$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/25a8ab15-e085-3562-9462-51bb91799e31.roa File: 25a8ab15-e085-3562-9462-51bb91799e31.roa (raw, json) Hash identifier: xoH1RKpMhrppVGD2YWoDAWPe2b1rQovO3ehsjNGfbdA= Subject key identifier: F2:4B:75:80:E3:99:BA:A2:AA:6A:09:C1:FA:3F:5C:C9:7C:4D:AD:35 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584E4C549B481CD7A494FBEDB840 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/25a8ab15-e085-3562-9462-51bb91799e31.roa Signing time: Fri 26 Jun 2026 09:00:12 +0000 ROA not before: Fri 26 Jun 2026 09:00:12 +0000 ROA not after: Thu 24 Sep 2026 09:00:12 +0000 asID: 13335 IP address blocks: 172.68.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 Jul 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:4c:54:9b:48:1c:d7:a4:94:fb:ed:b8:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Jun 26 09:00:12 2026 GMT Not After : Sep 24 09:00:12 2026 GMT Subject: CN=9ff444ab-bc91-4f0a-9dfa-db6d0c8d4209 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:4c:4b:ac:e5:8c:30:77:fa:27:d7:87:7c:cc: 7a:34:1a:3e:c5:a0:d4:cf:89:c1:3e:6f:96:e2:0a: 0b:86:b6:68:a0:fc:e7:bb:a7:b3:c3:1e:2b:5d:95: 01:9a:7e:5a:c8:ab:df:52:68:60:d6:ad:01:ed:25: 19:e1:f2:af:84:03:8d:99:62:1b:10:29:64:10:4e: ef:a2:c5:03:ba:a7:64:c2:33:9d:dc:86:31:5a:63: 0f:09:de:1f:16:a4:2f:55:ca:91:d7:46:77:89:51: 8d:2c:ce:16:63:07:f3:08:23:f9:19:49:15:6e:d2: 93:a2:85:6f:49:b8:2d:d6:8c:56:cd:a9:f2:f6:b4: d2:63:61:8d:d5:c6:26:3f:bc:67:36:d5:7e:65:a3: df:82:93:78:ba:77:9d:30:30:39:e2:15:a7:b7:19: 2a:9e:51:30:04:3f:b5:2b:d5:a2:82:36:d2:25:6a: d8:d6:96:1b:f6:ae:88:e9:45:ff:9f:3f:79:71:6d: 2a:c9:20:bb:b2:d1:20:08:99:a8:7b:73:76:40:b4: b4:78:24:ba:2d:4d:88:a5:93:7f:49:84:17:c8:42: 5b:fb:c0:44:fe:bf:e4:47:18:1a:08:99:9c:b5:36: d1:ba:80:83:26:2b:12:49:54:fc:83:0f:c7:7d:80: a8:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:4B:75:80:E3:99:BA:A2:AA:6A:09:C1:FA:3F:5C:C9:7C:4D:AD:35 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/25a8ab15-e085-3562-9462-51bb91799e31.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.68.223.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:6d:1f:ab:93:fb:12:1a:e2:56:e7:69:2d:1b:44:98:3b:97: 71:2b:c9:f2:8b:dc:9d:55:75:b6:83:52:3f:09:84:3a:87:6a: 4c:43:dc:80:36:26:43:a5:20:91:97:16:ba:81:71:93:62:f0: cd:59:84:10:0a:f5:95:1d:34:c9:03:30:4d:b3:ef:3c:0f:0b: 6d:62:64:cb:d9:44:2f:b4:de:34:e4:9a:2b:d6:aa:e5:0c:7c: b3:b3:0f:71:24:5f:28:68:bb:69:b8:60:29:4f:e9:d0:72:36: 89:10:32:5c:11:26:e8:39:be:24:55:d6:c4:27:6e:dd:41:5d: c9:16:72:10:81:14:a8:15:6c:eb:3b:84:69:4e:12:f1:ba:d3: 39:70:40:04:99:63:78:ee:1e:c5:61:b9:5e:aa:a3:ae:72:1b: f2:0f:0d:9e:21:ce:cb:0b:0b:4a:f3:f1:68:7b:51:6e:b8:a9: d1:fb:78:3e:3e:e4:bd:49:03:67:e8:f1:b5:f0:2c:d9:b0:f7: db:ea:71:24:85:ce:fa:66:9e:75:ff:30:3a:d0:4f:0a:d3:ea: bd:59:5e:de:f1:75:02:5b:25:59:0a:fe:a5:3e:49:d1:a3:4a: a8:83:f7:38:ea:d2:dc:4d:6d:82:d2:32:a0:c7:18:9e:46:bf: bc:9a:77:25 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5MVJtIHNeklPvtuEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDYyNjA5MDAxMloXDTI2MDkyNDA5MDAxMlowLzEtMCsGA1UEAxMk OWZmNDQ0YWItYmM5MS00ZjBhLTlkZmEtZGI2ZDBjOGQ0MjA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjExLrOWMMHf6J9eHfMx6NBo+xaDUz4nBPm+W 4goLhrZooPznu6ezwx4rXZUBmn5ayKvfUmhg1q0B7SUZ4fKvhAONmWIbEClkEE7v osUDuqdkwjOd3IYxWmMPCd4fFqQvVcqR10Z3iVGNLM4WYwfzCCP5GUkVbtKTooVv Sbgt1oxWzany9rTSY2GN1cYmP7xnNtV+ZaPfgpN4unedMDA54hWntxkqnlEwBD+1 K9WigjbSJWrY1pYb9q6I6UX/nz95cW0qySC7stEgCJmoe3N2QLS0eCS6LU2IpZN/ SYQXyEJb+8BE/r/kRxgaCJmctTbRuoCDJisSSVT8gw/HfYCo3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPJLdYDjmbqiqmoJwfo/XMl8Ta01MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMjVhOGFiMTUtZTA4NS0z NTYyLTk0NjItNTFiYjkxNzk5ZTMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArETfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIttH6uT+xIa4lbnaS0bRJg7l3EryfKL3J1VdbaDUj8JhDqHakxD3IA2 JkOlIJGXFrqBcZNi8M1ZhBAK9ZUdNMkDME2z7zwPC21iZMvZRC+03jTkmivWquUM fLOzD3EkXyhou2m4YClP6dByNokQMlwRJug5viRV1sQnbt1BXckWchCBFKgVbOs7 hGlOEvG60zlwQASZY3juHsVhuV6qo65yG/IPDZ4hzssLC0rz8Wh7UW64qdH7eD4+ 5L1JA2fo8bXwLNmw99vqcSSFzvpmnnX/MDrQTwrT6r1ZXt7xdQJbJVkK/qU+SdGj SqiD9zjq0txNbYLSMqDHGJ5Gv7yadyU= -----END CERTIFICATE-----Generated at Sat Jul 18 00:49:46 2026 by rpki-client