$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/0c88f35f-6e17-3c5e-b570-21d26061ab90.roa File: 0c88f35f-6e17-3c5e-b570-21d26061ab90.roa (raw, json) Hash identifier: tgs05vVsgX1seLeRtvuScbENr9OrXfwXJhD9mc8+qqs= Subject key identifier: C0:63:67:18:D1:E7:66:0F:95:9C:5B:E8:45:2C:45:4E:9C:26:77:7D Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584E4824B59C83FF84A703AC4220 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/0c88f35f-6e17-3c5e-b570-21d26061ab90.roa Signing time: Wed 24 Jun 2026 21:00:12 +0000 ROA not before: Wed 24 Jun 2026 21:00:12 +0000 ROA not after: Tue 22 Sep 2026 21:00:12 +0000 asID: 13335 IP address blocks: 172.68.205.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Jul 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:48:24:b5:9c:83:ff:84:a7:03:ac:42:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Jun 24 21:00:12 2026 GMT Not After : Sep 22 21:00:12 2026 GMT Subject: CN=8222693b-5f76-427a-8a82-95632bae9c8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:de:9e:cd:6c:03:cf:07:c8:70:f6:a0:ef:0a: 85:fa:1e:7d:31:90:57:91:d0:4b:fe:a0:97:4e:3a: 7e:00:61:cc:99:e4:be:cf:45:49:85:e7:fc:59:d0: 1c:d1:61:fa:8f:e8:c5:ef:ba:eb:af:5b:61:dd:c1: 08:43:9a:66:90:9b:7e:33:d5:97:cf:59:39:3e:93: a4:93:d6:c6:14:c6:70:33:9f:2c:ce:d8:15:cb:63: bd:71:25:74:7f:fd:b7:69:ee:4c:cd:1c:39:63:c2: 32:f6:5f:07:e7:4e:4d:d8:0c:52:62:19:88:30:35: 43:86:82:58:db:90:39:1d:21:cf:62:ef:c9:27:5c: c3:09:fa:a3:6a:7e:ff:79:8e:7d:97:a2:cc:41:d2: fc:10:9e:c2:11:32:dc:71:90:b6:55:3e:da:5c:ab: 96:e5:a5:07:5e:9e:49:2e:c2:e6:6d:36:5d:b6:80: 26:da:cc:1d:b9:75:59:51:8b:d9:e6:45:5c:fe:87: c2:7f:bd:be:d6:ea:b5:eb:7a:db:c4:d4:ee:f2:1d: 63:c5:d0:a0:78:f9:c4:2e:6f:01:7c:42:48:c6:51: 5d:70:7b:a4:32:7e:65:87:f5:cc:c5:d4:15:b6:28: 16:2d:dc:e2:f6:f4:66:5e:0d:d6:3f:d9:96:42:31: 49:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:63:67:18:D1:E7:66:0F:95:9C:5B:E8:45:2C:45:4E:9C:26:77:7D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/0c88f35f-6e17-3c5e-b570-21d26061ab90.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.68.205.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:14:f5:06:8b:7e:ea:6e:f8:3b:e5:71:8e:43:e0:1c:32:04: 50:63:58:a9:5f:84:49:e0:25:c5:d2:e3:01:60:1f:a8:ff:d3: 3a:39:06:3c:12:f0:bc:41:10:63:e2:d2:09:07:13:c9:89:ed: a2:f2:a1:8a:ca:32:79:1e:42:b2:f6:01:5d:e4:81:88:af:c6: 0f:83:ad:e6:fb:bc:b9:a5:fe:1b:22:4b:aa:77:76:83:d5:b3: 89:aa:79:5f:f7:3e:dc:3f:cd:2e:67:05:f2:5c:25:77:11:b7: 31:3b:12:9c:a2:80:c2:8b:21:0c:cc:0e:7e:ff:bc:bc:a6:0c: 0e:b7:d3:c6:87:ba:60:35:8d:79:27:b1:a6:96:07:ff:4e:19: b5:96:c3:b2:44:1f:f7:19:ef:1d:be:a5:13:c6:5e:d7:f6:dc: 55:bd:c8:b1:bf:3f:77:59:f0:d8:f2:30:f5:a9:cf:27:9d:87: 8d:87:d4:b1:c3:f9:a7:dd:ee:38:fa:7e:94:09:01:ad:d2:7c: c7:49:7e:39:85:94:98:2e:8a:7f:88:4c:7f:67:de:53:f4:7a: 3c:d2:5e:c6:09:ac:26:d7:2c:fc:01:05:d0:bf:16:9d:40:c9: 3b:a0:8f:ff:41:be:49:a2:37:37:69:31:65:a6:1b:62:de:38: 88:cb:7e:a1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5IJLWcg/+EpwOsQiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDYyNDIxMDAxMloXDTI2MDkyMjIxMDAxMlowLzEtMCsGA1UEAxMk ODIyMjY5M2ItNWY3Ni00MjdhLThhODItOTU2MzJiYWU5YzhiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlN6ezWwDzwfIcPag7wqF+h59MZBXkdBL/qCX Tjp+AGHMmeS+z0VJhef8WdAc0WH6j+jF77rrr1th3cEIQ5pmkJt+M9WXz1k5PpOk k9bGFMZwM58sztgVy2O9cSV0f/23ae5MzRw5Y8Iy9l8H505N2AxSYhmIMDVDhoJY 25A5HSHPYu/JJ1zDCfqjan7/eY59l6LMQdL8EJ7CETLccZC2VT7aXKuW5aUHXp5J LsLmbTZdtoAm2swduXVZUYvZ5kVc/ofCf72+1uq163rbxNTu8h1jxdCgePnELm8B fEJIxlFdcHukMn5lh/XMxdQVtigWLdzi9vRmXg3WP9mWQjFJkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMBjZxjR52YPlZxb6EUsRU6cJnd9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMGM4OGYzNWYtNmUxNy0z YzVlLWI1NzAtMjFkMjYwNjFhYjkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArETNMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIsU9QaLfupu+DvlcY5D4BwyBFBjWKlfhEngJcXS4wFgH6j/0zo5BjwS 8LxBEGPi0gkHE8mJ7aLyoYrKMnkeQrL2AV3kgYivxg+Dreb7vLml/hsiS6p3doPV s4mqeV/3Ptw/zS5nBfJcJXcRtzE7EpyigMKLIQzMDn7/vLymDA6308aHumA1jXkn saaWB/9OGbWWw7JEH/cZ7x2+pRPGXtf23FW9yLG/P3dZ8NjyMPWpzyedh42H1LHD +afd7jj6fpQJAa3SfMdJfjmFlJguin+ITH9n3lP0ejzSXsYJrCbXLPwBBdC/Fp1A yTugj/9BvkmiNzdpMWWmG2LeOIjLfqE= -----END CERTIFICATE-----Generated at Thu Jul 23 20:28:45 2026 by rpki-client