$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/649c537d-669c-3deb-a266-9dcdbfd17007.roa File: 649c537d-669c-3deb-a266-9dcdbfd17007.roa (raw, json) Hash identifier: UD7GbfY4Wp0VRQiVUTHQO2FdTSgIFQkXCK5VSAPdbRY= Subject key identifier: 97:62:B5:09:9C:47:AA:6D:E7:DA:71:41:EB:68:22:47:D3:4C:2C:5D Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584E51E9EC117D284793014DB480 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/649c537d-669c-3deb-a266-9dcdbfd17007.roa Signing time: Sun 28 Jun 2026 09:00:11 +0000 ROA not before: Sun 28 Jun 2026 09:00:11 +0000 ROA not after: Sat 26 Sep 2026 09:00:11 +0000 asID: 13335 IP address blocks: 172.70.231.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 Jul 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:51:e9:ec:11:7d:28:47:93:01:4d:b4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Jun 28 09:00:11 2026 GMT Not After : Sep 26 09:00:11 2026 GMT Subject: CN=a8fdf6a5-2561-418e-9289-6141645e2a78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:0d:70:3c:19:a1:1f:11:c8:9e:75:fa:bf:d6: d9:06:d8:a2:53:3b:8f:6f:59:87:9d:88:6b:e4:a8: 88:5f:56:e6:3f:72:86:81:57:cf:9a:ce:e7:42:76: cb:e8:95:20:3b:72:e9:98:df:1b:8e:15:2b:1f:62: 3e:df:02:41:9a:ea:d7:1d:77:65:2d:b1:26:cb:3e: 57:da:ff:c2:e9:8a:c7:6f:01:10:4c:e0:93:b6:6e: 66:4a:cf:8e:71:d2:f6:db:8c:e2:00:ec:4a:c1:0e: a5:19:8b:63:aa:04:cb:41:fb:ed:cb:b4:f0:78:e0: dd:ca:78:18:ad:9a:78:f6:41:83:bc:04:ac:6c:85: 27:db:eb:89:98:b5:94:f9:70:84:b3:03:ec:77:b2: f7:6c:77:3b:53:3b:80:15:1f:91:c0:33:11:b4:6e: 84:be:6a:2e:ed:3b:de:74:31:87:d9:20:d8:73:3c: 94:ce:0e:a9:73:3d:1f:7e:88:1f:15:bf:86:22:a1: 8e:47:a8:40:15:e5:31:cd:28:27:b9:a6:32:ab:54: 46:7d:24:ec:06:80:19:b1:43:1b:92:93:d9:ce:f7: 4c:ee:c7:2e:c1:b0:67:af:12:60:35:46:87:6b:42: de:cb:cf:73:53:88:05:18:a2:78:b8:a0:82:7d:da: 92:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:62:B5:09:9C:47:AA:6D:E7:DA:71:41:EB:68:22:47:D3:4C:2C:5D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/649c537d-669c-3deb-a266-9dcdbfd17007.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.70.231.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:3a:fd:ff:e5:96:ba:26:d5:33:60:09:1f:f0:7e:51:a7:33: c0:35:49:d6:55:9d:a7:61:d3:ce:6f:90:9c:94:30:94:79:9b: af:2d:41:d2:cf:f3:b6:41:8e:45:e3:9f:c0:03:80:44:ef:e9: 12:79:89:fd:c7:b1:2c:b1:84:4f:a0:50:36:1a:1f:cd:d3:fc: d1:68:31:4d:0c:ca:08:bd:db:50:37:e5:ed:ef:10:01:74:74: 3a:b7:ef:3b:29:e6:64:20:b1:cf:a0:12:2f:6d:02:4b:f0:55: a3:54:f4:ac:1d:cb:42:0d:30:34:d9:49:48:7a:d9:69:bc:ad: 93:7b:63:0e:30:5c:b1:ff:52:c4:c7:8a:24:08:71:bc:eb:13: 7c:9d:88:14:23:b4:1c:68:bc:6b:e9:19:5f:99:d5:75:70:c3: 89:29:0d:86:95:36:c5:8b:32:e5:45:8a:ac:24:de:92:fa:66: f5:2f:32:3b:45:3c:eb:92:bb:1e:b0:26:f8:fd:21:bb:dd:52: de:5f:c9:5a:5f:9d:85:bb:a3:4c:55:b5:97:f1:9a:76:ba:cc: af:96:6c:90:a2:32:d2:45:bf:44:ac:3b:f6:f9:5e:e6:e4:f1: a1:57:6a:ce:3a:8f:99:3c:45:c2:e1:f0:a8:a2:a6:a6:39:55: dd:15:d8:c8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5R6ewRfShHkwFNtIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDYyODA5MDAxMVoXDTI2MDkyNjA5MDAxMVowLzEtMCsGA1UEAxMk YThmZGY2YTUtMjU2MS00MThlLTkyODktNjE0MTY0NWUyYTc4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8w1wPBmhHxHInnX6v9bZBtiiUzuPb1mHnYhr 5KiIX1bmP3KGgVfPms7nQnbL6JUgO3LpmN8bjhUrH2I+3wJBmurXHXdlLbEmyz5X 2v/C6YrHbwEQTOCTtm5mSs+OcdL224ziAOxKwQ6lGYtjqgTLQfvty7TweODdyngY rZp49kGDvASsbIUn2+uJmLWU+XCEswPsd7L3bHc7UzuAFR+RwDMRtG6Evmou7Tve dDGH2SDYczyUzg6pcz0ffogfFb+GIqGOR6hAFeUxzSgnuaYyq1RGfSTsBoAZsUMb kpPZzvdM7scuwbBnrxJgNUaHa0Ley89zU4gFGKJ4uKCCfdqSHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJditQmcR6pt59pxQetoIkfTTCxdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNjQ5YzUzN2QtNjY5Yy0z ZGViLWEyNjYtOWRjZGJmZDE3MDA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEbnMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHY6/f/llrom1TNgCR/wflGnM8A1SdZVnadh085vkJyUMJR5m68tQdLP 87ZBjkXjn8ADgETv6RJ5if3HsSyxhE+gUDYaH83T/NFoMU0Mygi921A35e3vEAF0 dDq37zsp5mQgsc+gEi9tAkvwVaNU9Kwdy0INMDTZSUh62Wm8rZN7Yw4wXLH/UsTH iiQIcbzrE3ydiBQjtBxovGvpGV+Z1XVww4kpDYaVNsWLMuVFiqwk3pL6ZvUvMjtF POuSux6wJvj9IbvdUt5fyVpfnYW7o0xVtZfxmna6zK+WbJCiMtJFv0SsO/b5Xubk 8aFXas46j5k8RcLh8KiipqY5Vd0V2Mg= -----END CERTIFICATE-----Generated at Sat Jul 18 01:51:32 2026 by rpki-client