$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/42994a69-182c-326f-b80c-adb381440cc9.roa File: 42994a69-182c-326f-b80c-adb381440cc9.roa (raw, json) Hash identifier: SiPl4myuzs3nh2r0ODeE6O4WQSXCI3P2GP76IwKPp94= Subject key identifier: 84:C9:FE:FD:64:19:5A:AB:8D:DE:AD:8A:32:2A:E1:C2:B6:16:AD:CB Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584E51E9EB93B6E651568123D180 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/42994a69-182c-326f-b80c-adb381440cc9.roa Signing time: Sun 28 Jun 2026 09:00:11 +0000 ROA not before: Sun 28 Jun 2026 09:00:11 +0000 ROA not after: Sat 26 Sep 2026 09:00:11 +0000 asID: 13335 IP address blocks: 172.70.209.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Jul 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:51:e9:eb:93:b6:e6:51:56:81:23:d1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Jun 28 09:00:11 2026 GMT Not After : Sep 26 09:00:11 2026 GMT Subject: CN=33b7c200-2c7d-49fe-b0d6-53a1baba1e45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:b5:39:86:30:c4:90:fa:9b:64:2c:c5:4c:8d: 33:43:08:fd:57:0a:29:60:7f:56:d7:28:be:6d:07: 88:9f:1d:92:be:3c:92:ec:26:66:95:55:f1:df:e6: 11:7b:7c:f6:03:5a:35:8f:0e:31:4b:98:f1:77:4e: ab:9a:45:7c:a2:03:52:c0:b0:38:c8:c0:89:61:4c: c1:c5:c2:8d:13:8e:0b:1f:e1:f9:51:4f:31:89:d6: bc:c0:45:3b:2f:cf:e8:f4:d5:fa:04:c2:c5:72:90: 2f:6b:54:8e:08:6f:98:71:d4:11:42:05:59:07:85: 88:2f:65:2b:37:f0:f3:43:8e:cd:70:82:5e:ff:05: c2:da:68:3a:f9:2f:ea:7f:0b:32:f7:c2:a2:a3:6a: 45:6f:ea:42:f3:84:b9:82:68:d0:c2:68:25:3f:8d: 4e:b1:24:19:bc:69:82:4d:92:2c:73:48:c0:c9:e8: f6:41:57:63:f7:fb:ec:f8:2c:a1:4b:b4:75:85:8a: 60:d2:99:08:c1:3d:b4:4d:27:51:27:09:e1:53:18: 18:bf:24:0f:20:65:b9:f4:69:b5:22:0b:5d:3d:86: f7:1a:70:43:f8:22:bd:56:ac:d6:9b:8d:ba:b4:ea: e7:02:88:c5:38:2b:1f:f2:6e:59:16:82:6b:93:84: 35:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:C9:FE:FD:64:19:5A:AB:8D:DE:AD:8A:32:2A:E1:C2:B6:16:AD:CB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/42994a69-182c-326f-b80c-adb381440cc9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.70.209.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:35:86:9e:bc:59:28:1f:cd:06:45:a2:33:75:94:0e:a8:48: 44:60:7a:38:cb:3b:7c:00:68:8e:75:a4:ae:ea:b0:5c:73:40: 68:6e:28:b8:c4:e3:23:c6:7f:a0:80:d6:1e:bc:d0:46:79:25: 90:18:36:07:71:5f:10:47:82:b1:cb:18:2d:01:41:78:cc:05: 96:4b:87:80:b0:47:00:b5:fd:5b:3a:2d:46:90:db:83:74:ce: d0:55:75:66:be:01:90:e8:eb:d2:27:34:d0:58:c3:ff:07:d5: b4:14:2b:0a:81:d1:76:5f:7c:68:e9:e3:e2:c8:b8:af:fb:f8: aa:f1:6d:73:50:df:58:0c:6c:23:6d:59:99:10:89:4c:7f:f8: ea:7e:f2:2a:1f:f3:82:45:19:7f:af:89:60:09:a4:05:07:5f: 2e:a4:57:ad:2b:cb:e0:40:dd:66:2d:3a:f7:f0:3e:c1:d3:fd: a6:cf:3a:e9:32:a7:8c:74:67:35:7b:c0:99:b0:18:9b:3c:e7: da:40:35:61:08:94:d8:f8:f4:de:8f:f0:76:85:ae:b2:8a:c9: 81:96:da:c9:ba:e5:36:f5:54:80:a1:99:b6:b1:ef:8e:80:f6: 38:b2:06:db:1e:32:52:7b:f4:a2:6c:70:3d:f6:dd:76:dd:6b: 37:81:9a:c1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5R6euTtuZRVoEj0YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDYyODA5MDAxMVoXDTI2MDkyNjA5MDAxMVowLzEtMCsGA1UEAxMk MzNiN2MyMDAtMmM3ZC00OWZlLWIwZDYtNTNhMWJhYmExZTQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAibU5hjDEkPqbZCzFTI0zQwj9VwopYH9W1yi+ bQeInx2SvjyS7CZmlVXx3+YRe3z2A1o1jw4xS5jxd06rmkV8ogNSwLA4yMCJYUzB xcKNE44LH+H5UU8xida8wEU7L8/o9NX6BMLFcpAva1SOCG+YcdQRQgVZB4WIL2Ur N/DzQ47NcIJe/wXC2mg6+S/qfwsy98Kio2pFb+pC84S5gmjQwmglP41OsSQZvGmC TZIsc0jAyej2QVdj9/vs+CyhS7R1hYpg0pkIwT20TSdRJwnhUxgYvyQPIGW59Gm1 IgtdPYb3GnBD+CK9VqzWm426tOrnAojFOCsf8m5ZFoJrk4Q1rwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFITJ/v1kGVqrjd6tijIq4cK2Fq3LMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNDI5OTRhNjktMTgyYy0z MjZmLWI4MGMtYWRiMzgxNDQwY2M5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEbRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAg1hp68WSgfzQZFojN1lA6oSERgejjLO3wAaI51pK7qsFxzQGhuKLjE 4yPGf6CA1h680EZ5JZAYNgdxXxBHgrHLGC0BQXjMBZZLh4CwRwC1/Vs6LUaQ24N0 ztBVdWa+AZDo69InNNBYw/8H1bQUKwqB0XZffGjp4+LIuK/7+KrxbXNQ31gMbCNt WZkQiUx/+Op+8iof84JFGX+viWAJpAUHXy6kV60ry+BA3WYtOvfwPsHT/abPOuky p4x0ZzV7wJmwGJs859pANWEIlNj49N6P8HaFrrKKyYGW2sm65Tb1VIChmbax746A 9jiyBtseMlJ79KJscD323XbdazeBmsE= -----END CERTIFICATE-----Generated at Thu Jul 23 20:30:50 2026 by rpki-client