$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b84ff3c0-87f6-3c0e-bec1-b3d7ba9e3591.roa File: b84ff3c0-87f6-3c0e-bec1-b3d7ba9e3591.roa (raw, json) Hash identifier: y9YaGHjXagIAg5AQa4Oeh97SVLlHCFG2zpTfZulV0fo= Subject key identifier: F8:2B:75:91:24:9F:F9:68:72:8E:7C:DB:AB:E3:71:74:8F:39:77:C6 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584E4C54A9F70BC7F491728DF940 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b84ff3c0-87f6-3c0e-bec1-b3d7ba9e3591.roa Signing time: Fri 26 Jun 2026 09:00:12 +0000 ROA not before: Fri 26 Jun 2026 09:00:12 +0000 ROA not after: Thu 24 Sep 2026 09:00:12 +0000 asID: 13335 IP address blocks: 172.68.236.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Jul 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:4c:54:a9:f7:0b:c7:f4:91:72:8d:f9:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Jun 26 09:00:12 2026 GMT Not After : Sep 24 09:00:12 2026 GMT Subject: CN=378d6cad-2893-4c9b-9213-b30c24754257 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:c7:ab:b8:9b:fe:e3:ea:8c:e7:43:90:ea:c5: 67:d2:ee:69:ba:a1:4e:6a:8d:b5:42:84:6b:50:dd: bc:ad:ef:19:09:78:58:d0:75:6f:0c:2e:4b:10:2b: d4:08:b6:9f:d4:a6:1c:68:56:7f:e6:ee:1c:ac:60: ac:d9:8c:0c:07:9a:6d:c0:43:46:4f:94:93:d4:02: c7:e5:c0:df:24:88:83:c3:ac:16:1e:0c:7a:c9:66: 3e:61:c6:b6:83:a3:5e:79:b5:d1:f7:39:b3:18:ac: 6e:47:db:8b:c2:bb:a5:61:f8:16:07:de:db:58:34: bb:5a:eb:ad:af:77:ff:0f:2c:ba:63:f2:5d:a6:5a: 8d:b8:a9:7e:37:02:7f:02:7f:33:cc:7e:a4:d2:53: 61:ad:1f:b8:b6:9a:14:29:eb:6b:75:9b:c9:9d:8b: 9a:29:ef:65:d2:00:2a:0a:1c:c3:00:b1:2a:d9:4f: f1:21:cc:64:23:11:cf:bf:42:b9:8a:f2:a1:c7:a9: 4c:7b:bb:af:10:94:41:90:ba:19:63:b4:30:ea:ad: 06:a1:ec:d7:d4:d0:60:04:0e:a4:5b:af:0f:6d:36: 0d:d7:d5:12:7e:4d:45:fa:b5:94:1d:17:db:c5:b5: 28:a0:a3:24:c6:80:9b:ba:80:9f:b8:eb:e0:81:27: 4d:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:2B:75:91:24:9F:F9:68:72:8E:7C:DB:AB:E3:71:74:8F:39:77:C6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b84ff3c0-87f6-3c0e-bec1-b3d7ba9e3591.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.68.236.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:07:42:ba:4f:5a:ae:d1:ef:c7:91:8c:6e:20:ba:44:10:13: ce:46:9f:bf:6c:38:00:0a:d8:fa:e0:d3:13:18:93:c0:90:af: 9d:ed:7d:2e:71:76:f2:6b:cb:c3:46:8c:1b:ec:ac:d4:2a:77: cc:aa:8b:02:81:8e:9e:43:34:6a:46:53:ed:36:81:35:b2:af: c5:d7:ff:76:f0:ad:9e:46:c8:ee:e8:5f:d8:bb:fe:1f:18:09: 6e:ca:32:21:31:34:4b:ac:0a:7a:26:40:78:af:0c:bd:48:58: f5:5f:dd:c7:ac:79:4b:32:c4:bd:05:74:ed:ca:3e:eb:76:74: f4:de:84:a5:3e:ad:74:45:e1:c7:fa:63:cb:08:34:3a:e0:fc: 6c:98:b0:56:f2:a7:9d:79:e8:11:55:ff:52:10:52:a6:9a:3d: 76:f1:b5:25:fd:b8:a6:cb:34:c2:96:2a:a3:7e:fc:1b:b2:85: 65:12:50:c7:bf:b2:71:29:24:df:d7:5e:03:0d:a3:fa:36:f9: be:46:06:6b:97:10:40:28:92:66:b3:8a:12:fe:95:00:23:bb: 08:ca:38:e7:2b:0a:43:dc:26:a8:a1:06:ef:2c:05:35:4a:21: f6:9e:64:86:a0:d7:f4:a7:de:30:35:27:14:1d:6d:94:48:98: 71:40:af:0c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5MVKn3C8f0kXKN+UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDYyNjA5MDAxMloXDTI2MDkyNDA5MDAxMlowLzEtMCsGA1UEAxMk Mzc4ZDZjYWQtMjg5My00YzliLTkyMTMtYjMwYzI0NzU0MjU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqMeruJv+4+qM50OQ6sVn0u5puqFOao21QoRr UN28re8ZCXhY0HVvDC5LECvUCLaf1KYcaFZ/5u4crGCs2YwMB5ptwENGT5ST1ALH 5cDfJIiDw6wWHgx6yWY+Yca2g6NeebXR9zmzGKxuR9uLwrulYfgWB97bWDS7Wuut r3f/Dyy6Y/JdplqNuKl+NwJ/An8zzH6k0lNhrR+4tpoUKetrdZvJnYuaKe9l0gAq ChzDALEq2U/xIcxkIxHPv0K5ivKhx6lMe7uvEJRBkLoZY7Qw6q0GoezX1NBgBA6k W68PbTYN19USfk1F+rWUHRfbxbUooKMkxoCbuoCfuOvggSdNpwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPgrdZEkn/loco5826vjcXSPOXfGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvYjg0ZmYzYzAtODdmNi0z YzBlLWJlYzEtYjNkN2JhOWUzNTkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrETsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD4HQrpPWq7R78eRjG4gukQQE85Gn79sOAAK2Prg0xMYk8CQr53tfS5x dvJry8NGjBvsrNQqd8yqiwKBjp5DNGpGU+02gTWyr8XX/3bwrZ5GyO7oX9i7/h8Y CW7KMiExNEusCnomQHivDL1IWPVf3ceseUsyxL0FdO3KPut2dPTehKU+rXRF4cf6 Y8sINDrg/GyYsFbyp5156BFV/1IQUqaaPXbxtSX9uKbLNMKWKqN+/BuyhWUSUMe/ snEpJN/XXgMNo/o2+b5GBmuXEEAokmazihL+lQAjuwjKOOcrCkPcJqihBu8sBTVK IfaeZIag1/Sn3jA1JxQdbZRImHFArww= -----END CERTIFICATE-----Generated at Fri Jul 24 00:46:18 2026 by rpki-client