$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/68b7a134-6bf9-3359-a44d-62886ae81902.roa File: 68b7a134-6bf9-3359-a44d-62886ae81902.roa (raw, json) Hash identifier: kgEngKsvIvcp4lWM/KMoiodYNF4J0FsIGD+ZB90N1w0= Subject key identifier: 87:FD:79:A6:AE:FE:50:0C:37:3E:E7:37:53:52:78:AE:C1:86:C6:E1 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584E48249DD4BCF914DACF1E17C0 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/68b7a134-6bf9-3359-a44d-62886ae81902.roa Signing time: Wed 24 Jun 2026 21:00:12 +0000 ROA not before: Wed 24 Jun 2026 21:00:12 +0000 ROA not after: Tue 22 Sep 2026 21:00:12 +0000 asID: 13335 IP address blocks: 172.71.238.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 Jul 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:48:24:9d:d4:bc:f9:14:da:cf:1e:17:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Jun 24 21:00:12 2026 GMT Not After : Sep 22 21:00:12 2026 GMT Subject: CN=58977701-e53b-4d26-9124-6b254fae57dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:9b:96:24:3a:57:be:3c:5a:6a:00:64:01:e2: e5:ad:4a:4f:ed:f3:fc:f8:a1:9d:74:ff:5a:82:cc: c1:00:1a:e1:43:2f:06:c0:18:61:3d:ed:bb:94:67: 7e:ae:ba:91:aa:51:14:ec:7a:ad:2a:c1:0e:8b:fa: 23:07:47:6c:3e:2f:15:a7:03:76:cf:4a:8e:1b:55: ff:3b:2f:e7:6f:f3:d1:7a:5f:49:70:dd:5d:8c:77: 2c:e5:b7:fc:c8:1c:4a:a0:0f:4d:0d:95:bf:2d:30: 01:78:4f:7a:00:31:f7:cc:f4:22:43:5c:a4:d7:68: 0b:7d:39:c7:74:8f:22:7d:80:a6:75:b9:a4:c6:b7: 5b:91:0b:8f:05:04:a3:b9:be:f4:7b:e1:cc:0a:ef: 7d:60:76:8e:cf:9d:0d:73:c8:2e:15:34:72:2c:02: ba:32:94:59:27:f1:aa:82:c0:19:25:ab:27:f0:7f: 1e:48:4f:b9:6a:23:a8:8a:69:60:0c:5b:ce:82:dd: 6f:8a:12:fa:d0:d4:d7:96:3b:78:f6:5f:42:23:ab: 0a:e7:13:d1:7a:c5:e5:40:e2:f8:43:c6:30:d2:b3: ac:c4:a6:a6:cb:4d:c1:20:0c:1a:77:23:77:16:c6: 45:21:f2:da:e0:7d:55:7b:75:4a:4b:d7:94:7e:48: 77:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:FD:79:A6:AE:FE:50:0C:37:3E:E7:37:53:52:78:AE:C1:86:C6:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/68b7a134-6bf9-3359-a44d-62886ae81902.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.71.238.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:3b:c0:34:cd:69:8e:cc:ea:75:04:1e:2a:75:97:8b:b6:00: 90:32:ff:69:aa:5e:f1:a4:41:5b:ec:d9:ce:2a:c8:69:77:65: 57:31:5f:7b:c3:7b:e5:c5:8d:bd:c1:4e:bc:e2:a5:4f:11:07: cf:84:35:28:9a:34:0a:de:c2:e3:7e:f3:6b:b6:ec:59:e6:81: 9e:8d:20:67:55:dc:72:9a:a1:6c:35:91:76:4c:b3:e0:8c:16: de:05:e7:ba:9e:0a:4a:b7:d4:90:c0:d7:86:f0:ab:04:da:80: 25:e0:2e:be:ba:75:7b:8a:5a:df:2e:da:4c:b9:35:c4:71:cf: 21:db:09:1f:fa:8f:c8:76:1a:1c:2b:0f:48:d1:c4:61:85:a7: b1:e5:63:9d:52:e5:21:b3:3a:89:1a:cf:70:51:d0:17:7f:3e: d3:18:08:f1:19:64:5d:69:d5:6e:68:ee:73:54:1e:c4:fe:d3: 33:cd:85:be:6b:cd:10:40:64:15:31:14:d2:51:4e:81:70:10: 9a:15:e1:87:30:97:92:87:7e:bf:47:3a:72:70:7d:a3:0a:5e: d3:d1:64:86:3a:99:6f:31:da:10:cc:ec:e1:df:c1:ea:c7:d0: e4:d0:78:61:b0:26:fd:5c:be:da:f9:7f:50:b8:2b:17:62:49: a3:be:b3:0c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5IJJ3UvPkU2s8eF8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDYyNDIxMDAxMloXDTI2MDkyMjIxMDAxMlowLzEtMCsGA1UEAxMk NTg5Nzc3MDEtZTUzYi00ZDI2LTkxMjQtNmIyNTRmYWU1N2RjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhZuWJDpXvjxaagBkAeLlrUpP7fP8+KGddP9a gszBABrhQy8GwBhhPe27lGd+rrqRqlEU7HqtKsEOi/ojB0dsPi8VpwN2z0qOG1X/ Oy/nb/PRel9JcN1djHcs5bf8yBxKoA9NDZW/LTABeE96ADH3zPQiQ1yk12gLfTnH dI8ifYCmdbmkxrdbkQuPBQSjub70e+HMCu99YHaOz50Nc8guFTRyLAK6MpRZJ/Gq gsAZJasn8H8eSE+5aiOoimlgDFvOgt1vihL60NTXljt49l9CI6sK5xPResXlQOL4 Q8Yw0rOsxKamy03BIAwadyN3FsZFIfLa4H1Ve3VKS9eUfkh3pQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIf9eaau/lAMNz7nN1NSeK7BhsbhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNjhiN2ExMzQtNmJmOS0z MzU5LWE0NGQtNjI4ODZhZTgxOTAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEfuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGQ7wDTNaY7M6nUEHip1l4u2AJAy/2mqXvGkQVvs2c4qyGl3ZVcxX3vD e+XFjb3BTrzipU8RB8+ENSiaNArewuN+82u27FnmgZ6NIGdV3HKaoWw1kXZMs+CM Ft4F57qeCkq31JDA14bwqwTagCXgLr66dXuKWt8u2ky5NcRxzyHbCR/6j8h2Ghwr D0jRxGGFp7HlY51S5SGzOokaz3BR0Bd/PtMYCPEZZF1p1W5o7nNUHsT+0zPNhb5r zRBAZBUxFNJRToFwEJoV4Ycwl5KHfr9HOnJwfaMKXtPRZIY6mW8x2hDM7OHfwerH 0OTQeGGwJv1cvtr5f1C4KxdiSaO+sww= -----END CERTIFICATE-----Generated at Sat Jul 18 00:49:03 2026 by rpki-client