$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/669bd7a4-3c75-3a66-be24-62b755889d01.roa File: 669bd7a4-3c75-3a66-be24-62b755889d01.roa (raw, json) Hash identifier: 3nmA+c6bhClr2aDN2zciUWNKwsYMnWKSWCJvSfg5Vic= Subject key identifier: DF:4E:B7:61:65:BF:4C:23:76:24:72:D1:D3:67:35:D8:72:AD:4A:CA Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584EA7884437D413A8A8123711C0 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/669bd7a4-3c75-3a66-be24-62b755889d01.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 14789 IP address blocks: 172.70.190.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 09 Aug 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:88:44:37:d4:13:a8:a8:12:37:11:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=89eb8528-4a9c-4639-b76a-36518609496a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:8b:86:32:1a:26:6b:be:e0:74:4f:f0:88:7e: f8:07:fb:38:7d:1c:61:97:ff:c2:76:58:7b:f0:4f: cf:2c:97:a8:11:ce:2b:fd:0c:e5:e3:97:e8:db:9a: 79:96:c8:26:84:23:de:1c:c5:f0:00:b3:0f:ad:3b: 6f:13:74:84:90:49:aa:01:9c:de:f0:fd:59:c9:26: 5b:89:74:00:2d:ee:7b:f4:fb:5d:6c:d9:83:84:73: 00:94:a2:de:3b:9c:4f:63:13:f2:82:c7:84:1e:6a: b0:24:67:e6:7a:60:0c:08:63:ba:14:4b:13:e2:78: 17:b4:b3:b8:30:e3:d4:a4:17:46:12:9b:e9:35:3c: 8b:8a:81:00:b0:49:5e:ef:64:08:71:1e:60:c1:c8: b0:c2:70:7c:b8:ae:10:f5:7a:5a:5e:15:19:22:98: c5:f0:a2:87:4b:08:bd:79:52:d4:70:52:ea:a4:ac: 90:ca:9e:82:b8:b8:f6:18:a4:e0:0a:07:54:71:39: 49:e7:83:2d:74:5d:5f:f9:00:53:63:71:3f:4b:ad: 9d:20:40:00:05:bd:0f:6e:0a:55:2c:a0:2f:28:9e: 70:4a:13:81:10:96:7e:32:f6:d9:41:33:d9:47:9a: fc:ca:4e:d0:f7:d4:4b:6f:86:16:9f:b4:42:16:e3: be:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:4E:B7:61:65:BF:4C:23:76:24:72:D1:D3:67:35:D8:72:AD:4A:CA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/669bd7a4-3c75-3a66-be24-62b755889d01.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.70.190.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 99:d0:cc:21:dc:f9:f2:95:98:1f:a2:73:f2:1a:79:f2:30:2b: d4:91:aa:1d:65:42:3a:b8:1d:56:f7:42:fc:39:98:9c:f4:53: c9:76:ee:56:dd:34:3c:80:7f:31:fa:38:0b:9c:99:f4:b4:b0: 36:ef:71:28:13:88:3d:36:da:fe:44:57:b5:a4:68:42:23:8c: c3:93:6b:90:19:9f:9c:0c:05:ca:a0:41:0a:0e:6b:1d:d8:23: 95:bf:bd:05:ce:e4:15:70:ed:a2:33:af:0d:db:ea:f8:54:28: ad:15:7c:42:a9:88:c0:05:64:2b:0e:81:3b:c6:6e:93:65:ad: dd:98:22:a3:95:52:1c:7e:0c:21:4e:26:28:3a:52:19:b2:cb: 97:fe:5f:23:8b:c9:39:c3:19:9e:55:0f:ab:31:64:6c:12:06: 8f:c9:c7:34:00:06:2f:72:ee:17:89:85:89:86:85:b1:81:a2: 59:c3:4d:29:8c:11:27:d4:9d:b4:76:f0:f2:17:9b:61:50:db: 34:ad:60:d3:8f:9d:7e:5d:e3:50:aa:99:16:62:2e:57:50:7b: cf:4e:bc:72:66:a7:24:ba:06:3a:14:b6:4d:ba:5b:27:29:02: 8e:1e:23:5b:33:86:9a:29:71:73:3d:d4:99:8b:66:c7:75:7c: c3:51:25:e3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6niEQ31BOoqBI3EcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk ODllYjg1MjgtNGE5Yy00NjM5LWI3NmEtMzY1MTg2MDk0OTZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr4uGMhoma77gdE/wiH74B/s4fRxhl//Cdlh7 8E/PLJeoEc4r/Qzl45fo25p5lsgmhCPeHMXwALMPrTtvE3SEkEmqAZze8P1ZySZb iXQALe579PtdbNmDhHMAlKLeO5xPYxPygseEHmqwJGfmemAMCGO6FEsT4ngXtLO4 MOPUpBdGEpvpNTyLioEAsEle72QIcR5gwciwwnB8uK4Q9XpaXhUZIpjF8KKHSwi9 eVLUcFLqpKyQyp6CuLj2GKTgCgdUcTlJ54MtdF1f+QBTY3E/S62dIEAABb0PbgpV LKAvKJ5wShOBEJZ+MvbZQTPZR5r8yk7Q99RLb4YWn7RCFuO+gQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN9Ot2Flv0wjdiRy0dNnNdhyrUrKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNjY5YmQ3YTQtM2M3NS0z YTY2LWJlMjQtNjJiNzU1ODg5ZDAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEa+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJnQzCHc+fKVmB+ic/IaefIwK9SRqh1lQjq4HVb3Qvw5mJz0U8l27lbd NDyAfzH6OAucmfS0sDbvcSgTiD022v5EV7WkaEIjjMOTa5AZn5wMBcqgQQoOax3Y I5W/vQXO5BVw7aIzrw3b6vhUKK0VfEKpiMAFZCsOgTvGbpNlrd2YIqOVUhx+DCFO Jig6Uhmyy5f+XyOLyTnDGZ5VD6sxZGwSBo/JxzQABi9y7heJhYmGhbGBolnDTSmM ESfUnbR28PIXm2FQ2zStYNOPnX5d41CqmRZiLldQe89OvHJmpyS6BjoUtk26Wycp Ao4eI1szhpopcXM91JmLZsd1fMNRJeM= -----END CERTIFICATE-----Generated at Sat Aug 8 02:55:13 2026 by rpki-client