$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/6b4d8ae5-ba66-3f6c-bf77-49ed8dbac98c.roa File: 6b4d8ae5-ba66-3f6c-bf77-49ed8dbac98c.roa (raw, json) Hash identifier: knUFzM3xFFwZIHwJNMTHFHL5NsjeAR4nyq/nKA8Odek= Subject key identifier: 74:0F:2D:84:3F:87:79:24:49:51:AD:F0:1C:8A:0F:ED:52:19:32:FB Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584E4AEF5AB982C687957AC95800 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/6b4d8ae5-ba66-3f6c-bf77-49ed8dbac98c.roa Signing time: Thu 25 Jun 2026 21:00:12 +0000 ROA not before: Thu 25 Jun 2026 21:00:12 +0000 ROA not after: Wed 23 Sep 2026 21:00:12 +0000 asID: 13335 IP address blocks: 172.67.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Jul 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:4a:ef:5a:b9:82:c6:87:95:7a:c9:58:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Jun 25 21:00:12 2026 GMT Not After : Sep 23 21:00:12 2026 GMT Subject: CN=03d21fad-f556-47e0-9fa1-cc70803102d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:fa:73:1d:64:74:df:95:d4:db:a5:94:0b:de: 2f:70:bd:1d:9c:27:e5:7d:18:88:b3:9e:2f:0b:47: 48:89:76:3c:63:37:ae:8a:fb:eb:b9:94:48:d8:cb: 76:2d:5b:0d:45:da:ad:fe:64:74:60:7e:47:3f:08: 4f:fe:b0:7e:f8:80:9a:06:5f:53:a5:00:4e:14:65: 63:c9:8e:4d:c0:10:bf:10:c5:2a:65:cb:0b:de:4c: 37:92:05:3d:09:b0:03:32:e2:03:7a:a1:b6:53:d9: 78:e1:8f:3c:83:9c:a7:4b:c3:fc:91:ab:42:51:8f: 8a:91:41:d3:13:6b:d0:19:70:1a:af:1d:30:0d:a7: 9e:5f:16:3b:0b:b6:3c:79:fc:b3:a6:db:e1:31:6e: 52:ae:e0:e3:3f:cf:a8:93:e1:ee:ed:7e:77:81:f7: a7:fb:56:76:b1:a5:05:d8:e7:b6:08:cb:f0:7d:b2: f1:a3:00:ef:19:d8:b8:6a:bb:42:e0:71:26:fd:42: 97:51:b0:9d:7a:f9:04:67:7c:be:a1:ee:a9:40:f0: 56:27:50:74:22:1c:13:02:33:69:2a:be:52:f2:f1: c1:5d:ed:d9:95:a7:b8:ba:f8:61:6e:b8:c8:4c:8d: fc:42:43:42:2a:ae:7a:29:d2:67:9b:fc:0f:bd:c8: 31:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:0F:2D:84:3F:87:79:24:49:51:AD:F0:1C:8A:0F:ED:52:19:32:FB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/6b4d8ae5-ba66-3f6c-bf77-49ed8dbac98c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.67.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:77:a8:40:86:9f:e4:de:db:d6:58:a3:d7:5d:13:d4:2b:28: 00:c8:d0:80:d7:3d:17:36:3c:d7:19:01:43:77:a6:c3:63:c1: ff:0f:51:6a:a4:e0:30:67:d3:40:0e:39:a4:2f:fd:c3:c2:08: 85:e5:17:8d:de:ef:ef:ea:d7:5f:8c:7b:79:49:4c:2e:55:53: 02:87:03:6b:d1:6c:09:33:71:da:93:7c:43:37:ca:4e:a8:2f: 39:90:46:75:20:b3:50:4d:1c:94:85:6e:7b:0b:ce:b7:79:3f: 3a:3b:de:d1:c4:78:98:1a:e0:b9:a7:cb:28:32:e9:35:fa:65: 6f:6b:10:f4:43:25:4f:15:d8:83:f2:3e:c1:6e:2f:3a:6d:62: 35:dd:03:dd:d3:8b:02:74:4d:68:00:87:78:08:7d:7a:b0:c2: 2a:b0:f2:a0:be:70:6c:6c:64:dc:d2:c4:86:1a:bb:7d:da:88: dc:27:d1:aa:d8:c5:71:b4:1f:b0:02:5e:f0:b3:cc:cf:f2:43: 15:38:bc:75:38:ad:c5:80:a3:67:57:cd:db:c8:83:13:e8:d7: d8:99:67:6f:3c:f3:de:48:aa:c5:1d:65:2f:84:74:00:35:0c: ac:c6:15:a2:dd:c2:cb:43:31:5c:ce:16:69:6a:dc:e4:40:66: 03:a4:07:b0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5K71q5gsaHlXrJWAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDYyNTIxMDAxMloXDTI2MDkyMzIxMDAxMlowLzEtMCsGA1UEAxMk MDNkMjFmYWQtZjU1Ni00N2UwLTlmYTEtY2M3MDgwMzEwMmQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnfpzHWR035XU26WUC94vcL0dnCflfRiIs54v C0dIiXY8YzeuivvruZRI2Mt2LVsNRdqt/mR0YH5HPwhP/rB++ICaBl9TpQBOFGVj yY5NwBC/EMUqZcsL3kw3kgU9CbADMuIDeqG2U9l44Y88g5ynS8P8katCUY+KkUHT E2vQGXAarx0wDaeeXxY7C7Y8efyzptvhMW5SruDjP8+ok+Hu7X53gfen+1Z2saUF 2Oe2CMvwfbLxowDvGdi4artC4HEm/UKXUbCdevkEZ3y+oe6pQPBWJ1B0IhwTAjNp Kr5S8vHBXe3Zlae4uvhhbrjITI38QkNCKq56KdJnm/wPvcgxewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHQPLYQ/h3kkSVGt8ByKD+1SGTL7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNmI0ZDhhZTUtYmE2Ni0z ZjZjLWJmNzctNDllZDhkYmFjOThjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErEMgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIp3qECGn+Te29ZYo9ddE9QrKADI0IDXPRc2PNcZAUN3psNjwf8PUWqk 4DBn00AOOaQv/cPCCIXlF43e7+/q11+Me3lJTC5VUwKHA2vRbAkzcdqTfEM3yk6o LzmQRnUgs1BNHJSFbnsLzrd5Pzo73tHEeJga4Lmnyygy6TX6ZW9rEPRDJU8V2IPy PsFuLzptYjXdA93TiwJ0TWgAh3gIfXqwwiqw8qC+cGxsZNzSxIYau33aiNwn0arY xXG0H7ACXvCzzM/yQxU4vHU4rcWAo2dXzdvIgxPo19iZZ288895IqsUdZS+EdAA1 DKzGFaLdwstDMVzOFmlq3ORAZgOkB7A= -----END CERTIFICATE-----Generated at Thu Jul 23 20:24:23 2026 by rpki-client