$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/02f9830c-0921-3d16-a5ce-3620b762783b.roa File: 02f9830c-0921-3d16-a5ce-3620b762783b.roa (raw, json) Hash identifier: akkOixZmyf+45F9XqOaa2dbLmUFPocf3aJFHX1WggW4= Subject key identifier: F8:3F:70:95:67:52:81:9F:A1:27:DE:3E:B9:98:28:34:38:CB:EF:14 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584D6C0FC41D00CACDB441166380 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/02f9830c-0921-3d16-a5ce-3620b762783b.roa Signing time: Tue 07 Apr 2026 01:00:23 +0000 ROA not before: Tue 07 Apr 2026 01:00:23 +0000 ROA not after: Mon 06 Jul 2026 01:00:23 +0000 asID: 13335 IP address blocks: 172.68.254.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:6c:0f:c4:1d:00:ca:cd:b4:41:16:63:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Apr 7 01:00:23 2026 GMT Not After : Jul 6 01:00:23 2026 GMT Subject: CN=7e509352-2cba-408a-b7d7-fc37f67eabe6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:f0:b7:5a:ef:10:0b:33:a8:0a:bc:9d:94:eb: 0a:3f:03:a3:7d:e4:ed:f5:e9:c0:d6:15:e4:17:ad: cb:6b:99:79:0a:b9:0f:5e:20:bd:14:4d:03:c9:4a: 2e:31:16:44:1b:61:90:e6:7c:f7:4c:0f:e8:96:ae: af:16:99:48:10:9c:78:20:93:ba:9d:ee:04:a7:c6: 08:38:6a:29:7c:c9:9f:83:81:ea:9f:15:e7:38:9f: 6c:d6:e9:34:0b:55:dc:e7:bf:0c:22:da:bf:1c:47: 85:fb:61:9a:08:1f:85:23:84:33:68:76:3f:b0:61: bf:64:57:59:19:49:32:9c:27:c7:57:44:bf:de:63: fa:eb:48:68:a4:fb:65:77:58:60:fb:6c:be:04:6e: e9:62:fd:10:94:28:e4:cf:08:57:e3:8d:9e:2e:10: b9:bc:6f:35:23:c2:17:e6:a1:de:fb:1d:28:af:e7: 09:0d:cb:07:29:4d:fe:88:cf:58:f3:1c:bb:28:ee: 9f:d3:be:5d:dc:c2:bd:87:30:8d:ed:85:3c:93:64: 7f:f5:bf:90:2e:a9:71:cb:0c:9f:09:09:b3:c7:2c: 06:1c:46:e6:cb:91:b3:4d:52:f7:4c:77:93:dd:55: 10:5b:47:e9:f1:4d:2c:af:bf:6b:09:44:c5:37:68: a9:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:3F:70:95:67:52:81:9F:A1:27:DE:3E:B9:98:28:34:38:CB:EF:14 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/02f9830c-0921-3d16-a5ce-3620b762783b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.68.254.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c7:89:dd:76:03:e3:8c:d8:40:50:80:0c:4b:1f:1e:3f:6d:17: 0a:45:bc:f8:6c:56:b1:f7:bb:c1:bb:8c:d7:90:c8:44:ac:98: 56:c0:65:0d:34:e3:75:2f:41:cd:fb:14:94:8f:c0:5a:fd:07: b7:d0:0f:82:23:67:84:6d:c4:20:3d:5d:ca:ed:06:bb:78:09: 18:4a:93:85:2a:0d:b1:be:a9:23:77:b0:7f:c5:4a:5b:d9:85: 96:bc:a2:ab:e0:6b:b3:2f:5a:be:93:5c:b3:18:6e:04:48:96: 71:30:72:a8:7c:57:64:0e:4e:61:a3:b7:bc:c2:f3:33:a0:b8: ea:f1:2b:9f:35:4d:19:75:ea:ae:2e:6d:42:58:18:5e:ae:be: d6:b2:c4:24:9a:b0:00:77:0c:66:1e:ee:75:91:cc:c2:ca:3c: af:b3:3b:1e:5d:c2:72:72:e1:9d:bb:67:65:af:33:2a:e6:06: e3:f5:a8:81:a6:0d:30:8f:10:66:17:5a:58:45:8d:45:2b:d1: 25:33:97:a1:10:6a:a8:ad:6a:12:09:10:18:45:39:bd:12:5f: 39:ac:3e:d5:9f:fe:9c:17:d8:92:fd:4d:69:01:e9:8b:33:73: 20:95:4b:14:a2:a9:b0:82:93:46:e9:3f:93:03:52:5e:c7:2f: f6:a0:bd:21 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1sD8QdAMrNtEEWY4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDQwNzAxMDAyM1oXDTI2MDcwNjAxMDAyM1owLzEtMCsGA1UEAxMk N2U1MDkzNTItMmNiYS00MDhhLWI3ZDctZmMzN2Y2N2VhYmU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0vC3Wu8QCzOoCrydlOsKPwOjfeTt9enA1hXk F63La5l5CrkPXiC9FE0DyUouMRZEG2GQ5nz3TA/olq6vFplIEJx4IJO6ne4Ep8YI OGopfMmfg4HqnxXnOJ9s1uk0C1Xc578MItq/HEeF+2GaCB+FI4QzaHY/sGG/ZFdZ GUkynCfHV0S/3mP660hopPtld1hg+2y+BG7pYv0QlCjkzwhX442eLhC5vG81I8IX 5qHe+x0or+cJDcsHKU3+iM9Y8xy7KO6f075d3MK9hzCN7YU8k2R/9b+QLqlxywyf CQmzxywGHEbmy5GzTVL3THeT3VUQW0fp8U0sr79rCUTFN2ipoQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPg/cJVnUoGfoSfePrmYKDQ4y+8UMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMDJmOTgzMGMtMDkyMS0z ZDE2LWE1Y2UtMzYyMGI3NjI3ODNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArET+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMeJ3XYD44zYQFCADEsfHj9tFwpFvPhsVrH3u8G7jNeQyESsmFbAZQ00 43UvQc37FJSPwFr9B7fQD4IjZ4RtxCA9XcrtBrt4CRhKk4UqDbG+qSN3sH/FSlvZ hZa8oqvga7MvWr6TXLMYbgRIlnEwcqh8V2QOTmGjt7zC8zOguOrxK581TRl16q4u bUJYGF6uvtayxCSasAB3DGYe7nWRzMLKPK+zOx5dwnJy4Z27Z2WvMyrmBuP1qIGm DTCPEGYXWlhFjUUr0SUzl6EQaqitahIJEBhFOb0SXzmsPtWf/pwX2JL9TWkB6Ysz cyCVSxSiqbCCk0bpP5MDUl7HL/agvSE= -----END CERTIFICATE-----Generated at Sat Apr 18 06:20:17 2026 by rpki-client