$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/24baa86a-b2ef-3852-a2ab-4bc6169dbe13.roa File: 24baa86a-b2ef-3852-a2ab-4bc6169dbe13.roa (raw, json) Hash identifier: FOWL3N9nUv3WdfTPlpJYJRCnpyEPy1I5zcNOeWdI7fY= Subject key identifier: 89:FF:C7:06:AF:05:F2:0A:3A:6C:90:20:52:E3:B4:27:99:F8:17:56 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584D6AAA910ECCD6129F0BD25040 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/24baa86a-b2ef-3852-a2ab-4bc6169dbe13.roa Signing time: Mon 06 Apr 2026 13:00:30 +0000 ROA not before: Mon 06 Apr 2026 13:00:30 +0000 ROA not after: Sun 05 Jul 2026 13:00:30 +0000 asID: 13335 IP address blocks: 172.68.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:6a:aa:91:0e:cc:d6:12:9f:0b:d2:50:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Apr 6 13:00:30 2026 GMT Not After : Jul 5 13:00:30 2026 GMT Subject: CN=b2ffff9b-47e4-4d24-924d-0901a440f76e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:2e:47:9e:80:eb:f2:a0:0c:be:9e:73:e2:84: ad:8f:d8:8a:53:52:19:3f:77:48:a4:0c:45:8b:54: e1:d0:84:82:e1:c2:ec:80:a3:c9:0d:ce:4a:02:32: cd:f8:e1:69:30:fb:ea:1c:42:58:b8:8c:2a:a9:30: 54:b5:56:bc:76:8f:b9:30:5e:ad:38:84:b2:33:88: 22:11:b3:7d:3b:4c:7f:1c:39:92:fb:57:47:95:07: 16:0b:97:b0:23:20:b3:62:30:48:65:01:2d:d6:66: ca:08:be:b7:50:60:37:0b:cb:ee:7c:e2:57:02:0a: 03:80:97:91:e9:bf:79:b8:79:13:75:c2:84:2d:78: 51:94:1a:b6:3f:0c:0a:9b:6f:95:8e:ef:d9:33:ed: 4f:a2:19:ef:d5:24:05:a2:59:34:82:0b:a0:14:73: e6:46:ca:22:9d:a8:ab:0b:43:17:eb:35:41:90:47: 3a:9b:1f:29:f5:fc:4e:0c:7a:12:2a:96:1a:76:62: 5b:78:2a:0c:2a:88:ca:84:e4:2b:09:51:69:31:c3: 78:6c:b2:7c:1e:cf:94:2a:b3:b1:6c:de:10:d3:0d: 63:af:f1:ca:89:88:50:5a:63:74:0c:ad:6e:42:67: 68:04:f9:3d:4b:e9:01:3e:43:78:1b:9f:49:7d:9a: cc:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:FF:C7:06:AF:05:F2:0A:3A:6C:90:20:52:E3:B4:27:99:F8:17:56 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/24baa86a-b2ef-3852-a2ab-4bc6169dbe13.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.68.221.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:89:4b:b0:ad:70:0d:7b:05:1e:23:0c:e0:58:20:cf:4a:58: e9:55:aa:9e:59:1c:24:86:61:38:04:31:5b:5b:22:ab:55:a7: 2e:cf:16:b7:c7:36:84:ad:5a:29:7d:d6:54:af:7b:2d:cb:9d: be:c7:68:f1:4f:bc:9f:cc:17:11:89:40:85:87:af:c7:aa:a6: be:cb:cf:d4:4c:7d:e4:af:d4:91:93:d7:36:85:ef:33:45:a5: a7:9f:d7:fe:6d:d9:7e:64:8f:35:5d:40:9a:19:ea:90:16:25: 6a:0c:a3:c0:dc:48:f0:e3:af:72:12:81:6f:fd:32:9a:16:b6: 35:61:4d:94:a5:83:fc:ce:a6:10:24:94:68:41:a8:60:f9:11: 61:b4:67:77:4c:63:81:3c:fc:9b:be:b8:37:a1:db:3b:b5:3a: c0:1b:ba:1d:47:40:d0:bd:d1:ff:71:8c:7d:97:29:28:0a:9a: c0:9e:70:f0:a9:43:55:97:55:18:4b:f7:aa:13:7e:6e:39:a8: 3d:bc:e1:5c:46:61:de:50:d6:26:05:f3:b5:80:bf:61:be:d0: 13:24:b3:a7:dd:78:20:a0:45:cc:f8:97:c0:84:fe:ef:6b:91: 42:7c:cd:29:98:8b:9f:ed:14:bf:dd:fd:00:82:e8:72:ed:9c: d5:d6:1d:91 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1qqpEOzNYSnwvSUEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDQwNjEzMDAzMFoXDTI2MDcwNTEzMDAzMFowLzEtMCsGA1UEAxMk YjJmZmZmOWItNDdlNC00ZDI0LTkyNGQtMDkwMWE0NDBmNzZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiC5HnoDr8qAMvp5z4oStj9iKU1IZP3dIpAxF i1Th0ISC4cLsgKPJDc5KAjLN+OFpMPvqHEJYuIwqqTBUtVa8do+5MF6tOISyM4gi EbN9O0x/HDmS+1dHlQcWC5ewIyCzYjBIZQEt1mbKCL63UGA3C8vufOJXAgoDgJeR 6b95uHkTdcKELXhRlBq2PwwKm2+Vju/ZM+1Pohnv1SQFolk0ggugFHPmRsoinair C0MX6zVBkEc6mx8p9fxODHoSKpYadmJbeCoMKojKhOQrCVFpMcN4bLJ8Hs+UKrOx bN4Q0w1jr/HKiYhQWmN0DK1uQmdoBPk9S+kBPkN4G59JfZrMjQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIn/xwavBfIKOmyQIFLjtCeZ+BdWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMjRiYWE4NmEtYjJlZi0z ODUyLWEyYWItNGJjNjE2OWRiZTEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArETdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJGJS7CtcA17BR4jDOBYIM9KWOlVqp5ZHCSGYTgEMVtbIqtVpy7PFrfH NoStWil91lSvey3Lnb7HaPFPvJ/MFxGJQIWHr8eqpr7Lz9RMfeSv1JGT1zaF7zNF paef1/5t2X5kjzVdQJoZ6pAWJWoMo8DcSPDjr3ISgW/9MpoWtjVhTZSlg/zOphAk lGhBqGD5EWG0Z3dMY4E8/Ju+uDeh2zu1OsAbuh1HQNC90f9xjH2XKSgKmsCecPCp Q1WXVRhL96oTfm45qD284VxGYd5Q1iYF87WAv2G+0BMks6fdeCCgRcz4l8CE/u9r kUJ8zSmYi5/tFL/d/QCC6HLtnNXWHZE= -----END CERTIFICATE-----Generated at Fri Apr 17 14:47:20 2026 by rpki-client