$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/42cd4ca5-e0cf-3ecf-b894-45e467de22ab.roa File: 42cd4ca5-e0cf-3ecf-b894-45e467de22ab.roa (raw, json) Hash identifier: WtyQQY+inJT2FuWG4vzilxW2I+sImk24CPQaIWLgKFM= Subject key identifier: F7:63:71:F2:1B:7B:BC:1B:8F:E5:CB:F8:F0:9F:5C:12:DB:A7:FF:A5 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584D6AAA9796A8A8371B8A1C0A80 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/42cd4ca5-e0cf-3ecf-b894-45e467de22ab.roa Signing time: Mon 06 Apr 2026 13:00:30 +0000 ROA not before: Mon 06 Apr 2026 13:00:30 +0000 ROA not after: Sun 05 Jul 2026 13:00:30 +0000 asID: 13335 IP address blocks: 172.68.9.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:6a:aa:97:96:a8:a8:37:1b:8a:1c:0a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Apr 6 13:00:30 2026 GMT Not After : Jul 5 13:00:30 2026 GMT Subject: CN=f2b74587-79c3-4f56-aace-7b5d9aa77c29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:2e:c1:57:ee:e2:bf:4d:f1:b9:7a:11:f2:7f: 50:b1:b9:38:b1:77:f1:1a:e5:29:3f:e3:1b:13:0b: 7c:60:f5:bd:e4:81:c1:f3:2d:cb:4f:76:bc:60:da: cd:52:84:e2:41:7b:81:79:7b:75:9f:3e:34:c0:a6: 6e:ed:68:a1:95:4a:77:b9:5f:dd:5e:65:f4:68:aa: c0:2e:b9:ba:75:e2:ca:7a:23:86:e0:a0:23:33:6d: 93:12:d0:c9:29:bf:fd:44:ad:54:d6:9c:47:c1:b2: a9:89:76:ef:86:fb:b3:fd:0e:83:a2:3c:e3:e6:42: 49:9e:43:d4:c3:3b:4a:de:6f:40:1c:58:1b:e1:75: 72:55:6a:b7:ae:97:98:02:c2:da:7c:d6:02:a8:dc: e7:a9:34:1c:b4:ad:2c:06:88:84:44:9c:77:93:53: f5:26:ee:01:57:a0:9a:a5:fb:6e:c7:53:07:0d:ec: 22:e5:e6:83:9b:e9:bc:0c:c8:d5:2e:d2:dc:59:01: c4:35:ad:af:17:03:7d:14:d1:27:4a:7a:39:6c:6e: 86:dc:f3:d6:d2:ea:a5:c4:2a:3d:5f:cc:cd:28:ea: 64:bf:4f:3c:0c:36:52:be:bf:70:4e:23:cd:63:dc: 45:93:bf:39:d7:45:2b:28:5e:5f:34:2c:22:a4:8c: 59:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:63:71:F2:1B:7B:BC:1B:8F:E5:CB:F8:F0:9F:5C:12:DB:A7:FF:A5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/42cd4ca5-e0cf-3ecf-b894-45e467de22ab.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.68.9.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:b6:d9:e7:39:e7:f5:e6:29:20:44:04:f6:29:6f:ef:ff:6f: ad:f3:0b:af:32:95:99:84:11:13:5f:93:21:b1:5a:c5:fd:e0: b5:5e:98:9a:83:83:7b:4d:3a:fd:a4:72:84:3b:00:d3:a1:d3: bf:c3:47:fe:c1:ea:8c:2b:25:c9:8e:38:6d:86:ad:13:b9:85: 05:e9:ab:4c:a1:b2:d4:c7:bd:9d:bb:de:b9:4e:b4:1d:58:19: 52:8c:a6:6b:f5:6b:20:a7:a2:2a:dc:99:8a:1b:ef:d5:07:df: fa:69:b0:6e:a5:74:e9:87:cb:ea:da:f6:18:a0:b0:67:bc:c8: 6c:9e:ca:dc:73:7d:2c:b5:ce:f3:22:2e:af:71:5a:fc:36:9a: 26:5c:b7:ef:a8:07:c1:11:16:79:b3:96:e2:86:08:bd:05:8e: 0b:fa:d8:11:54:be:43:e7:b4:6b:cd:74:60:cd:dd:dd:f2:7b: a8:df:ca:89:f2:f8:7e:7d:c4:4a:01:b8:78:51:db:6d:12:25: e3:9b:76:73:5b:ce:71:b6:de:f3:9e:85:97:f8:66:b7:d5:4c: e5:11:27:2b:1b:65:9e:25:1d:d6:48:32:ba:1d:12:9d:89:d8: e9:f3:79:e7:2b:e6:26:73:a4:6a:01:4d:73:f3:7c:6a:6d:26: 91:92:4d:f2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1qqpeWqKg3G4ocCoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDQwNjEzMDAzMFoXDTI2MDcwNTEzMDAzMFowLzEtMCsGA1UEAxMk ZjJiNzQ1ODctNzljMy00ZjU2LWFhY2UtN2I1ZDlhYTc3YzI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAly7BV+7iv03xuXoR8n9Qsbk4sXfxGuUpP+Mb Ewt8YPW95IHB8y3LT3a8YNrNUoTiQXuBeXt1nz40wKZu7WihlUp3uV/dXmX0aKrA Lrm6deLKeiOG4KAjM22TEtDJKb/9RK1U1pxHwbKpiXbvhvuz/Q6Dojzj5kJJnkPU wztK3m9AHFgb4XVyVWq3rpeYAsLafNYCqNznqTQctK0sBoiERJx3k1P1Ju4BV6Ca pftux1MHDewi5eaDm+m8DMjVLtLcWQHENa2vFwN9FNEnSno5bG6G3PPW0uqlxCo9 X8zNKOpkv088DDZSvr9wTiPNY9xFk78510UrKF5fNCwipIxZCwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPdjcfIbe7wbj+XL+PCfXBLbp/+lMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNDJjZDRjYTUtZTBjZi0z ZWNmLWI4OTQtNDVlNDY3ZGUyMmFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEQJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHG22ec55/XmKSBEBPYpb+//b63zC68ylZmEERNfkyGxWsX94LVemJqD g3tNOv2kcoQ7ANOh07/DR/7B6owrJcmOOG2GrRO5hQXpq0yhstTHvZ273rlOtB1Y GVKMpmv1ayCnoircmYob79UH3/ppsG6ldOmHy+ra9higsGe8yGyeytxzfSy1zvMi Lq9xWvw2miZct++oB8ERFnmzluKGCL0Fjgv62BFUvkPntGvNdGDN3d3ye6jfyony +H59xEoBuHhR220SJeObdnNbznG23vOehZf4ZrfVTOURJysbZZ4lHdZIMrodEp2J 2Onzeecr5iZzpGoBTXPzfGptJpGSTfI= -----END CERTIFICATE-----Generated at Sat Apr 18 00:02:22 2026 by rpki-client