rDaV5FFqNz+aHsqxF6SuJac4L86rT8uAzwsPI9+wUgAiQPsRdi7oLAKUkPtfL0w nShZ6D0a7rce/Mwav7jNLIWpjPh3eJURXa6lbNi2G1974hrOd0sJhdfjweiJn6ss XENldjSyPbkc+lMQVuZda1LadcEgMDs1HKmm9WEyILRgGJFYOplPZW5bnQKQYht/ /JlifWyNtHnD+U+jrWgZjSm4nOWKTlPDE3CGdEnhgIVof3LPrzoDJCGchO/rSa0F 7bApIDacw+XMXGt/DJa5eVwUEa9llgU= -----END CERTIFICATE-----Generated at Sun Sep 27 00:52:28 2026 by rpki-client