$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/cab9fa92-3d96-386a-992f-f364a09af8b3.roa File: cab9fa92-3d96-386a-992f-f364a09af8b3.roa (raw, json) Hash identifier: k1DU324OtJXSXBzt0j5cBUK+uRszExyyKvdbpt4F5dE= Subject key identifier: 2D:E3:B6:74:7E:35:25:08:B8:84:E6:F8:6C:FA:E9:42:23:C0:C7:34 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584E51E9EA0C51020DD31AD754C0 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/cab9fa92-3d96-386a-992f-f364a09af8b3.roa Signing time: Sun 28 Jun 2026 09:00:11 +0000 ROA not before: Sun 28 Jun 2026 09:00:11 +0000 ROA not after: Sat 26 Sep 2026 09:00:11 +0000 asID: 13335 IP address blocks: 172.70.120.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 Jul 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:51:e9:ea:0c:51:02:0d:d3:1a:d7:54:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Jun 28 09:00:11 2026 GMT Not After : Sep 26 09:00:11 2026 GMT Subject: CN=81a7ad32-767d-42e7-a155-2578c9356c77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:ee:bb:5f:f6:b9:4d:0d:bf:64:52:1f:59:ad: 84:92:9c:f2:10:a2:8b:14:4f:36:17:86:2c:42:4c: e0:2a:c0:d2:14:4a:62:51:fa:a3:8a:52:d7:bb:bc: 91:49:cc:82:13:6a:62:4e:c2:66:83:33:cf:76:1c: 12:c2:4f:5b:cc:38:ea:6e:44:c4:62:44:52:dc:29: c2:e7:e8:eb:7d:38:69:e3:a9:07:5d:35:11:3f:d5: 34:7e:9f:c1:2b:b2:fb:54:c3:81:2d:be:a1:a7:8d: 28:52:e1:3a:16:c5:34:50:c0:06:9b:a7:61:e2:72: b2:b6:d1:21:5e:38:07:99:f9:7b:f7:6b:85:52:f0: 63:05:eb:b6:13:3d:f1:6d:d6:a2:4c:e2:73:c8:4e: d1:38:74:84:34:6c:89:f7:12:26:4d:ac:cc:88:3b: f3:f9:62:fe:ab:5b:33:e0:60:bf:9d:ff:71:db:b9: 39:1a:de:f7:ea:87:85:69:b9:eb:4c:16:a0:82:38: 0a:e9:bb:1d:0c:9f:24:a8:b5:52:a3:52:64:5a:68: 68:19:7a:8e:2e:56:89:31:80:1a:45:76:cd:76:06: d1:a0:93:64:19:da:bd:ed:d1:3a:7a:76:07:7b:a2: fa:8e:d4:f1:1c:5d:9b:a6:c6:34:5a:87:73:72:f7: 6f:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:E3:B6:74:7E:35:25:08:B8:84:E6:F8:6C:FA:E9:42:23:C0:C7:34 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/cab9fa92-3d96-386a-992f-f364a09af8b3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.70.120.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:1c:80:b9:3f:01:9b:79:7c:e8:2b:cd:da:e6:29:d0:04:8c: 82:d1:d8:b9:88:9b:e5:b7:9d:f6:61:28:d7:df:b2:3d:2f:db: 87:be:ff:89:92:f4:d2:09:f4:23:1b:3b:6e:c5:1b:93:ec:52: f5:12:af:f7:f1:f8:d4:be:3d:f5:37:0f:61:cd:6b:76:8b:58: b3:01:e6:5e:b9:f6:80:d2:3f:8a:b2:a8:dc:1b:10:3f:53:30: ee:38:a0:1c:e6:54:57:63:ac:06:0c:02:37:65:c3:f0:14:dc: 09:f4:14:86:47:8d:eb:cd:e1:a0:40:43:6d:c3:11:53:29:13: 82:93:a5:0b:26:64:51:be:ea:10:25:69:92:3e:a0:1b:14:32: 75:31:3e:f3:6c:3d:ff:5c:71:4f:c5:33:30:25:1c:d6:99:cc: 9c:d9:a4:27:d8:d5:9b:11:2a:43:01:55:d7:dc:44:32:d9:4a: 3e:e7:e1:91:c6:19:48:bb:ab:ef:c7:e7:56:c8:4a:ca:06:22: 35:32:09:b9:62:fb:b7:bc:b5:4b:2e:d7:b0:45:94:09:77:5b: ff:c3:ef:64:db:43:fa:79:61:9b:a0:f6:6f:7e:c6:03:27:8b: a0:89:d1:fe:a4:53:79:2c:e9:b2:58:a0:77:40:3d:52:a8:ff: 32:99:25:67 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5R6eoMUQIN0xrXVMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDYyODA5MDAxMVoXDTI2MDkyNjA5MDAxMVowLzEtMCsGA1UEAxMk ODFhN2FkMzItNzY3ZC00MmU3LWExNTUtMjU3OGM5MzU2Yzc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkO67X/a5TQ2/ZFIfWa2EkpzyEKKLFE82F4Ys QkzgKsDSFEpiUfqjilLXu7yRScyCE2piTsJmgzPPdhwSwk9bzDjqbkTEYkRS3CnC 5+jrfThp46kHXTURP9U0fp/BK7L7VMOBLb6hp40oUuE6FsU0UMAGm6dh4nKyttEh XjgHmfl792uFUvBjBeu2Ez3xbdaiTOJzyE7ROHSENGyJ9xImTazMiDvz+WL+q1sz 4GC/nf9x27k5Gt736oeFabnrTBaggjgK6bsdDJ8kqLVSo1JkWmhoGXqOLlaJMYAa RXbNdgbRoJNkGdq97dE6enYHe6L6jtTxHF2bpsY0WodzcvdvRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC3jtnR+NSUIuITm+Gz66UIjwMc0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvY2FiOWZhOTItM2Q5Ni0z ODZhLTk5MmYtZjM2NGEwOWFmOGIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEZ4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEscgLk/AZt5fOgrzdrmKdAEjILR2LmIm+W3nfZhKNffsj0v24e+/4mS 9NIJ9CMbO27FG5PsUvUSr/fx+NS+PfU3D2HNa3aLWLMB5l659oDSP4qyqNwbED9T MO44oBzmVFdjrAYMAjdlw/AU3An0FIZHjevN4aBAQ23DEVMpE4KTpQsmZFG+6hAl aZI+oBsUMnUxPvNsPf9ccU/FMzAlHNaZzJzZpCfY1ZsRKkMBVdfcRDLZSj7n4ZHG GUi7q+/H51bISsoGIjUyCbli+7e8tUsu17BFlAl3W//D72TbQ/p5YZug9m9+xgMn i6CJ0f6kU3ks6bJYoHdAPVKo/zKZJWc= -----END CERTIFICATE-----Generated at Sat Jul 18 01:55:53 2026 by rpki-client