$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a2e24288-e94a-3c26-93c5-4dd394919e0e.roa File: a2e24288-e94a-3c26-93c5-4dd394919e0e.roa (raw, json) Hash identifier: laechfXkwX5JhGhARrmGweDt/jwsaQTT8DGi74a3ySs= Subject key identifier: AE:43:29:FD:31:06:72:8F:41:9B:E0:28:68:0C:A4:64:84:8E:BD:95 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584E51E9EB87C61F8B67F778FA60 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a2e24288-e94a-3c26-93c5-4dd394919e0e.roa Signing time: Sun 28 Jun 2026 09:00:11 +0000 ROA not before: Sun 28 Jun 2026 09:00:11 +0000 ROA not after: Sat 26 Sep 2026 09:00:11 +0000 asID: 13335 IP address blocks: 172.70.208.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 Jul 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:51:e9:eb:87:c6:1f:8b:67:f7:78:fa:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Jun 28 09:00:11 2026 GMT Not After : Sep 26 09:00:11 2026 GMT Subject: CN=5877ec60-bf1c-48be-be1d-65ea338106a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:bb:f8:3b:4e:c3:dd:2e:2b:fa:2c:ce:2e:fa: 72:1a:57:73:59:4e:28:89:26:dc:b9:50:b0:35:b2: 32:93:5f:55:3a:8d:8d:34:ca:af:47:40:da:92:00: 4a:e6:6d:63:70:e1:e7:ac:f6:53:57:fb:61:3c:29: 20:ac:a9:aa:f8:75:78:b5:d8:34:b7:09:66:20:a5: 4b:f6:bf:7a:e4:ff:fb:8e:65:cf:a5:56:ea:8b:9e: a4:8b:63:d9:70:f6:da:46:89:23:1b:f4:52:34:b0: d2:bc:0b:e3:8f:39:24:2d:c7:83:07:3d:39:91:e4: 97:54:bc:33:fc:89:14:c1:a9:47:2e:8f:81:ef:52: 22:3b:ab:13:86:23:cd:66:41:8c:09:23:02:ac:f2: 7d:a2:7d:20:31:6c:fa:10:67:84:a8:43:6a:ad:b5: fa:d2:07:f5:95:57:7d:1e:b2:2b:47:7f:2a:da:c0: 97:49:8f:51:b6:a0:0d:dd:ee:28:9a:37:93:a1:b1: 74:4d:1a:09:59:c9:6c:81:27:a4:06:38:cd:ad:ac: dd:5f:ae:ee:72:2d:60:f2:69:88:ac:05:93:ad:f5: 5f:b6:15:77:0f:70:37:cd:42:0b:b4:37:a1:f6:33: 61:a1:f2:06:9f:df:fb:5c:74:be:40:65:17:42:5b: 43:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:43:29:FD:31:06:72:8F:41:9B:E0:28:68:0C:A4:64:84:8E:BD:95 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a2e24288-e94a-3c26-93c5-4dd394919e0e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.70.208.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:82:22:70:16:f2:63:e7:ff:43:7d:5d:03:0f:de:d7:b0:6b: 1d:57:ad:d2:90:38:3c:f8:dd:02:0e:dd:13:33:c3:bf:29:14: ea:d2:e4:e2:45:14:6f:32:6d:52:48:51:93:9a:5e:80:f4:7d: 82:8e:cf:6e:f6:90:97:1f:68:4e:47:e1:6c:d5:d3:2c:d5:ff: 2e:d3:cb:ee:53:0b:93:e1:22:c8:81:95:4f:1c:3b:61:7a:77: 3b:45:48:fd:30:f3:30:75:cb:31:05:df:a9:ee:d7:c2:16:d8: c9:2c:d9:f0:75:1c:09:46:0d:3e:1c:c3:8a:f8:41:56:6a:e0: dc:07:3d:82:89:3e:48:c3:64:84:d9:8a:b0:84:e3:d1:75:8e: 2d:63:87:b3:2f:88:cd:b2:ea:77:5e:2d:59:51:fc:a6:e5:5c: ad:aa:c8:54:96:14:d3:75:ca:2a:e3:c4:f4:07:05:17:15:cc: ad:ef:ef:94:74:04:d8:ca:c3:48:2f:c5:e6:8f:fb:90:6e:f6: c7:36:2e:f7:e4:11:6f:42:87:1a:07:66:a1:e9:16:bc:39:70: 9b:23:02:83:c1:f2:9d:d0:9b:cc:e6:1c:bd:b9:d3:42:70:ee: d3:b6:4b:31:c3:bc:cf:5d:b2:6b:5d:cc:fe:3a:e6:cb:0f:e0: 65:39:bd:b3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5R6euHxh+LZ/d4+mAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDYyODA5MDAxMVoXDTI2MDkyNjA5MDAxMVowLzEtMCsGA1UEAxMk NTg3N2VjNjAtYmYxYy00OGJlLWJlMWQtNjVlYTMzODEwNmEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAybv4O07D3S4r+izOLvpyGldzWU4oiSbcuVCw NbIyk19VOo2NNMqvR0DakgBK5m1jcOHnrPZTV/thPCkgrKmq+HV4tdg0twlmIKVL 9r965P/7jmXPpVbqi56ki2PZcPbaRokjG/RSNLDSvAvjjzkkLceDBz05keSXVLwz /IkUwalHLo+B71IiO6sThiPNZkGMCSMCrPJ9on0gMWz6EGeEqENqrbX60gf1lVd9 HrIrR38q2sCXSY9RtqAN3e4omjeTobF0TRoJWclsgSekBjjNrazdX67uci1g8mmI rAWTrfVfthV3D3A3zUILtDeh9jNhofIGn9/7XHS+QGUXQltD/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK5DKf0xBnKPQZvgKGgMpGSEjr2VMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvYTJlMjQyODgtZTk0YS0z YzI2LTkzYzUtNGRkMzk0OTE5ZTBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEbQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAICCInAW8mPn/0N9XQMP3tewax1XrdKQODz43QIO3RMzw78pFOrS5OJF FG8ybVJIUZOaXoD0fYKOz272kJcfaE5H4WzV0yzV/y7Ty+5TC5PhIsiBlU8cO2F6 dztFSP0w8zB1yzEF36nu18IW2Mks2fB1HAlGDT4cw4r4QVZq4NwHPYKJPkjDZITZ irCE49F1ji1jh7MviM2y6ndeLVlR/KblXK2qyFSWFNN1yirjxPQHBRcVzK3v75R0 BNjKw0gvxeaP+5Bu9sc2LvfkEW9ChxoHZqHpFrw5cJsjAoPB8p3Qm8zmHL2500Jw 7tO2SzHDvM9dsmtdzP465ssP4GU5vbM= -----END CERTIFICATE-----Generated at Sat Jul 18 00:47:51 2026 by rpki-client