$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/20c2362c-2844-3229-bf90-8c5234922061.roa File: 20c2362c-2844-3229-bf90-8c5234922061.roa (raw, json) Hash identifier: U5zGZ8b6ceomLgRjhytLZm/jFJoRGj2MyQFBkV4ZSeU= Subject key identifier: 42:A5:7D:3B:31:B8:1E:85:0D:1B:C1:99:78:FF:B7:05:A4:FD:09:75 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584E4824A0A277D5BD217505C000 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/20c2362c-2844-3229-bf90-8c5234922061.roa Signing time: Wed 24 Jun 2026 21:00:12 +0000 ROA not before: Wed 24 Jun 2026 21:00:12 +0000 ROA not after: Tue 22 Sep 2026 21:00:12 +0000 asID: 13335 IP address blocks: 172.68.69.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 Jul 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:48:24:a0:a2:77:d5:bd:21:75:05:c0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Jun 24 21:00:12 2026 GMT Not After : Sep 22 21:00:12 2026 GMT Subject: CN=3edaa51a-3ff4-4602-8b4e-29d944952b42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:ef:26:85:c1:81:ba:7c:5b:d7:a9:1f:e1:3c: 27:65:f9:a4:32:07:88:09:fa:ce:53:57:0e:72:db: 4a:ab:a5:b9:d3:b5:35:a3:7a:95:39:f8:88:74:ad: 53:4e:85:a2:c1:a8:70:5a:bb:43:9c:5d:01:2a:bd: 22:d1:b0:71:ce:4a:0c:29:f1:ae:07:72:23:5e:f7: 3c:65:be:eb:ec:74:ec:51:12:8d:12:d4:ee:48:e6: 4a:aa:f1:65:ea:70:d9:24:d5:d1:de:78:9f:93:51: 5a:74:33:0e:0d:f3:12:65:55:93:08:db:58:b6:98: ba:64:2f:2c:6e:08:bb:d0:1a:98:b6:55:99:50:59: 3c:f9:3a:f4:3f:03:00:55:31:12:62:82:4a:22:c1: dc:0a:da:52:fe:d4:70:ee:68:2e:4f:e0:89:3a:64: 3e:d8:1e:65:54:89:d8:28:0b:c5:69:fb:90:5b:d1: 24:89:f0:4e:de:7f:1f:92:03:73:f1:a7:dc:ad:35: 22:a7:a8:4b:8b:dd:79:d9:37:c6:08:bd:2f:23:35: e5:9f:81:38:b4:c4:cc:01:a0:91:37:b8:7a:a1:fe: 07:1b:2f:ca:21:74:a6:55:e1:fa:07:2d:08:a2:d8: 61:a5:1d:27:f6:55:a2:58:bf:d0:b0:08:02:cb:cc: 78:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:A5:7D:3B:31:B8:1E:85:0D:1B:C1:99:78:FF:B7:05:A4:FD:09:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/20c2362c-2844-3229-bf90-8c5234922061.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.68.69.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:4d:c1:1b:46:eb:be:99:68:43:e1:07:d2:2a:ac:5e:6d:41: af:59:7b:64:11:41:c2:57:8b:3a:82:04:27:cf:92:c0:6d:55: c9:04:85:09:49:6e:f9:b6:5b:14:9c:99:75:c5:fd:ab:81:02: 85:97:75:b5:42:05:19:3e:21:f0:82:08:52:af:02:37:f8:54: d5:94:9e:69:6f:13:f6:c9:71:94:f2:e7:57:73:3d:5c:54:81: d0:ba:0d:a1:98:e8:48:ba:ad:9e:54:8e:d9:d4:aa:5b:29:de: a4:62:1f:9d:05:a5:5e:05:5e:3a:80:cd:32:2e:a2:e1:d8:07: c7:4d:75:88:76:77:1e:26:b7:98:15:6f:1e:f1:03:a3:e0:f8: f7:29:fc:4a:da:4b:3a:9c:0d:ee:cd:cd:1e:1e:da:f3:5a:bb: 60:a6:9e:1f:a2:f8:32:00:a7:d8:e8:92:25:de:14:21:02:1d: f4:f5:d9:95:b5:d3:18:8d:dd:f8:a0:84:4e:73:57:43:18:3b: 3c:ec:6d:f4:78:51:d5:f8:cf:a4:70:58:12:1d:2e:2e:ac:64: 3c:b1:23:04:c4:4d:96:41:14:41:9a:9f:20:90:da:5f:64:b8: 48:d0:2f:f3:0b:7f:27:c3:4a:09:ed:57:60:5c:72:e2:aa:3c: c2:c4:c2:2e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5IJKCid9W9IXUFwAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDYyNDIxMDAxMloXDTI2MDkyMjIxMDAxMlowLzEtMCsGA1UEAxMk M2VkYWE1MWEtM2ZmNC00NjAyLThiNGUtMjlkOTQ0OTUyYjQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqu8mhcGBunxb16kf4TwnZfmkMgeICfrOU1cO cttKq6W507U1o3qVOfiIdK1TToWiwahwWrtDnF0BKr0i0bBxzkoMKfGuB3IjXvc8 Zb7r7HTsURKNEtTuSOZKqvFl6nDZJNXR3nifk1FadDMODfMSZVWTCNtYtpi6ZC8s bgi70BqYtlWZUFk8+Tr0PwMAVTESYoJKIsHcCtpS/tRw7mguT+CJOmQ+2B5lVInY KAvFafuQW9EkifBO3n8fkgNz8afcrTUip6hLi9152TfGCL0vIzXln4E4tMTMAaCR N7h6of4HGy/KIXSmVeH6By0IothhpR0n9lWiWL/QsAgCy8x4hQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEKlfTsxuB6FDRvBmXj/twWk/Ql1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMjBjMjM2MmMtMjg0NC0z MjI5LWJmOTAtOGM1MjM0OTIyMDYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArERFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADFNwRtG676ZaEPhB9IqrF5tQa9Ze2QRQcJXizqCBCfPksBtVckEhQlJ bvm2WxScmXXF/auBAoWXdbVCBRk+IfCCCFKvAjf4VNWUnmlvE/bJcZTy51dzPVxU gdC6DaGY6Ei6rZ5UjtnUqlsp3qRiH50FpV4FXjqAzTIuouHYB8dNdYh2dx4mt5gV bx7xA6Pg+Pcp/EraSzqcDe7NzR4e2vNau2Cmnh+i+DIAp9jokiXeFCECHfT12ZW1 0xiN3fighE5zV0MYOzzsbfR4UdX4z6RwWBIdLi6sZDyxIwTETZZBFEGanyCQ2l9k uEjQL/MLfyfDSgntV2BccuKqPMLEwi4= -----END CERTIFICATE-----Generated at Sat Jul 18 02:01:21 2026 by rpki-client