$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5d73012e-d6ab-397f-9a31-92d416e3c1aa.roa File: 5d73012e-d6ab-397f-9a31-92d416e3c1aa.roa (raw, json) Hash identifier: C1wgEn7Xf1Ss7uInCdzc+RlkrZKwzIzkogswLGFUhiI= Subject key identifier: B8:AA:6E:60:B3:B0:AE:9A:FE:30:FC:5E:05:DA:CF:B1:2C:54:88:04 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584D6C0FD29B259735E53BB45F00 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5d73012e-d6ab-397f-9a31-92d416e3c1aa.roa Signing time: Tue 07 Apr 2026 01:00:23 +0000 ROA not before: Tue 07 Apr 2026 01:00:23 +0000 ROA not after: Mon 06 Jul 2026 01:00:23 +0000 asID: 13335 IP address blocks: 172.68.204.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:6c:0f:d2:9b:25:97:35:e5:3b:b4:5f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Apr 7 01:00:23 2026 GMT Not After : Jul 6 01:00:23 2026 GMT Subject: CN=5f2e9a72-ce59-4851-b92d-7c58bf612ed7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:92:e8:9b:7f:d4:46:ad:e1:40:38:93:88:ad: 28:79:07:a4:95:6e:59:36:38:0d:69:93:95:f2:0f: bb:52:bf:d9:f6:2b:a2:37:5e:b5:f8:08:e8:e5:a1: d9:bb:d8:a2:5d:ce:25:80:8a:a4:bd:22:97:26:54: 89:42:f5:54:21:e8:d2:0a:51:73:9f:f9:5a:03:ad: ee:8b:91:ce:6b:45:59:be:e2:83:96:81:ae:13:d9: 23:6d:e2:b7:f9:16:d3:6a:08:af:85:a9:4d:9f:5e: 58:e7:72:e4:7d:81:61:c5:f2:42:46:d4:fe:bc:e0: 73:cd:80:95:c5:d1:f0:2f:91:3f:08:c3:36:7e:f5: 0d:37:3a:0c:a6:53:08:11:03:ba:1d:0d:b0:a3:60: e7:be:3c:da:11:19:4b:e4:25:01:b8:e7:d4:8b:0f: de:f8:c5:d8:44:bd:14:03:89:99:e2:51:58:aa:dd: 7f:29:0c:7b:45:5d:17:a0:03:f9:55:b3:1f:fc:88: b9:5c:1b:66:06:b0:1a:80:8f:f5:49:88:4e:39:ac: 81:2a:16:08:b2:fe:fb:c9:63:df:95:56:ff:04:5a: ea:be:82:93:11:91:39:5f:10:b9:50:92:c3:d0:7d: e0:a3:c4:a8:19:af:4d:cc:f6:c3:c9:76:e9:73:3d: 68:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:AA:6E:60:B3:B0:AE:9A:FE:30:FC:5E:05:DA:CF:B1:2C:54:88:04 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5d73012e-d6ab-397f-9a31-92d416e3c1aa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.68.204.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:60:09:06:fe:84:95:59:ce:d7:c8:82:96:52:15:ba:4e:ec: 10:3a:5e:e5:a7:7b:be:8a:d3:fd:49:7f:42:cd:a8:93:12:12: 4d:8b:6b:29:45:23:96:12:70:8b:dd:2f:f5:ce:78:82:bf:2b: 18:bf:92:9c:7f:90:44:ee:87:19:f9:a0:38:44:ad:6e:6e:56: a9:27:12:9b:7f:6b:e9:54:8c:b0:1e:50:e9:b9:42:e7:1f:fe: 35:0e:2e:1c:66:ce:6a:0a:82:58:c4:20:c8:b2:d4:85:26:f6: 3f:d0:97:ea:27:7b:81:43:6f:d5:2d:d1:81:01:ec:6b:65:1c: 65:5c:50:48:59:30:8d:41:00:f8:08:c2:d5:83:f9:8b:77:46: fa:a2:2c:f7:3d:1c:30:f0:21:ea:07:16:e1:a9:6f:e6:31:5a: 47:99:85:b5:42:0d:1d:5a:89:35:41:1e:48:24:72:0d:c3:67: 71:14:96:09:09:4f:14:84:3c:1c:f6:37:c8:05:6f:be:9f:93: 33:d5:49:69:f2:db:59:a8:b7:1b:a7:94:83:a4:03:de:dd:40: c4:10:8a:77:3a:88:78:54:5c:16:39:f0:bc:f5:a2:93:32:cf: 44:19:14:1d:f3:e2:d6:8b:01:2d:63:34:a0:7a:33:71:b5:96: 9e:29:77:45 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1sD9KbJZc15Tu0XwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDQwNzAxMDAyM1oXDTI2MDcwNjAxMDAyM1owLzEtMCsGA1UEAxMk NWYyZTlhNzItY2U1OS00ODUxLWI5MmQtN2M1OGJmNjEyZWQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnpLom3/URq3hQDiTiK0oeQeklW5ZNjgNaZOV 8g+7Ur/Z9iuiN161+Ajo5aHZu9iiXc4lgIqkvSKXJlSJQvVUIejSClFzn/laA63u i5HOa0VZvuKDloGuE9kjbeK3+RbTagivhalNn15Y53LkfYFhxfJCRtT+vOBzzYCV xdHwL5E/CMM2fvUNNzoMplMIEQO6HQ2wo2DnvjzaERlL5CUBuOfUiw/e+MXYRL0U A4mZ4lFYqt1/KQx7RV0XoAP5VbMf/Ii5XBtmBrAagI/1SYhOOayBKhYIsv77yWPf lVb/BFrqvoKTEZE5XxC5UJLD0H3go8SoGa9NzPbDyXbpcz1okQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLiqbmCzsK6a/jD8XgXaz7EsVIgEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNWQ3MzAxMmUtZDZhYi0z OTdmLTlhMzEtOTJkNDE2ZTNjMWFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArETMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH1gCQb+hJVZztfIgpZSFbpO7BA6XuWne76K0/1Jf0LNqJMSEk2LaylF I5YScIvdL/XOeIK/Kxi/kpx/kETuhxn5oDhErW5uVqknEpt/a+lUjLAeUOm5Qucf /jUOLhxmzmoKgljEIMiy1IUm9j/Ql+one4FDb9Ut0YEB7GtlHGVcUEhZMI1BAPgI wtWD+Yt3RvqiLPc9HDDwIeoHFuGpb+YxWkeZhbVCDR1aiTVBHkgkcg3DZ3EUlgkJ TxSEPBz2N8gFb76fkzPVSWny21motxunlIOkA97dQMQQinc6iHhUXBY58Lz1opMy z0QZFB3z4taLAS1jNKB6M3G1lp4pd0U= -----END CERTIFICATE-----Generated at Fri Apr 17 16:01:37 2026 by rpki-client