$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/6c553cf8-ddaa-354c-bdbb-82bb2108c09c.roa File: 6c553cf8-ddaa-354c-bdbb-82bb2108c09c.roa (raw, json) Hash identifier: p9dA4IG2hTdXIgFf+1WW/HWhLYWeWJrqfnk+tyiQqMY= Subject key identifier: 30:C0:68:B9:76:FB:AD:9A:8B:36:A8:21:86:3A:17:99:32:CB:A8:78 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584D67DFEDA389076FD30A20B600 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/6c553cf8-ddaa-354c-bdbb-82bb2108c09c.roa Signing time: Sun 05 Apr 2026 13:00:31 +0000 ROA not before: Sun 05 Apr 2026 13:00:31 +0000 ROA not after: Sat 04 Jul 2026 13:00:31 +0000 asID: 13335 IP address blocks: 172.68.23.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:67:df:ed:a3:89:07:6f:d3:0a:20:b6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Apr 5 13:00:31 2026 GMT Not After : Jul 4 13:00:31 2026 GMT Subject: CN=f90fc37d-5bc2-46b9-b52f-ed1a0372ffab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:60:d7:31:d1:62:cc:b1:ca:20:0c:fa:cd:6a: b8:84:0d:5b:97:02:f2:52:1e:7f:ae:65:6f:d2:6d: 42:f0:52:de:3e:32:1f:4e:5d:b7:b0:54:11:53:9b: df:a3:e3:33:f5:44:10:98:c4:e0:49:b1:a5:05:50: d6:15:25:ee:d9:2c:14:f2:2c:e3:0a:31:04:27:6e: 22:17:32:e9:53:b7:35:4f:e5:ea:4f:01:fd:d3:65: b8:fd:9f:bc:cb:6d:fc:f6:0a:85:af:a9:7f:00:be: 15:6e:31:2e:6b:6c:b9:7a:5d:60:be:35:dc:af:dc: fd:37:eb:a4:17:cc:1e:b0:d8:06:cf:9a:53:e6:df: 78:80:11:c6:64:65:6b:7e:9f:7e:03:bf:b6:44:60: 5b:d8:9b:87:0f:ae:06:d6:cb:8f:16:ec:78:d5:e0: 31:e3:a2:83:5d:07:ea:35:28:9d:31:c8:38:69:f4: b6:57:de:ac:6c:d4:38:74:0b:18:76:8a:45:44:f0: 6f:aa:a2:1c:f5:03:26:a0:2b:36:11:72:85:f9:5a: 1f:a1:cf:2b:be:0b:76:95:8d:d1:32:44:74:77:35: e5:2a:f5:79:c9:df:fe:2b:53:de:58:9b:ce:aa:f7: 25:37:b7:7e:41:45:f2:b6:37:b3:8d:87:1a:ef:96: 13:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:C0:68:B9:76:FB:AD:9A:8B:36:A8:21:86:3A:17:99:32:CB:A8:78 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/6c553cf8-ddaa-354c-bdbb-82bb2108c09c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.68.23.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:f5:df:ac:3d:e9:d8:2e:36:46:ea:47:be:8a:01:2b:45:1d: 32:c5:50:2a:a5:0f:14:b0:82:28:9d:3c:41:43:7b:1e:61:83: 38:26:72:32:34:3a:63:42:b6:91:e3:c4:40:8a:58:c3:ef:7d: ca:1d:11:38:3f:19:e5:18:af:41:d1:84:94:9f:81:12:81:db: 36:e3:b9:4b:e9:94:93:0a:c7:19:f4:78:69:2b:79:7e:15:21: d1:a1:c5:57:d6:17:a4:cf:fa:a5:ac:80:ff:92:fa:45:21:6d: ad:85:04:89:c3:40:68:ae:32:19:33:f8:b8:c9:d6:c9:a3:04: 3c:2b:7c:c1:55:72:96:34:23:c8:04:b2:b8:19:65:ad:26:53: a7:45:f8:bc:5d:6f:50:64:00:3d:00:4f:d5:e5:66:ca:8f:4c: 3f:1d:78:c6:b2:4d:eb:c3:ce:b6:7d:07:e4:cf:f8:b2:c5:7a: 1f:3d:f1:63:9f:a2:23:46:d3:2f:4a:42:18:e4:8b:fe:c7:23: cb:4c:d4:a2:ca:8d:65:f8:a6:cd:f7:d6:13:0c:22:93:f0:6f: 2b:3d:20:0a:0a:77:30:17:f7:9d:b7:fe:5f:74:f5:7f:d5:ff: a5:75:8c:a2:ae:17:0e:f7:d2:21:79:99:e3:bb:f4:18:94:56: b3:83:75:6b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1n3+2jiQdv0wogtgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDQwNTEzMDAzMVoXDTI2MDcwNDEzMDAzMVowLzEtMCsGA1UEAxMk ZjkwZmMzN2QtNWJjMi00NmI5LWI1MmYtZWQxYTAzNzJmZmFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuGDXMdFizLHKIAz6zWq4hA1blwLyUh5/rmVv 0m1C8FLePjIfTl23sFQRU5vfo+Mz9UQQmMTgSbGlBVDWFSXu2SwU8izjCjEEJ24i FzLpU7c1T+XqTwH902W4/Z+8y2389gqFr6l/AL4VbjEua2y5el1gvjXcr9z9N+uk F8wesNgGz5pT5t94gBHGZGVrfp9+A7+2RGBb2JuHD64G1suPFux41eAx46KDXQfq NSidMcg4afS2V96sbNQ4dAsYdopFRPBvqqIc9QMmoCs2EXKF+Vofoc8rvgt2lY3R MkR0dzXlKvV5yd/+K1PeWJvOqvclN7d+QUXytjezjYca75YTNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDDAaLl2+62aizaoIYY6F5kyy6h4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNmM1NTNjZjgtZGRhYS0z NTRjLWJkYmItODJiYjIxMDhjMDljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEQXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABr136w96dguNkbqR76KAStFHTLFUCqlDxSwgiidPEFDex5hgzgmcjI0 OmNCtpHjxECKWMPvfcodETg/GeUYr0HRhJSfgRKB2zbjuUvplJMKxxn0eGkreX4V IdGhxVfWF6TP+qWsgP+S+kUhba2FBInDQGiuMhkz+LjJ1smjBDwrfMFVcpY0I8gE srgZZa0mU6dF+Lxdb1BkAD0AT9XlZsqPTD8deMayTevDzrZ9B+TP+LLFeh898WOf oiNG0y9KQhjki/7HI8tM1KLKjWX4ps331hMMIpPwbys9IAoKdzAX9523/l909X/V /6V1jKKuFw730iF5meO79BiUVrODdWs= -----END CERTIFICATE-----Generated at Fri Apr 17 19:04:22 2026 by rpki-client