$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ca350f89-da27-3eac-a40d-0e3e377f42ea.roa File: ca350f89-da27-3eac-a40d-0e3e377f42ea.roa (raw, json) Hash identifier: f1gB78LVKYiHVUmDL1pkKZ1FhUAuuZOWDBQXpwiYAHs= Subject key identifier: 2E:FC:94:8F:B1:02:B4:5C:C4:38:CA:7E:34:3B:9D:D2:76:F5:0F:1A Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584E4AEF5B07026DB44DC0C18740 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ca350f89-da27-3eac-a40d-0e3e377f42ea.roa Signing time: Thu 25 Jun 2026 21:00:12 +0000 ROA not before: Thu 25 Jun 2026 21:00:12 +0000 ROA not after: Wed 23 Sep 2026 21:00:12 +0000 asID: 13335 IP address blocks: 172.68.0.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 Jul 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:4a:ef:5b:07:02:6d:b4:4d:c0:c1:87:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Jun 25 21:00:12 2026 GMT Not After : Sep 23 21:00:12 2026 GMT Subject: CN=f062bb7a-9ce4-4b43-ad01-b984663280e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:c0:af:b8:ac:dd:d7:68:16:c3:c7:a8:97:4b: b6:e2:ae:2d:98:0e:c7:4c:90:0c:92:c1:34:46:c7: 8b:7f:50:56:2f:32:a9:b9:12:96:d8:a2:d4:52:ae: 16:40:1b:51:d8:f0:40:21:cf:12:f3:a2:41:24:ef: cc:4a:70:ae:7a:c7:72:40:34:0e:3f:a6:a3:86:0f: 49:f8:c1:14:06:e4:45:7b:fd:92:f6:98:f4:c6:c4: 67:ba:8d:af:28:65:3d:b4:02:7d:84:37:42:c2:72: 28:34:3e:fc:3d:44:7a:c0:c7:b6:40:1e:31:ce:df: 23:f3:e4:a5:1f:1b:c8:62:7d:56:50:e9:67:67:c8: db:3a:ba:24:18:6c:b0:84:09:66:cb:03:09:36:3e: 20:f5:76:7e:81:7d:d1:4b:28:62:3f:3a:50:18:ae: f7:23:86:ab:2c:02:bd:f0:55:31:64:ad:94:f4:67: c0:10:81:0f:db:78:74:5f:bb:93:ab:57:05:f3:6d: 8c:34:54:8f:0d:36:62:40:28:f0:0b:9f:40:a0:9b: dc:9d:5d:e3:4d:4b:74:74:2b:85:79:ba:8b:5e:75: 2d:1a:e5:33:1f:a1:d3:bb:34:ac:95:3b:f1:f9:08: f3:8d:03:89:34:87:c9:c6:4b:30:6e:19:86:f8:cf: bb:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:FC:94:8F:B1:02:B4:5C:C4:38:CA:7E:34:3B:9D:D2:76:F5:0F:1A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ca350f89-da27-3eac-a40d-0e3e377f42ea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.68.0.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:62:6a:5b:76:cf:6f:be:fc:f1:39:cf:a0:cf:b9:4f:a1:d1: 19:ba:85:38:0b:b1:98:d8:08:a0:7d:4f:95:2c:13:7d:9f:a6: 3a:de:ca:c7:7a:1f:31:60:51:e1:08:35:8c:83:68:23:b3:40: b9:93:fd:49:b4:6e:82:6b:25:89:95:5e:c3:57:72:05:b0:95: 86:47:34:59:93:2b:39:24:fb:dd:57:b1:bf:d5:aa:cc:58:cc: be:38:cc:26:27:db:68:e4:25:6a:4c:6a:50:d5:f2:a3:0e:67: 55:99:99:0a:3f:3f:ad:5a:a2:0a:c3:af:10:a4:dc:eb:fb:a7: 24:7d:b3:72:d2:c4:c2:1b:24:54:55:87:0a:05:12:ff:f8:b6: 44:e6:87:23:3d:b0:51:00:8b:72:67:eb:31:34:54:5e:9d:24: ab:8f:de:58:02:e0:17:d6:a3:8a:66:7e:ac:77:20:71:2a:0b: 45:c6:c7:0a:db:fe:54:f2:f7:6c:53:ed:36:0e:34:9b:4c:1d: d4:60:82:ec:26:5f:c6:76:d4:81:2f:a5:48:dd:3f:3b:19:37: 84:62:88:2e:ec:30:94:07:cc:03:64:b5:54:4d:1d:84:6a:88: 56:bc:84:72:95:3d:51:97:9b:60:3f:53:6b:10:3a:ea:c3:be: a1:ef:3b:84 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5K71sHAm20TcDBh0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDYyNTIxMDAxMloXDTI2MDkyMzIxMDAxMlowLzEtMCsGA1UEAxMk ZjA2MmJiN2EtOWNlNC00YjQzLWFkMDEtYjk4NDY2MzI4MGU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4MCvuKzd12gWw8eol0u24q4tmA7HTJAMksE0 RseLf1BWLzKpuRKW2KLUUq4WQBtR2PBAIc8S86JBJO/MSnCuesdyQDQOP6ajhg9J +MEUBuRFe/2S9pj0xsRnuo2vKGU9tAJ9hDdCwnIoND78PUR6wMe2QB4xzt8j8+Sl HxvIYn1WUOlnZ8jbOrokGGywhAlmywMJNj4g9XZ+gX3RSyhiPzpQGK73I4arLAK9 8FUxZK2U9GfAEIEP23h0X7uTq1cF822MNFSPDTZiQCjwC59AoJvcnV3jTUt0dCuF ebqLXnUtGuUzH6HTuzSslTvx+QjzjQOJNIfJxkswbhmG+M+7iwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC78lI+xArRcxDjKfjQ7ndJ29Q8aMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvY2EzNTBmODktZGEyNy0z ZWFjLWE0MGQtMGUzZTM3N2Y0MmVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrEQAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJRialt2z2++/PE5z6DPuU+h0Rm6hTgLsZjYCKB9T5UsE32fpjreysd6 HzFgUeEINYyDaCOzQLmT/Um0boJrJYmVXsNXcgWwlYZHNFmTKzkk+91Xsb/VqsxY zL44zCYn22jkJWpMalDV8qMOZ1WZmQo/P61aogrDrxCk3Ov7pyR9s3LSxMIbJFRV hwoFEv/4tkTmhyM9sFEAi3Jn6zE0VF6dJKuP3lgC4BfWo4pmfqx3IHEqC0XGxwrb /lTy92xT7TYONJtMHdRgguwmX8Z21IEvpUjdPzsZN4RiiC7sMJQHzANktVRNHYRq iFa8hHKVPVGXm2A/U2sQOurDvqHvO4Q= -----END CERTIFICATE-----Generated at Sat Jul 18 00:48:04 2026 by rpki-client