$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ef9a051b-46da-3f87-ba2d-2803e8af972c.roa File: ef9a051b-46da-3f87-ba2d-2803e8af972c.roa (raw, json) Hash identifier: 6Bd/VE83QZ6xqmMqMxOjiQc8w+HuN9X1gsdfOZ2LLhE= Subject key identifier: FD:D9:83:31:D4:21:BF:EE:D7:8B:95:C9:E0:16:2A:49:0C:B6:F2:03 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584E4C54A97A591D0575870CAD20 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ef9a051b-46da-3f87-ba2d-2803e8af972c.roa Signing time: Fri 26 Jun 2026 09:00:12 +0000 ROA not before: Fri 26 Jun 2026 09:00:12 +0000 ROA not after: Thu 24 Sep 2026 09:00:12 +0000 asID: 13335 IP address blocks: 172.68.203.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 Jul 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:4c:54:a9:7a:59:1d:05:75:87:0c:ad:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Jun 26 09:00:12 2026 GMT Not After : Sep 24 09:00:12 2026 GMT Subject: CN=2ae6981c-38b3-45df-92e5-4fdcc75a5856 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:71:00:a9:10:39:5c:86:b0:62:3d:f4:b7:98: 97:d3:15:56:d0:c4:49:ad:77:81:af:fc:2f:6c:5f: 8b:c5:e2:1b:ee:35:ca:20:79:29:fe:fd:09:c5:2a: c2:01:6f:9c:cc:ee:ac:11:6a:f0:c2:d5:ab:81:20: 6a:36:b1:59:5c:c1:fb:5a:06:1a:c5:ae:0c:a2:0d: 8a:14:cf:42:93:56:93:76:7f:6c:48:c9:a1:12:1d: ec:6b:38:a7:80:6b:32:19:16:61:ab:19:d1:c1:04: 01:f9:e3:4f:ce:1f:d4:1f:fe:0d:55:7a:bb:02:56: ef:63:fb:dd:75:22:42:19:0f:1f:d3:2d:93:2f:be: 64:66:5b:c1:cd:ff:8e:13:56:eb:26:d0:64:1a:f4: 97:48:ab:28:e6:e2:44:88:71:8a:56:02:48:4a:7f: c2:8a:76:4b:26:9d:1a:d9:0c:cb:c3:f3:a9:a6:c9: f1:e0:7a:46:c0:6e:16:f6:57:4c:2a:c9:00:94:b4: b0:ff:38:48:b1:d7:8b:96:26:1d:d7:33:d7:8c:10: 4d:47:33:58:03:f6:f7:37:59:ad:95:61:e6:48:84: fa:b2:a1:1b:17:9f:7b:7d:4d:97:2c:cc:cf:82:be: ae:46:95:5b:0f:76:bc:2b:16:d0:bc:36:eb:03:78: 87:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:D9:83:31:D4:21:BF:EE:D7:8B:95:C9:E0:16:2A:49:0C:B6:F2:03 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ef9a051b-46da-3f87-ba2d-2803e8af972c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.68.203.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:ec:6b:e6:0d:5a:cb:4f:b4:ab:c6:68:70:df:1e:8f:33:d9: c9:7c:29:d0:cd:09:82:21:1b:82:51:ba:19:8f:ab:b7:ea:5f: 69:1a:fd:9b:49:e3:dd:c9:85:85:01:64:9a:d6:c1:4f:43:bb: a6:8f:63:7b:95:68:db:29:84:a5:96:7f:96:e7:9b:44:40:57: 0e:0a:12:a2:af:fb:59:e7:c9:92:cd:31:fe:c4:20:39:77:19: ad:3a:a5:75:2c:39:e2:f0:39:a7:e2:3a:0b:a7:94:77:c7:8e: 91:f1:07:37:68:4a:28:b2:3c:38:02:be:31:b2:f2:f2:10:f0: 4a:a7:8a:0b:71:2f:ac:91:24:3d:f8:a5:85:1b:30:c7:ba:2c: 3b:99:f7:27:93:a2:bf:b4:a9:8f:f2:dd:4a:0d:62:ae:41:7a: 7b:e6:96:b4:e0:dc:89:c4:0a:9e:9e:7d:33:25:fd:8f:b6:d1: 9f:77:58:4d:95:0b:19:da:5e:22:d4:7e:7b:b7:76:8f:4d:c5: f2:1a:5d:fe:71:49:b7:6b:0e:a9:f0:fc:b4:6a:23:7c:8f:ef: 8b:f8:50:9f:b9:a7:2d:d0:7b:f7:01:40:ec:7e:b8:f6:b8:27: c6:30:f7:f3:9d:3d:58:09:58:42:2b:aa:7f:32:e2:e7:eb:93: 42:6d:b4:3f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5MVKl6WR0FdYcMrSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDYyNjA5MDAxMloXDTI2MDkyNDA5MDAxMlowLzEtMCsGA1UEAxMk MmFlNjk4MWMtMzhiMy00NWRmLTkyZTUtNGZkY2M3NWE1ODU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxnEAqRA5XIawYj30t5iX0xVW0MRJrXeBr/wv bF+LxeIb7jXKIHkp/v0JxSrCAW+czO6sEWrwwtWrgSBqNrFZXMH7WgYaxa4Mog2K FM9Ck1aTdn9sSMmhEh3sazingGsyGRZhqxnRwQQB+eNPzh/UH/4NVXq7AlbvY/vd dSJCGQ8f0y2TL75kZlvBzf+OE1brJtBkGvSXSKso5uJEiHGKVgJISn/CinZLJp0a 2QzLw/Oppsnx4HpGwG4W9ldMKskAlLSw/zhIsdeLliYd1zPXjBBNRzNYA/b3N1mt lWHmSIT6sqEbF597fU2XLMzPgr6uRpVbD3a8KxbQvDbrA3iHnwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP3ZgzHUIb/u14uVyeAWKkkMtvIDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvZWY5YTA1MWItNDZkYS0z Zjg3LWJhMmQtMjgwM2U4YWY5NzJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArETLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEHsa+YNWstPtKvGaHDfHo8z2cl8KdDNCYIhG4JRuhmPq7fqX2ka/ZtJ 493JhYUBZJrWwU9Du6aPY3uVaNsphKWWf5bnm0RAVw4KEqKv+1nnyZLNMf7EIDl3 Ga06pXUsOeLwOafiOgunlHfHjpHxBzdoSiiyPDgCvjGy8vIQ8EqnigtxL6yRJD34 pYUbMMe6LDuZ9yeTor+0qY/y3UoNYq5BenvmlrTg3InECp6efTMl/Y+20Z93WE2V CxnaXiLUfnu3do9NxfIaXf5xSbdrDqnw/LRqI3yP74v4UJ+5py3Qe/cBQOx+uPa4 J8Yw9/OdPVgJWEIrqn8y4ufrk0JttD8= -----END CERTIFICATE-----Generated at Sat Jul 18 01:51:42 2026 by rpki-client