$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/6da667db-6bce-3080-bb35-25cf25d1a256.roa File: 6da667db-6bce-3080-bb35-25cf25d1a256.roa (raw, json) Hash identifier: zi+Ak55GizsdHWV+8Mwau0a6URuIJQVL0JYHIEITAI4= Subject key identifier: F2:53:EA:AF:C3:D1:80:CF:8D:88:7A:2B:F2:AE:1D:1E:C5:D2:82:41 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584EB57C46335BFA38E76D80FB40 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/6da667db-6bce-3080-bb35-25cf25d1a256.roa Signing time: Mon 03 Aug 2026 01:00:11 +0000 ROA not before: Mon 03 Aug 2026 01:00:11 +0000 ROA not after: Sun 01 Nov 2026 01:00:11 +0000 asID: 14789 IP address blocks: 172.68.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 09 Aug 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:b5:7c:46:33:5b:fa:38:e7:6d:80:fb:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 3 01:00:11 2026 GMT Not After : Nov 1 01:00:11 2026 GMT Subject: CN=17cbc6bd-76b3-46d8-ba0e-6a7b1a95914c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:f6:95:81:c3:02:b7:15:9d:85:ab:5c:b7:28: 27:f6:c9:da:bf:1c:b9:c0:8d:38:b9:2f:17:de:ab: f1:82:d2:3a:7a:e8:1a:82:2d:a6:9e:45:55:c7:6f: 6c:59:ca:1b:e0:00:f2:f6:04:91:a5:9e:1c:3b:9c: 08:69:35:dc:71:8d:01:3b:9d:4c:2a:a0:77:96:58: d9:f8:1b:3e:d2:ca:e8:3e:93:ab:cd:7b:a5:da:84: e7:1d:43:3d:9a:2e:25:94:fd:1c:53:a0:76:3f:ba: 9f:ff:6b:1a:fc:eb:e1:a8:ac:80:53:70:5d:41:32: bd:41:dc:c8:23:f1:51:2f:40:7a:a6:12:84:3c:44: 83:02:af:7c:f2:e1:f2:6e:11:e8:c6:8f:ae:cf:e1: bd:06:b6:6c:bb:d0:43:c6:b5:f4:01:47:15:99:d8: 84:6a:ac:84:14:6f:09:90:1f:11:9c:ef:58:68:46: fc:c8:4d:7a:a2:08:e6:08:9a:77:55:09:9a:ca:76: ec:6d:ca:59:88:37:25:5a:9a:b3:76:d4:46:88:8c: 42:82:ea:53:d6:73:83:41:70:6c:d1:72:b7:da:74: 01:2b:ea:eb:aa:16:13:cf:d6:b3:11:c1:45:09:d9: 33:93:a4:e0:df:ef:8f:ba:96:0f:ed:6f:e8:a3:ae: 7a:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:53:EA:AF:C3:D1:80:CF:8D:88:7A:2B:F2:AE:1D:1E:C5:D2:82:41 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/6da667db-6bce-3080-bb35-25cf25d1a256.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.68.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ae:90:c8:52:38:08:eb:f6:e5:f6:d4:1f:7b:1d:88:bb:3a:e5: 15:60:9d:37:be:45:99:ac:da:a2:80:29:ba:0f:e7:c1:36:bf: b7:14:0b:8c:f7:7e:a8:7a:41:80:82:27:61:fa:8e:95:84:d0: 90:5b:8a:4e:fe:bb:81:16:d1:7d:46:22:d4:b3:b3:f5:b4:7e: 1b:28:f2:0d:57:5b:55:9b:97:5e:28:fa:09:30:ef:6e:0c:67: f2:43:b4:20:c8:5a:bd:41:99:43:30:7c:d3:0a:2f:41:ee:d7: b6:10:8c:7c:66:a2:da:0c:e5:11:5c:41:43:ae:57:98:1f:1f: 27:73:7e:79:46:ee:fd:ee:71:1e:bf:5b:a7:3c:13:f7:94:f0: 5d:d0:d3:f5:09:a0:e5:d0:31:44:e5:c4:6e:f1:e5:98:4a:f9: 09:d6:d7:1f:d0:5c:4b:75:e4:89:dc:8e:c3:ba:52:5b:44:2f: 0b:e7:4f:53:e0:2d:f8:89:7b:1e:ee:83:2c:78:f2:3f:fd:0d: d6:3a:12:53:af:f3:85:b5:74:82:69:e0:c3:13:a0:2d:5f:ad: 45:97:ac:08:9c:89:40:30:36:c3:b6:f9:4c:70:80:a2:3f:2a: c1:c3:1e:94:c7:a8:5e:45:0d:99:a6:80:27:22:cf:d6:d7:9a: 2f:15:d0:6e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE61fEYzW/o4522A+0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDgwMzAxMDAxMVoXDTI2MTEwMTAxMDAxMVowLzEtMCsGA1UEAxMk MTdjYmM2YmQtNzZiMy00NmQ4LWJhMGUtNmE3YjFhOTU5MTRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0vaVgcMCtxWdhatctygn9snavxy5wI04uS8X 3qvxgtI6eugagi2mnkVVx29sWcob4ADy9gSRpZ4cO5wIaTXccY0BO51MKqB3lljZ +Bs+0sroPpOrzXul2oTnHUM9mi4llP0cU6B2P7qf/2sa/OvhqKyAU3BdQTK9QdzI I/FRL0B6phKEPESDAq988uHybhHoxo+uz+G9BrZsu9BDxrX0AUcVmdiEaqyEFG8J kB8RnO9YaEb8yE16ogjmCJp3VQmaynbsbcpZiDclWpqzdtRGiIxCgupT1nODQXBs 0XK32nQBK+rrqhYTz9azEcFFCdkzk6Tg3++PupYP7W/oo656xQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPJT6q/D0YDPjYh6K/KuHR7F0oJBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNmRhNjY3ZGItNmJjZS0z MDgwLWJiMzUtMjVjZjI1ZDFhMjU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArESAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK6QyFI4COv25fbUH3sdiLs65RVgnTe+RZms2qKAKboP58E2v7cUC4z3 fqh6QYCCJ2H6jpWE0JBbik7+u4EW0X1GItSzs/W0fhso8g1XW1Wbl14o+gkw724M Z/JDtCDIWr1BmUMwfNMKL0Hu17YQjHxmotoM5RFcQUOuV5gfHydzfnlG7v3ucR6/ W6c8E/eU8F3Q0/UJoOXQMUTlxG7x5ZhK+QnW1x/QXEt15IncjsO6UltELwvnT1Pg LfiJex7ugyx48j/9DdY6ElOv84W1dIJp4MMToC1frUWXrAiciUAwNsO2+UxwgKI/ KsHDHpTHqF5FDZmmgCciz9bXmi8V0G4= -----END CERTIFICATE-----Generated at Sat Aug 8 02:53:26 2026 by rpki-client