$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d34dfa92-bcb2-396f-94f1-7d58d86c27d4.roa File: d34dfa92-bcb2-396f-94f1-7d58d86c27d4.roa (raw, json) Hash identifier: QfO55LwbXaovgggIRW/u7D83bFJyg2D63l9eTbAsJog= Subject key identifier: 3B:71:D9:FA:74:12:F2:72:83:63:B2:53:E3:88:F1:CE:25:E5:7C:AA Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584F498B1E046F04577CCFBDAF00 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d34dfa92-bcb2-396f-94f1-7d58d86c27d4.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 14789 IP address blocks: 172.68.112.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:8b:1e:04:6f:04:57:7c:cf:bd:af:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=9e3a0b92-af23-48ab-a7a5-9288bb616e04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:7a:5a:19:5d:79:dc:6c:65:c5:91:2b:b2:8f: c3:46:12:b5:1a:21:ff:d7:83:fa:d2:b5:49:10:db: e3:24:01:47:98:7d:29:4d:19:bf:21:0d:c2:9f:28: 1f:7a:85:55:fa:34:82:7a:3a:b7:22:8a:cc:8d:37: 37:f4:7e:27:8c:7f:28:ea:19:53:77:26:29:fa:ea: cd:f0:d1:56:19:bf:3f:5f:43:78:5d:22:b2:46:37: 98:bb:d4:0a:2a:e6:f0:e5:c7:c0:32:49:93:fb:16: de:90:ec:12:99:ef:be:5c:8b:50:e8:9a:0e:f9:d0: bb:dd:25:e2:96:1f:c3:ff:0f:2b:05:c5:55:ae:21: d5:cf:c8:14:3a:fb:29:aa:ea:2b:4d:cb:27:49:61: 79:4a:be:00:e7:28:5e:5c:18:9c:15:c7:23:d8:88: b6:39:54:f7:29:df:af:98:0f:33:24:5a:51:89:69: c4:db:40:66:c9:0f:ad:0d:27:fe:c1:f3:3a:9e:e8: 0e:46:c4:8b:71:c3:62:85:74:4e:81:3b:b3:19:84: c4:13:15:74:d0:b8:5d:ce:1b:e1:c7:7d:f6:89:e9: 3a:48:ef:4f:cb:ec:d3:b8:46:55:d8:f7:23:fc:42: 7a:f6:6a:a2:1b:c2:f7:ed:dc:fd:8c:15:df:62:8d: 46:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:71:D9:FA:74:12:F2:72:83:63:B2:53:E3:88:F1:CE:25:E5:7C:AA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d34dfa92-bcb2-396f-94f1-7d58d86c27d4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.68.112.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:62:7d:c0:eb:9c:88:52:79:08:e9:8d:ec:34:71:ac:00:84: ca:97:17:10:44:f3:00:72:44:43:3f:1b:1d:58:04:38:56:ca: cc:8d:d9:6a:52:42:a8:59:05:29:58:36:44:78:0d:be:d6:23: f9:ee:4a:e5:bd:0b:24:db:b3:dc:68:f5:5f:30:fb:6a:fe:3e: f6:4f:ba:3d:4f:62:a2:e1:4f:cb:bc:0e:91:bd:10:18:78:81: 4a:1c:d4:8f:fe:b7:31:13:df:d0:41:1b:49:e8:97:9a:ca:29: d8:c8:dd:bd:ef:ca:09:b7:29:c4:cd:b9:4c:da:f6:00:f6:0e: 64:c4:0c:dd:b8:6f:89:3f:d7:04:9d:01:42:ac:8e:79:21:df: fb:fd:11:d4:2d:15:15:75:26:88:5b:cd:45:a0:13:80:7a:1e: a6:79:8e:47:cc:08:26:96:cc:da:92:e0:3a:65:4f:26:63:44: 80:cf:9c:90:3e:ad:c6:6a:b2:3d:ae:e4:20:97:84:13:90:95: 2f:74:c6:9b:26:91:79:80:7f:49:d8:79:25:f5:18:40:cc:5a: f6:52:96:4c:c7:42:d0:53:4a:ac:8e:86:66:99:07:d4:62:c8: 1c:5e:25:87:d1:5a:9b:4a:0f:23:ac:35:4f:b4:8c:ac:32:ca: 08:6e:b8:f6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jix4EbwRXfM+9rwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk OWUzYTBiOTItYWYyMy00OGFiLWE3YTUtOTI4OGJiNjE2ZTA0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl3paGV153GxlxZErso/DRhK1GiH/14P60rVJ ENvjJAFHmH0pTRm/IQ3CnygfeoVV+jSCejq3IorMjTc39H4njH8o6hlTdyYp+urN 8NFWGb8/X0N4XSKyRjeYu9QKKubw5cfAMkmT+xbekOwSme++XItQ6JoO+dC73SXi lh/D/w8rBcVVriHVz8gUOvspquorTcsnSWF5Sr4A5yheXBicFccj2Ii2OVT3Kd+v mA8zJFpRiWnE20BmyQ+tDSf+wfM6nugORsSLccNihXROgTuzGYTEExV00Lhdzhvh x332iek6SO9Py+zTuEZV2Pcj/EJ69mqiG8L37dz9jBXfYo1GMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDtx2fp0EvJyg2OyU+OI8c4l5XyqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvZDM0ZGZhOTItYmNiMi0z OTZmLTk0ZjEtN2Q1OGQ4NmMyN2Q0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArERwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFdifcDrnIhSeQjpjew0cawAhMqXFxBE8wByREM/Gx1YBDhWysyN2WpS QqhZBSlYNkR4Db7WI/nuSuW9CyTbs9xo9V8w+2r+PvZPuj1PYqLhT8u8DpG9EBh4 gUoc1I/+tzET39BBG0nol5rKKdjI3b3vygm3KcTNuUza9gD2DmTEDN24b4k/1wSd AUKsjnkh3/v9EdQtFRV1JohbzUWgE4B6HqZ5jkfMCCaWzNqS4DplTyZjRIDPnJA+ rcZqsj2u5CCXhBOQlS90xpsmkXmAf0nYeSX1GEDMWvZSlkzHQtBTSqyOhmaZB9Ri yBxeJYfRWptKDyOsNU+0jKwyyghuuPY= -----END CERTIFICATE-----Generated at Tue Sep 29 12:39:20 2026 by rpki-client