$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/35a1b277-886e-3805-9af0-a6f41998e6f5.roa File: 35a1b277-886e-3805-9af0-a6f41998e6f5.roa (raw, json) Hash identifier: 0ffav3K/2Yis0o+HK1F0WResiYZY+IzpiEWtmpZNzLA= Subject key identifier: 2A:EB:0F:C4:37:B7:CF:3F:24:02:54:92:87:A0:91:36:65:4B:69:39 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584EEEB7655753A9E0B7B41D6400 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/35a1b277-886e-3805-9af0-a6f41998e6f5.roa Signing time: Sun 23 Aug 2026 13:00:12 +0000 ROA not before: Sun 23 Aug 2026 13:00:12 +0000 ROA not after: Sat 21 Nov 2026 14:00:12 +0000 asID: 13335 IP address blocks: 172.68.202.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ee:b7:65:57:53:a9:e0:b7:b4:1d:64:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 23 13:00:12 2026 GMT Not After : Nov 21 14:00:12 2026 GMT Subject: CN=28d6c274-7c10-44a8-876d-7321624ae172 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:92:f5:7f:03:3f:fe:97:aa:da:f5:7f:79:d8: 35:af:07:10:4b:03:3f:1c:46:c1:e7:40:97:b6:f7: b0:db:22:fd:74:5a:e4:d4:23:5e:31:2a:0a:17:f6: 9e:8e:1a:93:6d:b9:99:58:7d:32:58:45:c6:a4:4c: 28:04:3e:e3:7e:a8:8e:21:41:9b:1a:df:b9:6f:5f: 52:0f:16:86:33:88:24:da:af:22:7b:80:db:e2:1b: b0:47:4d:ab:34:6f:3a:a1:ee:20:f1:bc:f0:bc:42: d0:8f:b6:bd:a3:70:21:e9:c2:a5:09:79:ac:3c:90: f3:23:18:37:ab:fb:04:cc:00:28:2c:ff:23:77:10: de:ba:ad:8d:a4:a0:90:e1:f2:43:b8:18:67:44:ef: bd:e0:ea:1f:20:9c:9c:a3:f2:14:45:c2:87:f7:ed: 7a:ed:66:e3:06:21:2e:a7:5a:3d:d2:be:c8:70:b5: b2:f5:2f:07:b9:8b:d1:70:39:6d:5b:a5:68:ec:37: 3d:5a:89:e4:df:fc:49:66:b9:6a:d0:4d:ff:a7:28: f6:1c:11:aa:5a:79:9d:9a:67:b7:8d:4b:c4:4f:78: 4a:04:b5:ff:96:2a:b2:68:b3:83:e6:6a:fc:27:b1: b9:d3:43:30:2f:c4:0d:6f:98:99:2c:81:f2:8e:01: 50:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:EB:0F:C4:37:B7:CF:3F:24:02:54:92:87:A0:91:36:65:4B:69:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/35a1b277-886e-3805-9af0-a6f41998e6f5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.68.202.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:a2:af:eb:37:bb:0e:39:f1:a3:28:18:6d:c2:2b:4e:fa:aa: d9:06:b3:19:d0:bf:2e:13:10:36:49:9d:67:0a:93:ab:cf:d3: e2:b6:1e:19:f3:11:b5:0e:2b:d8:84:7f:1a:9d:df:e1:6c:17: c7:01:cd:3d:fe:30:d0:aa:49:71:2b:20:96:34:93:fb:92:d4: 52:45:72:c9:56:85:46:fe:e1:f2:c9:02:d0:87:81:8d:f0:09: 4e:e9:63:31:4a:d8:79:57:6b:b4:35:85:e4:b4:16:f7:bd:38: 6e:86:b5:38:39:47:68:7e:7e:9c:70:ff:46:10:7e:96:49:20: 46:2a:73:89:fc:94:78:31:1e:3f:89:b6:84:ba:ea:e1:ab:43: 9f:31:76:1a:49:47:87:9a:56:89:99:6e:a0:11:3a:77:35:9c: 6f:b5:68:fd:c4:1b:56:12:34:4b:53:07:b0:42:28:72:e7:b9: c0:d4:44:c0:da:15:2d:e5:d8:e5:89:ac:cb:24:3c:83:44:f5: c4:33:a3:3d:ee:a1:46:0a:5b:9b:26:42:74:da:7f:a9:75:3c: ad:66:6c:c2:ba:72:47:57:71:fc:be:ff:30:04:85:3c:c3:05: 95:36:70:17:bb:c1:82:04:e4:85:ee:e1:db:b4:2a:2e:7a:1f: a4:1b:0f:fa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7ut2VXU6ngt7QdZAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDgyMzEzMDAxMloXDTI2MTEyMTE0MDAxMlowLzEtMCsGA1UEAxMk MjhkNmMyNzQtN2MxMC00NGE4LTg3NmQtNzMyMTYyNGFlMTcyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoZL1fwM//peq2vV/edg1rwcQSwM/HEbB50CX tvew2yL9dFrk1CNeMSoKF/aejhqTbbmZWH0yWEXGpEwoBD7jfqiOIUGbGt+5b19S DxaGM4gk2q8ie4Db4huwR02rNG86oe4g8bzwvELQj7a9o3Ah6cKlCXmsPJDzIxg3 q/sEzAAoLP8jdxDeuq2NpKCQ4fJDuBhnRO+94OofIJyco/IURcKH9+167WbjBiEu p1o90r7IcLWy9S8HuYvRcDltW6Vo7Dc9Wonk3/xJZrlq0E3/pyj2HBGqWnmdmme3 jUvET3hKBLX/liqyaLOD5mr8J7G500MwL8QNb5iZLIHyjgFQHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCrrD8Q3t88/JAJUkoegkTZlS2k5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMzVhMWIyNzctODg2ZS0z ODA1LTlhZjAtYTZmNDE5OThlNmY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArETKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFuir+s3uw458aMoGG3CK076qtkGsxnQvy4TEDZJnWcKk6vP0+K2Hhnz EbUOK9iEfxqd3+FsF8cBzT3+MNCqSXErIJY0k/uS1FJFcslWhUb+4fLJAtCHgY3w CU7pYzFK2HlXa7Q1heS0Fve9OG6GtTg5R2h+fpxw/0YQfpZJIEYqc4n8lHgxHj+J toS66uGrQ58xdhpJR4eaVomZbqAROnc1nG+1aP3EG1YSNEtTB7BCKHLnucDURMDa FS3l2OWJrMskPINE9cQzoz3uoUYKW5smQnTaf6l1PK1mbMK6ckdXcfy+/zAEhTzD BZU2cBe7wYIE5IXu4du0Ki56H6QbD/o= -----END CERTIFICATE-----Generated at Mon Sep 28 10:34:02 2026 by rpki-client