$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/3da7ba70-1bb3-3819-afcf-716cf19c6678.roa File: 3da7ba70-1bb3-3819-afcf-716cf19c6678.roa (raw, json) Hash identifier: vuwm2W3ER68gOoxe6ZoNzAsnwwJuenaJIQu+99gaIDY= Subject key identifier: FC:F7:3F:7A:BF:87:00:0A:7B:8D:AE:96:DD:93:08:03:FB:C2:77:54 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584E4AEF65519EDFE24D9C177D40 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/3da7ba70-1bb3-3819-afcf-716cf19c6678.roa Signing time: Thu 25 Jun 2026 21:00:12 +0000 ROA not before: Thu 25 Jun 2026 21:00:12 +0000 ROA not after: Wed 23 Sep 2026 21:00:12 +0000 asID: 13335 IP address blocks: 172.64.236.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 Jul 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:4a:ef:65:51:9e:df:e2:4d:9c:17:7d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Jun 25 21:00:12 2026 GMT Not After : Sep 23 21:00:12 2026 GMT Subject: CN=0134b09b-2570-4dd0-8f93-dd63ef0c3430 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:54:79:2a:32:3f:be:d6:73:27:8e:f2:6d:9a: d9:46:e2:19:92:b7:95:07:2c:e9:9b:fd:70:e2:70: 19:6b:f6:c8:9d:a7:c9:23:b4:d5:33:05:01:45:a5: fc:b8:6c:37:9a:89:6c:0a:e9:d8:ae:85:44:74:4f: 97:db:d8:09:69:a5:89:01:ff:1a:4e:9a:8f:fb:e6: 5b:6f:3f:30:18:4e:96:0e:94:3d:3b:8d:37:de:54: 0f:bf:e3:10:7d:91:f7:75:2c:23:fa:51:49:e0:e9: 4e:ae:b8:89:11:6e:e0:b6:ff:cf:6a:e2:85:bc:06: e9:40:64:5c:1a:74:67:9d:b1:ab:34:85:36:7d:94: 4c:d6:f2:b0:35:77:31:76:4e:87:d6:15:0a:df:b9: a1:44:34:2b:39:34:fb:de:2e:4a:cf:5a:02:d3:d7: dc:54:93:19:2f:13:c8:4c:98:c6:4c:fd:60:e7:a7: a2:26:f0:cc:6e:1d:47:2a:d9:24:2b:fa:30:69:e0: f8:38:c7:ef:19:a6:64:95:1f:ff:a9:ff:43:37:17: b5:64:e8:b2:1f:41:18:cd:21:85:2f:9f:b8:1d:2c: e8:54:d0:6a:e9:cb:4b:e1:c9:71:6b:78:4c:23:4d: e7:cf:b7:a7:04:c8:c4:0a:38:82:e6:39:ce:26:c3: 6f:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:F7:3F:7A:BF:87:00:0A:7B:8D:AE:96:DD:93:08:03:FB:C2:77:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/3da7ba70-1bb3-3819-afcf-716cf19c6678.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.64.236.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:b6:41:af:43:b3:25:df:c5:ef:b6:14:03:d5:d3:2d:6c:fa: 07:9a:7b:9e:36:40:c5:c2:f9:98:1e:8d:2c:1a:ff:93:91:48: 20:88:00:89:c6:0d:18:16:dd:fa:13:84:2d:03:16:bc:68:66: ae:ff:36:27:bf:b5:34:a2:96:18:aa:a6:67:d1:de:8e:dd:21: c4:d6:89:84:f4:02:03:d2:aa:57:1a:4b:eb:d0:b0:c6:08:38: ad:e2:29:ef:8b:f9:a2:e8:2a:3f:aa:ec:48:4a:36:98:44:35: 7a:36:87:41:3b:30:78:7d:53:ae:f5:8b:58:78:35:79:1d:4a: 0f:c4:93:ae:97:b3:3a:38:a8:7f:23:e3:ab:73:ed:29:f5:09: 48:45:41:f3:df:a3:80:eb:5f:4b:5b:80:84:46:ab:a1:7a:fd: 19:50:73:f5:34:d8:a6:2b:e6:37:a2:e2:c6:63:30:b5:a4:9f: 66:98:eb:20:03:a4:1d:01:d1:d4:a1:4e:50:1b:a4:50:14:0f: f1:f5:f1:54:2f:fa:6a:3d:92:99:d5:47:2b:13:7d:53:34:60: f9:d1:cc:69:46:bd:8a:fe:63:77:01:96:29:ad:d9:b7:da:b0: 4c:31:76:5c:f1:37:6e:14:08:a6:c0:cb:09:44:46:b4:58:10: a7:18:b6:3f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5K72VRnt/iTZwXfUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDYyNTIxMDAxMloXDTI2MDkyMzIxMDAxMlowLzEtMCsGA1UEAxMk MDEzNGIwOWItMjU3MC00ZGQwLThmOTMtZGQ2M2VmMGMzNDMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyVR5KjI/vtZzJ47ybZrZRuIZkreVByzpm/1w 4nAZa/bInafJI7TVMwUBRaX8uGw3molsCunYroVEdE+X29gJaaWJAf8aTpqP++Zb bz8wGE6WDpQ9O4033lQPv+MQfZH3dSwj+lFJ4OlOrriJEW7gtv/PauKFvAbpQGRc GnRnnbGrNIU2fZRM1vKwNXcxdk6H1hUK37mhRDQrOTT73i5Kz1oC09fcVJMZLxPI TJjGTP1g56eiJvDMbh1HKtkkK/owaeD4OMfvGaZklR//qf9DNxe1ZOiyH0EYzSGF L5+4HSzoVNBq6ctL4clxa3hMI03nz7enBMjECjiC5jnOJsNvgwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPz3P3q/hwAKe42ult2TCAP7wndUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvM2RhN2JhNzAtMWJiMy0z ODE5LWFmY2YtNzE2Y2YxOWM2Njc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEDsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACy2Qa9DsyXfxe+2FAPV0y1s+geae542QMXC+ZgejSwa/5ORSCCIAInG DRgW3foThC0DFrxoZq7/Nie/tTSilhiqpmfR3o7dIcTWiYT0AgPSqlcaS+vQsMYI OK3iKe+L+aLoKj+q7EhKNphENXo2h0E7MHh9U671i1h4NXkdSg/Ek66Xszo4qH8j 46tz7Sn1CUhFQfPfo4DrX0tbgIRGq6F6/RlQc/U02KYr5jei4sZjMLWkn2aY6yAD pB0B0dShTlAbpFAUD/H18VQv+mo9kpnVRysTfVM0YPnRzGlGvYr+Y3cBlimt2bfa sEwxdlzxN24UCKbAywlERrRYEKcYtj8= -----END CERTIFICATE-----Generated at Sat Jul 18 00:49:01 2026 by rpki-client