$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/0463d0e9-42d0-3d45-ad01-1b0e8a511e6a.roa File: 0463d0e9-42d0-3d45-ad01-1b0e8a511e6a.roa (raw, json) Hash identifier: +hSDPVhXjXYZQbCe/fCJx7sjkcIoMiLzqai/HOJlR8M= Subject key identifier: 23:63:4F:B2:A2:9A:EE:32:D5:27:44:67:4D:D0:30:9D:02:11:5F:EE Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584CE09756E17061CD27FF79DC00 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/0463d0e9-42d0-3d45-ad01-1b0e8a511e6a.roa Signing time: Mon 16 Feb 2026 02:00:32 +0000 ROA not before: Mon 16 Feb 2026 02:00:32 +0000 ROA not after: Sun 17 May 2026 01:00:32 +0000 asID: 14789 IP address blocks: 172.68.98.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:e0:97:56:e1:70:61:cd:27:ff:79:dc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Feb 16 02:00:32 2026 GMT Not After : May 17 01:00:32 2026 GMT Subject: CN=4ef09014-a563-4514-a15b-4eb2a8aacfc3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:e6:93:83:cd:1a:db:15:c5:de:00:72:ad:ed: 25:a3:bb:52:2e:3f:63:14:f3:51:bf:c2:5b:1e:b9: 11:54:da:ad:4d:0c:d6:9a:81:15:a9:53:e8:ee:50: 3b:0e:0e:51:41:2d:98:04:c2:c6:01:df:1e:85:25: 4a:b3:59:04:4e:13:f0:01:aa:af:8c:aa:48:24:e0: d6:e0:de:1b:37:51:f4:7b:64:8d:43:eb:58:1d:24: 21:df:2f:11:23:53:cd:63:9e:48:4c:34:f2:88:5e: 1a:97:48:50:1e:34:cb:02:c5:58:10:fe:1e:10:83: 5a:ad:24:6d:58:7e:ec:21:cd:3f:1a:4b:17:85:9a: 84:2a:ed:8e:7a:99:04:45:8f:f2:db:e2:cd:48:41: 7e:2c:7b:bc:07:d5:4e:62:95:25:0e:a1:22:09:fe: 31:f0:42:3f:90:6b:ef:48:29:00:4a:ec:77:a4:25: 11:11:8e:0f:4e:c9:cb:05:51:a7:a8:7b:3e:a6:6c: b0:f0:a3:b3:84:68:87:91:f0:e8:59:24:a0:31:e4: 37:77:d6:9e:5c:64:6a:e6:42:5a:d1:35:1a:00:5a: f7:35:74:25:1c:19:03:5a:0d:55:bd:69:05:03:25: a1:a2:28:b5:34:1c:a0:a0:37:0b:ef:ae:db:ec:37: d9:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:63:4F:B2:A2:9A:EE:32:D5:27:44:67:4D:D0:30:9D:02:11:5F:EE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/0463d0e9-42d0-3d45-ad01-1b0e8a511e6a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.68.98.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:df:2c:1d:d8:59:2b:39:be:64:ab:a2:0b:17:a4:cf:3e:8a: 27:25:59:c2:b6:18:14:30:02:5b:3a:05:a8:62:7b:b6:16:eb: 2c:3c:8e:70:89:89:66:c5:78:e5:49:de:b7:eb:45:8e:99:97: e2:0d:98:02:5b:c7:25:93:0c:dd:84:a0:91:d1:69:31:6b:dc: 62:a9:71:b9:2f:c3:06:8e:47:7f:ad:26:ed:e8:3a:f7:94:7c: 2c:cd:ec:aa:b3:78:7a:d4:dd:77:67:9f:68:ea:52:3a:52:df: 8b:38:77:31:ab:b2:21:1b:0c:79:ec:92:91:25:aa:4d:1c:58: 32:28:1e:f1:e9:b7:ed:40:6d:80:b1:08:d4:fd:90:a2:68:ce: 40:54:69:8e:6e:77:06:12:2a:dc:0e:85:c1:ab:60:10:bb:40: ba:4d:0b:63:45:3a:6d:de:c2:67:45:8d:63:ac:00:64:ba:0a: 7c:37:2c:a3:76:08:d1:7b:87:4a:36:5e:40:7d:36:9b:bf:10: 4e:9f:1d:0d:af:0e:75:94:3b:25:c8:15:c4:79:3d:e1:fc:49: 4e:84:43:f4:d5:e9:81:af:b8:2f:de:7f:43:57:69:41:d1:56: 43:ce:fb:30:5b:77:da:0e:90:47:ab:19:43:bf:76:e6:03:a8: 6b:f0:ea:c1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzgl1bhcGHNJ/953AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDIxNjAyMDAzMloXDTI2MDUxNzAxMDAzMlowLzEtMCsGA1UEAxMk NGVmMDkwMTQtYTU2My00NTE0LWExNWItNGViMmE4YWFjZmMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhOaTg80a2xXF3gByre0lo7tSLj9jFPNRv8Jb HrkRVNqtTQzWmoEVqVPo7lA7Dg5RQS2YBMLGAd8ehSVKs1kEThPwAaqvjKpIJODW 4N4bN1H0e2SNQ+tYHSQh3y8RI1PNY55ITDTyiF4al0hQHjTLAsVYEP4eEINarSRt WH7sIc0/GksXhZqEKu2OepkERY/y2+LNSEF+LHu8B9VOYpUlDqEiCf4x8EI/kGvv SCkASux3pCUREY4PTsnLBVGnqHs+pmyw8KOzhGiHkfDoWSSgMeQ3d9aeXGRq5kJa 0TUaAFr3NXQlHBkDWg1VvWkFAyWhoii1NBygoDcL767b7DfZ3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCNjT7Kimu4y1SdEZ03QMJ0CEV/uMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMDQ2M2QwZTktNDJkMC0z ZDQ1LWFkMDEtMWIwZThhNTExZTZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArERiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADvfLB3YWSs5vmSrogsXpM8+iiclWcK2GBQwAls6Bahie7YW6yw8jnCJ iWbFeOVJ3rfrRY6Zl+INmAJbxyWTDN2EoJHRaTFr3GKpcbkvwwaOR3+tJu3oOveU fCzN7KqzeHrU3Xdnn2jqUjpS34s4dzGrsiEbDHnskpElqk0cWDIoHvHpt+1AbYCx CNT9kKJozkBUaY5udwYSKtwOhcGrYBC7QLpNC2NFOm3ewmdFjWOsAGS6Cnw3LKN2 CNF7h0o2XkB9Npu/EE6fHQ2vDnWUOyXIFcR5PeH8SU6EQ/TV6YGvuC/ef0NXaUHR VkPO+zBbd9oOkEerGUO/duYDqGvw6sE= -----END CERTIFICATE-----Generated at Sun Mar 1 23:15:43 2026 by rpki-client