$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a3962f60-5015-3f06-a3c3-d6969f9a1afa.roa File: a3962f60-5015-3f06-a3c3-d6969f9a1afa.roa (raw, json) Hash identifier: VDnSZRdgM609FzZWx5nkvwxvFV/S2yYyuhPTPZF4cvE= Subject key identifier: 44:30:AD:30:DC:0A:1D:60:B5:43:D0:3A:19:9E:06:B4:F1:01:1B:E4 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584E51E9F48FDF3F886FC05FA080 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a3962f60-5015-3f06-a3c3-d6969f9a1afa.roa Signing time: Sun 28 Jun 2026 09:00:11 +0000 ROA not before: Sun 28 Jun 2026 09:00:11 +0000 ROA not after: Sat 26 Sep 2026 09:00:11 +0000 asID: 13335 IP address blocks: 172.70.136.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Jul 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:51:e9:f4:8f:df:3f:88:6f:c0:5f:a0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Jun 28 09:00:11 2026 GMT Not After : Sep 26 09:00:11 2026 GMT Subject: CN=c28503e3-65a0-4db0-b1e6-3dd0c5753fed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:4c:87:15:9b:ca:cf:03:52:6a:ea:f2:d2:f4: cb:ae:93:73:75:12:ee:d1:de:11:c1:a0:1d:13:e9: 50:1d:c9:c4:20:eb:f5:38:50:ac:35:69:1b:9b:d4: 60:26:8b:d5:f0:a5:1d:ef:e6:4b:13:a6:a2:94:6a: 96:79:4c:e5:7b:8c:01:69:c2:ae:c7:1e:f9:78:2a: 2c:d0:59:09:d1:85:d7:bb:42:23:04:c4:f9:12:c5: 6f:1e:85:71:b2:70:ea:7a:80:fa:02:fa:7f:e4:05: 49:92:29:5c:cc:0c:c4:a3:d6:f3:87:f6:86:63:09: 65:6d:7a:a0:79:a5:e1:1a:9c:80:bd:e1:42:7c:b5: 5d:b7:df:76:df:0c:84:b5:c0:63:3b:a3:73:d1:ad: 79:a6:bc:fd:87:bb:8f:1b:a6:09:3a:7f:0c:e4:47: d6:be:d3:e7:5e:f1:d5:6b:76:3f:b2:72:f3:b2:9b: 2f:99:a6:cb:55:6d:0d:50:4e:8d:33:23:1b:16:cd: fe:01:45:ac:ad:5a:ee:10:6a:2e:e9:10:33:57:c7: ca:2b:01:51:ab:ca:24:9d:65:4f:fc:c5:3d:01:ee: 52:bc:65:2a:34:5a:20:bf:e5:5e:1b:57:b2:69:90: 93:41:e2:49:46:5b:53:ec:ae:3a:ff:a8:6b:3e:9a: 07:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:30:AD:30:DC:0A:1D:60:B5:43:D0:3A:19:9E:06:B4:F1:01:1B:E4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a3962f60-5015-3f06-a3c3-d6969f9a1afa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.70.136.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:22:32:6a:54:70:ce:2a:d6:ab:25:49:36:e0:05:cf:b1:2d: 87:40:19:71:d5:cc:4b:51:64:b7:e6:c5:0d:a6:bc:82:88:2d: 59:ae:32:7c:de:83:37:f4:c6:66:8a:09:1f:ed:de:06:ba:fb: af:11:09:60:94:df:18:d3:88:23:1c:66:9c:17:1e:cf:40:e0: 41:b3:15:42:6e:1f:68:8d:71:d1:3c:a4:67:c7:e4:a7:08:59: 3c:55:33:09:17:53:d2:af:84:5d:5f:ae:68:cb:01:77:bb:91: e1:5b:be:08:62:f5:eb:7a:69:46:ab:e4:7a:a9:6a:0f:82:6b: 77:a9:4e:ea:c7:00:57:9a:14:66:1c:41:83:c2:ec:08:01:4f: 76:1c:4a:ea:b7:b4:1c:68:89:6c:9c:cb:90:91:43:ba:9b:56: 86:f7:69:4a:0b:dc:a7:b6:48:1b:51:b1:2f:71:02:63:40:53: 38:d3:b2:58:39:1d:34:cd:15:af:45:5e:a4:e0:a5:a4:20:b9: 90:b9:16:66:09:1b:91:36:2b:49:e0:c5:f8:de:a3:ac:bd:ef: 31:71:02:19:76:64:8e:a8:28:61:cf:d5:5c:be:f3:c1:ca:0e: d5:7d:b3:9f:27:25:83:af:5b:74:9d:4e:9e:07:52:9f:52:fe: c5:12:07:6d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5R6fSP3z+Ib8BfoIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDYyODA5MDAxMVoXDTI2MDkyNjA5MDAxMVowLzEtMCsGA1UEAxMk YzI4NTAzZTMtNjVhMC00ZGIwLWIxZTYtM2RkMGM1NzUzZmVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhEyHFZvKzwNSaury0vTLrpNzdRLu0d4RwaAd E+lQHcnEIOv1OFCsNWkbm9RgJovV8KUd7+ZLE6ailGqWeUzle4wBacKuxx75eCos 0FkJ0YXXu0IjBMT5EsVvHoVxsnDqeoD6Avp/5AVJkilczAzEo9bzh/aGYwllbXqg eaXhGpyAveFCfLVdt9923wyEtcBjO6Nz0a15prz9h7uPG6YJOn8M5EfWvtPnXvHV a3Y/snLzspsvmabLVW0NUE6NMyMbFs3+AUWsrVruEGou6RAzV8fKKwFRq8oknWVP /MU9Ae5SvGUqNFogv+VeG1eyaZCTQeJJRltT7K46/6hrPpoHpQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEQwrTDcCh1gtUPQOhmeBrTxARvkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvYTM5NjJmNjAtNTAxNS0z ZjA2LWEzYzMtZDY5NjlmOWExYWZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEaIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEYiMmpUcM4q1qslSTbgBc+xLYdAGXHVzEtRZLfmxQ2mvIKILVmuMnze gzf0xmaKCR/t3ga6+68RCWCU3xjTiCMcZpwXHs9A4EGzFUJuH2iNcdE8pGfH5KcI WTxVMwkXU9KvhF1frmjLAXe7keFbvghi9et6aUar5Hqpag+Ca3epTurHAFeaFGYc QYPC7AgBT3YcSuq3tBxoiWycy5CRQ7qbVob3aUoL3Ke2SBtRsS9xAmNAUzjTslg5 HTTNFa9FXqTgpaQguZC5FmYJG5E2K0ngxfjeo6y97zFxAhl2ZI6oKGHP1Vy+88HK DtV9s58nJYOvW3SdTp4HUp9S/sUSB20= -----END CERTIFICATE-----Generated at Thu Jul 23 21:59:18 2026 by rpki-client