$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f4fa7a41-9b07-313d-948b-1f8984fb2e5c.roa File: f4fa7a41-9b07-313d-948b-1f8984fb2e5c.roa (raw, json) Hash identifier: cTOJFRRk9Uye3/99+9GgHGLPXBAAHtGdAp2N9bQ6g/c= Subject key identifier: 11:38:3F:36:0F:A9:1A:66:DC:D7:9A:58:7D:DE:AD:AA:E6:59:52:6F Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584E4AEF67B86623C5538FFBFB00 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f4fa7a41-9b07-313d-948b-1f8984fb2e5c.roa Signing time: Thu 25 Jun 2026 21:00:12 +0000 ROA not before: Thu 25 Jun 2026 21:00:12 +0000 ROA not after: Wed 23 Sep 2026 21:00:12 +0000 asID: 13335 IP address blocks: 172.68.77.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Jul 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:4a:ef:67:b8:66:23:c5:53:8f:fb:fb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Jun 25 21:00:12 2026 GMT Not After : Sep 23 21:00:12 2026 GMT Subject: CN=fab96077-d362-4341-9f98-27ba6356ef28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:d9:d1:bb:15:3a:b0:b7:51:9d:eb:68:a2:56: b5:97:31:eb:89:ec:b7:ad:1e:ef:e8:33:92:75:d8: 13:75:8d:54:e8:d8:7a:2c:26:dd:43:c7:e0:42:87: b5:03:29:7d:3a:3f:e4:3a:0c:e3:7a:ea:13:eb:57: ca:02:73:09:57:a0:13:9e:c2:75:12:0c:8b:5c:94: 2b:e4:2e:35:37:3b:54:7c:97:e3:ea:94:8b:41:1e: dc:79:02:a7:d2:2b:51:45:e4:8b:d6:4f:b6:5c:2b: 28:f4:46:68:e6:45:c1:e5:43:91:34:d7:c9:b9:20: d7:3c:72:c1:8a:26:45:6a:a2:77:07:9a:4c:40:ee: de:fe:6f:75:82:3c:6f:03:a9:a2:f8:7b:c5:8b:55: 67:73:71:51:24:a9:39:d0:a4:c1:58:52:21:3f:f7: 13:25:fd:52:5f:c6:79:65:b3:a2:d4:f2:73:6c:0e: 07:80:e2:f9:ce:6e:76:0b:0b:ab:e6:b7:dc:98:63: f3:8b:f7:f4:22:9c:d7:11:be:1e:32:99:d2:d1:4c: d3:97:32:ef:61:bf:97:d6:39:f3:dc:ee:c3:44:78: 97:f3:99:a3:c2:67:17:a7:fb:a2:90:d3:e7:e7:b6: 68:9f:d9:c7:53:d1:95:5f:b2:7f:1f:c0:d5:cf:7a: e9:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:38:3F:36:0F:A9:1A:66:DC:D7:9A:58:7D:DE:AD:AA:E6:59:52:6F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f4fa7a41-9b07-313d-948b-1f8984fb2e5c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.68.77.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:d7:8d:64:42:c4:fe:18:7b:4c:e9:ec:28:80:c2:9d:1d:9c: 1a:1e:30:b7:de:7b:e5:1b:82:5c:ea:4a:11:f4:a5:bc:0e:d9: 47:84:6d:e1:7c:3c:93:5c:7d:ad:3a:12:cc:07:f4:dd:35:14: 18:ae:da:f4:3a:9b:dd:80:74:f2:f0:26:8d:7d:cc:b6:4c:e8: 53:fe:9e:c8:79:40:6c:67:ed:9b:7a:1a:04:d5:fe:14:1f:36: 69:ba:5b:fc:db:4c:0a:02:0f:2b:f6:61:cd:13:9c:85:6c:09: 51:88:25:4b:3e:ac:4b:53:38:e7:cc:8c:f9:67:a6:23:41:76: b3:be:5d:d3:dd:52:c8:59:39:52:c0:d5:a0:68:56:63:ea:6b: 39:f9:a8:02:1f:9b:53:96:87:40:56:1d:7e:e5:bb:ab:a8:28: f0:fd:24:7f:90:40:60:46:e3:f0:21:57:8c:a0:7d:a5:3c:cc: 19:fb:cc:8b:97:52:5d:02:23:26:4d:b7:29:aa:0b:b8:2d:9a: a5:98:42:79:66:48:d8:75:c0:34:f4:d8:a7:1d:a8:2a:cf:a5: ab:af:11:36:0b:db:ec:ec:4f:25:45:26:69:47:5a:e0:ce:cf: ed:39:2f:52:c4:56:54:cb:9f:92:22:9a:c2:cb:4b:19:fd:c1: 13:57:ff:04 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5K72e4ZiPFU4/7+wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDYyNTIxMDAxMloXDTI2MDkyMzIxMDAxMlowLzEtMCsGA1UEAxMk ZmFiOTYwNzctZDM2Mi00MzQxLTlmOTgtMjdiYTYzNTZlZjI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4NnRuxU6sLdRnetoola1lzHriey3rR7v6DOS ddgTdY1U6Nh6LCbdQ8fgQoe1Ayl9Oj/kOgzjeuoT61fKAnMJV6ATnsJ1EgyLXJQr 5C41NztUfJfj6pSLQR7ceQKn0itRReSL1k+2XCso9EZo5kXB5UORNNfJuSDXPHLB iiZFaqJ3B5pMQO7e/m91gjxvA6mi+HvFi1Vnc3FRJKk50KTBWFIhP/cTJf1SX8Z5 ZbOi1PJzbA4HgOL5zm52Cwur5rfcmGPzi/f0IpzXEb4eMpnS0UzTlzLvYb+X1jnz 3O7DRHiX85mjwmcXp/uikNPn57Zon9nHU9GVX7J/H8DVz3rpjwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBE4PzYPqRpm3NeaWH3erarmWVJvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvZjRmYTdhNDEtOWIwNy0z MTNkLTk0OGItMWY4OTg0ZmIyZTVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArERNMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFzXjWRCxP4Ye0zp7CiAwp0dnBoeMLfee+UbglzqShH0pbwO2UeEbeF8 PJNcfa06EswH9N01FBiu2vQ6m92AdPLwJo19zLZM6FP+nsh5QGxn7Zt6GgTV/hQf Nmm6W/zbTAoCDyv2Yc0TnIVsCVGIJUs+rEtTOOfMjPlnpiNBdrO+XdPdUshZOVLA 1aBoVmPqazn5qAIfm1OWh0BWHX7lu6uoKPD9JH+QQGBG4/AhV4ygfaU8zBn7zIuX Ul0CIyZNtymqC7gtmqWYQnlmSNh1wDT02KcdqCrPpauvETYL2+zsTyVFJmlHWuDO z+05L1LEVlTLn5IimsLLSxn9wRNX/wQ= -----END CERTIFICATE-----Generated at Fri Jul 24 09:06:06 2026 by rpki-client