$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/67767dcd-3819-36d8-b250-cf57e7f3701d.roa File: 67767dcd-3819-36d8-b250-cf57e7f3701d.roa (raw, json) Hash identifier: x5ndjdsaoj8sMuuD5WvYpwl6zkb/imsyGWw6332nGT8= Subject key identifier: F9:F3:E4:6A:33:26:65:C7:11:BE:34:BC:B1:4D:9E:36:58:F6:6E:2B Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584E7D2F7D9D834BDD56CCA22E80 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/67767dcd-3819-36d8-b250-cf57e7f3701d.roa Signing time: Mon 13 Jul 2026 21:00:12 +0000 ROA not before: Mon 13 Jul 2026 21:00:12 +0000 ROA not after: Sun 11 Oct 2026 21:00:12 +0000 asID: 14789 IP address blocks: 172.68.137.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Jul 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:7d:2f:7d:9d:83:4b:dd:56:cc:a2:2e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Jul 13 21:00:12 2026 GMT Not After : Oct 11 21:00:12 2026 GMT Subject: CN=a697a4b2-10ba-4b7d-a3dd-af52f06132fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:bb:7a:13:3b:f8:86:c9:0f:09:20:a5:87:0a: ef:f9:13:8c:37:2f:95:4c:07:5d:7b:88:cc:11:f7: 75:98:dd:48:3e:59:03:2f:92:c2:50:12:e1:39:22: 19:14:a0:ca:18:dc:3e:23:8f:f0:b5:75:d8:6f:88: 80:0b:df:0a:4f:d2:23:60:41:51:b9:5e:05:37:60: 66:ef:e9:61:1a:19:49:71:2e:b6:b8:9d:06:c2:46: b3:a3:1e:9c:73:79:58:cc:aa:68:66:6b:0e:8e:6f: 23:42:36:c5:28:8d:7f:95:ed:73:d2:0e:03:e7:8e: a3:70:7f:1b:62:dd:62:d3:5b:19:e4:44:ef:1f:d2: 80:ac:42:ba:04:53:f0:d2:51:c4:6e:84:51:dd:86: 00:77:42:c2:7c:cb:6e:e7:ca:44:a8:00:9c:38:a3: 66:14:1f:68:5b:1d:4b:0b:2c:b8:1d:cf:27:61:53: 1a:e2:77:67:22:c3:80:1b:55:a0:16:10:c2:44:d3: f4:d8:98:5d:89:17:81:42:d5:f4:6b:5d:a9:3b:c6: ad:59:22:da:36:4e:87:59:73:8d:49:bd:b1:9b:06: f8:71:3c:ef:1a:96:28:17:9a:52:dc:36:5f:b0:f4: 70:76:3a:75:eb:a9:e6:36:18:50:52:1f:be:5c:6a: 36:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:F3:E4:6A:33:26:65:C7:11:BE:34:BC:B1:4D:9E:36:58:F6:6E:2B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/67767dcd-3819-36d8-b250-cf57e7f3701d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.68.137.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:13:c1:00:cc:bf:7a:78:15:2f:47:ad:04:f2:10:d7:4e:a1: b5:4f:af:1c:22:7c:61:25:ca:c1:ea:23:10:b9:a4:0d:b5:f1: ed:09:cf:e2:ad:30:7d:ed:0d:c1:95:bf:08:d0:ba:84:ff:57: 95:a7:db:26:09:64:03:1e:bd:6e:5d:95:18:3a:41:d7:63:0e: da:04:b5:a8:74:77:93:54:be:93:f8:fa:45:83:6e:54:67:a9: 56:e6:61:41:26:1f:1d:3f:41:76:df:7a:1a:2a:63:f2:c8:03: ec:aa:00:90:7d:35:69:31:39:ff:8d:cf:3a:c4:28:c2:a4:b9: 05:dc:ca:f0:6a:2c:df:54:39:d1:76:e8:c2:f3:67:54:dc:3d: a8:ed:ba:7e:f4:5b:7f:4e:1b:55:69:5c:d8:78:e6:a6:f3:11: 97:f3:9b:be:2b:fc:31:df:c0:21:a0:df:3d:f1:20:19:42:98: e1:69:3f:16:6c:99:45:fa:70:d0:7f:3d:f0:ba:6d:f5:c5:25: c8:4c:cb:36:1a:1e:37:80:c3:77:6e:a7:cb:c4:35:c6:a0:b6: a0:1e:76:4f:6f:e6:38:eb:13:58:60:39:f4:00:14:4d:b3:6b: 92:6f:6a:ae:9f:05:8b:8e:63:da:74:5f:37:ed:d3:8f:9e:e3: 7c:61:2b:03 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE59L32dg0vdVsyiLoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDcxMzIxMDAxMloXDTI2MTAxMTIxMDAxMlowLzEtMCsGA1UEAxMk YTY5N2E0YjItMTBiYS00YjdkLWEzZGQtYWY1MmYwNjEzMmZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiLt6Ezv4hskPCSClhwrv+ROMNy+VTAdde4jM Efd1mN1IPlkDL5LCUBLhOSIZFKDKGNw+I4/wtXXYb4iAC98KT9IjYEFRuV4FN2Bm 7+lhGhlJcS62uJ0Gwkazox6cc3lYzKpoZmsOjm8jQjbFKI1/le1z0g4D546jcH8b Yt1i01sZ5ETvH9KArEK6BFPw0lHEboRR3YYAd0LCfMtu58pEqACcOKNmFB9oWx1L Cyy4Hc8nYVMa4ndnIsOAG1WgFhDCRNP02JhdiReBQtX0a12pO8atWSLaNk6HWXON Sb2xmwb4cTzvGpYoF5pS3DZfsPRwdjp166nmNhhQUh++XGo2bQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPnz5GozJmXHEb40vLFNnjZY9m4rMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNjc3NjdkY2QtMzgxOS0z NmQ4LWIyNTAtY2Y1N2U3ZjM3MDFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArESJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA0TwQDMv3p4FS9HrQTyENdOobVPrxwifGElysHqIxC5pA218e0Jz+Kt MH3tDcGVvwjQuoT/V5Wn2yYJZAMevW5dlRg6QddjDtoEtah0d5NUvpP4+kWDblRn qVbmYUEmHx0/QXbfehoqY/LIA+yqAJB9NWkxOf+NzzrEKMKkuQXcyvBqLN9UOdF2 6MLzZ1TcPajtun70W39OG1VpXNh45qbzEZfzm74r/DHfwCGg3z3xIBlCmOFpPxZs mUX6cNB/PfC6bfXFJchMyzYaHjeAw3dup8vENcagtqAedk9v5jjrE1hgOfQAFE2z a5Jvaq6fBYuOY9p0Xzft04+e43xhKwM= -----END CERTIFICATE-----Generated at Thu Jul 23 23:26:18 2026 by rpki-client