$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/eb9c9955-2742-37c2-abee-ce50eda1bddd.roa File: eb9c9955-2742-37c2-abee-ce50eda1bddd.roa (raw, json) Hash identifier: hJtsyta+3xZ3naoPbI0Xut6InBjp6ly3f7h8R7rR2EA= Subject key identifier: B8:98:8F:52:EC:9F:74:04:DB:0A:C7:79:9A:94:2B:A7:2C:B3:F2:08 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584E5084AE73D72E3E8DA6711B40 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/eb9c9955-2742-37c2-abee-ce50eda1bddd.roa Signing time: Sat 27 Jun 2026 21:00:12 +0000 ROA not before: Sat 27 Jun 2026 21:00:12 +0000 ROA not after: Fri 25 Sep 2026 21:00:12 +0000 asID: 13335 IP address blocks: 172.70.99.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 Jul 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:50:84:ae:73:d7:2e:3e:8d:a6:71:1b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Jun 27 21:00:12 2026 GMT Not After : Sep 25 21:00:12 2026 GMT Subject: CN=65eb7f5d-b0bc-4bb1-b57d-7d520617ae1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:69:b8:06:b4:1d:11:ec:d9:72:51:4f:b0:6f: ec:5f:9f:1a:8d:b7:b5:d7:3f:84:4e:58:52:31:55: 42:fe:ec:a4:9e:cb:c7:52:0e:c3:32:e4:04:34:25: 86:29:12:09:03:3e:f7:d3:2b:c9:da:b1:47:2d:18: db:3f:a9:35:ba:19:fb:72:a2:9b:ad:5b:d3:54:8d: 95:04:bf:10:ad:39:65:f5:68:3c:e9:a1:59:cf:38: 07:59:f7:67:86:88:b4:6c:c1:1a:7e:4c:3b:33:db: cb:a9:4a:69:3f:73:b3:d4:e8:0a:75:ee:26:40:2b: 31:10:92:bb:cb:22:14:8d:77:06:33:bd:f4:17:0a: 3f:61:f1:13:2e:2d:84:d4:5a:ba:d0:c4:ef:9b:c0: b3:09:7a:c8:6e:24:52:91:d9:f0:12:fe:ff:cf:88: c9:00:50:f6:8c:90:be:74:c7:49:f6:25:49:ac:b8: 34:b3:91:9a:a2:fd:c0:36:e6:bb:36:f8:74:58:24: 0e:d2:33:17:67:1b:50:c7:7c:bf:ef:31:f1:65:99: 66:33:6c:ba:56:ee:61:04:ee:22:82:13:b7:58:cb: 3d:a7:9c:91:00:5a:a0:7c:31:18:ee:fe:ae:bd:14: 40:21:19:81:8b:64:93:2a:7f:63:eb:1c:b3:6f:84: 30:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:98:8F:52:EC:9F:74:04:DB:0A:C7:79:9A:94:2B:A7:2C:B3:F2:08 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/eb9c9955-2742-37c2-abee-ce50eda1bddd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.70.99.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:be:13:6b:61:d2:e6:27:ef:70:8e:e7:ce:04:84:d7:39:ef: 0f:52:55:e3:2a:8b:4c:b2:39:f4:7a:56:63:ce:46:22:ea:be: a9:e3:23:b2:f7:10:70:df:a0:ec:8f:27:93:3b:91:3f:c0:21: bc:ee:00:e2:a5:6f:a4:c3:9e:ec:a4:e1:bc:c3:5e:9b:04:86: 4e:4c:7a:0f:4a:03:97:cd:eb:f2:cc:c5:e7:13:90:19:b2:ba: 74:f2:7c:2e:cf:90:9e:25:2d:88:b7:07:10:b2:e0:68:3a:06: 36:8b:03:f2:f6:3c:9f:4d:c8:2d:46:4e:b2:be:3c:ab:ba:bb: f0:c7:12:38:a7:be:48:4e:21:43:2e:2e:35:05:49:9e:76:7e: 35:8e:d9:d3:1b:13:91:70:a5:8f:dd:84:db:1d:5e:4e:9a:f3: 15:01:5e:de:34:6a:9a:b2:37:ad:4f:7a:73:38:75:c1:cb:41: 02:fe:0b:d8:9d:c7:48:98:72:db:98:f9:ae:53:39:c7:b1:37: c5:f9:b6:11:10:47:56:0f:24:63:18:54:df:83:15:4c:43:09: 86:aa:da:8a:f3:3c:a1:dd:f5:81:46:c1:af:5d:32:de:80:71: 00:b7:4a:da:12:9f:1d:b1:a0:b6:11:d5:1a:32:cd:97:43:72: af:79:56:ef -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5QhK5z1y4+jaZxG0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDYyNzIxMDAxMloXDTI2MDkyNTIxMDAxMlowLzEtMCsGA1UEAxMk NjVlYjdmNWQtYjBiYy00YmIxLWI1N2QtN2Q1MjA2MTdhZTFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgWm4BrQdEezZclFPsG/sX58ajbe11z+ETlhS MVVC/uyknsvHUg7DMuQENCWGKRIJAz730yvJ2rFHLRjbP6k1uhn7cqKbrVvTVI2V BL8QrTll9Wg86aFZzzgHWfdnhoi0bMEafkw7M9vLqUppP3Oz1OgKde4mQCsxEJK7 yyIUjXcGM730Fwo/YfETLi2E1Fq60MTvm8CzCXrIbiRSkdnwEv7/z4jJAFD2jJC+ dMdJ9iVJrLg0s5Gaov3ANua7Nvh0WCQO0jMXZxtQx3y/7zHxZZlmM2y6Vu5hBO4i ghO3WMs9p5yRAFqgfDEY7v6uvRRAIRmBi2STKn9j6xyzb4QwowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLiYj1Lsn3QE2wrHeZqUK6css/IIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvZWI5Yzk5NTUtMjc0Mi0z N2MyLWFiZWUtY2U1MGVkYTFiZGRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEZjMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAm+E2th0uYn73CO584EhNc57w9SVeMqi0yyOfR6VmPORiLqvqnjI7L3 EHDfoOyPJ5M7kT/AIbzuAOKlb6TDnuyk4bzDXpsEhk5Meg9KA5fN6/LMxecTkBmy unTyfC7PkJ4lLYi3BxCy4Gg6BjaLA/L2PJ9NyC1GTrK+PKu6u/DHEjinvkhOIUMu LjUFSZ52fjWO2dMbE5FwpY/dhNsdXk6a8xUBXt40apqyN61PenM4dcHLQQL+C9id x0iYctuY+a5TOcexN8X5thEQR1YPJGMYVN+DFUxDCYaq2orzPKHd9YFGwa9dMt6A cQC3StoSnx2xoLYR1RoyzZdDcq95Vu8= -----END CERTIFICATE-----Generated at Sat Jul 18 00:49:26 2026 by rpki-client