$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a3a7d12c-9866-37bb-9e05-5f79097187db.roa File: a3a7d12c-9866-37bb-9e05-5f79097187db.roa (raw, json) Hash identifier: jGP1NjMVqLzvE2epTwd7WOfZ51NHDj+xys1y8JJHJeo= Subject key identifier: 9A:61:21:13:93:56:4B:FC:9D:7E:5C:23:CC:C1:24:25:3E:21:F0:F5 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584E4824A00BC649D7B23B461000 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a3a7d12c-9866-37bb-9e05-5f79097187db.roa Signing time: Wed 24 Jun 2026 21:00:12 +0000 ROA not before: Wed 24 Jun 2026 21:00:12 +0000 ROA not after: Tue 22 Sep 2026 21:00:12 +0000 asID: 13335 IP address blocks: 172.69.207.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 Jul 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:48:24:a0:0b:c6:49:d7:b2:3b:46:10:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Jun 24 21:00:12 2026 GMT Not After : Sep 22 21:00:12 2026 GMT Subject: CN=bab920f0-4078-4a24-878d-509e1ef1855a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:6b:96:da:10:bd:a8:1d:44:20:a0:96:b7:93: 66:9d:0f:b7:39:0c:18:a3:2c:82:18:74:8e:4b:4b: e7:5d:a4:98:50:cf:ca:fc:61:72:f2:52:a8:1e:01: 1a:70:b8:37:a9:ea:cc:cf:53:0e:6e:63:58:7d:64: aa:d1:20:e9:d4:69:d3:04:eb:1e:b3:1c:39:ac:aa: c5:89:a8:c4:bb:67:37:e5:4e:b2:0e:e1:06:67:fb: 08:8b:73:47:c7:8f:b6:35:93:0b:14:13:86:a3:da: eb:29:8c:bb:70:44:f9:f5:4d:02:2b:cc:4d:a8:4e: c9:26:49:3c:2c:0a:53:cd:eb:fb:e2:10:a8:b7:24: b9:14:6d:26:c5:00:f9:6d:dc:46:15:23:c8:9c:92: fb:a8:e2:17:c2:ca:74:31:e0:34:ef:d5:22:9e:5f: 21:99:96:52:44:84:21:c1:96:91:ec:fc:86:c2:14: fa:e3:1c:bb:59:49:6b:8a:a7:b1:e9:fe:33:80:13: 85:64:cc:af:9f:d5:8b:22:e6:ff:5e:fe:23:54:f3: 08:4f:38:ed:db:24:41:46:41:67:e2:86:f2:06:3a: 55:da:99:e4:d2:30:8b:fe:a3:55:d2:e8:51:80:f0: 64:02:8b:72:03:27:d0:94:63:b9:5f:72:84:b3:e4: d1:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:61:21:13:93:56:4B:FC:9D:7E:5C:23:CC:C1:24:25:3E:21:F0:F5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a3a7d12c-9866-37bb-9e05-5f79097187db.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.69.207.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a8:6d:04:e8:b9:48:47:e6:8a:09:56:8d:3f:b7:88:69:1c:9e: 94:28:6c:6b:bd:44:aa:27:e8:e0:ee:39:57:28:56:ae:c1:82: e4:9c:4f:59:a3:2e:f3:0b:62:37:18:59:63:0f:9b:40:c2:44: 33:c7:f7:e1:ed:a7:94:ad:f8:52:e6:c2:1b:85:d7:b9:ce:d9: eb:b0:a8:72:1c:7c:29:0d:9b:24:d6:67:ae:75:62:f4:62:d4: 7f:ce:09:e7:8a:57:38:ba:19:d6:cc:16:b1:a2:95:19:ac:32: b7:5a:cd:2e:29:7a:1f:27:53:ba:50:49:5e:4f:08:76:b1:e1: 18:64:c4:60:4b:8f:1a:64:0a:49:06:21:10:cc:59:6e:d1:e4: 16:cf:50:fc:90:fc:ba:0a:03:16:cc:e4:dc:b2:37:40:86:a8: 1d:33:89:86:a6:01:33:35:3d:c0:8f:34:a3:eb:2b:63:d1:a5: 25:75:2c:65:00:aa:50:e6:a9:75:d6:ae:12:5d:e0:65:28:19: 2f:34:72:81:2a:7c:95:08:ce:f6:b3:c9:e4:af:ec:6e:27:56: e6:23:4b:0c:65:f5:5a:e2:aa:1a:54:50:f6:c4:53:b7:96:a7: ad:48:ac:32:49:03:67:52:ef:83:08:85:b8:ea:6e:96:67:9a: b1:d0:bd:01 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5IJKALxknXsjtGEAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDYyNDIxMDAxMloXDTI2MDkyMjIxMDAxMlowLzEtMCsGA1UEAxMk YmFiOTIwZjAtNDA3OC00YTI0LTg3OGQtNTA5ZTFlZjE4NTVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkmuW2hC9qB1EIKCWt5NmnQ+3OQwYoyyCGHSO S0vnXaSYUM/K/GFy8lKoHgEacLg3qerMz1MObmNYfWSq0SDp1GnTBOsesxw5rKrF iajEu2c35U6yDuEGZ/sIi3NHx4+2NZMLFBOGo9rrKYy7cET59U0CK8xNqE7JJkk8 LApTzev74hCotyS5FG0mxQD5bdxGFSPInJL7qOIXwsp0MeA079Uinl8hmZZSRIQh wZaR7PyGwhT64xy7WUlriqex6f4zgBOFZMyvn9WLIub/Xv4jVPMITzjt2yRBRkFn 4obyBjpV2pnk0jCL/qNV0uhRgPBkAotyAyfQlGO5X3KEs+TRxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJphIROTVkv8nX5cI8zBJCU+IfD1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvYTNhN2QxMmMtOTg2Ni0z N2JiLTllMDUtNWY3OTA5NzE4N2RiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEXPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKhtBOi5SEfmiglWjT+3iGkcnpQobGu9RKon6ODuOVcoVq7BguScT1mj LvMLYjcYWWMPm0DCRDPH9+Htp5St+FLmwhuF17nO2euwqHIcfCkNmyTWZ651YvRi 1H/OCeeKVzi6GdbMFrGilRmsMrdazS4peh8nU7pQSV5PCHax4RhkxGBLjxpkCkkG IRDMWW7R5BbPUPyQ/LoKAxbM5NyyN0CGqB0ziYamATM1PcCPNKPrK2PRpSV1LGUA qlDmqXXWrhJd4GUoGS80coEqfJUIzvazyeSv7G4nVuYjSwxl9VriqhpUUPbEU7eW p61IrDJJA2dS74MIhbjqbpZnmrHQvQE= -----END CERTIFICATE-----Generated at Sat Jul 18 00:48:20 2026 by rpki-client