$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/3efd7d26-16ab-3e4f-bd9a-360b6767f2f8.roa File: 3efd7d26-16ab-3e4f-bd9a-360b6767f2f8.roa (raw, json) Hash identifier: 4ipIc3WNdKb1Mhlgl6st/sRYlmfRD07N3jKpLDbPpR4= Subject key identifier: 26:CC:8D:DB:78:02:D9:CD:A8:87:CE:DD:BB:66:D9:5A:AD:2D:43:7F Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584D6C0FC372C48F883B2B4A1300 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/3efd7d26-16ab-3e4f-bd9a-360b6767f2f8.roa Signing time: Tue 07 Apr 2026 01:00:23 +0000 ROA not before: Tue 07 Apr 2026 01:00:23 +0000 ROA not after: Mon 06 Jul 2026 01:00:23 +0000 asID: 13335 IP address blocks: 172.68.212.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:6c:0f:c3:72:c4:8f:88:3b:2b:4a:13:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Apr 7 01:00:23 2026 GMT Not After : Jul 6 01:00:23 2026 GMT Subject: CN=a2177320-e8dd-4498-968c-33568e44db23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:cb:f8:a9:1d:11:46:1e:1e:76:f7:e7:99:2b: 0e:73:2d:33:62:cf:e9:a7:13:37:3c:6e:e0:34:48: 5c:8c:d8:ad:14:e0:83:18:ba:3a:a1:9d:6c:e2:d0: c8:f4:30:6e:5b:ec:df:ad:60:29:83:c1:ee:d5:90: 14:a0:e0:df:59:eb:7f:c3:8d:16:14:49:bd:90:72: 84:39:3b:8e:ea:bb:15:88:fd:fb:ef:5e:cb:71:d9: a5:6a:98:04:1b:86:59:1f:0b:dd:5b:59:a5:57:50: 13:fa:47:6b:20:5f:b1:10:b5:fb:63:ee:ea:49:97: a7:af:f9:b3:1a:6a:f4:f7:65:f9:0e:e0:c4:54:f6: d7:b7:b0:94:4a:c3:69:46:cd:15:7a:76:d8:32:bb: 4c:23:33:10:a5:77:70:ff:4d:41:a5:0d:bb:dc:fd: a3:cf:73:32:6e:be:47:9d:82:43:3b:39:03:69:fd: a1:8b:63:f4:eb:92:46:6d:6c:eb:01:e4:52:70:15: 55:79:a1:23:39:2d:56:74:70:81:4f:25:62:ae:47: f3:81:90:51:2e:cd:96:00:f2:27:f4:5b:19:37:e1: 9d:c9:32:55:34:51:3e:c3:87:e5:fe:bc:d3:33:63: 30:a2:62:68:5d:c3:d0:88:ab:f3:0e:63:ab:a0:18: 85:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:CC:8D:DB:78:02:D9:CD:A8:87:CE:DD:BB:66:D9:5A:AD:2D:43:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/3efd7d26-16ab-3e4f-bd9a-360b6767f2f8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.68.212.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:34:df:90:c9:f5:b6:34:00:3a:40:ec:1e:4b:49:08:58:6c: 1d:62:c7:76:6c:bb:0f:30:ea:eb:10:fa:d0:53:14:15:9e:03: 65:18:61:a2:02:5b:46:f4:b0:90:9b:f9:58:a9:d0:9a:6c:8b: 2b:7b:89:f5:b5:45:50:e7:0f:57:6f:00:10:36:f9:64:4b:2f: c8:e9:d8:4f:63:14:96:f0:54:f2:5d:38:e4:b3:4c:4c:50:31: 31:54:fd:d6:bc:16:32:54:8b:c4:21:b4:60:42:26:f0:58:7b: 31:e6:0f:c4:e3:c7:84:ac:81:2e:0b:43:f5:28:dd:9e:44:c8: 78:60:86:d3:9a:a1:11:20:b0:08:e4:b1:01:7c:8f:55:6f:20: 93:4f:cf:d2:bf:38:08:fb:cb:e0:1f:6d:eb:ca:47:1b:76:50: b1:ee:31:3a:d2:c3:f3:b6:fb:93:4d:af:62:be:c4:d0:a0:f2: 20:b5:6e:cb:16:b7:df:09:75:63:66:a8:a0:f6:24:9a:23:dc: 71:83:c2:4c:8d:9a:aa:f4:a4:e9:9d:76:c5:8d:af:ca:e2:25: 8e:2d:cd:96:74:ea:5c:12:24:81:f1:04:56:9e:bb:4d:d5:39: 09:4a:8a:a4:c9:1c:82:89:6d:f6:c8:96:b7:c7:b7:9e:13:7b: 53:94:c9:cc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1sD8NyxI+IOytKEwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDQwNzAxMDAyM1oXDTI2MDcwNjAxMDAyM1owLzEtMCsGA1UEAxMk YTIxNzczMjAtZThkZC00NDk4LTk2OGMtMzM1NjhlNDRkYjIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqMv4qR0RRh4edvfnmSsOcy0zYs/ppxM3PG7g NEhcjNitFOCDGLo6oZ1s4tDI9DBuW+zfrWApg8Hu1ZAUoODfWet/w40WFEm9kHKE OTuO6rsViP37717LcdmlapgEG4ZZHwvdW1mlV1AT+kdrIF+xELX7Y+7qSZenr/mz Gmr092X5DuDEVPbXt7CUSsNpRs0VenbYMrtMIzMQpXdw/01BpQ273P2jz3Mybr5H nYJDOzkDaf2hi2P065JGbWzrAeRScBVVeaEjOS1WdHCBTyVirkfzgZBRLs2WAPIn 9FsZN+GdyTJVNFE+w4fl/rzTM2MwomJoXcPQiKvzDmOroBiFlwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCbMjdt4AtnNqIfO3btm2VqtLUN/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvM2VmZDdkMjYtMTZhYi0z ZTRmLWJkOWEtMzYwYjY3NjdmMmY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArETUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHE035DJ9bY0ADpA7B5LSQhYbB1ix3Zsuw8w6usQ+tBTFBWeA2UYYaIC W0b0sJCb+Vip0Jpsiyt7ifW1RVDnD1dvABA2+WRLL8jp2E9jFJbwVPJdOOSzTExQ MTFU/da8FjJUi8QhtGBCJvBYezHmD8Tjx4SsgS4LQ/Uo3Z5EyHhghtOaoREgsAjk sQF8j1VvIJNPz9K/OAj7y+AfbevKRxt2ULHuMTrSw/O2+5NNr2K+xNCg8iC1bssW t98JdWNmqKD2JJoj3HGDwkyNmqr0pOmddsWNr8riJY4tzZZ06lwSJIHxBFaeu03V OQlKiqTJHIKJbfbIlrfHt54Te1OUycw= -----END CERTIFICATE-----Generated at Fri Apr 17 14:34:53 2026 by rpki-client