$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/16e3b577-4ea0-31b5-980a-e9475640c31a.roa File: 16e3b577-4ea0-31b5-980a-e9475640c31a.roa (raw, json) Hash identifier: ZGKehOxPsOc4Lb3qaHRqIQ2bM8+tMWUdBAcpd/AeZkQ= Subject key identifier: A3:6C:01:FF:9D:4E:B0:C4:B3:6C:AA:3D:19:49:C7:D9:2A:1C:72:10 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584D6AAA91E9D1A3CA46AD280780 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/16e3b577-4ea0-31b5-980a-e9475640c31a.roa Signing time: Mon 06 Apr 2026 13:00:30 +0000 ROA not before: Mon 06 Apr 2026 13:00:30 +0000 ROA not after: Sun 05 Jul 2026 13:00:30 +0000 asID: 13335 IP address blocks: 172.68.138.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:6a:aa:91:e9:d1:a3:ca:46:ad:28:07:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Apr 6 13:00:30 2026 GMT Not After : Jul 5 13:00:30 2026 GMT Subject: CN=49041c61-9570-41a2-880c-6d8c470ef40e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:d1:4e:bb:b1:d5:53:36:76:87:d7:f4:44:4e: 04:9d:b6:40:82:ad:6b:50:12:12:18:f1:da:a2:0a: 10:3b:20:9d:21:7d:85:5a:e7:0f:30:e3:6b:eb:2d: 21:98:28:77:b2:88:01:ed:d3:df:46:09:9e:fb:b2: ac:90:20:bf:2c:fc:4f:ba:d7:74:d8:82:cd:08:d8: af:e3:51:24:d0:e8:a1:b9:39:32:d4:ed:5d:6f:44: 83:de:89:f0:a0:99:ca:42:e1:9d:26:b9:f1:e2:50: db:24:7c:84:69:59:a4:f4:3a:02:a6:e4:0c:82:c4: 19:e6:c4:e6:76:8a:43:50:95:1b:c9:3d:c8:9a:93: 86:41:b4:b7:9b:5f:09:43:03:e5:f2:e7:90:9a:3a: 33:9e:1e:a7:d4:7a:d8:92:96:d6:aa:1f:e5:f3:93: 6e:01:ac:01:5a:df:33:0f:28:d0:a3:6b:24:fd:63: 16:b4:88:3a:02:5e:60:af:90:76:0c:23:e4:fd:e8: 34:c7:3a:c7:b2:38:52:be:80:bc:ff:56:db:0d:8d: e6:23:ae:92:ea:24:87:89:d0:86:1f:2f:67:00:7d: bd:3d:06:dc:57:20:11:98:9e:49:82:a1:c0:6d:bb: d1:a4:e7:a1:43:7d:c1:29:fc:30:e3:32:2c:fa:34: 5f:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:6C:01:FF:9D:4E:B0:C4:B3:6C:AA:3D:19:49:C7:D9:2A:1C:72:10 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/16e3b577-4ea0-31b5-980a-e9475640c31a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.68.138.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:5a:5c:26:60:bb:53:a6:c2:de:68:09:75:93:7f:de:91:37: c1:c5:82:97:c8:db:8c:ce:0e:a0:16:9e:cb:30:3f:d2:32:68: f3:ac:12:f7:7a:ab:93:ec:77:72:3d:05:42:21:fb:c2:ac:cd: 7d:ff:48:86:b3:97:60:49:c3:55:85:b4:74:83:cf:a6:aa:3a: d1:b8:49:b8:94:5e:2e:61:55:88:bb:32:21:4a:16:10:d8:23: 08:4b:fa:8b:67:0e:73:c7:ac:6c:a1:c7:15:82:65:fe:71:b2: 44:28:d1:1e:21:82:ec:cf:94:0c:1e:83:66:fc:cd:34:7e:f0: ad:5a:49:67:77:b2:a2:7f:cb:92:ba:d1:40:7a:7b:e7:a8:5d: 31:8b:30:8e:69:68:87:4e:75:d9:1b:f4:b6:54:23:e6:7b:46: 4e:5a:72:3d:8b:6f:be:8b:33:ae:bb:e6:94:31:e2:be:b3:d2: a7:d9:51:a3:f4:cb:59:08:1d:73:0c:99:3d:83:ad:44:80:3e: 07:ac:e8:3c:b3:92:6e:2f:9f:64:0b:1e:27:4a:be:6a:1f:f7: 2c:ee:61:6d:ae:60:98:23:65:46:59:bf:29:7a:2f:f3:83:4a: 92:aa:63:3f:81:74:a9:f8:40:9a:bf:c2:5f:f5:7d:91:f7:dd: 8c:fc:06:32 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1qqpHp0aPKRq0oB4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDQwNjEzMDAzMFoXDTI2MDcwNTEzMDAzMFowLzEtMCsGA1UEAxMk NDkwNDFjNjEtOTU3MC00MWEyLTg4MGMtNmQ4YzQ3MGVmNDBlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5NFOu7HVUzZ2h9f0RE4EnbZAgq1rUBISGPHa ogoQOyCdIX2FWucPMONr6y0hmCh3sogB7dPfRgme+7KskCC/LPxPutd02ILNCNiv 41Ek0OihuTky1O1db0SD3onwoJnKQuGdJrnx4lDbJHyEaVmk9DoCpuQMgsQZ5sTm dopDUJUbyT3ImpOGQbS3m18JQwPl8ueQmjoznh6n1HrYkpbWqh/l85NuAawBWt8z DyjQo2sk/WMWtIg6Al5gr5B2DCPk/eg0xzrHsjhSvoC8/1bbDY3mI66S6iSHidCG Hy9nAH29PQbcVyARmJ5JgqHAbbvRpOehQ33BKfww4zIs+jRfJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKNsAf+dTrDEs2yqPRlJx9kqHHIQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMTZlM2I1NzctNGVhMC0z MWI1LTk4MGEtZTk0NzU2NDBjMzFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArESKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACRaXCZgu1Omwt5oCXWTf96RN8HFgpfI24zODqAWnsswP9IyaPOsEvd6 q5Psd3I9BUIh+8KszX3/SIazl2BJw1WFtHSDz6aqOtG4SbiUXi5hVYi7MiFKFhDY IwhL+otnDnPHrGyhxxWCZf5xskQo0R4hguzPlAweg2b8zTR+8K1aSWd3sqJ/y5K6 0UB6e+eoXTGLMI5paIdOddkb9LZUI+Z7Rk5acj2Lb76LM6675pQx4r6z0qfZUaP0 y1kIHXMMmT2DrUSAPges6Dyzkm4vn2QLHidKvmof9yzuYW2uYJgjZUZZvyl6L/OD SpKqYz+BdKn4QJq/wl/1fZH33Yz8BjI= -----END CERTIFICATE-----Generated at Sat Apr 18 00:03:36 2026 by rpki-client