$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/979e5f5c-f6fc-3849-affa-aa0b0a37d549.roa File: 979e5f5c-f6fc-3849-affa-aa0b0a37d549.roa (raw, json) Hash identifier: tSIvcjyYrGNH1dwoGTDpYgbru3nCAj5YRJys3Q+j7NU= Subject key identifier: 28:9A:A6:2C:3B:41:50:E5:71:9D:5C:0B:21:99:8D:1A:3F:AC:30:62 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584E4AEF6781A13CA32C1B14CF80 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/979e5f5c-f6fc-3849-affa-aa0b0a37d549.roa Signing time: Thu 25 Jun 2026 21:00:12 +0000 ROA not before: Thu 25 Jun 2026 21:00:12 +0000 ROA not after: Wed 23 Sep 2026 21:00:12 +0000 asID: 13335 IP address blocks: 172.68.209.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Jul 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:4a:ef:67:81:a1:3c:a3:2c:1b:14:cf:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Jun 25 21:00:12 2026 GMT Not After : Sep 23 21:00:12 2026 GMT Subject: CN=c0cc3dca-767a-428e-8245-2bb3d1dadc32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:56:2b:73:fb:52:e7:25:2a:f2:98:ec:25:22: 63:af:74:17:2b:39:79:99:20:66:f7:96:6c:55:3e: c6:b1:b3:81:60:04:88:b6:81:50:59:0a:52:e2:2e: 05:d9:92:81:21:5c:90:71:fa:be:aa:e1:cd:cc:d9: 02:3f:b0:64:a2:6f:6a:2f:dd:89:3b:8d:83:40:5d: 31:16:10:f7:a4:1d:03:fe:21:80:c2:30:a0:48:9c: a2:1b:7e:61:ea:ea:92:92:86:91:11:20:0c:05:62: 70:46:7d:68:2e:7a:cc:91:85:66:8a:78:ec:ea:10: d7:51:1a:22:37:bf:fa:0f:24:ec:d8:06:de:0b:d4: 4a:73:7a:22:34:17:69:e7:19:d3:e3:2a:23:c2:bd: a9:6b:29:4a:7f:e0:22:74:83:8a:c0:64:4e:99:69: d4:de:9d:51:d5:80:84:5f:2f:15:f0:9f:9e:32:20: 30:f5:f1:34:52:1b:a9:0c:ad:0d:53:0b:76:8d:f8: 18:a7:ad:dd:81:ec:7c:12:65:c8:ea:07:ca:3d:ce: fb:51:d4:86:d0:f9:27:d9:fb:3d:77:70:8c:78:c8: 5e:57:6c:56:e4:a6:28:95:a3:c5:73:79:44:96:58: 4c:f2:41:44:84:58:5b:53:9c:11:08:25:40:27:49: f9:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:9A:A6:2C:3B:41:50:E5:71:9D:5C:0B:21:99:8D:1A:3F:AC:30:62 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/979e5f5c-f6fc-3849-affa-aa0b0a37d549.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.68.209.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ac:03:35:fd:92:2d:b6:93:07:92:33:23:ae:82:e6:a3:e5:48: 1c:24:db:b1:54:66:e9:07:1c:f0:94:4f:d4:0a:ed:aa:c5:d4: b8:17:47:5e:15:f7:8a:5c:f9:5b:85:d5:a7:a8:52:5d:3c:67: 29:8b:76:d6:ee:f3:26:0f:af:3f:04:07:fc:89:b8:dd:50:57: 91:6a:df:4b:d7:72:03:67:23:2e:27:b8:ec:79:c4:3b:88:8a: 56:66:ad:c0:f2:f4:18:7b:e7:3e:25:88:7f:52:88:d5:e5:73: 5a:35:43:9b:03:22:94:a5:ba:3e:cf:58:68:9c:74:70:65:cc: 05:64:6f:d1:1c:19:df:74:b8:8f:2e:4e:cb:19:28:f3:26:db: a0:43:da:74:2b:0c:e0:28:c5:3a:e8:7a:b3:1c:01:6c:fa:36: 2f:07:3a:b1:34:5e:78:10:82:a1:58:66:d3:18:ca:d7:67:1b: 89:6f:89:6a:68:df:18:6b:41:b2:10:e1:23:cd:34:80:3b:7e: 33:22:62:b9:7a:c6:29:89:56:6e:7d:fd:32:3e:4a:0f:60:a2: 59:cb:dc:ae:8e:23:40:ea:b5:20:0c:f6:87:e8:32:89:4d:d1: 23:4a:b5:04:0d:f9:55:cb:08:3d:a3:e3:c6:23:45:29:5f:5f: 6f:9c:61:9f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5K72eBoTyjLBsUz4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDYyNTIxMDAxMloXDTI2MDkyMzIxMDAxMlowLzEtMCsGA1UEAxMk YzBjYzNkY2EtNzY3YS00MjhlLTgyNDUtMmJiM2QxZGFkYzMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnlYrc/tS5yUq8pjsJSJjr3QXKzl5mSBm95Zs VT7GsbOBYASItoFQWQpS4i4F2ZKBIVyQcfq+quHNzNkCP7Bkom9qL92JO42DQF0x FhD3pB0D/iGAwjCgSJyiG35h6uqSkoaRESAMBWJwRn1oLnrMkYVminjs6hDXURoi N7/6DyTs2AbeC9RKc3oiNBdp5xnT4yojwr2paylKf+AidIOKwGROmWnU3p1R1YCE Xy8V8J+eMiAw9fE0UhupDK0NUwt2jfgYp63dgex8EmXI6gfKPc77UdSG0Pkn2fs9 d3CMeMheV2xW5KYolaPFc3lEllhM8kFEhFhbU5wRCCVAJ0n5EQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCiapiw7QVDlcZ1cCyGZjRo/rDBiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvOTc5ZTVmNWMtZjZmYy0z ODQ5LWFmZmEtYWEwYjBhMzdkNTQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArETRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKwDNf2SLbaTB5IzI66C5qPlSBwk27FUZukHHPCUT9QK7arF1LgXR14V 94pc+VuF1aeoUl08ZymLdtbu8yYPrz8EB/yJuN1QV5Fq30vXcgNnIy4nuOx5xDuI ilZmrcDy9Bh75z4liH9SiNXlc1o1Q5sDIpSluj7PWGicdHBlzAVkb9EcGd90uI8u TssZKPMm26BD2nQrDOAoxTroerMcAWz6Ni8HOrE0XngQgqFYZtMYytdnG4lviWpo 3xhrQbIQ4SPNNIA7fjMiYrl6ximJVm59/TI+Sg9golnL3K6OI0DqtSAM9ofoMolN 0SNKtQQN+VXLCD2j48YjRSlfX2+cYZ8= -----END CERTIFICATE-----Generated at Thu Jul 23 20:28:56 2026 by rpki-client