$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2825c662-c8f6-3d53-bb9f-32cdbcf0ddcb.roa File: 2825c662-c8f6-3d53-bb9f-32cdbcf0ddcb.roa (raw, json) Hash identifier: h4/bgQfnlZenQyE7LfjxNHISVGMj9Q+wcLGP9G4LO6Q= Subject key identifier: AC:72:69:13:8B:BE:F6:0F:39:1A:E8:52:AF:50:D0:D6:67:52:56:5A Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584D6AAA91658A2873C984DC1A00 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2825c662-c8f6-3d53-bb9f-32cdbcf0ddcb.roa Signing time: Mon 06 Apr 2026 13:00:30 +0000 ROA not before: Mon 06 Apr 2026 13:00:30 +0000 ROA not after: Sun 05 Jul 2026 13:00:30 +0000 asID: 13335 IP address blocks: 172.68.243.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:6a:aa:91:65:8a:28:73:c9:84:dc:1a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Apr 6 13:00:30 2026 GMT Not After : Jul 5 13:00:30 2026 GMT Subject: CN=d6e59c03-c455-4a30-bbfc-5bc35d0ea1d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:d7:df:79:cd:1d:d5:4d:02:e6:00:e2:44:5d: 47:04:d9:27:77:24:0d:19:eb:3f:61:83:11:01:9d: 16:cd:f0:14:c3:a5:26:cd:75:f1:04:f6:4b:90:6a: df:41:6a:c9:2d:d1:4c:73:76:3f:33:15:5c:38:c6: 1d:c8:f9:e8:d0:7d:c6:e4:2b:a4:59:b4:6a:23:f8: 01:bf:03:1c:47:57:20:af:16:fb:b6:fa:02:03:88: 00:dc:7f:55:61:5f:53:54:a0:9c:a2:c0:59:8d:77: b4:69:1f:a0:e5:29:16:66:bc:fc:1b:87:fd:e0:f2: 6f:67:86:3f:21:8c:61:5d:22:dd:60:4d:84:35:2a: b0:31:b7:58:7a:14:52:bc:59:03:94:c5:55:d1:1c: 18:53:79:c0:74:d7:77:6e:d9:43:bc:05:af:fb:c6: d9:d8:b3:8f:bc:c3:f0:f8:6e:c5:af:3c:01:96:99: f3:1c:2f:27:fc:7b:dd:cb:1d:35:bf:8e:64:a0:3c: 85:16:ed:a5:1e:1d:31:39:6f:23:e2:1c:ac:a3:68: 13:ad:17:82:f5:46:05:f8:ce:5f:8d:f2:2d:c3:39: e3:3b:b7:02:7f:2b:2b:7c:c8:6f:39:28:8d:3e:81: c2:8b:40:5f:26:7f:5b:71:77:d6:01:a3:75:0d:0e: 7d:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:72:69:13:8B:BE:F6:0F:39:1A:E8:52:AF:50:D0:D6:67:52:56:5A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2825c662-c8f6-3d53-bb9f-32cdbcf0ddcb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.68.243.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a7:26:85:5b:e3:ea:67:6c:11:34:f1:f1:86:88:1f:e4:e9:3f: 2c:bb:f9:a0:94:2b:06:33:f2:39:d1:ce:2f:9b:71:ab:fb:b8: f8:f1:c2:fe:07:90:43:4c:bd:8a:02:8d:9f:3b:51:fc:f4:27: 88:8e:33:ba:d7:82:56:e7:14:dc:6e:a7:a2:fa:c6:56:b5:81: 48:87:f2:ef:6a:a7:c7:13:86:bb:ed:cd:02:66:38:b9:b8:1a: 7d:51:f9:1c:30:ae:66:a8:da:13:6b:74:f6:54:68:11:8e:41: e1:5c:66:ad:92:9f:1e:17:d3:40:4d:e7:bc:3a:07:0c:cd:ba: 6b:ea:80:71:4d:2d:2a:87:f9:7c:cc:6c:41:f4:c3:85:49:0c: 7e:d0:64:e3:e3:4c:83:9d:ef:66:47:d9:10:91:73:ff:61:2a: bb:95:c4:02:d6:a7:d4:0e:f9:c4:a7:5b:7f:42:37:09:dc:d7: 62:c3:27:ff:67:13:c9:1f:4b:88:08:2c:7f:4e:45:31:8c:af: f7:08:09:ae:88:d3:72:5d:0e:23:65:b9:48:0d:03:6a:79:c0: 39:57:83:2a:8b:cb:ca:d5:b5:92:5e:2e:59:02:07:ea:37:9f: 87:4f:1e:2a:cc:5f:d9:a1:f1:77:6c:c4:c4:e7:35:6c:74:ba: 77:03:88:20 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1qqpFliihzyYTcGgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDQwNjEzMDAzMFoXDTI2MDcwNTEzMDAzMFowLzEtMCsGA1UEAxMk ZDZlNTljMDMtYzQ1NS00YTMwLWJiZmMtNWJjMzVkMGVhMWQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj9ffec0d1U0C5gDiRF1HBNkndyQNGes/YYMR AZ0WzfAUw6UmzXXxBPZLkGrfQWrJLdFMc3Y/MxVcOMYdyPno0H3G5CukWbRqI/gB vwMcR1cgrxb7tvoCA4gA3H9VYV9TVKCcosBZjXe0aR+g5SkWZrz8G4f94PJvZ4Y/ IYxhXSLdYE2ENSqwMbdYehRSvFkDlMVV0RwYU3nAdNd3btlDvAWv+8bZ2LOPvMPw +G7FrzwBlpnzHC8n/Hvdyx01v45koDyFFu2lHh0xOW8j4hyso2gTrReC9UYF+M5f jfItwznjO7cCfysrfMhvOSiNPoHCi0BfJn9bcXfWAaN1DQ595wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKxyaROLvvYPORroUq9Q0NZnUlZaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMjgyNWM2NjItYzhmNi0z ZDUzLWJiOWYtMzJjZGJjZjBkZGNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArETzMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKcmhVvj6mdsETTx8YaIH+TpPyy7+aCUKwYz8jnRzi+bcav7uPjxwv4H kENMvYoCjZ87Ufz0J4iOM7rXglbnFNxup6L6xla1gUiH8u9qp8cThrvtzQJmOLm4 Gn1R+Rwwrmao2hNrdPZUaBGOQeFcZq2Snx4X00BN57w6BwzNumvqgHFNLSqH+XzM bEH0w4VJDH7QZOPjTIOd72ZH2RCRc/9hKruVxALWp9QO+cSnW39CNwnc12LDJ/9n E8kfS4gILH9ORTGMr/cICa6I03JdDiNluUgNA2p5wDlXgyqLy8rVtZJeLlkCB+o3 n4dPHirMX9mh8XdsxMTnNWx0uncDiCA= -----END CERTIFICATE-----Generated at Fri Apr 17 22:59:34 2026 by rpki-client