$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c8c2a844-ec1e-3e82-92e3-314d85bec573.roa File: c8c2a844-ec1e-3e82-92e3-314d85bec573.roa (raw, json) Hash identifier: zaKK5rhETGTgqNW4XdBdw0xsL1WKRCSaIn+1jrEpl8o= Subject key identifier: 39:73:B5:D1:B0:14:D8:5A:1B:1F:A4:69:F8:19:1C:91:3A:12:01:47 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584E4C549B96B8E15969EFB2CF40 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c8c2a844-ec1e-3e82-92e3-314d85bec573.roa Signing time: Fri 26 Jun 2026 09:00:12 +0000 ROA not before: Fri 26 Jun 2026 09:00:12 +0000 ROA not after: Thu 24 Sep 2026 09:00:12 +0000 asID: 13335 IP address blocks: 172.68.252.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 Jul 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:4c:54:9b:96:b8:e1:59:69:ef:b2:cf:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Jun 26 09:00:12 2026 GMT Not After : Sep 24 09:00:12 2026 GMT Subject: CN=05c0c40c-d172-4903-91da-a28413296330 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:54:4b:77:44:d2:36:3a:b1:45:e8:55:8b:d7: 37:76:0e:6d:13:1f:0b:60:cd:6a:7d:28:f7:0c:1b: d2:bc:44:e9:dc:60:45:fd:d4:b9:ba:7f:da:af:3e: 28:ed:60:0d:39:a9:bd:67:a7:ea:b5:76:0d:88:b8: dc:2b:17:58:22:d2:0f:0a:e2:07:b6:3e:d9:66:1e: bc:4c:d0:47:90:a7:04:22:3e:fe:23:19:01:f3:d5: ae:64:ce:03:bc:04:3b:ff:c5:3a:ba:d7:d5:95:b5: 22:17:aa:b6:2b:e8:02:d1:ac:e0:dc:df:69:0a:31: 88:4e:9e:b4:5b:0a:12:76:9c:4e:cb:71:0f:6b:e5: e6:93:f2:28:3c:fa:01:1e:c9:23:b8:1c:bb:84:d7: 48:ea:f7:fa:fe:03:8f:03:b8:68:48:29:27:8e:10: 68:a4:23:b2:99:fc:cd:71:18:19:28:f7:13:93:c1: 37:71:0f:bb:85:27:e0:42:c7:9e:08:e1:c2:c1:c4: fd:13:54:50:4e:e3:86:c0:7e:27:d8:52:ad:34:f6: 2e:79:aa:98:29:ef:ad:08:28:1e:6b:a7:f4:cc:82: b3:a1:63:ca:66:95:f9:90:b4:0b:c2:63:95:d4:e1: 67:44:b3:2a:8d:82:ca:18:a2:dd:f0:fe:ac:af:28: 4a:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:73:B5:D1:B0:14:D8:5A:1B:1F:A4:69:F8:19:1C:91:3A:12:01:47 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c8c2a844-ec1e-3e82-92e3-314d85bec573.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.68.252.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:37:2b:d3:9f:fe:0c:56:ed:4a:1c:0a:ca:f4:5a:90:bc:de: f1:6f:05:68:31:c1:94:e4:bb:19:9f:58:bd:b2:61:a2:0d:1f: ec:d4:e0:76:9e:c4:10:95:93:e7:cc:68:fe:fe:03:74:42:b7: 6f:41:fc:5d:2a:e2:19:eb:1b:45:1b:66:39:21:2c:7c:cc:80: 3f:4e:c0:bc:99:81:99:ae:de:92:76:1f:40:08:48:5f:47:99: 26:26:45:c6:4c:85:a8:a2:1d:45:1d:9a:d2:96:e7:15:9f:3e: 39:8e:c3:fe:95:dd:df:d1:8d:bb:43:69:4d:29:9f:79:d3:8a: 8a:0d:a4:06:7c:0c:1b:98:96:35:26:0f:e1:29:27:89:80:77: 2c:3b:0c:11:f5:cd:3f:9f:4d:e9:98:56:06:59:52:d7:a0:02: 45:73:ac:74:3e:66:a5:75:ca:db:50:5d:5a:2c:5e:05:a7:ce: a4:7e:d3:bb:28:0d:bb:33:d5:b5:0e:a7:a4:20:20:1a:1a:4c: 51:08:68:7d:af:59:49:18:77:77:76:2a:a1:98:11:ab:07:47: e7:4b:c9:08:d9:be:9d:d7:85:54:01:a5:7f:44:2b:34:e3:61: 44:34:e4:36:ad:af:f3:dc:99:2b:4a:c6:0b:3e:f6:97:16:86: f3:9b:ce:b8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5MVJuWuOFZae+yz0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDYyNjA5MDAxMloXDTI2MDkyNDA5MDAxMlowLzEtMCsGA1UEAxMk MDVjMGM0MGMtZDE3Mi00OTAzLTkxZGEtYTI4NDEzMjk2MzMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw1RLd0TSNjqxRehVi9c3dg5tEx8LYM1qfSj3 DBvSvETp3GBF/dS5un/arz4o7WANOam9Z6fqtXYNiLjcKxdYItIPCuIHtj7ZZh68 TNBHkKcEIj7+IxkB89WuZM4DvAQ7/8U6utfVlbUiF6q2K+gC0azg3N9pCjGITp60 WwoSdpxOy3EPa+Xmk/IoPPoBHskjuBy7hNdI6vf6/gOPA7hoSCknjhBopCOymfzN cRgZKPcTk8E3cQ+7hSfgQseeCOHCwcT9E1RQTuOGwH4n2FKtNPYueaqYKe+tCCge a6f0zIKzoWPKZpX5kLQLwmOV1OFnRLMqjYLKGKLd8P6sryhKIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDlztdGwFNhaGx+kafgZHJE6EgFHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvYzhjMmE4NDQtZWMxZS0z ZTgyLTkyZTMtMzE0ZDg1YmVjNTczLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArET8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC83K9Of/gxW7UocCsr0WpC83vFvBWgxwZTkuxmfWL2yYaINH+zU4Hae xBCVk+fMaP7+A3RCt29B/F0q4hnrG0UbZjkhLHzMgD9OwLyZgZmu3pJ2H0AISF9H mSYmRcZMhaiiHUUdmtKW5xWfPjmOw/6V3d/RjbtDaU0pn3nTiooNpAZ8DBuYljUm D+EpJ4mAdyw7DBH1zT+fTemYVgZZUtegAkVzrHQ+ZqV1yttQXVosXgWnzqR+07so Dbsz1bUOp6QgIBoaTFEIaH2vWUkYd3d2KqGYEasHR+dLyQjZvp3XhVQBpX9EKzTj YUQ05Datr/PcmStKxgs+9pcWhvObzrg= -----END CERTIFICATE-----Generated at Sat Jul 18 00:47:34 2026 by rpki-client