$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/56068d5f-3e33-348e-92b0-c270a8e69fb3.roa File: 56068d5f-3e33-348e-92b0-c270a8e69fb3.roa (raw, json) Hash identifier: X80mEkennT+4aU4YuOWIk2+Lwi6V1UmX0w9jRu8a0xg= Subject key identifier: 84:1C:99:AE:8D:F6:E0:2B:2E:AC:31:D7:82:25:98:2E:D3:31:75:4C Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584D67DFE1A50E20CCE36B9F22C0 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/56068d5f-3e33-348e-92b0-c270a8e69fb3.roa Signing time: Sun 05 Apr 2026 13:00:31 +0000 ROA not before: Sun 05 Apr 2026 13:00:31 +0000 ROA not after: Sat 04 Jul 2026 13:00:31 +0000 asID: 13335 IP address blocks: 108.162.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:67:df:e1:a5:0e:20:cc:e3:6b:9f:22:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Apr 5 13:00:31 2026 GMT Not After : Jul 4 13:00:31 2026 GMT Subject: CN=88649546-32e6-4411-acc5-ce4c47cdde98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:a5:d2:e5:36:c6:a6:fd:c0:8a:f6:47:95:88: a8:5d:86:d2:a7:8c:04:52:55:7b:48:4a:13:83:4c: 61:05:c3:2b:7b:9f:6e:a0:4b:6e:f4:93:74:7b:f4: 89:0e:39:48:a6:80:1a:a4:bc:65:aa:9d:6b:af:2b: b2:5f:2a:e9:dd:0c:a4:d8:a9:cf:1e:a9:f6:e9:9c: 05:e8:5c:83:90:99:64:4a:33:78:c7:2f:79:cf:48: 63:be:42:1f:bb:18:d2:7e:b1:28:1b:88:da:36:33: 3b:2b:1b:ff:94:a5:d4:40:a1:a5:c6:94:7b:5b:ac: 1e:45:59:73:f0:b9:fd:bf:a3:6e:6a:e2:7f:ec:f7: 75:36:1b:d4:85:73:dc:f3:57:d9:db:8a:20:7a:a2: d9:fd:45:66:df:1f:71:b3:6d:4a:31:8e:ea:3b:8a: 14:79:b7:a3:0f:a5:60:63:49:da:ce:9b:29:b9:da: a8:e4:80:c2:cd:f2:85:52:5f:77:65:71:e5:15:6c: 4d:ba:04:1c:af:8f:f2:17:95:9e:2d:08:15:f7:10: 83:63:42:9d:95:71:c0:ea:7b:75:0e:4a:a0:ff:11: 16:e1:4e:e8:63:c2:7a:09:f4:c7:ad:f0:01:8e:d2: b4:68:a4:69:08:35:b9:44:97:91:13:b2:f0:4c:4d: 1d:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:1C:99:AE:8D:F6:E0:2B:2E:AC:31:D7:82:25:98:2E:D3:31:75:4C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/56068d5f-3e33-348e-92b0-c270a8e69fb3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 108.162.228.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:86:eb:c8:3a:20:dd:95:e4:76:d7:29:f4:f1:dc:08:24:6c: 95:4e:06:e2:fb:95:42:89:40:c0:b0:84:bd:47:ca:12:b7:89: 3e:c6:73:4f:0c:b4:25:8b:fa:58:1b:49:32:ae:4b:3f:2a:ca: ea:9c:59:d6:1f:33:45:4b:1f:04:45:57:6a:64:2e:72:02:10: 90:e7:2d:f9:b4:3c:a7:f2:08:80:0d:32:a9:e5:8f:93:24:6a: bb:f9:e5:8c:b9:1e:aa:06:03:e8:46:65:6b:8e:6f:9c:16:3d: 19:ab:0e:e5:b4:66:03:e6:cf:48:ee:a9:cf:b0:34:32:a7:32: 93:70:b9:c2:f2:2f:33:90:5a:bd:fa:25:de:ca:0c:6e:d4:8f: 78:76:e4:c9:5a:3b:c1:16:b8:9e:97:ce:d9:e8:bb:72:c6:19: c1:9f:e0:8b:76:91:c1:52:6c:21:eb:4c:06:c8:3c:fc:99:f4: c1:0a:c9:ac:dd:e4:26:73:df:eb:21:d9:7b:11:b6:27:ec:61: a4:77:85:4a:0c:09:f5:6a:c9:4a:38:a7:f6:51:16:5b:60:97: 0f:27:48:c1:4c:24:6c:60:fe:cd:4c:a2:c5:98:f3:67:8e:96: fa:e4:e1:98:6b:6f:46:d8:de:46:74:64:29:ab:07:d4:dc:8a: 99:f2:bb:71 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1n3+GlDiDM42ufIsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDQwNTEzMDAzMVoXDTI2MDcwNDEzMDAzMVowLzEtMCsGA1UEAxMk ODg2NDk1NDYtMzJlNi00NDExLWFjYzUtY2U0YzQ3Y2RkZTk4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs6XS5TbGpv3AivZHlYioXYbSp4wEUlV7SEoT g0xhBcMre59uoEtu9JN0e/SJDjlIpoAapLxlqp1rryuyXyrp3Qyk2KnPHqn26ZwF 6FyDkJlkSjN4xy95z0hjvkIfuxjSfrEoG4jaNjM7Kxv/lKXUQKGlxpR7W6weRVlz 8Ln9v6NuauJ/7Pd1NhvUhXPc81fZ24ogeqLZ/UVm3x9xs21KMY7qO4oUebejD6Vg Y0nazpspudqo5IDCzfKFUl93ZXHlFWxNugQcr4/yF5WeLQgV9xCDY0KdlXHA6nt1 Dkqg/xEW4U7oY8J6CfTHrfABjtK0aKRpCDW5RJeRE7LwTE0dlwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIQcma6N9uArLqwx14IlmC7TMXVMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNTYwNjhkNWYtM2UzMy0z NDhlLTkyYjAtYzI3MGE4ZTY5ZmIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKLkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGaG68g6IN2V5HbXKfTx3AgkbJVOBuL7lUKJQMCwhL1HyhK3iT7Gc08M tCWL+lgbSTKuSz8qyuqcWdYfM0VLHwRFV2pkLnICEJDnLfm0PKfyCIANMqnlj5Mk arv55Yy5HqoGA+hGZWuOb5wWPRmrDuW0ZgPmz0juqc+wNDKnMpNwucLyLzOQWr36 Jd7KDG7Uj3h25MlaO8EWuJ6Xztnou3LGGcGf4It2kcFSbCHrTAbIPPyZ9MEKyazd 5CZz3+sh2XsRtifsYaR3hUoMCfVqyUo4p/ZRFltglw8nSMFMJGxg/s1MosWY82eO lvrk4Zhrb0bY3kZ0ZCmrB9Tcipnyu3E= -----END CERTIFICATE-----Generated at Fri Apr 17 18:27:38 2026 by rpki-client