$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ef04af22-a041-3bed-a165-40c5c8172575.roa File: ef04af22-a041-3bed-a165-40c5c8172575.roa (raw, json) Hash identifier: 4Mw7FPOZGSKyPkh8aROH4D8Py6wY56j2aT72HRhsOeA= Subject key identifier: FE:EA:F6:FA:17:DA:F0:8C:71:D1:57:DC:6E:E4:2A:CD:A4:6F:C8:99 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584E4AEF6883A601B7B650E939C0 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ef04af22-a041-3bed-a165-40c5c8172575.roa Signing time: Thu 25 Jun 2026 21:00:12 +0000 ROA not before: Thu 25 Jun 2026 21:00:12 +0000 ROA not after: Wed 23 Sep 2026 21:00:12 +0000 asID: 13335 IP address blocks: 172.68.139.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Jul 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:4a:ef:68:83:a6:01:b7:b6:50:e9:39:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Jun 25 21:00:12 2026 GMT Not After : Sep 23 21:00:12 2026 GMT Subject: CN=a8e7abc8-b56f-49b1-aeea-6eca0fb1d651 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:a8:2a:35:bf:40:62:65:42:72:a0:32:41:ac: 78:10:d4:2b:58:99:a4:22:4c:d3:e0:84:e0:9f:71: 82:56:64:01:f0:9e:5a:da:16:cd:03:18:21:88:1b: 16:c7:b4:02:99:11:84:c7:cc:48:ff:0b:2b:9f:e6: 3d:6b:f2:d3:cf:b5:f4:07:d7:1d:55:ba:bc:fd:bb: 61:27:7a:ee:f6:e1:4f:a8:c8:ce:64:9c:d8:9f:84: 2b:15:38:13:36:10:9f:45:a0:87:98:4e:ef:4e:ef: 63:d6:ca:14:ec:28:e0:81:3d:dd:7e:7a:5c:11:52: 17:4a:44:81:b3:ce:a6:0b:85:4b:04:ec:c0:85:d6: f1:ff:af:05:26:dd:3c:24:a8:a1:77:df:44:63:0c: d8:bc:68:ee:90:e2:fe:64:e8:09:3a:4c:1c:69:04: 9b:79:52:e8:77:d6:e8:4a:b8:48:15:ca:18:74:6b: 24:c2:a1:ba:99:1a:a6:6d:3d:99:60:87:4f:f6:b6: 68:e5:10:dc:b5:99:13:2b:c1:fc:80:42:f3:78:2a: c6:97:eb:2e:5f:0c:2d:de:3e:76:e6:de:7b:5d:d0: fc:5c:55:08:4a:3b:da:51:07:1d:66:e7:60:60:5a: 60:aa:66:0d:57:9f:71:e8:a0:fd:97:d3:44:37:61: 7c:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:EA:F6:FA:17:DA:F0:8C:71:D1:57:DC:6E:E4:2A:CD:A4:6F:C8:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ef04af22-a041-3bed-a165-40c5c8172575.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.68.139.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:8a:e5:fe:ff:4c:94:de:ba:8b:ea:8d:8c:3d:63:47:71:93: 55:94:60:bd:6d:6e:ab:d1:5b:ba:ba:3b:85:67:ed:2d:26:c6: c4:5c:91:bf:ae:0d:b6:a5:22:68:2a:ca:36:dc:7d:3d:0c:9d: 35:75:80:e1:ae:b7:46:11:da:4f:87:08:e0:ad:1c:c1:dc:bd: 47:78:14:3d:e8:46:7c:da:ac:c4:ac:66:32:67:7c:ae:67:11: 94:0e:a3:9e:be:ee:89:00:3f:c0:b8:6e:b9:85:94:c7:c9:6e: cb:9b:95:c1:49:57:b6:c6:20:0f:97:26:80:5a:4e:e9:79:0c: f8:06:b0:dc:8b:ad:65:3b:bd:95:25:5c:27:97:61:32:22:72: da:eb:73:f5:de:2b:ba:ca:fe:bc:84:53:4a:f7:26:c4:67:4e: c2:17:f1:84:a1:88:2d:47:e4:74:a6:78:bd:8d:18:e4:63:72: fa:20:1e:a7:2d:d7:f3:24:de:d9:1b:ff:f0:65:56:94:46:7e: 4c:9c:e1:43:8a:5c:c5:57:84:af:98:42:6f:0d:ed:be:d4:62: 6f:15:d6:15:d9:ee:7f:12:8f:e3:57:f0:6d:de:b9:00:33:aa: 96:74:0b:66:ad:df:17:79:d5:6d:07:3d:24:75:c6:62:e0:3e: b1:d9:24:59 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5K72iDpgG3tlDpOcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDYyNTIxMDAxMloXDTI2MDkyMzIxMDAxMlowLzEtMCsGA1UEAxMk YThlN2FiYzgtYjU2Zi00OWIxLWFlZWEtNmVjYTBmYjFkNjUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhagqNb9AYmVCcqAyQax4ENQrWJmkIkzT4ITg n3GCVmQB8J5a2hbNAxghiBsWx7QCmRGEx8xI/wsrn+Y9a/LTz7X0B9cdVbq8/bth J3ru9uFPqMjOZJzYn4QrFTgTNhCfRaCHmE7vTu9j1soU7CjggT3dfnpcEVIXSkSB s86mC4VLBOzAhdbx/68FJt08JKihd99EYwzYvGjukOL+ZOgJOkwcaQSbeVLod9bo SrhIFcoYdGskwqG6mRqmbT2ZYIdP9rZo5RDctZkTK8H8gELzeCrGl+suXwwt3j52 5t57XdD8XFUISjvaUQcdZudgYFpgqmYNV59x6KD9l9NEN2F8EwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP7q9voX2vCMcdFX3G7kKs2kb8iZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvZWYwNGFmMjItYTA0MS0z YmVkLWExNjUtNDBjNWM4MTcyNTc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArESLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJeK5f7/TJTeuovqjYw9Y0dxk1WUYL1tbqvRW7q6O4Vn7S0mxsRckb+u DbalImgqyjbcfT0MnTV1gOGut0YR2k+HCOCtHMHcvUd4FD3oRnzarMSsZjJnfK5n EZQOo56+7okAP8C4brmFlMfJbsublcFJV7bGIA+XJoBaTul5DPgGsNyLrWU7vZUl XCeXYTIictrrc/XeK7rK/ryEU0r3JsRnTsIX8YShiC1H5HSmeL2NGORjcvogHqct 1/Mk3tkb//BlVpRGfkyc4UOKXMVXhK+YQm8N7b7UYm8V1hXZ7n8Sj+NX8G3euQAz qpZ0C2at3xd51W0HPSR1xmLgPrHZJFk= -----END CERTIFICATE-----Generated at Fri Jul 24 13:09:45 2026 by rpki-client