$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8212a53-b17e-300e-bc3b-50bdc6ba5219.roa File: b8212a53-b17e-300e-bc3b-50bdc6ba5219.roa (raw, json) Hash identifier: bUDZJUHprUF6z6BFHKLILH53PxssCzK/FOcr2ivNN3w= Subject key identifier: BA:AF:80:4B:55:FD:B2:8B:E7:97:A3:EE:F3:76:AA:3E:42:70:79:F5 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584E4824B24EE04894209A5A7D80 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8212a53-b17e-300e-bc3b-50bdc6ba5219.roa Signing time: Wed 24 Jun 2026 21:00:12 +0000 ROA not before: Wed 24 Jun 2026 21:00:12 +0000 ROA not after: Tue 22 Sep 2026 21:00:12 +0000 asID: 13335 IP address blocks: 172.68.32.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 Jul 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:48:24:b2:4e:e0:48:94:20:9a:5a:7d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Jun 24 21:00:12 2026 GMT Not After : Sep 22 21:00:12 2026 GMT Subject: CN=9efa4806-68e4-4d59-bf8d-a2b46a3def2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:a2:d7:33:a6:f1:d4:03:dd:02:a2:50:f8:4f: 5f:a2:95:dc:b4:b3:9d:f9:e3:d2:9d:25:5e:88:83: a3:b1:e6:f3:96:4b:b6:83:80:b6:5e:cc:fc:31:c4: 50:20:a1:7e:c7:85:62:34:33:a1:90:59:d1:25:32: 83:20:28:6b:d9:b1:35:ee:69:52:50:41:e0:c2:5e: 95:e2:30:8e:84:13:1d:ad:03:bb:f7:40:1a:ff:b2: 95:74:62:d9:26:aa:10:db:2d:81:a6:4e:b7:6f:4b: e0:97:af:8c:5a:8f:f5:fd:c9:5a:8d:9b:ce:2d:6c: 86:75:e4:87:81:6c:7f:cb:b0:85:e1:23:e7:4a:f8: 7b:5b:d4:d3:3f:bc:1e:f9:cb:3c:2c:7c:6c:a3:7e: b2:2a:1f:08:77:8e:bb:d2:fc:c3:4f:00:24:bb:7f: 6c:9a:ca:f4:64:dc:f8:ac:d4:8d:ef:45:35:8a:72: be:ed:9c:29:37:13:53:c4:67:3f:c9:df:c8:4a:7c: 53:2c:98:70:1e:1e:d3:dd:16:74:ad:f0:e7:8d:6c: 7b:3e:96:71:a4:bf:09:37:44:ce:7c:93:53:55:32: da:78:a4:f9:c1:c0:13:69:d4:2d:de:cb:1e:a5:cc: 97:22:17:ba:69:2f:7e:55:ca:78:e0:fb:c3:ac:72: 76:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:AF:80:4B:55:FD:B2:8B:E7:97:A3:EE:F3:76:AA:3E:42:70:79:F5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8212a53-b17e-300e-bc3b-50bdc6ba5219.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.68.32.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c7:92:84:75:3e:c4:5e:41:8a:04:c3:63:5f:09:af:1e:9f:fd: 7b:1b:21:c7:8f:8d:a3:30:c4:09:f1:1e:17:e8:b8:c2:82:7d: b6:99:45:6f:e3:66:e3:53:c4:a4:bf:ea:d9:73:68:80:7c:3a: f5:01:d5:a7:f2:cb:c1:f0:99:ef:25:35:1a:ab:43:9e:92:91: 40:9f:b0:11:10:30:b2:c5:30:bd:4d:2c:ba:78:08:87:c5:ea: 99:27:71:52:68:fa:90:d9:11:2e:a1:51:2b:b2:36:6f:c6:b5: 4b:34:78:8c:f5:cb:57:13:6d:b2:54:77:be:f9:d2:a7:e8:81: 0e:de:ab:18:62:ae:e0:8f:bd:a7:de:5d:3f:74:90:56:94:2d: c1:78:cc:ab:cb:6f:d6:3a:27:33:a7:e0:7e:19:eb:bb:42:ca: 47:89:e8:ef:7c:ed:ac:0d:9a:c8:49:8a:72:4d:29:47:5e:4c: 55:4b:c6:e1:d2:61:fa:63:33:b8:2f:d7:6c:ff:fe:5d:c5:50: 35:43:55:4d:00:ec:71:ea:aa:aa:6e:51:f5:f7:d8:f7:ab:3b: e2:b6:1f:d3:62:c2:72:a8:cd:c1:2e:e5:2b:bd:10:fb:bb:3f: 08:9f:98:7b:3b:92:ba:d9:27:f0:62:71:d2:c3:22:97:8f:1b: 1a:3c:ac:11 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5IJLJO4EiUIJpafYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDYyNDIxMDAxMloXDTI2MDkyMjIxMDAxMlowLzEtMCsGA1UEAxMk OWVmYTQ4MDYtNjhlNC00ZDU5LWJmOGQtYTJiNDZhM2RlZjJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl6LXM6bx1APdAqJQ+E9fopXctLOd+ePSnSVe iIOjsebzlku2g4C2Xsz8McRQIKF+x4ViNDOhkFnRJTKDIChr2bE17mlSUEHgwl6V 4jCOhBMdrQO790Aa/7KVdGLZJqoQ2y2Bpk63b0vgl6+MWo/1/clajZvOLWyGdeSH gWx/y7CF4SPnSvh7W9TTP7we+cs8LHxso36yKh8Id4670vzDTwAku39smsr0ZNz4 rNSN70U1inK+7ZwpNxNTxGc/yd/ISnxTLJhwHh7T3RZ0rfDnjWx7PpZxpL8JN0TO fJNTVTLaeKT5wcATadQt3ssepcyXIhe6aS9+Vcp44PvDrHJ2qwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLqvgEtV/bKL55ej7vN2qj5CcHn1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvYjgyMTJhNTMtYjE3ZS0z MDBlLWJjM2ItNTBiZGM2YmE1MjE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEQgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMeShHU+xF5BigTDY18Jrx6f/XsbIcePjaMwxAnxHhfouMKCfbaZRW/j ZuNTxKS/6tlzaIB8OvUB1afyy8Hwme8lNRqrQ56SkUCfsBEQMLLFML1NLLp4CIfF 6pkncVJo+pDZES6hUSuyNm/GtUs0eIz1y1cTbbJUd7750qfogQ7eqxhiruCPvafe XT90kFaULcF4zKvLb9Y6JzOn4H4Z67tCykeJ6O987awNmshJinJNKUdeTFVLxuHS YfpjM7gv12z//l3FUDVDVU0A7HHqqqpuUfX32PerO+K2H9NiwnKozcEu5Su9EPu7 PwifmHs7krrZJ/BicdLDIpePGxo8rBE= -----END CERTIFICATE-----Generated at Sat Jul 18 00:49:27 2026 by rpki-client