$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/69136d25-6cea-331c-b4f3-4060b88abae4.roa File: 69136d25-6cea-331c-b4f3-4060b88abae4.roa (raw, json) Hash identifier: pVVWvXF15Mb04mEdq58BNIyX3pdjFxkr6JT7bj6yI/g= Subject key identifier: 09:24:7B:B1:95:44:F5:EB:11:C3:75:7B:EE:43:B9:E1:E8:F0:F6:A5 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584E48249C9004291613CE918280 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/69136d25-6cea-331c-b4f3-4060b88abae4.roa Signing time: Wed 24 Jun 2026 21:00:12 +0000 ROA not before: Wed 24 Jun 2026 21:00:12 +0000 ROA not after: Tue 22 Sep 2026 21:00:12 +0000 asID: 13335 IP address blocks: 172.71.185.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 Jul 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:48:24:9c:90:04:29:16:13:ce:91:82:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Jun 24 21:00:12 2026 GMT Not After : Sep 22 21:00:12 2026 GMT Subject: CN=40f8d6cc-7949-47d5-89fa-d73356456774 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:e4:f5:2a:85:a7:4d:7e:21:8a:b2:7c:78:88: c1:28:1d:2b:3b:4a:be:1a:98:1f:8f:33:8e:e6:8d: 1a:eb:b1:2b:4e:de:96:b6:9f:81:01:aa:b3:b9:2b: 61:64:a9:9f:8e:2d:a7:53:47:fe:35:2d:65:1a:8f: 07:db:b5:b1:80:d9:e6:51:97:5a:5d:4a:e4:8c:a7: 88:b3:2b:49:0d:0e:c8:3e:37:86:45:ce:d9:6c:a5: 70:23:f6:a0:6e:3b:2c:83:96:46:82:94:c6:39:db: 5a:62:7c:d4:a3:04:54:37:6e:14:69:79:af:fc:84: 46:b8:c5:a2:2f:5c:1f:48:56:8a:95:aa:8c:f5:4d: 86:38:e2:44:a1:93:dc:9c:fb:a0:6b:99:c4:71:f2: 5a:cb:9c:76:91:e1:26:3e:0f:26:ca:12:c0:39:4e: f3:d3:c8:43:83:8b:03:18:8f:4b:10:76:39:30:68: 72:1c:39:3a:0b:b0:05:72:18:55:45:ca:d3:9f:3e: 20:7c:52:e8:ef:ab:8e:0a:01:90:d3:6e:c7:c6:52: d1:c7:b8:b8:63:2a:0f:71:2a:91:12:12:94:2d:6e: 96:15:66:d0:40:43:a8:9a:f3:73:b4:47:3d:84:8b: 4c:ba:e5:84:ee:48:66:d6:cb:d4:f8:a1:17:78:83: bb:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:24:7B:B1:95:44:F5:EB:11:C3:75:7B:EE:43:B9:E1:E8:F0:F6:A5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/69136d25-6cea-331c-b4f3-4060b88abae4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.71.185.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:d3:64:c4:f8:13:54:3b:90:29:fd:b2:c8:1a:e7:e8:04:75: 91:64:9c:08:30:45:1a:50:7d:0e:9d:1c:79:da:9a:9c:89:ab: 2a:6e:c7:70:c0:9b:13:0f:b3:71:02:19:8a:db:18:ee:67:88: 6d:b8:2c:47:c6:74:46:67:f5:19:b5:6c:85:c2:ad:a3:47:fb: 56:f7:b4:f0:75:a1:21:3f:5f:36:fc:65:bc:bb:e5:27:32:ea: df:94:3d:d0:8a:b3:04:28:2a:ff:8d:69:06:89:02:c4:8b:7c: 6b:ca:6e:27:df:ea:c1:3c:64:55:72:f3:4e:d8:78:fa:90:f2: c5:da:fd:06:bc:b4:75:fd:56:e2:0b:95:fb:dc:87:38:bf:41: a2:43:39:1a:49:77:a6:77:5d:5e:65:47:c4:87:86:0b:37:3f: 01:90:d4:29:f2:31:d7:90:58:a8:f8:9c:83:bf:d8:f8:07:62: 96:fc:3f:2e:f4:60:66:09:b0:05:8f:01:9e:eb:54:19:3d:02: 92:19:35:dd:d7:0f:aa:60:31:ad:01:20:d5:90:98:94:dc:aa: 17:fc:f7:c4:b6:0e:6c:60:9c:4a:a2:05:56:c0:05:b5:3f:70: 77:94:e0:f1:f9:15:94:4e:64:c9:0b:ee:9f:70:55:2d:34:37: 8f:73:46:bc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5IJJyQBCkWE86RgoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDYyNDIxMDAxMloXDTI2MDkyMjIxMDAxMlowLzEtMCsGA1UEAxMk NDBmOGQ2Y2MtNzk0OS00N2Q1LTg5ZmEtZDczMzU2NDU2Nzc0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmOT1KoWnTX4hirJ8eIjBKB0rO0q+GpgfjzOO 5o0a67ErTt6Wtp+BAaqzuSthZKmfji2nU0f+NS1lGo8H27WxgNnmUZdaXUrkjKeI sytJDQ7IPjeGRc7ZbKVwI/agbjssg5ZGgpTGOdtaYnzUowRUN24UaXmv/IRGuMWi L1wfSFaKlaqM9U2GOOJEoZPcnPuga5nEcfJay5x2keEmPg8myhLAOU7z08hDg4sD GI9LEHY5MGhyHDk6C7AFchhVRcrTnz4gfFLo76uOCgGQ027HxlLRx7i4YyoPcSqR EhKULW6WFWbQQEOomvNztEc9hItMuuWE7khm1svU+KEXeIO7iQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAkke7GVRPXrEcN1e+5DueHo8PalMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNjkxMzZkMjUtNmNlYS0z MzFjLWI0ZjMtNDA2MGI4OGFiYWU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEe5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAjTZMT4E1Q7kCn9ssga5+gEdZFknAgwRRpQfQ6dHHnampyJqypux3DA mxMPs3ECGYrbGO5niG24LEfGdEZn9Rm1bIXCraNH+1b3tPB1oSE/Xzb8Zby75Scy 6t+UPdCKswQoKv+NaQaJAsSLfGvKbiff6sE8ZFVy807YePqQ8sXa/Qa8tHX9VuIL lfvchzi/QaJDORpJd6Z3XV5lR8SHhgs3PwGQ1CnyMdeQWKj4nIO/2PgHYpb8Py70 YGYJsAWPAZ7rVBk9ApIZNd3XD6pgMa0BINWQmJTcqhf898S2DmxgnEqiBVbABbU/ cHeU4PH5FZROZMkL7p9wVS00N49zRrw= -----END CERTIFICATE-----Generated at Sat Jul 18 00:49:00 2026 by rpki-client