$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/e63c008f-27b5-330d-9d8e-f07fe70e2e46.roa File: e63c008f-27b5-330d-9d8e-f07fe70e2e46.roa (raw, json) Hash identifier: xOYjml3MPorqpar5AEwlxz8Ya84U3NV9Q0Ql6bWSkNo= Subject key identifier: E7:20:96:06:F8:D4:50:76:72:38:1A:3F:56:2D:35:CD:DB:B5:D8:27 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584EA7884B1183676BAA5FEA0040 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/e63c008f-27b5-330d-9d8e-f07fe70e2e46.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 13335 IP address blocks: 172.68.48.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:88:4b:11:83:67:6b:aa:5f:ea:00:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=a5ab8b40-9d91-4b3b-821a-1c3b58854f0b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:0a:38:9c:d6:dc:a2:e4:ed:3d:fd:a3:2b:26: 27:9a:2c:fe:10:86:e9:56:f6:c2:71:b4:e7:6b:48: 65:3f:b4:4b:06:f0:73:76:c9:8a:2e:6b:91:b8:09: 37:28:28:28:ef:f8:ea:06:d2:83:7d:e4:22:83:00: be:30:45:da:e6:40:1b:09:6d:c4:5b:1a:43:3d:ea: 6b:2f:67:06:57:aa:8d:33:c9:af:35:55:d1:45:80: 7d:5e:93:19:12:b2:b3:fb:c9:35:e2:7a:6c:3c:56: 21:04:ed:12:2d:39:6d:ee:c3:ca:0a:bc:27:a8:5e: e0:97:0a:b7:e4:e0:aa:c8:06:a3:02:28:be:4d:ab: 57:7b:fc:60:2e:4f:16:f3:3d:0b:61:6e:76:3b:29: f8:15:79:30:ee:30:05:95:c2:59:9a:6d:5b:86:57: 93:48:40:bb:bf:18:2e:ab:3c:71:19:c6:90:8c:fe: 10:53:69:aa:25:db:53:a6:fd:b9:20:48:27:0c:49: ae:3d:91:4e:20:bb:c2:5b:94:2f:e0:e3:3f:4b:8f: 1d:82:34:3c:24:65:21:81:1d:c7:22:1d:36:4f:0c: d3:c5:c0:33:a1:f2:2b:f6:28:57:52:b0:87:32:6d: e1:80:4a:c4:c8:a3:19:62:a9:5e:96:bf:50:e7:b4: 59:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:20:96:06:F8:D4:50:76:72:38:1A:3F:56:2D:35:CD:DB:B5:D8:27 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/e63c008f-27b5-330d-9d8e-f07fe70e2e46.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.68.48.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:84:29:aa:3f:f8:bc:b6:50:57:66:04:30:2e:12:c0:e2:d7: af:af:b1:8d:15:48:cf:a2:c7:28:87:c9:da:07:74:f7:97:81: b3:1b:2e:ba:f4:ca:9d:51:27:ee:47:99:75:bb:df:4a:fe:db: 4c:6a:60:5f:a7:7a:22:02:bf:6f:bd:bc:1b:d9:82:5c:6c:b7: 3a:47:e0:d9:c1:94:d6:2d:b5:e1:7a:14:b1:23:9f:14:bb:9c: 70:31:5c:d3:aa:2a:e8:56:c5:5d:0c:48:a5:4b:dd:23:cb:21: e0:e2:b7:bc:12:49:d3:e2:4b:19:2f:d0:73:8e:d7:25:46:6a: 68:a6:0f:75:26:4b:02:94:2b:07:32:68:14:33:a8:6a:72:66: 5a:95:be:e8:9a:77:ff:4f:cb:b7:bb:bf:56:57:b1:87:7f:a6: e4:d2:15:67:9a:66:61:fa:ae:5f:02:73:32:ee:ce:9a:af:27: 82:f6:fb:38:da:3e:68:37:44:ba:da:a6:dd:0a:47:b8:99:f2: 0b:4f:49:2c:5e:ef:63:19:9f:eb:31:15:34:a4:5a:c8:eb:dd: 06:e2:fb:e2:ff:0e:a3:dc:20:fa:d5:af:46:bc:65:00:29:f9: ff:af:03:fc:ff:73:f4:91:bf:84:ce:9d:c8:b3:2e:69:67:84: cf:fa:c0:64 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6niEsRg2drql/qAEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk YTVhYjhiNDAtOWQ5MS00YjNiLTgyMWEtMWMzYjU4ODU0ZjBiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhwo4nNbcouTtPf2jKyYnmiz+EIbpVvbCcbTn a0hlP7RLBvBzdsmKLmuRuAk3KCgo7/jqBtKDfeQigwC+MEXa5kAbCW3EWxpDPepr L2cGV6qNM8mvNVXRRYB9XpMZErKz+8k14npsPFYhBO0SLTlt7sPKCrwnqF7glwq3 5OCqyAajAii+TatXe/xgLk8W8z0LYW52Oyn4FXkw7jAFlcJZmm1bhleTSEC7vxgu qzxxGcaQjP4QU2mqJdtTpv25IEgnDEmuPZFOILvCW5Qv4OM/S48dgjQ8JGUhgR3H Ih02TwzTxcAzofIr9ihXUrCHMm3hgErEyKMZYqlelr9Q57RZgQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOcglgb41FB2cjgaP1YtNc3btdgnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvZTYzYzAwOGYtMjdiNS0z MzBkLTlkOGUtZjA3ZmU3MGUyZTQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEQwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH+EKao/+Ly2UFdmBDAuEsDi16+vsY0VSM+ixyiHydoHdPeXgbMbLrr0 yp1RJ+5HmXW730r+20xqYF+neiICv2+9vBvZglxstzpH4NnBlNYtteF6FLEjnxS7 nHAxXNOqKuhWxV0MSKVL3SPLIeDit7wSSdPiSxkv0HOO1yVGamimD3UmSwKUKwcy aBQzqGpyZlqVvuiad/9Py7e7v1ZXsYd/puTSFWeaZmH6rl8CczLuzpqvJ4L2+zja Pmg3RLrapt0KR7iZ8gtPSSxe72MZn+sxFTSkWsjr3Qbi++L/DqPcIPrVr0a8ZQAp +f+vA/z/c/SRv4TOncizLmlnhM/6wGQ= -----END CERTIFICATE-----Generated at Wed Jul 29 03:41:58 2026 by rpki-client