$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/84b21014-599c-378f-93b0-1228f9e8bd77.roa File: 84b21014-599c-378f-93b0-1228f9e8bd77.roa (raw, json) Hash identifier: WmP5r7AcM8mgrg9QTvsyIcJw0WP2PlGe5iBZfg52OWk= Subject key identifier: C1:AA:E4:08:7C:EC:06:0A:E2:F3:C7:A8:F0:91:0D:4F:92:5B:C8:ED Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584E4AEF5C65C09C7D194FEBBFC0 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/84b21014-599c-378f-93b0-1228f9e8bd77.roa Signing time: Thu 25 Jun 2026 21:00:12 +0000 ROA not before: Thu 25 Jun 2026 21:00:12 +0000 ROA not after: Wed 23 Sep 2026 21:00:12 +0000 asID: 13335 IP address blocks: 172.68.211.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Jul 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:4a:ef:5c:65:c0:9c:7d:19:4f:eb:bf:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Jun 25 21:00:12 2026 GMT Not After : Sep 23 21:00:12 2026 GMT Subject: CN=66372912-4983-496c-863b-2aac5bf84f40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:db:f7:31:35:0e:3f:c5:da:be:07:e7:21:12: a8:a5:ab:21:a9:ce:cf:0a:0d:42:af:4c:fb:c7:01: 26:06:28:97:37:a0:74:3a:48:d7:1e:5d:4f:3f:84: 3d:45:58:dd:94:18:a8:a1:65:91:5e:77:29:a3:e7: 45:19:3c:73:b6:ad:da:9d:64:66:2d:19:6a:0a:e8: 8c:ee:13:fe:e2:d2:fc:a1:c8:6c:de:73:2c:ba:10: b6:18:5e:a6:f5:68:7e:df:87:80:49:59:b0:27:9d: 02:26:f3:f6:8c:6d:52:30:d3:88:39:2f:c0:d3:d0: 11:da:d1:c4:dd:f6:9e:34:c5:16:98:56:67:15:83: 57:0e:58:de:d8:b4:ce:65:d8:c4:26:37:4e:9b:22: 08:14:f5:80:e9:56:c8:d5:e5:20:e1:e5:63:3b:ac: f9:0f:c5:67:1b:c8:b4:42:48:99:66:9a:b2:67:70: be:5f:1b:cb:c4:ac:37:5c:05:01:07:0c:f7:e8:95: b2:84:1c:91:7d:8c:aa:b7:22:8d:9b:44:d3:02:02: c3:4c:57:95:0c:14:2e:5d:c0:62:c8:e2:9c:73:13: 2d:25:45:d7:25:f0:e2:ad:c9:bb:24:c0:96:2c:ce: f8:60:6f:72:e8:76:6f:82:f7:b2:e2:db:9b:77:32: 68:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:AA:E4:08:7C:EC:06:0A:E2:F3:C7:A8:F0:91:0D:4F:92:5B:C8:ED Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/84b21014-599c-378f-93b0-1228f9e8bd77.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.68.211.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c0:59:7b:7b:fc:d9:8a:79:d1:63:d6:6b:61:a0:a6:9d:0d:33: 22:31:57:8c:99:44:cd:96:dc:9e:aa:af:9c:f6:e6:f2:e0:53: cf:b0:7b:9c:4c:48:87:86:c5:d5:e3:8b:72:8c:8c:cf:a5:de: db:5e:ff:18:fa:87:d3:52:2b:45:b0:b9:21:ca:f8:3d:b4:8c: bf:b7:15:52:03:cb:a4:d3:c0:5c:c4:51:3a:ca:5f:ed:03:a3: 3b:05:ea:f7:00:05:da:c2:84:e3:9b:18:f8:7d:d1:ed:02:9b: 86:f6:d0:05:25:16:f3:12:7a:10:26:e0:f4:96:a9:1e:d5:87: 01:84:5e:7a:99:cd:de:6e:29:1d:e1:79:ed:e7:f3:a7:cc:bd: cd:c1:cc:30:b3:f7:66:a4:ec:39:80:77:ed:00:18:81:17:a6: 3b:27:dd:7a:a0:b5:4d:d2:db:5e:a3:28:cf:72:84:cc:c5:72: 83:01:c8:9d:84:a3:eb:b4:40:8f:5a:6a:f9:52:46:e4:4f:f9: 00:bf:67:0e:21:4a:ae:43:b6:4c:e2:f5:67:9c:18:62:e7:8d: 6e:d1:d8:30:e9:e3:a7:6c:c0:a4:c2:5d:f3:47:e2:a9:74:ee: 69:e7:a2:4d:0f:a2:bf:1b:25:17:39:08:07:f4:3b:84:01:1f: 37:e6:76:92 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5K71xlwJx9GU/rv8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDYyNTIxMDAxMloXDTI2MDkyMzIxMDAxMlowLzEtMCsGA1UEAxMk NjYzNzI5MTItNDk4My00OTZjLTg2M2ItMmFhYzViZjg0ZjQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvdv3MTUOP8XavgfnIRKopashqc7PCg1Cr0z7 xwEmBiiXN6B0OkjXHl1PP4Q9RVjdlBiooWWRXncpo+dFGTxztq3anWRmLRlqCuiM 7hP+4tL8ochs3nMsuhC2GF6m9Wh+34eASVmwJ50CJvP2jG1SMNOIOS/A09AR2tHE 3faeNMUWmFZnFYNXDlje2LTOZdjEJjdOmyIIFPWA6VbI1eUg4eVjO6z5D8VnG8i0 QkiZZpqyZ3C+XxvLxKw3XAUBBwz36JWyhByRfYyqtyKNm0TTAgLDTFeVDBQuXcBi yOKccxMtJUXXJfDircm7JMCWLM74YG9y6HZvgvey4tubdzJofwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMGq5Ah87AYK4vPHqPCRDU+SW8jtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvODRiMjEwMTQtNTk5Yy0z NzhmLTkzYjAtMTIyOGY5ZThiZDc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArETTMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMBZe3v82Yp50WPWa2Ggpp0NMyIxV4yZRM2W3J6qr5z25vLgU8+we5xM SIeGxdXji3KMjM+l3tte/xj6h9NSK0WwuSHK+D20jL+3FVIDy6TTwFzEUTrKX+0D ozsF6vcABdrChOObGPh90e0Cm4b20AUlFvMSehAm4PSWqR7VhwGEXnqZzd5uKR3h ee3n86fMvc3BzDCz92ak7DmAd+0AGIEXpjsn3XqgtU3S216jKM9yhMzFcoMByJ2E o+u0QI9aavlSRuRP+QC/Zw4hSq5Dtkzi9WecGGLnjW7R2DDp46dswKTCXfNH4ql0 7mnnok0Por8bJRc5CAf0O4QBHzfmdpI= -----END CERTIFICATE-----Generated at Thu Jul 23 20:28:57 2026 by rpki-client