$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/443de06e-2ac4-33e9-a145-9da0e5d096ec.roa File: 443de06e-2ac4-33e9-a145-9da0e5d096ec.roa (raw, json) Hash identifier: kTTYRZN3KzW+7xBHu5YF+RuQ9m198v4DSf0/i88OVm8= Subject key identifier: D4:53:64:36:5E:B3:BB:E9:54:8A:11:51:95:97:B8:08:70:29:23:2E Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584E4C54A99126970FFEE662C680 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/443de06e-2ac4-33e9-a145-9da0e5d096ec.roa Signing time: Fri 26 Jun 2026 09:00:12 +0000 ROA not before: Fri 26 Jun 2026 09:00:12 +0000 ROA not after: Thu 24 Sep 2026 09:00:12 +0000 asID: 13335 IP address blocks: 172.68.206.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 Jul 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:4c:54:a9:91:26:97:0f:fe:e6:62:c6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Jun 26 09:00:12 2026 GMT Not After : Sep 24 09:00:12 2026 GMT Subject: CN=cac009e3-bd5e-4d75-a36c-d8607bdd3913 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:a6:d2:bc:dc:fc:16:87:7f:88:74:fb:44:dd: 4f:22:e4:e6:30:9b:b9:43:fa:28:f3:dc:69:73:8b: d1:8e:51:d1:62:91:fa:7b:a2:d8:fa:55:24:48:91: b5:13:61:57:70:4a:cc:63:88:31:64:86:aa:37:3e: eb:e3:30:8f:cd:4a:a7:61:dd:e0:07:bf:c0:79:f0: d8:42:ae:2e:ec:54:26:fe:b1:f6:cf:7f:7f:90:13: ba:85:84:d4:8f:2a:a4:33:a8:c6:d8:d8:2b:7e:35: f6:09:90:70:79:99:c8:5f:a4:ce:78:ab:28:15:ac: 59:4f:65:45:3c:43:b1:48:76:dc:53:7d:62:85:b7: b9:43:19:89:42:85:8a:fa:a6:22:2e:f5:e2:3b:ca: 17:a2:92:60:42:98:34:bb:a0:c6:43:5c:59:77:f1: 16:5e:5f:1c:a5:2a:0d:3c:f0:96:ed:73:0d:18:10: 94:ea:23:37:0d:59:c4:9c:1f:ac:c8:47:98:3b:9d: e7:6c:85:04:82:20:ec:ce:26:1b:34:47:b1:6c:8a: 38:58:8e:33:7c:d5:04:b1:94:19:6e:09:aa:29:d4: 7f:a3:e1:94:ad:54:5e:24:c2:6d:e8:6a:5e:eb:41: d4:24:32:46:b6:ca:00:18:ad:4f:f4:ea:7b:95:6d: 78:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:53:64:36:5E:B3:BB:E9:54:8A:11:51:95:97:B8:08:70:29:23:2E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/443de06e-2ac4-33e9-a145-9da0e5d096ec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.68.206.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:f0:13:01:20:aa:31:c0:1b:89:61:0e:c8:5e:5b:44:75:0d: a8:a1:7c:7c:40:de:06:30:f4:70:64:b4:e8:b5:1c:37:02:b5: f1:6e:3a:3f:13:a9:a8:34:f9:e8:dd:b2:a6:42:e7:66:f2:23: 24:d1:e7:3b:a4:b5:52:2f:26:c3:a7:9e:8a:b8:07:e4:c6:85: cf:db:54:1e:44:c8:9d:af:c6:12:04:2c:44:15:23:8b:07:20: bd:6a:94:b5:34:89:8a:16:94:46:3a:51:2c:55:76:31:2b:b5: 41:b6:03:d0:08:e3:77:ca:b6:44:65:2e:bf:f2:79:7d:20:4b: 9a:a3:41:2a:85:aa:b3:fd:50:be:08:c2:b5:88:54:ed:12:d7: 6b:0a:ee:19:63:c2:1d:19:b3:04:22:01:46:fd:b4:67:37:8a: ae:00:8e:21:c0:4a:a4:52:4f:74:0e:ef:f9:bd:9c:a6:68:ec: 13:67:b4:54:8d:2b:27:0b:38:c6:3f:e8:ce:d4:00:89:c1:6f: d3:56:8f:26:ad:9d:7f:f2:44:0f:da:23:43:7e:f4:0d:80:91: 73:49:8a:d8:6a:e4:10:87:18:ca:a7:8b:9b:95:e9:02:72:91: 86:ba:ec:71:6c:b3:97:7c:7e:ce:69:01:37:bf:db:95:45:7b: a4:39:eb:ce -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5MVKmRJpcP/uZixoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDYyNjA5MDAxMloXDTI2MDkyNDA5MDAxMlowLzEtMCsGA1UEAxMk Y2FjMDA5ZTMtYmQ1ZS00ZDc1LWEzNmMtZDg2MDdiZGQzOTEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjKbSvNz8Fod/iHT7RN1PIuTmMJu5Q/oo89xp c4vRjlHRYpH6e6LY+lUkSJG1E2FXcErMY4gxZIaqNz7r4zCPzUqnYd3gB7/AefDY Qq4u7FQm/rH2z39/kBO6hYTUjyqkM6jG2NgrfjX2CZBweZnIX6TOeKsoFaxZT2VF PEOxSHbcU31ihbe5QxmJQoWK+qYiLvXiO8oXopJgQpg0u6DGQ1xZd/EWXl8cpSoN PPCW7XMNGBCU6iM3DVnEnB+syEeYO53nbIUEgiDsziYbNEexbIo4WI4zfNUEsZQZ bgmqKdR/o+GUrVReJMJt6Gpe60HUJDJGtsoAGK1P9Op7lW14IQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNRTZDZes7vpVIoRUZWXuAhwKSMuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNDQzZGUwNmUtMmFjNC0z M2U5LWExNDUtOWRhMGU1ZDA5NmVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArETOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIfwEwEgqjHAG4lhDsheW0R1DaihfHxA3gYw9HBktOi1HDcCtfFuOj8T qag0+ejdsqZC52byIyTR5zuktVIvJsOnnoq4B+TGhc/bVB5EyJ2vxhIELEQVI4sH IL1qlLU0iYoWlEY6USxVdjErtUG2A9AI43fKtkRlLr/yeX0gS5qjQSqFqrP9UL4I wrWIVO0S12sK7hljwh0ZswQiAUb9tGc3iq4AjiHASqRST3QO7/m9nKZo7BNntFSN KycLOMY/6M7UAInBb9NWjyatnX/yRA/aI0N+9A2AkXNJithq5BCHGMqni5uV6QJy kYa67HFss5d8fs5pATe/25VFe6Q5684= -----END CERTIFICATE-----Generated at Sat Jul 18 00:47:25 2026 by rpki-client