$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/4f0aaf67-ae8d-335c-a0a5-f0380a201c60.roa File: 4f0aaf67-ae8d-335c-a0a5-f0380a201c60.roa (raw, json) Hash identifier: dRt/tYsDwu7GnKBFW9MELycSyR4ZcD5zT+OeE2gx1gA= Subject key identifier: 87:A6:99:19:E0:36:3C:C9:E8:AC:3F:A9:27:E4:2E:A5:09:5B:D3:BE Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584E4AEF54BF28196179CA4D4C00 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/4f0aaf67-ae8d-335c-a0a5-f0380a201c60.roa Signing time: Thu 25 Jun 2026 21:00:12 +0000 ROA not before: Thu 25 Jun 2026 21:00:12 +0000 ROA not after: Wed 23 Sep 2026 21:00:12 +0000 asID: 13335 IP address blocks: 172.70.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Jul 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:4a:ef:54:bf:28:19:61:79:ca:4d:4c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Jun 25 21:00:12 2026 GMT Not After : Sep 23 21:00:12 2026 GMT Subject: CN=03b027ce-b783-40bb-b83e-f2bddc79c018 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:bc:77:f1:e4:da:bb:bb:86:52:c6:4d:6e:45: f8:86:45:7b:d5:ed:c2:aa:00:e8:2c:d7:63:66:08: 13:db:8f:b7:f4:6d:69:96:d6:b6:d5:40:b7:25:00: 30:b9:55:d8:01:78:85:be:04:0f:b1:4a:2c:21:50: b4:a8:8a:21:8c:b4:c3:02:81:da:a9:c2:5d:d8:13: da:87:1a:c7:ec:1f:2b:1a:b9:e5:22:24:3f:03:30: 50:53:48:06:aa:a6:59:f2:be:d3:54:1e:87:0f:0f: c6:4a:0c:0c:60:67:9d:68:4d:39:30:ed:c7:49:5f: a3:56:64:08:15:46:17:61:6b:8f:ae:c9:40:c6:c5: 1e:b2:ed:cf:45:2d:6b:33:34:1a:db:03:52:fd:de: bb:cd:bf:88:83:6d:b9:ee:77:64:80:cc:0e:b4:12: e1:f4:eb:e7:11:d7:09:53:f3:ec:71:2c:bc:86:e6: 45:ad:f5:84:b4:67:dc:84:59:99:35:b0:13:2b:f4: d9:2e:45:b0:ef:7a:22:eb:77:14:56:8d:24:c0:c1: 11:43:58:c9:d2:c9:da:c6:5d:c9:7b:7d:83:36:a9: 3a:19:97:24:52:cc:09:60:2e:d3:f0:9a:66:dc:67: bb:20:dc:a3:4f:1f:84:4c:cb:e3:1b:06:0b:2b:5b: 3f:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:A6:99:19:E0:36:3C:C9:E8:AC:3F:A9:27:E4:2E:A5:09:5B:D3:BE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/4f0aaf67-ae8d-335c-a0a5-f0380a201c60.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.70.123.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:36:5a:d8:97:b5:61:8e:a5:f6:c6:9a:c2:62:d2:4b:c5:54: b7:e7:6a:9c:8b:4b:d7:b2:14:67:72:ac:8a:d2:ba:51:ea:c7: d2:d3:80:67:2e:fc:f9:e9:e8:c5:a1:e4:c0:6d:c0:bb:07:73: 65:18:83:7d:58:20:e3:be:76:d2:30:8e:7e:32:3d:80:c2:c1: 4c:fc:b0:a8:63:4b:08:ed:c0:41:00:5c:2e:55:ab:b9:d0:5e: d1:c1:14:88:ee:32:41:01:a5:8a:c6:f4:8d:9a:bb:7e:dc:57: cc:89:d3:06:fa:7f:de:2d:13:1c:b1:43:3a:b4:c3:a8:97:2f: 9c:e6:d3:42:30:d7:c1:e7:b5:63:50:2e:e2:29:dd:20:4e:dc: 97:2c:b3:ca:7c:9b:e5:b7:dc:10:6f:3a:d4:66:62:7d:74:44: 13:bb:2d:5a:c4:ce:ad:64:bc:1e:34:54:07:2f:dc:a6:0e:96: da:dd:15:d5:a9:96:24:b4:b2:da:df:77:15:03:4c:6f:a1:90: 16:8f:26:b7:06:6e:ac:52:37:38:51:3a:4b:16:7a:85:ce:86: d3:7c:35:db:54:95:5d:52:f9:6a:c8:69:ec:02:aa:0b:63:17: 38:47:de:6c:e5:3a:4e:11:f5:35:b5:52:2d:07:b4:dc:b5:52: 3b:76:88:87 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5K71S/KBlhecpNTAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDYyNTIxMDAxMloXDTI2MDkyMzIxMDAxMlowLzEtMCsGA1UEAxMk MDNiMDI3Y2UtYjc4My00MGJiLWI4M2UtZjJiZGRjNzljMDE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoLx38eTau7uGUsZNbkX4hkV71e3CqgDoLNdj ZggT24+39G1plta21UC3JQAwuVXYAXiFvgQPsUosIVC0qIohjLTDAoHaqcJd2BPa hxrH7B8rGrnlIiQ/AzBQU0gGqqZZ8r7TVB6HDw/GSgwMYGedaE05MO3HSV+jVmQI FUYXYWuPrslAxsUesu3PRS1rMzQa2wNS/d67zb+Ig2257ndkgMwOtBLh9OvnEdcJ U/PscSy8huZFrfWEtGfchFmZNbATK/TZLkWw73oi63cUVo0kwMERQ1jJ0snaxl3J e32DNqk6GZckUswJYC7T8Jpm3Ge7INyjTx+ETMvjGwYLK1s/nwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIemmRngNjzJ6Kw/qSfkLqUJW9O+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNGYwYWFmNjctYWU4ZC0z MzVjLWEwYTUtZjAzODBhMjAxYzYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEZ7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIg2WtiXtWGOpfbGmsJi0kvFVLfnapyLS9eyFGdyrIrSulHqx9LTgGcu /Pnp6MWh5MBtwLsHc2UYg31YIOO+dtIwjn4yPYDCwUz8sKhjSwjtwEEAXC5Vq7nQ XtHBFIjuMkEBpYrG9I2au37cV8yJ0wb6f94tExyxQzq0w6iXL5zm00Iw18HntWNQ LuIp3SBO3Jcss8p8m+W33BBvOtRmYn10RBO7LVrEzq1kvB40VAcv3KYOltrdFdWp liS0strfdxUDTG+hkBaPJrcGbqxSNzhROksWeoXOhtN8NdtUlV1S+WrIaewCqgtj FzhH3mzlOk4R9TW1Ui0HtNy1Ujt2iIc= -----END CERTIFICATE-----Generated at Fri Jul 24 13:42:46 2026 by rpki-client