$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/e63c008f-27b5-330d-9d8e-f07fe70e2e46.roa File: e63c008f-27b5-330d-9d8e-f07fe70e2e46.roa (raw, json) Hash identifier: 0IKV2BamuN0HG721Yz1DIfoGjqeu6k3wr7fa2nFbYAM= Subject key identifier: 62:9C:78:5B:6F:27:C3:C9:11:D3:D8:D4:2D:B2:C4:BE:EE:1A:B7:11 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584F4974A85B8DC0F4F1C4D19480 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/e63c008f-27b5-330d-9d8e-f07fe70e2e46.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 13335 IP address blocks: 172.68.48.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 04 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:74:a8:5b:8d:c0:f4:f1:c4:d1:94:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=ff4663e1-3d95-4303-a9c2-7eb00ce8b2bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:2d:4b:7d:3a:a1:b3:f2:6e:02:cf:c8:78:e1: 7e:c5:33:2c:c8:e9:fe:fa:10:26:a9:17:20:b7:b3: 48:3a:b6:ce:41:68:ad:6f:48:87:31:e3:14:6b:43: ed:3c:d3:e4:d3:15:27:49:5d:0b:a3:76:c2:6f:44: 45:73:c9:6e:04:45:e9:b9:73:1c:83:55:95:8a:5c: e0:af:be:46:51:d8:f9:cc:ce:b9:07:61:b0:c7:bb: 35:ab:4c:38:f5:7b:35:31:00:68:f8:5b:1a:2d:69: 70:36:12:ac:c2:24:3b:72:2d:0f:21:45:88:c9:5b: 89:7c:72:b3:d7:d0:17:37:04:11:00:c9:49:1e:d0: ba:23:a5:fe:f3:ac:3a:d8:5e:4b:1d:f1:56:12:4e: 76:6d:0f:ab:6c:10:90:13:f4:c9:ed:84:b3:9c:4e: 34:a4:55:e6:2b:b8:ac:ee:13:ad:8b:a1:d7:42:6a: bf:b0:db:32:31:40:1e:d4:df:0c:12:d3:a0:4d:e5: 76:dd:cb:77:89:51:5e:5f:bc:7b:01:72:80:23:9a: a7:86:83:60:9e:f3:3f:4f:60:3e:61:92:9d:00:d3: 27:52:01:11:0b:91:34:70:9d:3e:38:6d:50:78:5f: 8e:3a:4b:38:54:ee:d7:b4:f5:c6:d4:fd:86:1a:0f: 43:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:9C:78:5B:6F:27:C3:C9:11:D3:D8:D4:2D:B2:C4:BE:EE:1A:B7:11 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/e63c008f-27b5-330d-9d8e-f07fe70e2e46.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.68.48.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:7b:60:45:fc:f9:98:e8:86:b6:98:e4:c1:e6:01:24:ba:c6: 41:e7:3e:3f:a0:5f:47:3d:f8:f2:27:38:1b:b2:f7:3c:0f:fd: 4f:35:9c:69:51:bc:e9:a5:ac:cc:66:bd:3d:ac:06:3f:f7:ae: b5:17:60:85:47:33:a3:74:8a:b8:30:fb:d2:e2:e5:95:ac:96: 2b:24:7e:da:77:26:67:87:b7:4f:72:64:59:ce:15:90:3c:ee: da:e6:28:70:42:c2:8a:43:83:48:24:82:7a:8d:76:b3:56:7e: c0:ed:00:b4:db:a8:4d:8b:12:79:b6:67:03:74:5e:a8:84:6b: 4a:6f:f8:a0:61:ef:9c:52:d9:51:e7:ef:78:98:de:0c:28:b2: 63:05:8c:3e:28:61:9d:3d:59:f7:51:8a:02:24:ea:9d:4d:35: 4f:a8:db:ff:27:41:48:db:58:bd:95:c7:1a:61:0f:8a:e8:2c: eb:72:2b:bc:fb:6e:ea:00:02:a1:dd:42:90:89:09:fc:97:f7: 87:31:df:3a:1e:a4:56:cf:9b:21:65:69:e6:5d:ef:e0:65:fc: 1c:e7:b3:ef:3a:4c:12:07:26:87:df:49:95:02:81:0e:62:7e: 4b:25:42:1d:7f:cf:6b:04:02:3d:06:30:c6:2b:e5:d7:ab:41: 03:cd:ea:12 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdKhbjcD08cTRlIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZmY0NjYzZTEtM2Q5NS00MzAzLWE5YzItN2ViMDBjZThiMmJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoy1LfTqhs/JuAs/IeOF+xTMsyOn++hAmqRcg t7NIOrbOQWitb0iHMeMUa0PtPNPk0xUnSV0Lo3bCb0RFc8luBEXpuXMcg1WVilzg r75GUdj5zM65B2Gwx7s1q0w49Xs1MQBo+FsaLWlwNhKswiQ7ci0PIUWIyVuJfHKz 19AXNwQRAMlJHtC6I6X+86w62F5LHfFWEk52bQ+rbBCQE/TJ7YSznE40pFXmK7is 7hOti6HXQmq/sNsyMUAe1N8MEtOgTeV23ct3iVFeX7x7AXKAI5qnhoNgnvM/T2A+ YZKdANMnUgERC5E0cJ0+OG1QeF+OOks4VO7XtPXG1P2GGg9D4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGKceFtvJ8PJEdPY1C2yxL7uGrcRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvZTYzYzAwOGYtMjdiNS0z MzBkLTlkOGUtZjA3ZmU3MGUyZTQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEQwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAp7YEX8+ZjohraY5MHmASS6xkHnPj+gX0c9+PInOBuy9zwP/U81nGlR vOmlrMxmvT2sBj/3rrUXYIVHM6N0irgw+9Li5ZWsliskftp3JmeHt09yZFnOFZA8 7trmKHBCwopDg0gkgnqNdrNWfsDtALTbqE2LEnm2ZwN0XqiEa0pv+KBh75xS2VHn 73iY3gwosmMFjD4oYZ09WfdRigIk6p1NNU+o2/8nQUjbWL2VxxphD4roLOtyK7z7 buoAAqHdQpCJCfyX94cx3zoepFbPmyFlaeZd7+Bl/Bzns+86TBIHJoffSZUCgQ5i fkslQh1/z2sEAj0GMMYr5derQQPN6hI= -----END CERTIFICATE-----Generated at Sat Oct 3 15:27:22 2026 by rpki-client