$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/6f08d253-32e3-370e-97ee-7b41bde60260.roa File: 6f08d253-32e3-370e-97ee-7b41bde60260.roa (raw, json) Hash identifier: zo/l9/IpiRGRkJMrrTC2QfzRYBY1ANsFsBFDxhjQCsI= Subject key identifier: 0B:C5:21:D2:F9:57:5E:88:FF:4D:50:1D:0D:57:29:7D:E3:6E:DD:A0 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584D6AAAA4572F7FDBF0D0B22880 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/6f08d253-32e3-370e-97ee-7b41bde60260.roa Signing time: Mon 06 Apr 2026 13:00:30 +0000 ROA not before: Mon 06 Apr 2026 13:00:30 +0000 ROA not after: Sun 05 Jul 2026 13:00:30 +0000 asID: 13335 IP address blocks: 172.68.36.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:6a:aa:a4:57:2f:7f:db:f0:d0:b2:28:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Apr 6 13:00:30 2026 GMT Not After : Jul 5 13:00:30 2026 GMT Subject: CN=504bc04e-6714-436a-adf4-96343087b2db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:a6:a3:59:d9:17:d3:09:59:19:db:3c:43:9d: ec:4c:a2:52:54:8c:ad:95:9c:81:b8:57:e3:3c:67: 24:c2:fb:6e:d0:07:8c:ab:a1:a6:a8:a5:ea:3c:ae: ee:61:3c:ad:4e:cb:9b:f9:84:82:71:5e:b7:f4:7d: 26:cd:d4:bb:1e:7e:24:44:11:0f:ac:1a:31:a2:72: 95:b0:5a:da:52:a0:27:d4:5c:76:b7:a2:1d:7f:7e: f9:01:ad:b0:d3:3d:12:b4:2e:0b:48:d6:3e:de:39: 9d:f4:77:a2:bc:46:79:11:1c:5d:93:45:e4:c4:09: d2:0f:8e:ee:0e:3e:49:52:81:f2:e7:23:f0:e2:65: 42:b5:2a:38:f5:5e:a5:62:c7:0d:16:2e:04:21:16: 1a:b7:48:4d:1b:7b:ff:ff:8c:6f:51:aa:d8:f8:6c: 59:fa:8e:dc:80:05:75:d7:af:7b:21:9d:b9:2c:5d: e7:02:5e:87:e6:cc:81:4c:05:c3:7b:d3:d8:8e:08: a9:a2:65:46:e4:3c:6d:0f:13:00:9e:b0:29:a7:be: 67:53:36:1b:5f:11:1a:f0:2f:0a:7b:e0:8d:a2:1c: 5d:0c:d2:9d:18:e0:f8:16:74:b8:42:f6:95:d0:57: 06:e4:9e:d7:5b:76:49:4b:80:ff:18:cc:a3:ba:88: 23:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:C5:21:D2:F9:57:5E:88:FF:4D:50:1D:0D:57:29:7D:E3:6E:DD:A0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/6f08d253-32e3-370e-97ee-7b41bde60260.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.68.36.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:eb:f1:29:8a:cf:e6:c2:ea:b2:55:ae:a2:41:b6:8b:f4:e4: 45:cb:c8:9a:20:f6:51:f6:81:d7:b9:70:31:cd:fe:06:15:09: 03:b9:79:bc:57:07:d9:d1:70:7b:93:a1:00:54:a7:66:9a:16: a3:1a:eb:72:eb:1b:2f:0e:9e:dc:92:3d:cb:ff:1f:df:0c:ba: 7a:4b:a0:35:14:d7:52:73:0c:e8:75:3d:72:27:19:a1:60:f7: 6a:2f:cc:22:3e:2a:a8:f8:cd:80:a1:77:10:e1:2c:c2:57:d1: 41:70:b1:b2:d0:90:ff:1e:b6:45:02:87:43:73:a8:15:c2:21: bd:b1:bd:49:23:16:1e:4e:7e:02:24:db:35:43:b9:5b:1e:2f: cb:cf:58:bd:c7:a1:33:61:62:99:34:63:37:5d:1a:69:6c:95: fb:cd:12:8c:84:9a:7a:17:30:85:df:62:d9:c2:80:36:98:a3: 15:94:ec:45:2b:c4:21:ad:0c:17:da:5b:df:88:8e:e0:c2:3d: 7d:4c:93:87:b8:90:aa:cf:ee:7b:e9:4d:13:76:29:f1:d6:6e: a3:7d:97:a9:86:71:e0:f6:31:b8:7e:e4:67:6b:92:06:a8:45: f6:97:c2:f9:58:ff:46:4b:27:13:35:9a:e9:c4:35:d2:b1:35: f1:3c:b6:67 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1qqqRXL3/b8NCyKIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDQwNjEzMDAzMFoXDTI2MDcwNTEzMDAzMFowLzEtMCsGA1UEAxMk NTA0YmMwNGUtNjcxNC00MzZhLWFkZjQtOTYzNDMwODdiMmRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvqajWdkX0wlZGds8Q53sTKJSVIytlZyBuFfj PGckwvtu0AeMq6GmqKXqPK7uYTytTsub+YSCcV639H0mzdS7Hn4kRBEPrBoxonKV sFraUqAn1Fx2t6Idf375Aa2w0z0StC4LSNY+3jmd9HeivEZ5ERxdk0XkxAnSD47u Dj5JUoHy5yPw4mVCtSo49V6lYscNFi4EIRYat0hNG3v//4xvUarY+GxZ+o7cgAV1 1697IZ25LF3nAl6H5syBTAXDe9PYjgipomVG5DxtDxMAnrApp75nUzYbXxEa8C8K e+CNohxdDNKdGOD4FnS4QvaV0FcG5J7XW3ZJS4D/GMyjuogj5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAvFIdL5V16I/01QHQ1XKX3jbt2gMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNmYwOGQyNTMtMzJlMy0z NzBlLTk3ZWUtN2I0MWJkZTYwMjYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEQkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAArr8SmKz+bC6rJVrqJBtov05EXLyJog9lH2gde5cDHN/gYVCQO5ebxX B9nRcHuToQBUp2aaFqMa63LrGy8OntySPcv/H98MunpLoDUU11JzDOh1PXInGaFg 92ovzCI+Kqj4zYChdxDhLMJX0UFwsbLQkP8etkUCh0NzqBXCIb2xvUkjFh5OfgIk 2zVDuVseL8vPWL3HoTNhYpk0YzddGmlslfvNEoyEmnoXMIXfYtnCgDaYoxWU7EUr xCGtDBfaW9+IjuDCPX1Mk4e4kKrP7nvpTRN2KfHWbqN9l6mGceD2Mbh+5Gdrkgao RfaXwvlY/0ZLJxM1munENdKxNfE8tmc= -----END CERTIFICATE-----Generated at Fri Apr 17 16:50:53 2026 by rpki-client