$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/249cd7ff-21a7-3dd5-9242-70ca57730096.roa File: 249cd7ff-21a7-3dd5-9242-70ca57730096.roa (raw, json) Hash identifier: +99Oq0z9Ih+u7J0m9BP/M+csb0esPlu2KKxt9RDn89I= Subject key identifier: 49:5B:3B:3E:41:D9:5A:60:06:02:66:79:9D:02:74:85:EA:C8:F9:14 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584E5084ACC56E5DA352F5792300 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/249cd7ff-21a7-3dd5-9242-70ca57730096.roa Signing time: Sat 27 Jun 2026 21:00:12 +0000 ROA not before: Sat 27 Jun 2026 21:00:12 +0000 ROA not after: Fri 25 Sep 2026 21:00:12 +0000 asID: 13335 IP address blocks: 172.69.237.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Jul 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:50:84:ac:c5:6e:5d:a3:52:f5:79:23:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Jun 27 21:00:12 2026 GMT Not After : Sep 25 21:00:12 2026 GMT Subject: CN=81b10183-e3d1-48f1-aa40-f7ad76cadb58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:5d:4c:63:21:ca:cb:5c:ac:b0:c2:9c:ba:ad: b0:24:78:90:b4:81:42:e7:a9:c6:f7:2c:3b:40:4c: 7e:0f:9c:de:54:2a:52:0f:98:33:c0:a7:c2:58:cd: 85:2f:97:d6:dc:28:22:10:a9:db:07:c0:dc:b4:1d: b8:af:e9:fe:af:13:f5:70:ae:ac:3e:e2:f5:22:d7: 11:d5:ec:16:1e:fd:27:9f:fb:62:9f:91:a9:43:cb: f2:66:0c:40:99:3a:d0:db:ab:aa:0a:ac:f4:e2:6e: 27:7e:a6:35:fa:a7:0a:9e:d2:f5:c0:62:48:76:20: 3d:b6:6e:70:a4:d8:76:7a:b2:6e:99:c5:ea:92:54: 99:84:23:19:91:c6:14:4b:94:35:4b:b8:3d:b8:ab: 4d:2b:23:de:98:56:9a:0c:90:1d:77:b7:87:40:6d: e7:07:d0:bc:5c:a8:96:d7:b2:94:24:8d:dc:2d:ac: bd:d3:e1:e7:a6:30:63:38:d5:b0:0d:dd:f9:f9:9b: 70:4b:69:7a:31:24:71:f2:b2:d0:d2:df:aa:3d:1f: 1a:aa:ff:e0:0a:cb:8c:7b:2f:b0:85:b5:b2:74:8c: 3c:5c:83:4f:df:44:04:b9:32:13:ab:d8:dd:e3:5f: f9:f8:91:e9:17:bc:c8:cc:92:22:a4:7d:bc:6b:28: 7e:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:5B:3B:3E:41:D9:5A:60:06:02:66:79:9D:02:74:85:EA:C8:F9:14 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/249cd7ff-21a7-3dd5-9242-70ca57730096.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.69.237.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:b5:e1:7c:33:4d:e9:75:16:50:36:01:ec:0d:fa:b9:b8:f9: 18:a1:1f:9e:02:69:53:56:c3:f7:08:78:37:e4:91:67:d2:a3: 31:d3:f9:a4:39:52:d1:17:23:a6:cd:49:68:c4:b4:ba:92:51: f4:a1:15:6f:9f:51:c7:29:21:fb:06:6b:5c:bb:d0:16:90:44: a2:c8:3c:b3:50:be:11:ca:0d:af:48:27:c9:ed:01:69:e9:75: 27:af:38:2c:b0:da:6f:97:50:9d:8c:ae:44:79:ea:bf:d0:9b: 1c:ef:bf:04:98:10:12:3e:17:c7:29:49:71:5f:3a:f0:c9:be: de:21:6a:38:26:11:d6:00:93:a3:3b:95:ca:83:30:97:24:6a: 8b:20:53:ff:0a:47:2c:0a:ab:62:f5:ef:a5:2c:13:66:09:ec: 18:af:2f:e0:3d:13:af:1f:12:eb:48:23:c1:ed:42:53:28:7b: ba:ef:89:59:de:f9:d1:91:18:a1:8a:20:4a:89:94:a4:d9:9c: 1d:30:7a:cd:13:45:13:65:cb:c3:3d:6d:43:18:56:9b:2f:87: c5:26:cd:37:b8:70:d4:c1:2a:c8:cc:75:e1:32:8b:5c:d1:c1: 79:39:e1:92:98:52:3d:9f:40:6e:f4:1d:b6:0a:57:56:bf:9c: 70:ab:e3:57 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5QhKzFbl2jUvV5IwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDYyNzIxMDAxMloXDTI2MDkyNTIxMDAxMlowLzEtMCsGA1UEAxMk ODFiMTAxODMtZTNkMS00OGYxLWFhNDAtZjdhZDc2Y2FkYjU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk11MYyHKy1yssMKcuq2wJHiQtIFC56nG9yw7 QEx+D5zeVCpSD5gzwKfCWM2FL5fW3CgiEKnbB8DctB24r+n+rxP1cK6sPuL1ItcR 1ewWHv0nn/tin5GpQ8vyZgxAmTrQ26uqCqz04m4nfqY1+qcKntL1wGJIdiA9tm5w pNh2erJumcXqklSZhCMZkcYUS5Q1S7g9uKtNKyPemFaaDJAdd7eHQG3nB9C8XKiW 17KUJI3cLay90+HnpjBjONWwDd35+ZtwS2l6MSRx8rLQ0t+qPR8aqv/gCsuMey+w hbWydIw8XINP30QEuTITq9jd41/5+JHpF7zIzJIipH28ayh+zwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFElbOz5B2VpgBgJmeZ0CdIXqyPkUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMjQ5Y2Q3ZmYtMjFhNy0z ZGQ1LTkyNDItNzBjYTU3NzMwMDk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEXtMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEK14XwzTel1FlA2AewN+rm4+RihH54CaVNWw/cIeDfkkWfSozHT+aQ5 UtEXI6bNSWjEtLqSUfShFW+fUccpIfsGa1y70BaQRKLIPLNQvhHKDa9IJ8ntAWnp dSevOCyw2m+XUJ2MrkR56r/QmxzvvwSYEBI+F8cpSXFfOvDJvt4hajgmEdYAk6M7 lcqDMJckaosgU/8KRywKq2L176UsE2YJ7BivL+A9E68fEutII8HtQlMoe7rviVne +dGRGKGKIEqJlKTZnB0wes0TRRNly8M9bUMYVpsvh8UmzTe4cNTBKsjMdeEyi1zR wXk54ZKYUj2fQG70HbYKV1a/nHCr41c= -----END CERTIFICATE-----Generated at Thu Jul 23 21:56:44 2026 by rpki-client