$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/3427f61f-e162-3ac7-a456-545094976444.roa File: 3427f61f-e162-3ac7-a456-545094976444.roa (raw, json) Hash identifier: aLYnDWPHWv1AHf5oPqzuLXlcH+NDqYcujguk3IEPJeY= Subject key identifier: A7:14:66:FC:E0:97:29:40:B5:49:62:9A:0C:EC:B7:77:B2:B0:67:D2 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584E4AEF5B8B4928F78FA3657440 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/3427f61f-e162-3ac7-a456-545094976444.roa Signing time: Thu 25 Jun 2026 21:00:12 +0000 ROA not before: Thu 25 Jun 2026 21:00:12 +0000 ROA not after: Wed 23 Sep 2026 21:00:12 +0000 asID: 13335 IP address blocks: 172.68.28.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Jul 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:4a:ef:5b:8b:49:28:f7:8f:a3:65:74:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Jun 25 21:00:12 2026 GMT Not After : Sep 23 21:00:12 2026 GMT Subject: CN=b25e5836-20e1-4de4-9012-49c20b4b6a6f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:1d:4e:3a:81:44:f3:c2:0b:e1:9e:06:61:ce: 6d:26:4e:ab:27:bf:31:b5:03:f3:b0:67:74:57:99: ec:aa:c9:d2:6b:32:b6:39:0b:d3:11:32:7b:89:39: a6:b9:5b:ed:7b:53:e0:97:e5:ec:e3:a4:b3:83:6e: 6b:1d:1d:34:3f:95:74:c4:ac:e1:1e:9b:0b:2c:33: c1:b3:23:cc:30:44:f4:65:e1:d6:ff:4f:12:52:08: 08:b2:e8:55:46:00:d3:a6:c0:2b:45:a9:24:8c:91: fc:e8:13:c2:9c:23:77:69:70:11:08:b7:df:7a:56: 85:28:bd:92:d2:28:75:b9:d4:f5:e7:07:19:4a:0f: 8f:f1:e4:ca:dc:06:d1:5c:22:e7:94:9d:a3:2a:06: 6a:3e:33:d6:11:35:11:5c:83:95:cf:e8:34:c1:98: 01:68:7e:26:28:52:ad:9f:5f:5c:81:75:c7:8a:b8: 7c:35:90:32:da:47:a5:5c:d9:d6:bc:f3:ec:b3:1f: 9b:45:db:23:28:05:a5:ec:af:f7:7e:21:74:f2:25: ec:00:e1:84:2b:19:09:c4:b7:8c:07:00:5e:7c:da: 2a:e6:0d:61:e3:b9:20:63:3c:d9:3e:d8:29:2b:79: dd:e6:b6:f3:c3:11:05:62:8b:92:90:5b:e2:d9:c7: 5d:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:14:66:FC:E0:97:29:40:B5:49:62:9A:0C:EC:B7:77:B2:B0:67:D2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/3427f61f-e162-3ac7-a456-545094976444.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.68.28.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:6c:2b:80:90:21:66:7f:8e:72:cd:71:05:ab:e5:d8:cd:52: 1c:d3:1b:b9:60:c1:f4:63:d5:f6:ff:c3:c9:71:10:45:a7:d8: 43:0b:0f:47:7b:a7:9e:e9:62:7c:d6:23:ba:a3:55:1a:17:f8: bd:55:79:9d:f3:b6:4d:89:11:48:17:5c:9f:96:57:59:7b:fe: 3b:df:93:c0:f9:34:0b:8a:fe:b5:5b:12:84:1e:b9:57:14:b8: 75:8d:61:06:74:2d:6c:09:7a:56:54:4d:ea:cf:55:44:e7:93: f5:ea:25:f2:47:d4:ea:e0:5f:58:db:62:b6:0b:0e:5f:ff:28: 23:38:b2:ac:b9:c4:50:c4:52:15:04:60:9b:e0:1b:d7:01:ce: b8:8a:dc:ed:36:58:09:37:0d:ad:e7:18:02:bc:2f:ef:69:33: b7:66:a6:0c:b4:e1:07:8a:1c:58:58:5e:8a:74:94:ba:e7:3e: 44:b7:8d:03:16:a8:82:e5:4e:67:9b:28:9a:be:8b:eb:ee:9a: 22:bf:8a:3c:d3:e3:9c:7a:a1:56:86:0e:9b:a6:b2:b3:12:a7: e2:b2:19:63:2d:5d:2f:14:21:fe:2f:33:e9:9e:a1:82:09:89: e7:4d:b5:26:32:ee:55:44:ed:a9:af:ab:96:12:7b:a9:19:52: 90:e7:47:ec -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5K71uLSSj3j6NldEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDYyNTIxMDAxMloXDTI2MDkyMzIxMDAxMlowLzEtMCsGA1UEAxMk YjI1ZTU4MzYtMjBlMS00ZGU0LTkwMTItNDljMjBiNGI2YTZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhR1OOoFE88IL4Z4GYc5tJk6rJ78xtQPzsGd0 V5nsqsnSazK2OQvTETJ7iTmmuVvte1Pgl+Xs46Szg25rHR00P5V0xKzhHpsLLDPB syPMMET0ZeHW/08SUggIsuhVRgDTpsArRakkjJH86BPCnCN3aXARCLffelaFKL2S 0ih1udT15wcZSg+P8eTK3AbRXCLnlJ2jKgZqPjPWETURXIOVz+g0wZgBaH4mKFKt n19cgXXHirh8NZAy2kelXNnWvPPssx+bRdsjKAWl7K/3fiF08iXsAOGEKxkJxLeM BwBefNoq5g1h47kgYzzZPtgpK3nd5rbzwxEFYouSkFvi2cddgQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKcUZvzglylAtUlimgzst3eysGfSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMzQyN2Y2MWYtZTE2Mi0z YWM3LWE0NTYtNTQ1MDk0OTc2NDQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEQcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACZsK4CQIWZ/jnLNcQWr5djNUhzTG7lgwfRj1fb/w8lxEEWn2EMLD0d7 p57pYnzWI7qjVRoX+L1VeZ3ztk2JEUgXXJ+WV1l7/jvfk8D5NAuK/rVbEoQeuVcU uHWNYQZ0LWwJelZUTerPVUTnk/XqJfJH1OrgX1jbYrYLDl//KCM4sqy5xFDEUhUE YJvgG9cBzriK3O02WAk3Da3nGAK8L+9pM7dmpgy04QeKHFhYXop0lLrnPkS3jQMW qILlTmebKJq+i+vumiK/ijzT45x6oVaGDpumsrMSp+KyGWMtXS8UIf4vM+meoYIJ iedNtSYy7lVE7amvq5YSe6kZUpDnR+w= -----END CERTIFICATE-----Generated at Thu Jul 23 22:02:07 2026 by rpki-client