$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/20c2362c-2844-3229-bf90-8c5234922061.roa File: 20c2362c-2844-3229-bf90-8c5234922061.roa (raw, json) Hash identifier: gIHfHggajfubWT2LbKe0x3NzKTM3h0oEVoCueE4/V9M= Subject key identifier: 2C:2B:4B:69:05:BD:4B:F6:23:DA:EC:47:65:7F:F2:B8:2A:72:5B:B3 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584D67DFDF24DE1B64F068A29800 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/20c2362c-2844-3229-bf90-8c5234922061.roa Signing time: Sun 05 Apr 2026 13:00:31 +0000 ROA not before: Sun 05 Apr 2026 13:00:31 +0000 ROA not after: Sat 04 Jul 2026 13:00:31 +0000 asID: 13335 IP address blocks: 172.68.69.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:67:df:df:24:de:1b:64:f0:68:a2:98:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Apr 5 13:00:31 2026 GMT Not After : Jul 4 13:00:31 2026 GMT Subject: CN=6baf40c7-93cf-4135-ab2c-fd193baa9e6f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:71:1a:cb:9a:a0:b6:ab:0e:e4:a7:41:34:46: a3:42:d6:28:12:58:8e:43:02:b3:9c:a6:14:7f:f6: 02:b7:d4:5d:aa:fd:cb:8d:21:9f:1e:e9:28:9b:75: fd:ca:b5:f6:c5:2c:c9:44:c4:de:21:48:c2:37:ad: 8d:79:07:a9:cf:75:7a:56:46:86:4f:ea:7c:a1:f1: af:bb:9f:97:22:f1:e2:05:8a:d0:17:a8:49:95:da: a5:dd:23:76:1f:d9:fc:b5:9d:c7:f0:74:1e:04:5a: 4a:a7:4e:f6:e8:0a:8a:1c:c2:7c:f9:12:25:fc:ce: 58:8e:66:7a:44:0c:9b:8d:b0:83:89:6a:91:69:23: 30:1a:06:4a:c6:3d:0e:ea:d5:ed:15:ee:d1:c1:69: 11:69:66:72:05:c4:21:eb:cf:8a:08:25:34:29:27: 09:56:37:c5:7a:af:85:4c:e8:a7:6b:42:3f:8f:1d: b9:af:26:4a:da:38:fd:da:64:58:a0:35:f1:a2:45: 0c:1e:09:cf:0a:0b:a7:9f:de:cf:78:6e:6f:20:4b: 80:c1:a4:74:32:b6:09:d9:da:24:44:0a:80:3b:cd: 64:ec:58:b7:22:ba:eb:09:06:b2:57:ba:e4:01:d1: 7a:34:5d:03:df:51:72:1b:97:48:05:db:5f:a3:c1: 88:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:2B:4B:69:05:BD:4B:F6:23:DA:EC:47:65:7F:F2:B8:2A:72:5B:B3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/20c2362c-2844-3229-bf90-8c5234922061.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.68.69.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a2:dd:4c:98:f2:a8:6c:08:42:e7:06:f6:45:49:13:bd:24:bf: 23:6b:b6:54:83:bf:00:5a:b7:38:f9:3f:f2:48:e1:57:b6:9b: 7e:3e:4b:17:57:2b:39:3b:08:e7:b6:bf:4b:e1:31:f6:0c:ed: 0f:69:98:41:63:32:94:ed:35:cc:2d:8d:9d:07:60:b3:57:58: b2:20:06:f4:bd:26:93:08:2b:7f:ab:c3:e2:02:5f:db:31:51: 15:f4:ce:40:d5:ba:a2:a6:44:89:d6:eb:da:79:de:fd:bf:d3: 6d:d7:d8:ec:20:80:69:96:a9:cc:17:87:0f:30:39:e3:1d:1a: 9b:de:e4:62:93:b3:c5:5d:16:fd:31:18:46:6a:55:9d:ca:ac: 8a:16:fa:15:8f:e2:e9:b6:04:b1:ff:92:a9:41:59:24:15:9a: ee:0e:84:b0:19:af:2c:1e:df:de:8c:26:c7:67:b8:e0:05:dc: 05:b3:d8:f2:5c:84:ed:44:8b:98:88:6f:8e:68:e5:5f:d8:9d: 15:39:1e:f3:1a:fe:95:6f:b0:ae:7b:e9:ae:45:59:f5:f8:e5: 3c:8a:7a:90:01:27:bc:3f:ad:d8:ae:92:b8:ab:7e:e7:90:00: 21:0c:29:a2:4f:8b:32:3f:86:70:3c:7a:e7:9d:10:a3:41:d4: e2:e7:72:3c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1n398k3htk8GiimAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDQwNTEzMDAzMVoXDTI2MDcwNDEzMDAzMVowLzEtMCsGA1UEAxMk NmJhZjQwYzctOTNjZi00MTM1LWFiMmMtZmQxOTNiYWE5ZTZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyXEay5qgtqsO5KdBNEajQtYoEliOQwKznKYU f/YCt9Rdqv3LjSGfHukom3X9yrX2xSzJRMTeIUjCN62NeQepz3V6VkaGT+p8ofGv u5+XIvHiBYrQF6hJldql3SN2H9n8tZ3H8HQeBFpKp0726AqKHMJ8+RIl/M5YjmZ6 RAybjbCDiWqRaSMwGgZKxj0O6tXtFe7RwWkRaWZyBcQh68+KCCU0KScJVjfFeq+F TOina0I/jx25ryZK2jj92mRYoDXxokUMHgnPCgunn97PeG5vIEuAwaR0MrYJ2dok RAqAO81k7Fi3IrrrCQayV7rkAdF6NF0D31FyG5dIBdtfo8GIlQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCwrS2kFvUv2I9rsR2V/8rgqcluzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMjBjMjM2MmMtMjg0NC0z MjI5LWJmOTAtOGM1MjM0OTIyMDYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArERFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKLdTJjyqGwIQucG9kVJE70kvyNrtlSDvwBatzj5P/JI4Ve2m34+SxdX Kzk7COe2v0vhMfYM7Q9pmEFjMpTtNcwtjZ0HYLNXWLIgBvS9JpMIK3+rw+ICX9sx URX0zkDVuqKmRInW69p53v2/023X2OwggGmWqcwXhw8wOeMdGpve5GKTs8VdFv0x GEZqVZ3KrIoW+hWP4um2BLH/kqlBWSQVmu4OhLAZrywe396MJsdnuOAF3AWz2PJc hO1Ei5iIb45o5V/YnRU5HvMa/pVvsK576a5FWfX45TyKepABJ7w/rdiukrirfueQ ACEMKaJPizI/hnA8euedEKNB1OLncjw= -----END CERTIFICATE-----Generated at Fri Apr 17 23:04:08 2026 by rpki-client