$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/bab89aa8-f770-324f-b2eb-0ca45279ba2e.roa File: bab89aa8-f770-324f-b2eb-0ca45279ba2e.roa (raw, json) Hash identifier: iSQup1z3qxo6y6w0XqEFvN7om4bxKwvVYSjaXgLh/Iw= Subject key identifier: 39:1D:08:5A:20:56:2C:54:1D:4A:FC:B9:8D:4C:55:BD:58:EB:7D:CF Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584E4AEF5A77EB8E1FC6EF8A7080 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/bab89aa8-f770-324f-b2eb-0ca45279ba2e.roa Signing time: Thu 25 Jun 2026 21:00:12 +0000 ROA not before: Thu 25 Jun 2026 21:00:12 +0000 ROA not after: Wed 23 Sep 2026 21:00:12 +0000 asID: 13335 IP address blocks: 172.66.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 Jul 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:4a:ef:5a:77:eb:8e:1f:c6:ef:8a:70:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Jun 25 21:00:12 2026 GMT Not After : Sep 23 21:00:12 2026 GMT Subject: CN=0b7ff137-731a-4e20-99f7-942b1decc803 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:84:69:3e:b3:6e:ff:02:a2:0a:c3:fb:7c:4f: e2:a6:75:d4:75:3a:0c:69:40:0c:e7:8a:fc:2a:0d: 8a:e9:8f:61:81:90:32:25:93:d0:97:bc:c0:92:36: d5:81:09:12:f8:a2:2a:5d:aa:4c:1b:a5:d0:12:87: f1:18:fb:e2:29:5b:80:dd:71:77:63:d7:ed:d7:84: db:4f:f9:b4:2c:4b:99:f9:f1:2f:11:5c:5b:59:b8: e8:5b:e4:d6:13:0e:f6:52:f0:ab:a7:ef:85:25:72: f9:43:a8:b0:54:08:ad:f9:a8:0e:f2:85:04:28:aa: 50:c5:e4:8b:b3:df:23:15:87:1d:02:e4:a2:49:c6: 8c:04:fe:c0:b6:9e:6e:0a:6b:f5:b2:1a:17:9b:5c: f7:97:54:94:16:ba:4f:da:95:20:34:a5:3b:7b:64: 2c:28:f8:dd:37:df:b2:7e:4d:e6:fa:72:e7:37:22: 67:54:91:f0:b2:ab:c3:75:a4:c1:fe:1b:34:ed:88: 70:01:68:1d:7d:fe:f0:26:b4:a4:6b:40:35:d3:0b: 25:3b:8b:1f:34:87:72:1f:01:f1:f5:2f:b5:c8:7e: 27:b2:43:83:eb:00:d3:28:d9:55:e2:21:3a:ff:54: 62:6a:4b:45:83:18:44:db:32:5c:14:ae:00:a0:cd: 6b:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:1D:08:5A:20:56:2C:54:1D:4A:FC:B9:8D:4C:55:BD:58:EB:7D:CF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/bab89aa8-f770-324f-b2eb-0ca45279ba2e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.66.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:1e:1b:1c:e2:44:87:9e:55:96:ae:b0:c3:ac:4e:cb:9f:99: c6:e0:f9:45:df:ae:6a:18:2e:bf:c9:0b:e6:f3:dd:9b:d4:2e: 66:e7:9c:3d:ad:33:34:eb:98:33:b1:c8:de:f9:36:ce:38:84: 0c:bb:18:77:87:00:48:ff:e7:65:e6:9a:06:95:86:7e:74:09: cb:96:4e:47:3e:91:0c:40:2f:fe:7c:73:70:61:4f:97:a2:56: 56:eb:a8:67:8e:a4:2f:45:16:99:6e:9f:7a:2c:17:69:72:0c: f2:d5:61:c3:b4:55:3b:59:50:b9:1d:e4:cb:b2:61:6b:a3:3c: 5f:42:d7:09:5a:a7:1e:0d:b0:2b:ac:db:84:a9:ac:9a:bc:4b: a5:b1:0f:68:a4:84:bb:26:7b:cb:43:cd:0e:51:02:5a:45:07: 2a:f0:64:a6:67:aa:25:2a:c3:0e:34:e3:0e:73:4f:c9:23:46: ad:c6:4d:5e:15:ca:e8:12:27:d9:e5:76:f5:07:9b:d8:b3:41: 04:63:52:6a:59:ed:ef:ff:a6:bd:72:81:8e:df:7c:09:6d:74: aa:de:27:70:b7:58:21:12:75:c1:aa:19:f1:96:ea:d9:98:88: 00:ae:7f:8d:76:98:94:b2:77:be:46:73:b3:28:5e:ee:03:ce: 34:f3:e0:2f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5K71p3644fxu+KcIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDYyNTIxMDAxMloXDTI2MDkyMzIxMDAxMlowLzEtMCsGA1UEAxMk MGI3ZmYxMzctNzMxYS00ZTIwLTk5ZjctOTQyYjFkZWNjODAzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz4RpPrNu/wKiCsP7fE/ipnXUdToMaUAM54r8 Kg2K6Y9hgZAyJZPQl7zAkjbVgQkS+KIqXapMG6XQEofxGPviKVuA3XF3Y9ft14Tb T/m0LEuZ+fEvEVxbWbjoW+TWEw72UvCrp++FJXL5Q6iwVAit+agO8oUEKKpQxeSL s98jFYcdAuSiScaMBP7Atp5uCmv1shoXm1z3l1SUFrpP2pUgNKU7e2QsKPjdN9+y fk3m+nLnNyJnVJHwsqvDdaTB/hs07YhwAWgdff7wJrSka0A10wslO4sfNIdyHwHx 9S+1yH4nskOD6wDTKNlV4iE6/1RiaktFgxhE2zJcFK4AoM1rMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDkdCFogVixUHUr8uY1MVb1Y633PMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvYmFiODlhYTgtZjc3MC0z MjRmLWIyZWItMGNhNDUyNzliYTJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErEKAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGUeGxziRIeeVZausMOsTsufmcbg+UXfrmoYLr/JC+bz3ZvULmbnnD2t MzTrmDOxyN75Ns44hAy7GHeHAEj/52XmmgaVhn50CcuWTkc+kQxAL/58c3BhT5ei VlbrqGeOpC9FFplun3osF2lyDPLVYcO0VTtZULkd5MuyYWujPF9C1wlapx4NsCus 24SprJq8S6WxD2ikhLsme8tDzQ5RAlpFByrwZKZnqiUqww404w5zT8kjRq3GTV4V yugSJ9nldvUHm9izQQRjUmpZ7e//pr1ygY7ffAltdKreJ3C3WCESdcGqGfGW6tmY iACuf412mJSyd75Gc7MoXu4DzjTz4C8= -----END CERTIFICATE-----Generated at Sat Jul 18 00:49:01 2026 by rpki-client