$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/19ce9a70-35bb-30a9-8772-0baf54fb9c03.roa File: 19ce9a70-35bb-30a9-8772-0baf54fb9c03.roa (raw, json) Hash identifier: luYg8LCMbwe4aNOLyRax19lvzK22JRsYKv1PTBPahOk= Subject key identifier: 54:41:B1:1A:77:A0:43:8B:FF:0D:8D:88:4A:78:E8:EF:8A:F8:C3:CD Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584E4824A04655E3DB5009852F80 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/19ce9a70-35bb-30a9-8772-0baf54fb9c03.roa Signing time: Wed 24 Jun 2026 21:00:12 +0000 ROA not before: Wed 24 Jun 2026 21:00:12 +0000 ROA not after: Tue 22 Sep 2026 21:00:12 +0000 asID: 13335 IP address blocks: 172.70.176.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 Jul 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:48:24:a0:46:55:e3:db:50:09:85:2f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Jun 24 21:00:12 2026 GMT Not After : Sep 22 21:00:12 2026 GMT Subject: CN=a240822b-db5d-49af-9449-42520f0222da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:d6:a4:dc:fd:6a:0d:f0:e8:a9:f4:9a:df:c6: fc:e3:da:ab:51:36:46:5e:cc:b1:73:1a:3f:ed:c8: d0:93:b6:72:a2:28:ea:37:f6:46:66:41:36:25:ca: e9:7e:3a:bb:42:46:c9:bd:bc:8b:c8:94:2e:9d:4a: a3:00:e2:13:20:13:8b:42:82:e2:bb:86:f7:ea:71: 7c:cb:bb:fe:1c:14:18:3f:87:50:6d:d8:54:bb:f2: 75:b8:29:02:ea:0b:e5:cd:57:27:6b:ec:b8:6a:d2: 96:b7:5a:1d:a5:02:11:1f:46:55:66:c4:f6:ad:ed: e6:8f:5f:b1:55:2a:4d:5b:77:6a:9e:2b:8d:58:0e: 89:2b:07:d9:44:e4:45:c9:2d:43:ff:31:30:f5:17: bc:c6:a4:7e:14:38:f6:d0:2b:48:03:a3:08:72:41: 7d:85:c8:26:61:3b:45:74:9b:98:69:f7:8c:d6:0e: 64:f6:a1:7a:07:4e:5b:11:fa:ab:11:e9:eb:bd:9f: bf:ed:8a:37:4c:51:1e:74:d3:b8:cf:5e:a0:ce:ae: d4:77:14:76:4d:64:89:94:15:90:ea:e4:01:54:f8: 7d:cc:ba:dc:15:ef:f6:71:bf:8f:6d:40:6c:48:bf: 1a:3b:b0:1f:aa:27:03:f5:04:e7:fe:53:79:77:55: c3:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:41:B1:1A:77:A0:43:8B:FF:0D:8D:88:4A:78:E8:EF:8A:F8:C3:CD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/19ce9a70-35bb-30a9-8772-0baf54fb9c03.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.70.176.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a1:2e:5b:39:9e:9f:cc:44:1b:9f:7e:2c:ef:0d:53:a3:95:0c: df:18:9f:a6:68:40:02:64:17:4c:6e:29:51:02:26:ae:bd:3e: e1:5c:e6:b6:b2:ad:9c:eb:cd:64:94:39:87:bd:15:cf:a5:ec: 4a:87:3f:64:ff:4f:da:62:ba:c1:86:f0:0a:d0:f3:3e:19:8f: c8:8e:f3:f1:80:5f:72:15:85:ed:8d:09:8c:c2:e9:2a:e3:3b: 3a:a4:13:4a:2c:77:4f:ff:38:15:10:e9:61:c1:df:a5:0d:d8: 91:04:14:d2:f5:f6:68:0a:03:a3:65:84:34:a3:7d:5b:83:ea: 01:a2:70:3a:75:0c:4e:d5:8d:3c:86:65:0e:e6:66:97:9c:65: 20:66:7b:71:48:5b:52:2a:82:0f:f3:b9:04:c1:63:72:9a:f3: 21:05:09:4d:b6:d2:db:61:61:3b:5d:80:bf:67:b0:a3:9b:19: 45:84:99:bf:20:c9:45:f3:38:ff:bf:f6:a8:96:2c:25:86:b1: 33:02:b9:8c:a9:27:3c:13:08:0f:04:8b:68:62:74:66:17:ad: a4:e8:dc:c0:de:72:d4:0d:f2:e7:4c:07:15:58:3e:35:6c:c0: c4:ae:0e:7d:b3:83:d9:e2:75:5a:6a:4c:50:b3:27:11:b2:0f: 86:80:58:bf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5IJKBGVePbUAmFL4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDYyNDIxMDAxMloXDTI2MDkyMjIxMDAxMlowLzEtMCsGA1UEAxMk YTI0MDgyMmItZGI1ZC00OWFmLTk0NDktNDI1MjBmMDIyMmRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlNak3P1qDfDoqfSa38b849qrUTZGXsyxcxo/ 7cjQk7ZyoijqN/ZGZkE2Jcrpfjq7QkbJvbyLyJQunUqjAOITIBOLQoLiu4b36nF8 y7v+HBQYP4dQbdhUu/J1uCkC6gvlzVcna+y4atKWt1odpQIRH0ZVZsT2re3mj1+x VSpNW3dqniuNWA6JKwfZRORFyS1D/zEw9Re8xqR+FDj20CtIA6MIckF9hcgmYTtF dJuYafeM1g5k9qF6B05bEfqrEenrvZ+/7Yo3TFEedNO4z16gzq7UdxR2TWSJlBWQ 6uQBVPh9zLrcFe/2cb+PbUBsSL8aO7AfqicD9QTn/lN5d1XDbwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFRBsRp3oEOL/w2NiEp46O+K+MPNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMTljZTlhNzAtMzViYi0z MGE5LTg3NzItMGJhZjU0ZmI5YzAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEawMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKEuWzmen8xEG59+LO8NU6OVDN8Yn6ZoQAJkF0xuKVECJq69PuFc5ray rZzrzWSUOYe9Fc+l7EqHP2T/T9piusGG8ArQ8z4Zj8iO8/GAX3IVhe2NCYzC6Srj OzqkE0osd0//OBUQ6WHB36UN2JEEFNL19mgKA6NlhDSjfVuD6gGicDp1DE7VjTyG ZQ7mZpecZSBme3FIW1Iqgg/zuQTBY3Ka8yEFCU220tthYTtdgL9nsKObGUWEmb8g yUXzOP+/9qiWLCWGsTMCuYypJzwTCA8Ei2hidGYXraTo3MDectQN8udMBxVYPjVs wMSuDn2zg9nidVpqTFCzJxGyD4aAWL8= -----END CERTIFICATE-----Generated at Sat Jul 18 00:49:51 2026 by rpki-client