$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2825c662-c8f6-3d53-bb9f-32cdbcf0ddcb.roa File: 2825c662-c8f6-3d53-bb9f-32cdbcf0ddcb.roa (raw, json) Hash identifier: 5x2VaM40yGD5zO8B/fgYv7lqQ451YyDqCj+2uvTqyTE= Subject key identifier: AE:48:EC:03:09:2C:F8:9E:9B:B3:DD:7C:45:04:10:10:42:B9:F2:92 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584E4AEF552E48A92F0D9AE31280 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2825c662-c8f6-3d53-bb9f-32cdbcf0ddcb.roa Signing time: Thu 25 Jun 2026 21:00:12 +0000 ROA not before: Thu 25 Jun 2026 21:00:12 +0000 ROA not after: Wed 23 Sep 2026 21:00:12 +0000 asID: 13335 IP address blocks: 172.68.243.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 Jul 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:4a:ef:55:2e:48:a9:2f:0d:9a:e3:12:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Jun 25 21:00:12 2026 GMT Not After : Sep 23 21:00:12 2026 GMT Subject: CN=41bf1fcc-0639-449e-8e00-ca60ad7f21af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:bf:b9:cb:e3:7d:db:87:68:53:60:89:9d:f2: da:7e:20:29:b6:66:e0:a1:07:32:17:81:da:9a:6f: 4e:58:e7:2f:f9:bb:10:f7:2d:a7:ec:89:83:11:8e: c3:2b:81:b9:50:a5:30:e3:cb:ff:47:15:7a:f3:a7: 8b:85:f1:fd:9d:a5:60:c9:85:dc:f3:3f:05:00:93: a6:5f:1c:c5:5e:dc:63:52:ee:de:f6:1e:d5:15:a6: f5:6c:ad:09:ae:d3:25:40:07:8c:e0:63:26:5f:48: 3f:f1:f9:da:64:7d:8f:b3:5b:24:3b:33:33:a3:3c: 23:b5:50:aa:35:5b:6b:2d:a9:b8:7e:65:04:64:47: b5:47:cd:ba:1d:fb:74:7f:02:05:a7:f7:d3:77:2f: 71:4a:d2:02:51:d6:7a:d0:ab:c4:55:1a:78:b8:23: d8:44:59:5c:52:2f:18:e3:74:d8:f6:8f:0c:86:51: 61:e6:8a:cd:7e:32:36:0a:c0:86:a4:dc:6d:b2:ce: 0d:86:68:39:36:c1:68:16:3d:35:61:10:af:6c:7b: 48:74:6a:78:0a:36:f2:40:4d:a5:70:69:b7:6a:02: 78:c8:4c:ff:c5:b3:7d:58:3a:37:cb:9a:e6:27:8e: b0:8c:3f:cb:da:e6:62:24:cb:f6:49:54:36:b1:10: 37:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:48:EC:03:09:2C:F8:9E:9B:B3:DD:7C:45:04:10:10:42:B9:F2:92 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2825c662-c8f6-3d53-bb9f-32cdbcf0ddcb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.68.243.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b6:c2:03:ed:6b:56:60:94:5f:d6:0d:5e:86:11:be:01:3e:8a: 4b:f2:5d:19:d8:b2:ce:d6:60:d0:e9:2f:ee:b3:f8:23:23:a9: a7:2f:cc:e8:31:a2:2f:3f:85:d9:b4:26:03:fe:47:30:c6:da: 84:ca:d8:86:9b:92:5c:6e:13:dd:a7:9c:91:df:18:5f:80:c4: 6c:88:e5:80:8d:82:3b:6e:74:6e:42:ae:5e:46:38:31:74:50: c8:96:68:ad:1e:6d:f9:c6:5c:5f:2e:0c:37:9a:7d:ac:65:a4: 82:e3:18:ba:cb:11:0e:57:60:54:60:1d:ba:a0:b0:f5:91:c4: d1:d5:79:18:33:46:43:0d:23:a0:24:b6:37:ea:ea:9b:ee:19: ba:d7:72:cf:de:35:56:f6:f7:a3:2f:db:34:2f:f2:70:8c:28: e5:c5:00:13:fd:9f:19:54:5e:96:32:6f:b5:d0:c9:2c:20:0e: d4:19:0b:68:fc:b5:cc:0c:70:01:70:48:b2:f9:85:d6:dd:2e: 2f:52:5c:37:52:c7:24:71:96:37:a6:4d:27:b4:7a:0d:bd:7e: 46:49:95:8a:e9:61:1c:e8:3b:18:a1:0e:e1:b5:c2:5f:9e:0f: d2:1d:c1:9f:4b:50:f9:92:54:c1:2e:97:7b:1e:79:95:81:91: a6:f7:dc:81 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5K71UuSKkvDZrjEoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDYyNTIxMDAxMloXDTI2MDkyMzIxMDAxMlowLzEtMCsGA1UEAxMk NDFiZjFmY2MtMDYzOS00NDllLThlMDAtY2E2MGFkN2YyMWFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz7+5y+N924doU2CJnfLafiAptmbgoQcyF4Ha mm9OWOcv+bsQ9y2n7ImDEY7DK4G5UKUw48v/RxV686eLhfH9naVgyYXc8z8FAJOm XxzFXtxjUu7e9h7VFab1bK0JrtMlQAeM4GMmX0g/8fnaZH2Ps1skOzMzozwjtVCq NVtrLam4fmUEZEe1R826Hft0fwIFp/fTdy9xStICUdZ60KvEVRp4uCPYRFlcUi8Y 43TY9o8MhlFh5orNfjI2CsCGpNxtss4Nhmg5NsFoFj01YRCvbHtIdGp4CjbyQE2l cGm3agJ4yEz/xbN9WDo3y5rmJ46wjD/L2uZiJMv2SVQ2sRA3qwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK5I7AMJLPiem7PdfEUEEBBCufKSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMjgyNWM2NjItYzhmNi0z ZDUzLWJiOWYtMzJjZGJjZjBkZGNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArETzMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALbCA+1rVmCUX9YNXoYRvgE+ikvyXRnYss7WYNDpL+6z+CMjqacvzOgx oi8/hdm0JgP+RzDG2oTK2IabklxuE92nnJHfGF+AxGyI5YCNgjtudG5Crl5GODF0 UMiWaK0ebfnGXF8uDDeafaxlpILjGLrLEQ5XYFRgHbqgsPWRxNHVeRgzRkMNI6Ak tjfq6pvuGbrXcs/eNVb296Mv2zQv8nCMKOXFABP9nxlUXpYyb7XQySwgDtQZC2j8 tcwMcAFwSLL5hdbdLi9SXDdSxyRxljemTSe0eg29fkZJlYrpYRzoOxihDuG1wl+e D9IdwZ9LUPmSVMEul3seeZWBkab33IE= -----END CERTIFICATE-----Generated at Sat Jul 18 00:46:42 2026 by rpki-client