$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/612fe78d-1ee7-3b33-b75d-de20f8bf33ca.roa File: 612fe78d-1ee7-3b33-b75d-de20f8bf33ca.roa (raw, json) Hash identifier: NQr7a5yMKehk1aVXiU6A3yIlH7/N8tYBwJUiwt3cXUk= Subject key identifier: 4B:D8:08:0E:EE:B7:66:40:D7:09:FF:00:47:30:7A:F3:E0:77:83:D4 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584E7204E3FBAC2D65716A0F1C80 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/612fe78d-1ee7-3b33-b75d-de20f8bf33ca.roa Signing time: Thu 09 Jul 2026 21:00:11 +0000 ROA not before: Thu 09 Jul 2026 21:00:11 +0000 ROA not after: Wed 07 Oct 2026 21:00:11 +0000 asID: 14789 IP address blocks: 172.68.91.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Jul 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:72:04:e3:fb:ac:2d:65:71:6a:0f:1c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Jul 9 21:00:11 2026 GMT Not After : Oct 7 21:00:11 2026 GMT Subject: CN=3f47b425-2c7d-447d-8ef3-f160b3e20c0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:ac:7d:69:42:fe:e5:bb:0d:bd:7f:c4:4a:99: 3c:47:67:48:74:d5:32:08:7a:51:13:07:d3:00:31: 2d:33:f3:33:1d:0c:09:d1:a2:da:3e:1d:55:b2:5d: fc:0d:4a:fa:79:f2:73:39:ad:5f:39:f2:72:6b:fb: b9:ea:74:5e:42:83:60:23:47:57:af:ef:22:e3:a5: 7e:68:ed:00:f2:48:02:b7:71:23:e3:7c:dc:55:11: f8:2e:57:04:cc:35:33:bd:79:88:34:bf:97:91:04: bd:7f:17:e3:a6:e6:57:0e:db:33:cf:cb:53:3f:56: 7d:99:80:7e:a0:71:dd:4a:ab:8a:c8:93:5b:83:46: 37:43:95:18:1a:af:c0:fa:37:b0:b2:bb:a2:17:5a: 7a:de:28:f3:de:98:a3:e9:7c:41:63:6a:e5:43:2b: 46:5b:7f:bb:2b:5e:46:5e:b8:c6:5b:eb:85:37:fa: d5:c7:23:ab:33:2a:bf:2c:65:f3:44:92:8c:dd:07: 64:ef:b1:3d:6a:8e:c4:37:19:32:7f:c8:8d:5b:6b: af:9a:7a:be:45:5a:fc:29:3d:7d:8d:56:ee:2f:36: 9f:30:b4:4a:eb:31:e5:85:89:f4:d3:24:f6:45:76: 85:f3:8b:59:7f:87:fe:02:82:df:17:eb:b5:79:0b: d2:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:D8:08:0E:EE:B7:66:40:D7:09:FF:00:47:30:7A:F3:E0:77:83:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/612fe78d-1ee7-3b33-b75d-de20f8bf33ca.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.68.91.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ba:1a:b9:75:f2:85:f0:c0:86:09:a6:bc:11:91:95:09:d5:fc: c1:9f:87:6b:35:74:5e:69:62:30:c8:a8:10:c2:5b:6a:50:61: 5b:42:60:81:e3:a5:51:94:52:54:e7:7b:f4:4f:73:70:45:da: 5e:ff:70:4d:d4:25:e7:17:cc:56:c1:c2:6a:4c:74:56:c5:8d: 3a:f3:7b:fa:0e:ac:06:ad:74:5b:cd:c0:33:eb:4c:92:6a:57: 9e:2c:36:c3:5e:f0:f7:1c:e1:c3:c1:54:44:7e:19:8e:09:8c: ca:73:cc:df:c3:90:47:ac:35:b4:df:09:ff:63:bd:42:5d:e1: 07:23:1f:cb:1d:8f:0e:45:66:85:83:93:eb:b5:ea:6d:b8:3c: 35:ce:1d:39:36:89:c9:f0:fd:f0:45:6f:ad:7d:cb:eb:02:18: 81:2e:f8:bc:42:95:f1:82:db:7b:56:46:a5:96:d2:bb:02:c5: 1c:15:61:fe:8e:d3:74:70:9e:a4:ed:12:72:46:08:ef:71:1c: 02:c0:7b:c0:05:aa:75:b3:f3:06:89:35:53:e9:66:7c:dc:39: 70:63:91:0a:f7:d0:8d:bb:ed:40:d5:a9:41:de:47:35:4a:05: 55:3d:2c:41:ca:0b:0b:e3:62:10:ac:b8:10:f1:7e:bf:40:3f: 15:6e:40:0d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5yBOP7rC1lcWoPHIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDcwOTIxMDAxMVoXDTI2MTAwNzIxMDAxMVowLzEtMCsGA1UEAxMk M2Y0N2I0MjUtMmM3ZC00NDdkLThlZjMtZjE2MGIzZTIwYzBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlax9aUL+5bsNvX/ESpk8R2dIdNUyCHpREwfT ADEtM/MzHQwJ0aLaPh1Vsl38DUr6efJzOa1fOfJya/u56nReQoNgI0dXr+8i46V+ aO0A8kgCt3Ej43zcVRH4LlcEzDUzvXmINL+XkQS9fxfjpuZXDtszz8tTP1Z9mYB+ oHHdSquKyJNbg0Y3Q5UYGq/A+jewsruiF1p63ijz3pij6XxBY2rlQytGW3+7K15G XrjGW+uFN/rVxyOrMyq/LGXzRJKM3Qdk77E9ao7ENxkyf8iNW2uvmnq+RVr8KT19 jVbuLzafMLRK6zHlhYn00yT2RXaF84tZf4f+AoLfF+u1eQvSXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEvYCA7ut2ZA1wn/AEcwevPgd4PUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNjEyZmU3OGQtMWVlNy0z YjMzLWI3NWQtZGUyMGY4YmYzM2NhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArERbMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALoauXXyhfDAhgmmvBGRlQnV/MGfh2s1dF5pYjDIqBDCW2pQYVtCYIHj pVGUUlTne/RPc3BF2l7/cE3UJecXzFbBwmpMdFbFjTrze/oOrAatdFvNwDPrTJJq V54sNsNe8Pcc4cPBVER+GY4JjMpzzN/DkEesNbTfCf9jvUJd4QcjH8sdjw5FZoWD k+u16m24PDXOHTk2icnw/fBFb619y+sCGIEu+LxClfGC23tWRqWW0rsCxRwVYf6O 03RwnqTtEnJGCO9xHALAe8AFqnWz8waJNVPpZnzcOXBjkQr30I277UDVqUHeRzVK BVU9LEHKCwvjYhCsuBDxfr9APxVuQA0= -----END CERTIFICATE-----Generated at Thu Jul 23 20:24:50 2026 by rpki-client