$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5e5cf601-dd4a-3483-b580-0ba6786cf229.roa File: 5e5cf601-dd4a-3483-b580-0ba6786cf229.roa (raw, json) Hash identifier: AOk5pxxuECEirTDliBaZYc+fwJhdhBsC+8Du30Pf3+U= Subject key identifier: 90:5B:DB:58:71:7E:41:88:FB:5B:E4:71:F6:17:CF:4E:66:A7:FE:A7 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584E4AEF5D4C296743D7622FCB80 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5e5cf601-dd4a-3483-b580-0ba6786cf229.roa Signing time: Thu 25 Jun 2026 21:00:12 +0000 ROA not before: Thu 25 Jun 2026 21:00:12 +0000 ROA not after: Wed 23 Sep 2026 21:00:12 +0000 asID: 13335 IP address blocks: 172.68.99.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 Jul 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:4a:ef:5d:4c:29:67:43:d7:62:2f:cb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Jun 25 21:00:12 2026 GMT Not After : Sep 23 21:00:12 2026 GMT Subject: CN=4a9a4709-c1b7-4054-ad5c-7b606e8d132a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:fb:da:a9:52:1a:af:e0:db:e2:0c:68:82:62: d9:12:99:db:7e:97:c2:29:1c:50:d6:38:ff:a6:1a: 4b:57:6f:f5:6a:ac:fa:fb:f8:6b:b7:3a:22:24:42: 31:54:d2:8a:de:7d:c6:5e:5e:e1:dd:3e:bb:95:fe: 57:cb:bb:85:d4:39:f9:8b:44:94:e6:71:16:48:9a: b7:bb:41:4b:d1:5b:c7:eb:3d:cd:5a:18:1f:a1:08: c0:62:5a:ee:c3:a4:61:1f:8c:07:a8:38:11:c3:61: bd:78:8f:32:c9:4f:35:31:b4:f8:d5:55:ed:c8:12: b5:5e:cf:3a:16:d6:37:53:1b:d6:6c:78:f1:28:d5: 7e:a0:5c:eb:35:08:73:94:93:8a:67:63:77:17:66: f2:a6:7b:e2:ba:5b:41:b7:4b:ad:87:ba:43:12:be: 03:e6:1a:fc:ab:76:c8:78:07:e1:25:ae:32:f8:99: 65:e4:fa:da:93:8f:9c:21:88:b0:94:8b:ce:83:c2: 79:6d:d8:f1:c7:d3:02:95:15:b7:33:d8:94:19:d8: 4d:90:99:85:24:ca:d1:a1:a0:40:31:54:b1:5d:e6: 50:68:2c:4e:a7:87:f5:0e:15:1f:cd:fa:ca:1a:f3: 88:97:cd:dc:27:6f:d9:82:99:bb:e8:ea:1f:21:0a: 4e:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:5B:DB:58:71:7E:41:88:FB:5B:E4:71:F6:17:CF:4E:66:A7:FE:A7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5e5cf601-dd4a-3483-b580-0ba6786cf229.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.68.99.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:f3:d7:a9:14:6d:8d:a9:33:74:32:a8:0d:5f:10:2c:6f:e5: 61:45:04:97:23:e2:7b:9b:7d:61:fc:bd:ee:89:2a:d4:db:69: a9:96:0a:ab:1c:c6:81:4f:ed:89:b2:e3:d8:4d:d7:63:ef:7b: 43:fb:7c:96:9b:2e:21:10:0d:eb:6f:c8:ab:1d:5e:b9:19:71: 1d:10:d3:a0:0d:b6:ca:ef:51:2c:a4:e3:fc:b8:c3:d1:91:b8: 5e:e9:76:f2:75:4e:7e:e0:00:fd:24:bf:97:cc:d1:41:89:a3: 79:59:96:77:7b:c5:31:e9:94:2c:03:17:b2:5c:cb:7d:dd:b4: 02:96:53:30:2a:09:0c:8f:11:8e:5c:80:b9:8c:5f:82:4f:2b: 27:f6:2b:95:97:b2:17:b9:75:93:96:4f:52:05:5f:79:f2:46: 21:d6:f2:ba:b1:4c:8e:38:6d:17:ed:f5:84:14:be:7e:6d:98: 82:d1:e1:a2:44:16:ad:09:13:10:05:ea:9b:da:f9:ba:33:ea: 44:a2:be:7d:59:bf:26:ba:3b:1a:d4:98:dc:af:a7:58:30:d3: d0:96:71:eb:51:42:4e:f0:51:5a:ae:4c:8a:04:6b:b9:78:94: 7e:99:e0:86:5f:7c:e8:b6:35:fd:ba:2b:9f:1b:b9:07:be:7d: 0a:95:78:1f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5K711MKWdD12Ivy4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDYyNTIxMDAxMloXDTI2MDkyMzIxMDAxMlowLzEtMCsGA1UEAxMk NGE5YTQ3MDktYzFiNy00MDU0LWFkNWMtN2I2MDZlOGQxMzJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1vvaqVIar+Db4gxogmLZEpnbfpfCKRxQ1jj/ phpLV2/1aqz6+/hrtzoiJEIxVNKK3n3GXl7h3T67lf5Xy7uF1Dn5i0SU5nEWSJq3 u0FL0VvH6z3NWhgfoQjAYlruw6RhH4wHqDgRw2G9eI8yyU81MbT41VXtyBK1Xs86 FtY3UxvWbHjxKNV+oFzrNQhzlJOKZ2N3F2bypnviultBt0uth7pDEr4D5hr8q3bI eAfhJa4y+Jll5Prak4+cIYiwlIvOg8J5bdjxx9MClRW3M9iUGdhNkJmFJMrRoaBA MVSxXeZQaCxOp4f1DhUfzfrKGvOIl83cJ2/Zgpm76OofIQpOjwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJBb21hxfkGI+1vkcfYXz05mp/6nMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNWU1Y2Y2MDEtZGQ0YS0z NDgzLWI1ODAtMGJhNjc4NmNmMjI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArERjMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAALz16kUbY2pM3QyqA1fECxv5WFFBJcj4nubfWH8ve6JKtTbaamWCqsc xoFP7Ymy49hN12Pve0P7fJabLiEQDetvyKsdXrkZcR0Q06ANtsrvUSyk4/y4w9GR uF7pdvJ1Tn7gAP0kv5fM0UGJo3lZlnd7xTHplCwDF7Jcy33dtAKWUzAqCQyPEY5c gLmMX4JPKyf2K5WXshe5dZOWT1IFX3nyRiHW8rqxTI44bRft9YQUvn5tmILR4aJE Fq0JExAF6pva+boz6kSivn1Zvya6OxrUmNyvp1gw09CWcetRQk7wUVquTIoEa7l4 lH6Z4IZffOi2Nf26K58buQe+fQqVeB8= -----END CERTIFICATE-----Generated at Sat Jul 18 01:53:16 2026 by rpki-client