$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/7baff904-2187-3e6d-a308-6053d042470c.roa File: 7baff904-2187-3e6d-a308-6053d042470c.roa (raw, json) Hash identifier: 9pV8/iP0eglQPyA8o17dkfV+1aARl8LSELYWy1fvKAU= Subject key identifier: 9F:00:5B:47:8C:2A:BC:CE:58:80:4D:48:A3:CF:89:84:FF:72:4D:94 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584F4974DC40CA94371A71CFCAE0 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/7baff904-2187-3e6d-a308-6053d042470c.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 13335 IP address blocks: 172.68.108.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 04 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:74:dc:40:ca:94:37:1a:71:cf:ca:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=cc233545-a30e-474e-baa6-bec2a9977024 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:31:0a:2c:f6:34:b7:11:97:28:b8:6d:c3:c3: 75:d9:ff:56:7b:4b:64:82:ce:eb:5e:62:cf:40:ca: 00:42:42:6f:c7:98:63:81:15:a1:02:86:63:5c:62: c5:77:71:cf:c4:b9:ea:50:62:90:fd:d2:9e:ad:17: 80:fc:df:b0:40:bd:5e:a3:a7:a1:34:e6:af:df:01: 30:f7:19:d3:f0:47:16:61:ae:13:9d:86:20:6a:9a: f8:d1:f5:bb:0a:6a:a2:c0:d2:b0:e4:4b:8e:83:e8: 69:71:47:52:6a:e0:95:50:49:84:cd:1c:00:30:ac: 64:b2:d7:33:8f:b4:7e:54:a2:e0:4d:d1:65:86:05: 0f:37:3a:05:d6:01:4a:14:3e:52:c4:fc:65:9a:bb: a9:7b:9c:da:41:91:59:34:83:0c:19:34:54:5c:f3: 51:61:0c:46:9d:b1:64:45:27:23:57:64:cf:7f:be: 61:c6:8f:55:c1:a2:a1:7e:98:45:e9:24:ec:7a:95: f7:54:6b:ac:5b:ea:11:f6:9c:41:fd:45:ce:09:4b: 8f:3b:79:cc:63:7c:58:d3:24:8e:12:48:29:a7:5b: 3d:46:3f:6c:7c:25:f1:80:d2:23:3f:ff:2b:37:85: 12:f4:75:3e:9f:49:d9:3f:7a:1e:9d:5c:06:63:55: 3d:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:00:5B:47:8C:2A:BC:CE:58:80:4D:48:A3:CF:89:84:FF:72:4D:94 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/7baff904-2187-3e6d-a308-6053d042470c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.68.108.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:54:9c:5a:5f:09:1c:46:aa:e9:bf:fa:73:6e:7c:12:42:65: 7b:87:dd:3d:42:97:54:eb:fa:9b:ed:8b:3f:07:16:e8:2b:f2: d3:2f:c0:e8:64:59:0d:c6:f2:84:78:4a:04:e2:db:48:6b:b6: 08:f2:3c:fd:0b:5a:79:f2:89:e5:1e:de:88:ed:e2:31:58:ea: 9c:17:f2:06:ae:7b:d9:bf:03:70:6c:d2:d4:13:d8:b0:bc:ce: c1:b4:2f:0d:8a:96:a6:bb:2f:a4:73:43:c3:a0:44:d8:b3:12: 64:67:6b:78:f5:29:c2:8c:03:ac:f2:f1:37:77:38:49:c5:ab: 8c:d1:50:26:1d:d2:49:f3:3b:86:5d:0f:53:05:ce:1b:e1:5f: ac:96:4c:65:92:e7:38:56:46:f7:eb:ba:1d:33:0a:53:11:20: 3c:f5:6c:08:f7:e4:56:da:a5:53:5d:e4:e0:b7:91:1f:16:78: 1f:bd:b4:02:19:b5:32:99:7f:3b:60:91:82:ee:73:3f:da:47: dd:8d:4c:ef:5b:73:5a:89:60:84:b2:be:86:a8:6a:2e:e3:ef: 90:ed:db:02:96:a2:cd:58:63:e1:ea:16:b4:40:7b:74:24:d8: 01:a9:b9:f7:1f:1a:25:24:d3:df:6a:d5:96:9d:aa:9e:8d:b7: 23:60:69:64 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdNxAypQ3GnHPyuAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk Y2MyMzM1NDUtYTMwZS00NzRlLWJhYTYtYmVjMmE5OTc3MDI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjTEKLPY0txGXKLhtw8N12f9We0tkgs7rXmLP QMoAQkJvx5hjgRWhAoZjXGLFd3HPxLnqUGKQ/dKerReA/N+wQL1eo6ehNOav3wEw 9xnT8EcWYa4TnYYgapr40fW7CmqiwNKw5EuOg+hpcUdSauCVUEmEzRwAMKxkstcz j7R+VKLgTdFlhgUPNzoF1gFKFD5SxPxlmrupe5zaQZFZNIMMGTRUXPNRYQxGnbFk RScjV2TPf75hxo9VwaKhfphF6STsepX3VGusW+oR9pxB/UXOCUuPO3nMY3xY0ySO Ekgpp1s9Rj9sfCXxgNIjP/8rN4US9HU+n0nZP3oenVwGY1U9LQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ8AW0eMKrzOWIBNSKPPiYT/ck2UMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvN2JhZmY5MDQtMjE4Ny0z ZTZkLWEzMDgtNjA1M2QwNDI0NzBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArERsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHJUnFpfCRxGqum/+nNufBJCZXuH3T1Cl1Tr+pvtiz8HFugr8tMvwOhk WQ3G8oR4SgTi20hrtgjyPP0LWnnyieUe3ojt4jFY6pwX8gaue9m/A3Bs0tQT2LC8 zsG0Lw2Klqa7L6RzQ8OgRNizEmRna3j1KcKMA6zy8Td3OEnFq4zRUCYd0knzO4Zd D1MFzhvhX6yWTGWS5zhWRvfruh0zClMRIDz1bAj35FbapVNd5OC3kR8WeB+9tAIZ tTKZfztgkYLucz/aR92NTO9bc1qJYISyvoaoai7j75Dt2wKWos1YY+HqFrRAe3Qk 2AGpufcfGiUk099q1Zadqp6NtyNgaWQ= -----END CERTIFICATE-----Generated at Sat Oct 3 10:51:47 2026 by rpki-client