$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/0abebd83-79ac-3a1a-941d-93c2e8342f2b.roa File: 0abebd83-79ac-3a1a-941d-93c2e8342f2b.roa (raw, json) Hash identifier: TNjUhlJzXrU3wVvrLgttChKwixicNxbScP3AXMn4bOk= Subject key identifier: C7:52:1D:69:A9:58:F5:FF:BD:F9:51:E6:57:B4:4F:61:3B:73:BB:7D Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584D6AAAA40E055D7876C7F3DF00 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/0abebd83-79ac-3a1a-941d-93c2e8342f2b.roa Signing time: Mon 06 Apr 2026 13:00:30 +0000 ROA not before: Mon 06 Apr 2026 13:00:30 +0000 ROA not after: Sun 05 Jul 2026 13:00:30 +0000 asID: 13335 IP address blocks: 172.68.8.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:6a:aa:a4:0e:05:5d:78:76:c7:f3:df:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Apr 6 13:00:30 2026 GMT Not After : Jul 5 13:00:30 2026 GMT Subject: CN=21173323-ae62-463e-a54a-b16eb8ff4480 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:c3:6b:fa:c2:af:58:37:16:7b:a1:1e:19:a7: 8c:cd:0b:f6:40:b1:49:ab:b2:84:b6:a6:ca:f1:0b: fd:dd:17:fe:87:12:b2:e0:6f:5b:73:d5:a6:50:df: 9e:2a:95:22:b1:c0:9a:52:29:09:a4:10:a0:3e:34: b0:88:4b:2e:1d:4e:ad:09:21:8a:7c:be:20:74:a0: 03:0b:ce:f9:01:49:9b:59:fa:c9:12:de:e6:8f:49: eb:13:1f:6d:e6:95:2f:3b:96:1a:1b:08:76:15:58: 45:7e:19:78:17:2a:40:7c:ee:9d:a8:ab:40:02:c9: c3:20:c8:7f:12:e5:e2:60:da:dd:d5:d5:5b:3e:84: 81:2b:5c:19:e2:9e:e3:60:3c:ad:62:67:38:be:22: a5:94:14:e3:ee:eb:52:a1:d2:58:ad:d9:b5:54:87: 38:76:38:c2:7d:ef:6e:81:3f:6e:81:57:fb:4a:4e: e6:90:ff:42:0a:37:a5:6e:1c:94:73:27:3b:41:3e: 3f:74:c7:c8:7d:7f:d6:06:6f:b0:06:ab:cd:78:aa: 70:c6:da:28:46:df:b5:55:48:f2:2d:dd:ac:54:9c: 6b:b1:1f:cd:f6:2b:5b:96:0d:61:15:bb:c4:06:6c: 26:51:1c:a1:c3:d9:d6:6d:53:29:de:47:91:55:5e: 8f:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:52:1D:69:A9:58:F5:FF:BD:F9:51:E6:57:B4:4F:61:3B:73:BB:7D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/0abebd83-79ac-3a1a-941d-93c2e8342f2b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.68.8.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:a0:9b:1e:a4:a5:fa:13:72:ab:69:aa:d7:a1:79:20:f3:60: 82:98:3f:7f:8b:26:e3:d6:3a:14:0d:61:2c:7e:4d:5c:52:34: 7c:90:24:58:e8:5d:97:40:c8:f4:5b:24:ba:61:c6:a5:1c:f5: 70:20:9d:be:92:ce:24:06:16:b1:4e:cc:8a:02:89:12:17:05: bc:3e:cd:44:db:5e:9b:f8:98:f9:0a:63:30:26:f9:de:b5:48: f2:e5:58:26:34:f6:2e:dd:07:8d:b1:bc:ba:1d:50:16:91:5c: 6f:ff:ec:2d:b9:32:ec:af:c4:db:6f:c8:13:96:3b:88:07:b9: 96:f2:90:93:0d:55:5f:2c:86:a7:05:3e:23:7f:08:d8:e7:56: a3:b2:65:a1:6e:74:ea:a4:d2:22:f8:e3:40:3d:86:c8:21:37: 14:a2:df:aa:c8:3c:2d:ca:99:0c:a0:2c:0c:b1:9f:e8:3e:da: 97:a5:13:ac:ec:63:ec:5a:18:d4:60:ad:70:b1:95:d1:92:69: bb:5f:ef:ba:96:29:33:7d:51:bc:5b:2d:6e:2e:16:a8:95:63: 63:7b:b4:74:5e:e0:16:46:68:6c:ec:81:36:bb:6b:e5:65:71: a2:c4:7f:e8:96:ae:f8:f2:ab:c1:63:b1:eb:54:2d:34:25:6c: b2:e1:72:31 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1qqqQOBV14dsfz3wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDQwNjEzMDAzMFoXDTI2MDcwNTEzMDAzMFowLzEtMCsGA1UEAxMk MjExNzMzMjMtYWU2Mi00NjNlLWE1NGEtYjE2ZWI4ZmY0NDgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqMNr+sKvWDcWe6EeGaeMzQv2QLFJq7KEtqbK 8Qv93Rf+hxKy4G9bc9WmUN+eKpUiscCaUikJpBCgPjSwiEsuHU6tCSGKfL4gdKAD C875AUmbWfrJEt7mj0nrEx9t5pUvO5YaGwh2FVhFfhl4FypAfO6dqKtAAsnDIMh/ EuXiYNrd1dVbPoSBK1wZ4p7jYDytYmc4viKllBTj7utSodJYrdm1VIc4djjCfe9u gT9ugVf7Sk7mkP9CCjelbhyUcyc7QT4/dMfIfX/WBm+wBqvNeKpwxtooRt+1VUjy Ld2sVJxrsR/N9itblg1hFbvEBmwmURyhw9nWbVMp3keRVV6PAwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMdSHWmpWPX/vflR5le0T2E7c7t9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMGFiZWJkODMtNzlhYy0z YTFhLTk0MWQtOTNjMmU4MzQyZjJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrEQIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADegmx6kpfoTcqtpqteheSDzYIKYP3+LJuPWOhQNYSx+TVxSNHyQJFjo XZdAyPRbJLphxqUc9XAgnb6SziQGFrFOzIoCiRIXBbw+zUTbXpv4mPkKYzAm+d61 SPLlWCY09i7dB42xvLodUBaRXG//7C25MuyvxNtvyBOWO4gHuZbykJMNVV8shqcF PiN/CNjnVqOyZaFudOqk0iL440A9hsghNxSi36rIPC3KmQygLAyxn+g+2pelE6zs Y+xaGNRgrXCxldGSabtf77qWKTN9UbxbLW4uFqiVY2N7tHRe4BZGaGzsgTa7a+Vl caLEf+iWrvjyq8FjsetULTQlbLLhcjE= -----END CERTIFICATE-----Generated at Fri Apr 17 13:18:59 2026 by rpki-client