$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/51538882-2131-3a5c-ac56-9683e4ffa1a2.roa File: 51538882-2131-3a5c-ac56-9683e4ffa1a2.roa (raw, json) Hash identifier: hA0pFTxV9OnhA6T0oySkZrDDkqsB3AIQUb3n72oU0lE= Subject key identifier: 01:44:B0:D1:1E:26:4E:E9:8F:DC:AE:78:9F:65:02:0B:AF:C3:08:FA Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584D6AAAA69A27DFCAE9C9A83500 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/51538882-2131-3a5c-ac56-9683e4ffa1a2.roa Signing time: Mon 06 Apr 2026 13:00:30 +0000 ROA not before: Mon 06 Apr 2026 13:00:30 +0000 ROA not after: Sun 05 Jul 2026 13:00:30 +0000 asID: 13335 IP address blocks: 172.68.168.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:6a:aa:a6:9a:27:df:ca:e9:c9:a8:35:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Apr 6 13:00:30 2026 GMT Not After : Jul 5 13:00:30 2026 GMT Subject: CN=bc9385a7-42ec-401f-8219-e963eb1c5acf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:d3:02:34:d7:85:fd:b4:2e:7b:6f:c9:d9:f9: 9c:93:66:ec:bb:f4:ed:33:56:a5:39:e1:b6:8d:62: 8b:3f:55:0e:f3:76:cf:7a:ab:88:a7:b0:67:fb:36: d9:5a:7f:73:dd:79:9f:41:a2:a3:b4:27:99:a0:e6: 07:0d:4f:5c:91:47:8b:1d:97:d9:05:cd:92:44:ea: a9:39:21:e0:cf:36:c6:d1:b5:ff:7a:4a:c4:8c:8a: 04:f6:c2:4c:d2:0e:8a:44:73:7a:17:87:41:2e:12: 85:84:72:0a:94:39:33:37:04:39:e7:53:01:0c:f9: 45:d0:7a:04:35:fc:f1:65:f5:fe:b3:f4:90:33:57: f1:b0:0b:00:4d:03:13:b1:54:e6:58:40:9f:2b:0a: b9:dc:5d:e9:07:08:82:ee:89:5c:54:e6:c7:c3:e7: a1:b0:7e:1b:43:2f:b8:f8:ed:44:c6:40:e8:cd:53: 2b:d0:21:ec:ac:bf:81:44:b8:f1:9d:fb:5f:e6:5c: 9e:7f:52:21:a1:90:5c:b6:d6:12:05:d0:6f:09:bc: b1:27:3b:ad:c4:8a:57:ec:6d:84:29:12:1b:87:d6: d8:21:9d:a7:f9:48:e7:85:c7:3e:1e:7b:6d:c2:2a: 89:de:35:ac:d9:b9:fc:4a:6d:ed:e9:06:83:be:3e: e0:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:44:B0:D1:1E:26:4E:E9:8F:DC:AE:78:9F:65:02:0B:AF:C3:08:FA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/51538882-2131-3a5c-ac56-9683e4ffa1a2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.68.168.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:cb:6b:3d:62:c1:f7:2c:d9:67:47:90:5e:df:7e:77:f4:cf: 21:a9:cf:45:77:e9:80:1a:76:26:5a:34:84:1e:bc:c3:ee:a9: 88:39:2d:86:73:16:e4:90:6c:db:00:5f:90:36:ae:05:f7:05: 91:7f:2d:42:bb:2d:95:9a:f3:49:48:30:a8:8d:ca:6a:4e:02: d6:8c:6f:4e:3f:40:b8:01:58:fc:73:3c:23:51:65:ae:d2:2f: d9:0c:4e:84:27:14:69:f6:23:64:89:2f:bd:33:99:f5:95:f2: 12:12:db:4a:7f:86:ea:72:a2:96:d0:bb:88:ef:cd:12:cf:93: ca:1c:7b:72:4d:41:5a:36:40:f9:ab:40:6b:7b:3d:85:84:12: 1d:35:00:d5:77:b3:d9:5d:87:c6:8b:da:15:b2:60:93:25:20: e5:9d:f5:b2:3c:43:57:82:39:e1:95:b7:95:22:d1:af:19:27: 19:f9:34:a3:59:13:02:50:90:e8:fe:a0:64:ec:bf:0f:f5:b2: 28:72:c7:03:19:e5:eb:96:fb:a9:e0:3e:7f:d5:d4:72:d7:d2: 40:48:be:fd:bc:c9:3a:d0:32:ac:b9:1a:d9:30:1f:57:b7:85: 9c:34:07:46:2b:48:55:ef:1b:fe:8a:2f:7a:d9:12:d6:81:10: 1f:89:0a:f3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1qqqaaJ9/K6cmoNQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDQwNjEzMDAzMFoXDTI2MDcwNTEzMDAzMFowLzEtMCsGA1UEAxMk YmM5Mzg1YTctNDJlYy00MDFmLTgyMTktZTk2M2ViMWM1YWNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4tMCNNeF/bQue2/J2fmck2bsu/TtM1alOeG2 jWKLP1UO83bPequIp7Bn+zbZWn9z3XmfQaKjtCeZoOYHDU9ckUeLHZfZBc2SROqp OSHgzzbG0bX/ekrEjIoE9sJM0g6KRHN6F4dBLhKFhHIKlDkzNwQ551MBDPlF0HoE NfzxZfX+s/SQM1fxsAsATQMTsVTmWECfKwq53F3pBwiC7olcVObHw+ehsH4bQy+4 +O1ExkDozVMr0CHsrL+BRLjxnftf5lyef1IhoZBcttYSBdBvCbyxJzutxIpX7G2E KRIbh9bYIZ2n+Ujnhcc+HnttwiqJ3jWs2bn8Sm3t6QaDvj7glQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAFEsNEeJk7pj9yueJ9lAguvwwj6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNTE1Mzg4ODItMjEzMS0z YTVjLWFjNTYtOTY4M2U0ZmZhMWEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArESoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEzLaz1iwfcs2WdHkF7ffnf0zyGpz0V36YAadiZaNIQevMPuqYg5LYZz FuSQbNsAX5A2rgX3BZF/LUK7LZWa80lIMKiNympOAtaMb04/QLgBWPxzPCNRZa7S L9kMToQnFGn2I2SJL70zmfWV8hIS20p/hupyopbQu4jvzRLPk8oce3JNQVo2QPmr QGt7PYWEEh01ANV3s9ldh8aL2hWyYJMlIOWd9bI8Q1eCOeGVt5Ui0a8ZJxn5NKNZ EwJQkOj+oGTsvw/1sihyxwMZ5euW+6ngPn/V1HLX0kBIvv28yTrQMqy5GtkwH1e3 hZw0B0YrSFXvG/6KL3rZEtaBEB+JCvM= -----END CERTIFICATE-----Generated at Fri Apr 17 18:46:04 2026 by rpki-client