$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/00434dbe-934c-3458-968b-e11bc6f1ad39.roa File: 00434dbe-934c-3458-968b-e11bc6f1ad39.roa (raw, json) Hash identifier: sJ7gfevMm/4Liw7CTE/OsJyAPNX9cVt6XFaMXgvz9qc= Subject key identifier: 3F:DB:23:02:B2:9B:99:79:78:3D:78:11:50:DF:42:7F:ED:85:8F:48 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584CB6B729ECFA8E2596B46EF540 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/00434dbe-934c-3458-968b-e11bc6f1ad39.roa Signing time: Sun 01 Feb 2026 02:00:32 +0000 ROA not before: Sun 01 Feb 2026 02:00:32 +0000 ROA not after: Sat 02 May 2026 01:00:32 +0000 asID: 13335 IP address blocks: 172.68.52.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:b6:b7:29:ec:fa:8e:25:96:b4:6e:f5:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Feb 1 02:00:32 2026 GMT Not After : May 2 01:00:32 2026 GMT Subject: CN=1034d27b-c563-405d-8c23-9a0e5c99c424 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:11:4d:d3:13:91:f8:0e:d6:5a:2d:a2:9b:e0: 68:15:e1:c5:00:64:ad:c4:e4:e2:88:01:0e:e1:66: 73:bc:f7:37:b1:9a:23:85:0b:28:24:b2:c7:e4:47: b6:7d:40:84:f8:da:6e:c4:6f:da:1a:a2:de:e4:b3: bf:ae:43:de:2a:a8:91:4c:b3:87:aa:b4:34:82:64: dc:d6:62:40:cb:72:8f:73:6d:15:2f:ef:98:41:5c: 40:94:d7:63:5f:b6:68:d6:f2:4a:de:fa:85:d3:f7: 53:e0:5e:e2:be:dd:81:77:70:e5:32:d4:16:81:44: 2e:a9:10:dc:43:ab:00:c3:a6:ad:5a:3c:ce:4e:69: 97:b0:37:39:aa:f4:07:c1:76:03:1c:1e:da:ec:68: c2:68:8c:34:df:92:9a:b8:55:ac:81:67:fc:22:d9: 6d:20:7f:df:e1:79:1d:9b:cb:27:89:8c:a0:85:04: 64:af:3c:50:01:7a:2d:64:19:d6:5d:4f:30:82:b1: a5:7a:5f:f2:0d:18:1f:a6:bd:e1:05:8e:b7:b4:2a: ae:d9:19:26:c2:fb:c4:05:14:61:bc:5c:b6:6e:f5: 5a:87:92:3a:ad:5a:90:43:5e:9a:b2:fb:ca:d7:1b: 44:5f:c3:0f:b2:79:9b:cc:7a:ed:3b:2f:27:be:81: 2e:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:DB:23:02:B2:9B:99:79:78:3D:78:11:50:DF:42:7F:ED:85:8F:48 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/00434dbe-934c-3458-968b-e11bc6f1ad39.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.68.52.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:d4:e5:dc:27:2e:ff:c4:66:44:c1:15:ea:b9:03:97:89:44: 2a:6e:a0:c9:a5:df:1c:f0:c0:d6:db:14:db:a1:4c:8f:86:c8: 04:25:70:4a:be:6d:63:68:c7:ec:d1:74:9a:6e:74:80:06:fd: cd:ce:93:fe:0d:34:43:9e:b8:97:79:84:ff:49:4f:33:18:1e: 44:9e:20:18:f0:6c:d7:f4:72:2b:eb:87:52:ef:f3:be:7e:1f: 97:ca:c6:a6:90:34:53:dc:2a:01:a6:e1:93:c9:fd:92:9b:ef: 5c:fa:cc:0c:f5:5d:46:5e:43:d3:d3:6c:65:81:65:b2:1a:c8: 35:74:95:2f:e9:26:2c:55:db:aa:85:fa:9d:25:a3:cc:a8:ac: 8e:4a:1e:aa:67:57:69:a4:00:09:81:9d:dc:14:a9:c2:92:39: 42:b0:c7:e3:c2:d9:f4:2a:3f:9a:dc:3a:4b:72:8d:dc:e1:3e: d5:d1:d0:d9:b1:84:4e:4a:b6:5b:50:fa:75:9d:50:b0:d0:ad: 74:2e:c8:97:f1:ec:ca:8d:60:48:f8:d9:9d:35:b5:17:89:f8: 09:34:cd:0d:5d:77:d7:dd:63:96:0b:8a:51:2f:a9:ce:a9:37: eb:89:29:b9:35:22:11:48:33:68:a5:86:c9:c5:d1:c3:4d:b2: 47:c7:ec:d8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEy2tyns+o4llrRu9UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDIwMTAyMDAzMloXDTI2MDUwMjAxMDAzMlowLzEtMCsGA1UEAxMk MTAzNGQyN2ItYzU2My00MDVkLThjMjMtOWEwZTVjOTljNDI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuxFN0xOR+A7WWi2im+BoFeHFAGStxOTiiAEO 4WZzvPc3sZojhQsoJLLH5Ee2fUCE+NpuxG/aGqLe5LO/rkPeKqiRTLOHqrQ0gmTc 1mJAy3KPc20VL++YQVxAlNdjX7Zo1vJK3vqF0/dT4F7ivt2Bd3DlMtQWgUQuqRDc Q6sAw6atWjzOTmmXsDc5qvQHwXYDHB7a7GjCaIw035KauFWsgWf8ItltIH/f4Xkd m8sniYyghQRkrzxQAXotZBnWXU8wgrGlel/yDRgfpr3hBY63tCqu2RkmwvvEBRRh vFy2bvVah5I6rVqQQ16asvvK1xtEX8MPsnmbzHrtOy8nvoEuhwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD/bIwKym5l5eD14EVDfQn/thY9IMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMDA0MzRkYmUtOTM0Yy0z NDU4LTk2OGItZTExYmM2ZjFhZDM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEQ0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABrU5dwnLv/EZkTBFeq5A5eJRCpuoMml3xzwwNbbFNuhTI+GyAQlcEq+ bWNox+zRdJpudIAG/c3Ok/4NNEOeuJd5hP9JTzMYHkSeIBjwbNf0civrh1Lv875+ H5fKxqaQNFPcKgGm4ZPJ/ZKb71z6zAz1XUZeQ9PTbGWBZbIayDV0lS/pJixV26qF +p0lo8yorI5KHqpnV2mkAAmBndwUqcKSOUKwx+PC2fQqP5rcOktyjdzhPtXR0Nmx hE5KtltQ+nWdULDQrXQuyJfx7MqNYEj42Z01tReJ+Ak0zQ1dd9fdY5YLilEvqc6p N+uJKbk1IhFIM2ilhsnF0cNNskfH7Ng= -----END CERTIFICATE-----Generated at Sun Mar 1 20:56:59 2026 by rpki-client