$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ba3a66fd-5fc5-3b87-acdc-52f4cfaa5e24.roa File: ba3a66fd-5fc5-3b87-acdc-52f4cfaa5e24.roa (raw, json) Hash identifier: opzQX8pAn3Ot4uJbOlqltCcfbJi327PIYFc5vXOVEBE= Subject key identifier: 89:C1:32:A4:9A:34:91:65:82:22:03:D3:EA:AA:B6:F5:FD:9B:84:C9 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584E97B510FA5F23B988ABDA8780 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ba3a66fd-5fc5-3b87-acdc-52f4cfaa5e24.roa Signing time: Thu 23 Jul 2026 09:00:11 +0000 ROA not before: Thu 23 Jul 2026 09:00:11 +0000 ROA not after: Wed 21 Oct 2026 09:00:11 +0000 asID: 14789 IP address blocks: 172.68.140.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Jul 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:97:b5:10:fa:5f:23:b9:88:ab:da:87:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Jul 23 09:00:11 2026 GMT Not After : Oct 21 09:00:11 2026 GMT Subject: CN=5e207e3a-8a2d-47cb-a92d-c74bd4e3d9d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:4b:82:e4:32:d6:df:b6:ad:63:8f:8f:42:e3: 85:58:16:89:af:3c:0a:11:fb:ac:5a:90:d7:d4:77: 53:1b:87:30:22:e4:64:18:82:3e:5a:cf:19:6a:7b: ed:2e:3e:47:cd:23:45:14:b2:70:33:cc:af:20:b0: a6:84:bc:ce:58:6d:76:e5:26:01:2b:26:bb:8c:97: 0a:49:9f:7a:56:4e:a3:e1:61:23:04:0f:42:45:8d: 15:45:c9:51:e5:2a:be:bf:93:3c:3b:28:8c:13:e7: 1a:b1:40:bf:7f:3f:50:4c:c8:60:29:d7:c8:eb:9f: b6:b6:b7:7e:6d:40:a3:7f:57:ba:79:fe:27:50:82: 0b:cc:1f:a2:03:48:61:84:6a:59:91:77:7b:b7:54: 6f:7c:80:1d:ce:08:67:e8:c8:51:ec:ac:ef:a6:75: 08:ef:23:e8:9b:da:68:17:4a:e2:5d:af:09:35:00: b8:63:38:ed:c0:6c:13:9c:3c:5d:85:9d:9f:75:2e: 9c:dc:1a:50:47:a1:25:37:fc:5f:e1:bb:d7:be:1d: 4b:2d:23:5f:fc:30:6c:a8:3c:4e:2f:db:ab:9b:4a: 80:ba:3e:06:cd:af:2b:2a:8d:0b:1b:86:6e:1f:8f: a6:55:30:64:3d:78:6b:0e:f9:40:ca:26:6c:a0:22: ea:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:C1:32:A4:9A:34:91:65:82:22:03:D3:EA:AA:B6:F5:FD:9B:84:C9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ba3a66fd-5fc5-3b87-acdc-52f4cfaa5e24.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.68.140.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:04:54:21:1d:ec:c8:0a:ed:d1:58:53:d8:e5:ff:4d:f0:09: bf:a7:4f:10:53:e9:d4:98:02:69:78:01:bd:da:9d:32:5e:a1: 7d:24:5d:e2:5d:34:02:ef:e3:7d:c7:00:53:5f:77:56:16:e4: 89:b3:21:c9:b1:8d:b4:06:a4:28:55:95:5b:c7:0d:dd:68:0d: a0:78:65:f3:75:0b:ca:57:d0:f0:a8:6d:4d:a8:0a:8c:7a:71: 9c:3c:67:a9:07:73:bb:d9:fd:31:1f:91:af:cd:7d:4d:fa:0e: 00:19:bd:cc:9c:f3:a3:ba:f0:c7:6c:b4:16:3f:9f:52:4f:b2: 2f:24:08:68:08:be:f0:d4:8b:f7:83:0f:04:a0:96:7b:cf:4b: 93:42:67:20:f8:31:a7:2e:52:88:bf:9d:f0:97:0a:88:aa:8f: ed:44:2f:fb:b8:d1:8e:ae:ee:5d:2d:3d:09:82:90:e3:49:a3: f7:12:25:78:48:30:7e:14:e6:2a:f2:f9:eb:b9:26:7a:9a:05: c6:6a:fc:db:0a:be:3f:84:03:66:0c:a0:8a:b5:6b:7e:51:09: 8a:33:5d:f2:25:bf:19:dd:7d:08:fc:9a:c0:e4:cc:ce:80:66: 24:e1:73:ba:f3:29:c5:61:9f:ef:41:03:24:5c:75:31:27:c9: b8:dc:a3:3d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6XtRD6XyO5iKvah4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDcyMzA5MDAxMVoXDTI2MTAyMTA5MDAxMVowLzEtMCsGA1UEAxMk NWUyMDdlM2EtOGEyZC00N2NiLWE5MmQtYzc0YmQ0ZTNkOWQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj0uC5DLW37atY4+PQuOFWBaJrzwKEfusWpDX 1HdTG4cwIuRkGII+Ws8ZanvtLj5HzSNFFLJwM8yvILCmhLzOWG125SYBKya7jJcK SZ96Vk6j4WEjBA9CRY0VRclR5Sq+v5M8OyiME+casUC/fz9QTMhgKdfI65+2trd+ bUCjf1e6ef4nUIILzB+iA0hhhGpZkXd7t1RvfIAdzghn6MhR7KzvpnUI7yPom9po F0riXa8JNQC4YzjtwGwTnDxdhZ2fdS6c3BpQR6ElN/xf4bvXvh1LLSNf/DBsqDxO L9urm0qAuj4Gza8rKo0LG4ZuH4+mVTBkPXhrDvlAyiZsoCLqKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFInBMqSaNJFlgiID0+qqtvX9m4TJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvYmEzYTY2ZmQtNWZjNS0z Yjg3LWFjZGMtNTJmNGNmYWE1ZTI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArESMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI8EVCEd7MgK7dFYU9jl/03wCb+nTxBT6dSYAml4Ab3anTJeoX0kXeJd NALv433HAFNfd1YW5ImzIcmxjbQGpChVlVvHDd1oDaB4ZfN1C8pX0PCobU2oCox6 cZw8Z6kHc7vZ/TEfka/NfU36DgAZvcyc86O68MdstBY/n1JPsi8kCGgIvvDUi/eD DwSglnvPS5NCZyD4MacuUoi/nfCXCoiqj+1EL/u40Y6u7l0tPQmCkONJo/cSJXhI MH4U5iry+eu5JnqaBcZq/NsKvj+EA2YMoIq1a35RCYozXfIlvxndfQj8msDkzM6A ZiThc7rzKcVhn+9BAyRcdTEnybjcoz0= -----END CERTIFICATE-----Generated at Thu Jul 23 23:18:02 2026 by rpki-client