$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/652448bb-3d6e-3504-97d2-6e50fc7101b0.roa File: 652448bb-3d6e-3504-97d2-6e50fc7101b0.roa (raw, json) Hash identifier: K0P7rfBxz7DXZouixXSqAOYsknKohKdP+ukEma1ez3c= Subject key identifier: 70:B3:C0:F6:D9:3C:C0:31:D8:38:9D:3B:49:C6:B6:10:E7:C2:3D:30 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584E4C549ABDE06EDA7F96AD0080 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/652448bb-3d6e-3504-97d2-6e50fc7101b0.roa Signing time: Fri 26 Jun 2026 09:00:12 +0000 ROA not before: Fri 26 Jun 2026 09:00:12 +0000 ROA not after: Thu 24 Sep 2026 09:00:12 +0000 asID: 13335 IP address blocks: 172.68.195.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 Jul 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:4c:54:9a:bd:e0:6e:da:7f:96:ad:00:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Jun 26 09:00:12 2026 GMT Not After : Sep 24 09:00:12 2026 GMT Subject: CN=cfa0f91e-1715-4d76-a3b5-cf2235e81a39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:3b:f0:3f:44:17:b2:eb:d8:72:1f:57:73:db: e6:8a:48:1c:e8:01:58:43:3f:2f:5a:91:94:4a:ec: da:29:6a:de:a6:5c:fb:4b:3a:c0:d3:9d:da:62:38: 16:39:d8:fc:10:7e:9e:ce:9c:27:7b:a7:bb:4d:e7: 62:cb:ce:19:fd:b5:dc:8b:34:21:34:1d:38:a1:87: fa:e8:51:70:41:70:e9:c8:a0:a8:80:31:de:ec:9d: 08:b0:d2:78:23:60:e9:27:da:91:8c:35:59:0c:bb: 06:5f:a0:86:92:6e:3d:67:8e:30:ca:92:c3:aa:07: 66:63:3f:8c:57:b4:c9:11:26:47:91:e9:b5:e2:e6: 91:7f:a7:9b:82:09:23:03:5f:dd:d0:50:66:8d:6a: cd:40:35:4a:03:7c:98:72:9e:61:77:bd:44:04:68: 68:7c:82:eb:25:f8:d7:ac:6e:35:b2:8b:32:df:c9: 79:55:f2:48:47:78:0c:55:9c:3c:fc:9f:56:f9:25: d5:9f:56:13:79:43:fa:bd:a5:c9:83:bf:a6:4a:00: 1a:06:d4:f5:40:b5:f2:53:89:c7:0b:29:b9:d1:83: 95:b1:cb:24:3d:f4:a8:2f:2a:2d:50:1c:4e:0e:3a: b4:b2:e3:82:55:2e:fb:de:21:99:84:9a:56:ee:1a: 29:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:B3:C0:F6:D9:3C:C0:31:D8:38:9D:3B:49:C6:B6:10:E7:C2:3D:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/652448bb-3d6e-3504-97d2-6e50fc7101b0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.68.195.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:bd:fd:37:fe:e8:bf:3b:00:60:2f:f8:d7:0e:84:4f:2a:f8: 58:ce:18:1b:7b:62:d1:f6:99:8a:0d:ad:f7:44:a4:29:0c:10: 73:52:ea:ad:87:26:ee:79:a8:f3:4a:43:0a:32:31:cb:3c:7c: 22:51:ad:56:9c:c7:f0:14:36:ff:ba:0e:11:81:82:1c:ff:45: b6:6a:b0:43:ba:96:a2:5a:e5:c6:70:f3:3d:be:14:58:b0:2e: e8:a3:e8:cb:e3:dc:08:80:d8:30:af:13:30:0f:40:c0:03:40: ac:ee:6e:be:39:2f:01:18:b7:1f:82:8e:45:74:29:bc:2b:36: 7a:dc:87:58:4d:91:b2:84:67:98:fa:7e:ce:5a:4d:f5:d9:22: ac:bf:21:3f:63:b2:3c:60:76:00:35:51:8d:54:9c:0f:57:cd: 39:8d:c6:74:e0:b6:70:18:21:9f:69:39:1f:65:27:59:97:43: 12:5d:3f:1b:46:95:86:53:c1:01:0f:f5:02:64:64:47:a9:2e: 4b:ec:ad:e9:cc:3b:84:b5:ab:c7:b2:30:19:71:ef:7c:51:a4: f5:00:bb:70:e5:4a:4a:e7:96:3a:13:5e:cb:f5:83:85:fb:f1: bf:eb:8e:a6:41:3d:f7:8c:49:52:78:13:7e:9e:32:89:b4:e2: dd:58:b4:02 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5MVJq94G7af5atAIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDYyNjA5MDAxMloXDTI2MDkyNDA5MDAxMlowLzEtMCsGA1UEAxMk Y2ZhMGY5MWUtMTcxNS00ZDc2LWEzYjUtY2YyMjM1ZTgxYTM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0jvwP0QXsuvYch9Xc9vmikgc6AFYQz8vWpGU SuzaKWreplz7SzrA053aYjgWOdj8EH6ezpwne6e7Tediy84Z/bXcizQhNB04oYf6 6FFwQXDpyKCogDHe7J0IsNJ4I2DpJ9qRjDVZDLsGX6CGkm49Z44wypLDqgdmYz+M V7TJESZHkem14uaRf6ebggkjA1/d0FBmjWrNQDVKA3yYcp5hd71EBGhofILrJfjX rG41sosy38l5VfJIR3gMVZw8/J9W+SXVn1YTeUP6vaXJg7+mSgAaBtT1QLXyU4nH Cym50YOVscskPfSoLyotUBxODjq0suOCVS773iGZhJpW7hop6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHCzwPbZPMAx2DidO0nGthDnwj0wMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNjUyNDQ4YmItM2Q2ZS0z NTA0LTk3ZDItNmU1MGZjNzEwMWIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArETDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJG9/Tf+6L87AGAv+NcOhE8q+FjOGBt7YtH2mYoNrfdEpCkMEHNS6q2H Ju55qPNKQwoyMcs8fCJRrVacx/AUNv+6DhGBghz/RbZqsEO6lqJa5cZw8z2+FFiw Luij6Mvj3AiA2DCvEzAPQMADQKzubr45LwEYtx+CjkV0KbwrNnrch1hNkbKEZ5j6 fs5aTfXZIqy/IT9jsjxgdgA1UY1UnA9XzTmNxnTgtnAYIZ9pOR9lJ1mXQxJdPxtG lYZTwQEP9QJkZEepLkvsrenMO4S1q8eyMBlx73xRpPUAu3DlSkrnljoTXsv1g4X7 8b/rjqZBPfeMSVJ4E36eMom04t1YtAI= -----END CERTIFICATE-----Generated at Sat Jul 18 00:49:23 2026 by rpki-client