$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a170d3d5-fe8d-3f6d-a3b3-13ca40fe9c3c.roa File: a170d3d5-fe8d-3f6d-a3b3-13ca40fe9c3c.roa (raw, json) Hash identifier: 7iR7DBsLcxKBnxVmHFq8Ia6mRv2OBe7wcbVx8gqhLFY= Subject key identifier: 4C:94:EE:01:28:31:2A:BF:B7:D6:BE:7A:E1:3B:38:D2:19:00:D9:E0 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584E4C54A9DFC1F830ECB3587A00 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a170d3d5-fe8d-3f6d-a3b3-13ca40fe9c3c.roa Signing time: Fri 26 Jun 2026 09:00:12 +0000 ROA not before: Fri 26 Jun 2026 09:00:12 +0000 ROA not after: Thu 24 Sep 2026 09:00:12 +0000 asID: 13335 IP address blocks: 172.68.231.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Jul 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:4c:54:a9:df:c1:f8:30:ec:b3:58:7a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Jun 26 09:00:12 2026 GMT Not After : Sep 24 09:00:12 2026 GMT Subject: CN=46416341-43b4-46e4-b5fb-f9d20125cf3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:b7:ff:36:38:ab:95:89:bc:b1:89:60:52:f0: 28:14:b5:9b:68:cb:eb:f2:d0:fc:af:c9:c0:75:1b: aa:30:6a:f4:1a:ce:5f:ff:9a:eb:22:73:90:f4:ea: 4f:b6:d5:ed:cd:31:70:1b:6f:d5:dc:01:60:50:d7: 63:cd:e6:0e:98:07:1b:68:52:76:b9:8b:96:8d:e6: e7:8c:e5:c8:3d:fc:1d:d3:e2:7d:b5:e4:be:59:15: a6:12:a5:53:ba:f6:57:42:82:df:24:35:4a:8a:cd: ae:5c:88:7a:db:51:e5:bf:ba:42:ce:83:73:cd:ff: 83:67:d6:66:fc:e0:86:b8:36:5d:00:e5:44:73:87: 36:57:42:43:ae:32:03:00:79:5c:b8:d0:e1:65:b8: 51:b3:f9:cd:68:39:41:2f:12:65:07:b3:6c:c4:a3: 71:06:0e:a6:f6:ed:14:d5:d2:b1:5b:54:43:1a:45: 5b:9e:8a:d2:33:c7:46:18:87:01:11:c5:51:71:db: fa:a5:f4:f9:39:78:5e:1b:1f:c4:5a:ad:fa:0f:08: 4d:73:24:08:3c:d6:b1:0e:65:05:7f:99:7e:60:14: ea:75:f7:71:b2:33:80:39:f0:62:22:df:ca:2c:1a: 90:21:be:d3:f9:c9:f7:7a:98:c2:3e:97:5a:87:94: c1:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:94:EE:01:28:31:2A:BF:B7:D6:BE:7A:E1:3B:38:D2:19:00:D9:E0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a170d3d5-fe8d-3f6d-a3b3-13ca40fe9c3c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.68.231.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b3:e0:70:00:30:a9:a0:87:bc:41:93:7e:d6:05:5d:37:98:d0: b6:f8:57:fd:8a:33:57:02:07:e7:d2:07:1c:0f:ff:85:77:77: 00:64:a2:30:cc:b3:92:9a:bb:db:cc:da:13:fc:fd:95:51:cc: 2f:15:39:6e:89:0f:1d:01:09:2a:05:87:6a:99:b9:48:10:fe: ee:70:0f:d3:ff:d2:e1:b0:65:82:e0:2c:6b:df:fc:6e:eb:cc: 29:8e:a6:31:b0:cb:0f:4a:62:ad:45:11:51:0a:57:4d:d3:0f: f2:b9:9d:c3:d3:dd:77:60:3c:81:fd:da:39:91:3b:7c:ec:c6: 02:3a:59:63:85:14:0e:a7:9b:58:d5:61:4c:61:78:fe:82:08: e2:42:19:90:9d:7b:31:83:cc:ea:f5:9a:40:fa:0a:b1:d9:6e: 09:ab:17:58:ff:cf:fa:0f:02:86:d5:11:2c:ac:8a:f4:66:7f: 9e:7d:5b:eb:db:5f:92:91:33:1e:fa:66:48:f4:f6:ca:cf:ba: ef:30:3a:89:17:a7:dc:93:f9:2e:da:8f:5d:a6:5a:bb:cc:99: 60:d0:01:4b:b8:da:06:d5:2a:3c:4b:e1:ee:87:1a:ad:6e:81: 70:d1:53:51:9d:eb:46:d9:6c:e9:3e:75:ac:05:31:19:96:aa: bb:f6:f4:e3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5MVKnfwfgw7LNYegAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDYyNjA5MDAxMloXDTI2MDkyNDA5MDAxMlowLzEtMCsGA1UEAxMk NDY0MTYzNDEtNDNiNC00NmU0LWI1ZmItZjlkMjAxMjVjZjNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA47f/NjirlYm8sYlgUvAoFLWbaMvr8tD8r8nA dRuqMGr0Gs5f/5rrInOQ9OpPttXtzTFwG2/V3AFgUNdjzeYOmAcbaFJ2uYuWjebn jOXIPfwd0+J9teS+WRWmEqVTuvZXQoLfJDVKis2uXIh621Hlv7pCzoNzzf+DZ9Zm /OCGuDZdAOVEc4c2V0JDrjIDAHlcuNDhZbhRs/nNaDlBLxJlB7NsxKNxBg6m9u0U 1dKxW1RDGkVbnorSM8dGGIcBEcVRcdv6pfT5OXheGx/EWq36DwhNcyQIPNaxDmUF f5l+YBTqdfdxsjOAOfBiIt/KLBqQIb7T+cn3epjCPpdah5TBHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEyU7gEoMSq/t9a+euE7ONIZANngMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvYTE3MGQzZDUtZmU4ZC0z ZjZkLWEzYjMtMTNjYTQwZmU5YzNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArETnMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALPgcAAwqaCHvEGTftYFXTeY0Lb4V/2KM1cCB+fSBxwP/4V3dwBkojDM s5Kau9vM2hP8/ZVRzC8VOW6JDx0BCSoFh2qZuUgQ/u5wD9P/0uGwZYLgLGvf/G7r zCmOpjGwyw9KYq1FEVEKV03TD/K5ncPT3XdgPIH92jmRO3zsxgI6WWOFFA6nm1jV YUxheP6CCOJCGZCdezGDzOr1mkD6CrHZbgmrF1j/z/oPAobVESysivRmf559W+vb X5KRMx76Zkj09srPuu8wOokXp9yT+S7aj12mWrvMmWDQAUu42gbVKjxL4e6HGq1u gXDRU1Gd60bZbOk+dawFMRmWqrv29OM= -----END CERTIFICATE-----Generated at Thu Jul 23 23:13:26 2026 by rpki-client