$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/85365389-d6f8-3ee3-b7a7-baf47cd7043e.roa File: 85365389-d6f8-3ee3-b7a7-baf47cd7043e.roa (raw, json) Hash identifier: xS9MT3TVfsU98BRqV1ikXJ3Tf0EOAxaVq8R/1d+GLuU= Subject key identifier: DD:42:CB:97:BA:88:D3:BD:8E:2A:CA:01:35:DC:3F:31:70:18:D5:D0 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584E51E9F677BF7B60BD33AF8F80 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/85365389-d6f8-3ee3-b7a7-baf47cd7043e.roa Signing time: Sun 28 Jun 2026 09:00:11 +0000 ROA not before: Sun 28 Jun 2026 09:00:11 +0000 ROA not after: Sat 26 Sep 2026 09:00:11 +0000 asID: 13335 IP address blocks: 172.70.247.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 Jul 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:51:e9:f6:77:bf:7b:60:bd:33:af:8f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Jun 28 09:00:11 2026 GMT Not After : Sep 26 09:00:11 2026 GMT Subject: CN=2da25ff5-c15f-4094-85f0-a7bd6a305948 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:ef:08:c6:47:d7:63:9f:39:f1:12:f9:de:52: e5:1f:bd:24:f9:19:99:dc:22:70:6e:67:db:4f:48: 3e:3d:97:e8:f6:aa:cd:2e:2d:0f:d2:9b:e5:43:46: 8f:f1:c3:3b:b2:69:0b:3e:78:f0:3f:ea:ec:5b:31: ea:7f:41:70:f6:3a:93:dd:bc:61:7b:24:ea:ea:8d: ab:6e:b8:53:34:ab:07:a3:27:13:05:45:50:2a:75: 68:43:49:95:ad:96:25:d7:d1:04:a3:0d:95:f8:89: 5b:c4:b6:ed:a7:83:ff:e6:56:0d:75:ed:09:ea:b2: 13:b3:39:36:22:78:af:fd:20:ef:9c:f9:f0:e8:a5: 88:2e:38:76:64:0a:82:c2:9e:cd:bd:4d:ad:8d:9a: 87:89:57:dd:5f:e0:55:a5:51:08:c6:a1:1e:b1:4e: 67:75:1f:12:a6:ca:b8:05:d5:d9:24:9a:a3:8c:84: 26:03:7d:1b:ad:52:bb:1e:9b:ba:77:58:3e:a4:52: 04:5d:55:2a:bc:1b:de:4e:33:19:77:b0:27:9e:05: c3:45:d9:1d:47:a9:cf:30:83:44:23:9c:ea:e1:d0: 77:58:a7:b8:71:c8:5b:61:29:9a:e4:b9:f6:8e:8d: 33:ba:c4:14:1a:dc:ea:00:52:0e:dd:3c:8f:0c:a5: 5f:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:42:CB:97:BA:88:D3:BD:8E:2A:CA:01:35:DC:3F:31:70:18:D5:D0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/85365389-d6f8-3ee3-b7a7-baf47cd7043e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.70.247.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:49:40:62:06:37:06:e2:9c:fa:0f:25:80:d6:00:1a:b7:bc: b2:6a:02:79:cf:8f:08:51:0c:73:cb:b2:66:d2:a5:cb:9a:2c: 1a:17:ff:de:93:f6:28:12:33:50:e2:b1:fd:c8:b0:58:07:cc: c1:6a:b0:68:1e:f3:74:14:0c:b4:e1:31:67:43:83:bf:5e:34: a3:b8:95:1d:2e:50:0c:41:13:05:64:84:a3:26:c1:fc:55:d0: 75:06:b9:de:09:f1:1b:f8:7a:29:51:86:85:f3:3b:bb:96:30: 5f:4e:ff:dc:1a:f9:22:e9:00:13:23:7c:82:00:ca:2c:64:b1: 54:2e:4a:f7:2f:1e:65:1f:30:2a:e1:f6:63:41:21:03:36:a5: fe:38:34:60:ca:47:d5:dc:5f:7c:2f:1a:4a:da:e2:95:02:77: 99:eb:ca:dc:37:54:51:56:4a:95:17:0d:85:5f:b1:a8:c5:cc: 07:b5:82:3b:a1:27:14:85:8b:5b:4d:79:08:00:b0:5b:06:b6: c0:fa:cb:36:40:e8:b7:3b:12:4e:26:e4:e1:e3:e9:36:01:3d: 1c:7a:13:68:5f:cc:73:5e:87:0e:f9:0e:8f:30:47:da:f8:47: 2f:b2:ea:9b:09:29:54:00:37:eb:8b:45:9a:6d:0a:c4:78:46: 58:15:91:ac -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5R6fZ3v3tgvTOvj4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDYyODA5MDAxMVoXDTI2MDkyNjA5MDAxMVowLzEtMCsGA1UEAxMk MmRhMjVmZjUtYzE1Zi00MDk0LTg1ZjAtYTdiZDZhMzA1OTQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAge8IxkfXY5858RL53lLlH70k+RmZ3CJwbmfb T0g+PZfo9qrNLi0P0pvlQ0aP8cM7smkLPnjwP+rsWzHqf0Fw9jqT3bxheyTq6o2r brhTNKsHoycTBUVQKnVoQ0mVrZYl19EEow2V+IlbxLbtp4P/5lYNde0J6rITszk2 Iniv/SDvnPnw6KWILjh2ZAqCwp7NvU2tjZqHiVfdX+BVpVEIxqEesU5ndR8Spsq4 BdXZJJqjjIQmA30brVK7Hpu6d1g+pFIEXVUqvBveTjMZd7AnngXDRdkdR6nPMINE I5zq4dB3WKe4cchbYSma5Ln2jo0zusQUGtzqAFIO3TyPDKVfIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN1Cy5e6iNO9jirKATXcPzFwGNXQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvODUzNjUzODktZDZmOC0z ZWUzLWI3YTctYmFmNDdjZDcwNDNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEb3MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFhJQGIGNwbinPoPJYDWABq3vLJqAnnPjwhRDHPLsmbSpcuaLBoX/96T 9igSM1Disf3IsFgHzMFqsGge83QUDLThMWdDg79eNKO4lR0uUAxBEwVkhKMmwfxV 0HUGud4J8Rv4eilRhoXzO7uWMF9O/9wa+SLpABMjfIIAyixksVQuSvcvHmUfMCrh 9mNBIQM2pf44NGDKR9XcX3wvGkra4pUCd5nrytw3VFFWSpUXDYVfsajFzAe1gjuh JxSFi1tNeQgAsFsGtsD6yzZA6Lc7Ek4m5OHj6TYBPRx6E2hfzHNehw75Do8wR9r4 Ry+y6psJKVQAN+uLRZptCsR4RlgVkaw= -----END CERTIFICATE-----Generated at Sat Jul 18 00:48:17 2026 by rpki-client