$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/1ead5eec-692c-341f-b9dd-9369c07a02b2.roa File: 1ead5eec-692c-341f-b9dd-9369c07a02b2.roa (raw, json) Hash identifier: WSQbhDUkOrsFveefFEPloilIF7XiiM6AV9fn4Sc0K3w= Subject key identifier: D1:60:DC:9B:05:14:7C:67:82:69:0C:89:25:FD:E1:AA:FB:B8:BE:AF Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584D773A828A6772FDDDC859A200 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/1ead5eec-692c-341f-b9dd-9369c07a02b2.roa Signing time: Sat 11 Apr 2026 01:00:24 +0000 ROA not before: Sat 11 Apr 2026 01:00:24 +0000 ROA not after: Fri 10 Jul 2026 01:00:24 +0000 asID: 14789 IP address blocks: 172.68.240.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:77:3a:82:8a:67:72:fd:dd:c8:59:a2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Apr 11 01:00:24 2026 GMT Not After : Jul 10 01:00:24 2026 GMT Subject: CN=1ae80ba2-f667-4ac9-9eb0-584846179d42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:90:b3:6a:a8:c9:a4:59:d7:a1:4d:73:aa:1d: 78:6d:2a:34:ec:5e:8c:ba:65:27:e3:ce:87:2f:ff: 5f:4a:a8:7a:c7:27:30:1a:2d:1b:4b:0c:62:e3:94: b4:65:7f:10:de:81:3d:18:89:2f:2f:ec:a8:d1:fc: 92:66:ec:62:e6:06:c5:a5:9a:df:30:6e:60:7e:f2: 8e:ae:c3:4a:50:4f:44:d1:bd:aa:7a:7e:d6:bc:74: 27:2b:22:2c:58:46:28:a6:85:0b:ea:9e:01:64:5b: e4:f5:f6:07:e1:fe:fd:a0:3f:c7:ab:83:b1:a0:a9: b2:91:6a:57:7f:1a:6f:94:c2:75:e6:c4:5a:80:a9: 58:47:b8:1f:ec:ec:34:d3:03:34:5c:89:91:30:14: 58:d1:8b:ed:a3:7c:a2:b1:b4:e6:17:95:2e:b3:fd: fe:63:67:db:b9:c9:69:56:58:7a:62:50:fc:3e:3b: 1f:18:1c:b7:88:59:a3:e9:5a:3a:87:b0:5a:31:eb: 3b:de:7f:70:49:b7:ae:59:f0:73:5d:77:bd:b2:a3: a4:f3:d7:3c:1f:fc:0a:a3:b7:67:26:91:ed:f9:b8: 4c:30:1d:f2:b9:a8:68:9c:e4:ff:6b:db:2e:25:3b: ba:0b:a1:2d:97:f5:19:ad:4f:9d:e6:cf:6a:ec:80: ca:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:60:DC:9B:05:14:7C:67:82:69:0C:89:25:FD:E1:AA:FB:B8:BE:AF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/1ead5eec-692c-341f-b9dd-9369c07a02b2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.68.240.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:dc:47:0f:eb:e8:c5:0d:fc:b8:08:7c:b3:f8:af:61:fc:cd: 03:a2:33:13:b2:c3:d4:4c:e1:c1:9b:ce:04:4a:88:e5:a2:b1: 03:2d:1e:ae:0e:a9:7a:79:4a:12:88:cf:62:44:d3:e2:14:4e: 5b:53:7f:51:66:a5:7b:14:0f:11:8b:4f:4a:d7:78:ef:8d:88: bf:9a:73:e6:fd:78:6e:a3:8b:da:64:22:9c:11:ce:47:1e:e0: 99:29:6b:b3:f2:b2:88:7b:3c:42:1d:97:7b:05:16:29:90:e6: 2b:d7:49:f3:28:c6:70:34:98:95:b3:19:bc:d3:3a:e5:96:b5: 40:15:3b:80:cc:3b:9e:ed:84:65:0d:15:f7:7d:9b:c1:93:3a: d3:05:51:2b:51:18:9b:e0:4b:71:8d:4a:aa:1a:7e:cd:d1:3b: 74:cb:a3:0e:4b:b2:24:f7:aa:0c:8b:13:8f:ae:ac:99:77:fe: bb:5b:1d:bc:48:9b:ae:11:bb:7c:6d:bc:94:ef:b9:f3:eb:6f: 25:0a:67:30:ad:35:4e:a1:3d:7b:e6:70:10:90:4a:28:07:2c: 6a:0c:10:48:c2:1b:62:cc:64:fe:ea:86:c5:1c:47:99:76:a0: 09:ff:11:20:06:24:36:20:30:8e:9c:e2:1a:ce:88:e8:e4:d7: aa:77:ce:95 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE13OoKKZ3L93chZogAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDQxMTAxMDAyNFoXDTI2MDcxMDAxMDAyNFowLzEtMCsGA1UEAxMk MWFlODBiYTItZjY2Ny00YWM5LTllYjAtNTg0ODQ2MTc5ZDQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzJCzaqjJpFnXoU1zqh14bSo07F6MumUn486H L/9fSqh6xycwGi0bSwxi45S0ZX8Q3oE9GIkvL+yo0fySZuxi5gbFpZrfMG5gfvKO rsNKUE9E0b2qen7WvHQnKyIsWEYopoUL6p4BZFvk9fYH4f79oD/Hq4OxoKmykWpX fxpvlMJ15sRagKlYR7gf7Ow00wM0XImRMBRY0Yvto3yisbTmF5Uus/3+Y2fbuclp Vlh6YlD8PjsfGBy3iFmj6Vo6h7BaMes73n9wSbeuWfBzXXe9sqOk89c8H/wKo7dn JpHt+bhMMB3yuahonOT/a9suJTu6C6Etl/UZrU+d5s9q7IDKNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNFg3JsFFHxngmkMiSX94ar7uL6vMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMWVhZDVlZWMtNjkyYy0z NDFmLWI5ZGQtOTM2OWMwN2EwMmIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArETwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADvcRw/r6MUN/LgIfLP4r2H8zQOiMxOyw9RM4cGbzgRKiOWisQMtHq4O qXp5ShKIz2JE0+IUTltTf1FmpXsUDxGLT0rXeO+NiL+ac+b9eG6ji9pkIpwRzkce 4Jkpa7Pysoh7PEIdl3sFFimQ5ivXSfMoxnA0mJWzGbzTOuWWtUAVO4DMO57thGUN Ffd9m8GTOtMFUStRGJvgS3GNSqoafs3RO3TLow5LsiT3qgyLE4+urJl3/rtbHbxI m64Ru3xtvJTvufPrbyUKZzCtNU6hPXvmcBCQSigHLGoMEEjCG2LMZP7qhsUcR5l2 oAn/ESAGJDYgMI6c4hrOiOjk16p3zpU= -----END CERTIFICATE-----Generated at Fri Apr 17 16:51:39 2026 by rpki-client