$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2cd7e034-61ed-3439-abac-dacadea12397.roa File: 2cd7e034-61ed-3439-abac-dacadea12397.roa (raw, json) Hash identifier: KCpnVOCU0YduQnnspjivJ2I0kYgUNnKnmGMynxyHbqw= Subject key identifier: 30:3C:07:BD:B7:F6:11:4E:9E:55:96:D6:20:2E:AA:A2:81:3B:C1:CF Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584EB57C504594827AE9DCF05840 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2cd7e034-61ed-3439-abac-dacadea12397.roa Signing time: Mon 03 Aug 2026 01:00:11 +0000 ROA not before: Mon 03 Aug 2026 01:00:11 +0000 ROA not after: Sun 01 Nov 2026 01:00:11 +0000 asID: 14789 IP address blocks: 172.70.63.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 09 Aug 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:b5:7c:50:45:94:82:7a:e9:dc:f0:58:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 3 01:00:11 2026 GMT Not After : Nov 1 01:00:11 2026 GMT Subject: CN=6670bd3e-c2c3-4dc9-b9e0-7e259bcd0339 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:df:40:f9:12:c5:54:47:c4:ef:45:23:71:aa: 46:b9:70:a6:02:42:42:63:6f:8b:0a:79:2f:13:dc: be:b7:a9:8b:39:6f:3c:2b:09:c5:48:b5:a0:ac:24: 4f:8f:a8:b2:af:78:cf:f2:3a:ca:f9:1e:81:13:a7: a5:c7:84:98:89:f4:40:11:a7:18:13:1a:5c:6e:c4: 69:e1:49:3e:e0:f3:01:24:b2:e7:e1:df:6a:64:38: 55:87:06:99:8e:6b:5e:8b:49:66:eb:d6:4a:ea:58: c9:4b:51:81:e2:cd:c6:61:fb:7b:e3:e4:7e:6e:c2: 97:2a:ba:e0:0e:a3:b8:d5:90:4f:55:4a:a5:e2:a8: b7:7d:75:a3:b1:51:48:31:a2:69:aa:06:33:9e:60: 0b:8d:bc:0b:27:83:92:28:41:d5:16:de:3e:06:62: dc:d3:52:99:06:67:b5:a3:e2:c5:49:36:98:43:33: 73:14:07:7b:72:ad:ce:10:b2:e8:76:c5:7c:71:ba: 18:a5:45:88:ca:70:38:4e:1d:63:4b:57:a6:96:3e: b4:75:67:56:2f:32:78:3e:b2:17:94:90:23:69:d9: 32:5c:07:80:1d:c2:9d:92:07:f5:10:bc:ed:03:80: 6a:da:63:7e:d0:78:bf:57:59:e9:ea:41:77:c2:12: ff:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:3C:07:BD:B7:F6:11:4E:9E:55:96:D6:20:2E:AA:A2:81:3B:C1:CF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2cd7e034-61ed-3439-abac-dacadea12397.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.70.63.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:52:e4:fd:73:4d:5d:85:de:b4:96:f0:06:d6:79:ca:f0:f5: 72:fd:78:ac:67:57:3e:d3:3e:46:37:6a:44:26:ec:a7:0f:2e: 49:70:87:b3:3d:ee:6d:64:b6:c9:47:6a:b4:10:c6:d9:e1:1a: 3d:4f:a8:07:c4:9b:e7:e0:cd:5c:60:77:8b:81:b6:31:af:6b: fe:1d:f7:25:dc:df:22:4b:9d:e1:3d:c5:6e:d3:f1:e8:eb:40: 15:20:65:65:43:68:1c:ad:93:47:74:9e:6c:7b:69:a2:c4:cb: d7:a4:1a:27:6f:cd:81:e5:1e:67:cd:b8:ef:9c:44:2c:65:ac: ce:39:47:4e:a9:eb:f9:8e:8a:71:5f:fa:60:e3:1c:ea:92:0e: 36:d7:bc:22:a8:86:2e:2d:e2:a2:d9:1c:b7:24:5f:09:5e:b6: 7e:40:37:7c:52:62:3f:3f:7e:ed:ea:f7:e7:1c:99:2c:1c:0f: b0:86:e6:8f:e1:a2:9d:99:2c:5a:e8:a4:45:74:35:12:6e:5d: 83:6d:dd:27:27:08:18:93:48:aa:05:3e:39:8a:fa:6b:65:22: c6:f1:2a:c6:fc:72:f9:7f:9b:d8:4b:fb:d2:f9:81:30:5f:a4: d9:38:06:02:e2:3d:53:f3:b0:f3:5a:d5:d6:90:89:b4:d4:b0: f6:19:14:64 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE61fFBFlIJ66dzwWEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDgwMzAxMDAxMVoXDTI2MTEwMTAxMDAxMVowLzEtMCsGA1UEAxMk NjY3MGJkM2UtYzJjMy00ZGM5LWI5ZTAtN2UyNTliY2QwMzM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo99A+RLFVEfE70UjcapGuXCmAkJCY2+LCnkv E9y+t6mLOW88KwnFSLWgrCRPj6iyr3jP8jrK+R6BE6elx4SYifRAEacYExpcbsRp 4Uk+4PMBJLLn4d9qZDhVhwaZjmtei0lm69ZK6ljJS1GB4s3GYft74+R+bsKXKrrg DqO41ZBPVUql4qi3fXWjsVFIMaJpqgYznmALjbwLJ4OSKEHVFt4+BmLc01KZBme1 o+LFSTaYQzNzFAd7cq3OELLodsV8cboYpUWIynA4Th1jS1emlj60dWdWLzJ4PrIX lJAjadkyXAeAHcKdkgf1ELztA4Bq2mN+0Hi/V1np6kF3whL/BQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDA8B7239hFOnlWW1iAuqqKBO8HPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMmNkN2UwMzQtNjFlZC0z NDM5LWFiYWMtZGFjYWRlYTEyMzk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEY/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADVS5P1zTV2F3rSW8AbWecrw9XL9eKxnVz7TPkY3akQm7KcPLklwh7M9 7m1ktslHarQQxtnhGj1PqAfEm+fgzVxgd4uBtjGva/4d9yXc3yJLneE9xW7T8ejr QBUgZWVDaBytk0d0nmx7aaLEy9ekGidvzYHlHmfNuO+cRCxlrM45R06p6/mOinFf +mDjHOqSDjbXvCKohi4t4qLZHLckXwletn5AN3xSYj8/fu3q9+ccmSwcD7CG5o/h op2ZLFropEV0NRJuXYNt3ScnCBiTSKoFPjmK+mtlIsbxKsb8cvl/m9hL+9L5gTBf pNk4BgLiPVPzsPNa1daQibTUsPYZFGQ= -----END CERTIFICATE-----Generated at Sat Aug 8 02:53:32 2026 by rpki-client