$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/84665c0e-b5dc-3279-b434-f2a70bb2c2f8.roa File: 84665c0e-b5dc-3279-b434-f2a70bb2c2f8.roa (raw, json) Hash identifier: pft/c/pDjR0al8ZCgtLz715zZmyRqj7qQFlpLAqEBjE= Subject key identifier: 8B:6F:98:DB:10:F5:0D:F6:25:05:82:51:51:A6:E6:8B:D1:21:6A:5D Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584D6AAAAD9232C6699773D7F9C0 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/84665c0e-b5dc-3279-b434-f2a70bb2c2f8.roa Signing time: Mon 06 Apr 2026 13:00:30 +0000 ROA not before: Mon 06 Apr 2026 13:00:30 +0000 ROA not after: Sun 05 Jul 2026 13:00:30 +0000 asID: 14789 IP address blocks: 172.68.132.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:6a:aa:ad:92:32:c6:69:97:73:d7:f9:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Apr 6 13:00:30 2026 GMT Not After : Jul 5 13:00:30 2026 GMT Subject: CN=801b21dc-148f-4457-bc06-83032e6da27b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:cf:bc:f9:52:e6:d9:8b:32:b2:20:79:68:aa: 0c:2f:60:61:29:55:80:02:67:46:bf:c2:b0:0a:70: 2b:dc:cd:2b:42:1f:86:75:5e:c9:97:43:3d:a1:7a: 6b:e3:04:24:5e:a1:dd:b9:d6:ff:56:c1:68:23:33: 92:70:fc:30:13:87:8a:28:75:69:75:da:ec:12:55: 4b:80:de:bd:1e:39:03:55:82:38:a8:7b:83:36:f6: 93:96:eb:23:e8:7a:04:8a:19:12:d4:50:82:f8:53: 8b:b4:a9:10:f0:7d:50:22:e9:fa:de:b3:b6:e7:d3: 81:a1:0c:99:27:f7:9b:e3:40:d4:65:2b:6b:2d:5e: 1e:b9:db:e0:f1:ea:34:5e:34:aa:7b:7d:81:c5:58: ba:e8:a9:59:d7:8c:b7:f4:cc:a7:94:fe:18:1b:4b: 01:bd:63:4d:cf:ba:87:dd:11:c0:58:e5:a6:ef:5f: 0b:4d:ce:06:d9:5b:eb:08:5d:cf:5b:76:90:d7:a5: 61:f5:d5:cd:dd:d2:ef:02:c0:08:fc:1a:b0:59:ee: c1:25:f4:03:a5:92:35:15:63:31:4a:3d:12:a2:e1: 1d:d8:7d:a4:cd:80:7f:fb:67:71:da:67:1b:54:e0: cf:af:6d:56:86:96:ae:36:79:43:46:9b:92:46:63: 85:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:6F:98:DB:10:F5:0D:F6:25:05:82:51:51:A6:E6:8B:D1:21:6A:5D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/84665c0e-b5dc-3279-b434-f2a70bb2c2f8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.68.132.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:43:e2:16:04:b8:9b:25:e5:e8:0f:bd:66:f9:a1:17:8c:d8: 3b:28:9d:a8:ba:f5:07:d5:14:c1:04:36:0e:e1:2b:8f:cf:56: 66:f8:8f:ee:55:9d:26:4e:dd:73:91:ae:3b:78:ec:46:9a:6d: 4b:f7:e5:a2:b5:88:40:dd:74:da:88:e4:28:74:b6:84:d2:41: b3:21:1e:e1:0c:3e:d5:73:5a:c2:7e:7c:3b:1b:57:2e:f8:79: e8:f2:8b:c4:38:e6:d4:53:4d:08:d1:82:f3:87:b0:e2:38:ad: b9:aa:4b:b5:56:70:c3:4e:b4:97:7b:04:bc:17:2d:52:2f:25: cd:90:5f:f5:9c:aa:c1:fb:0f:4e:db:7a:b4:a0:18:af:85:63: be:55:0d:09:71:11:2d:87:78:52:fe:eb:9e:91:43:ea:bb:c1: f8:b2:e4:95:a2:ee:40:1e:43:34:22:c7:ae:69:91:4c:02:ea: a3:d4:0c:6f:44:c8:f5:14:0c:87:79:ce:9c:af:7f:94:2c:12: be:aa:bf:d2:74:72:0e:7d:bc:bb:df:74:8e:af:f4:2a:c1:9a: 85:2c:fc:0f:16:80:bf:02:3a:eb:40:8d:49:84:3f:3d:cd:01: b5:00:20:d7:4d:3d:be:eb:62:e3:20:a1:f9:31:ee:fd:e6:a5: e5:7c:45:59 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1qqq2SMsZpl3PX+cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDQwNjEzMDAzMFoXDTI2MDcwNTEzMDAzMFowLzEtMCsGA1UEAxMk ODAxYjIxZGMtMTQ4Zi00NDU3LWJjMDYtODMwMzJlNmRhMjdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2s+8+VLm2YsysiB5aKoML2BhKVWAAmdGv8Kw CnAr3M0rQh+GdV7Jl0M9oXpr4wQkXqHdudb/VsFoIzOScPwwE4eKKHVpddrsElVL gN69HjkDVYI4qHuDNvaTlusj6HoEihkS1FCC+FOLtKkQ8H1QIun63rO259OBoQyZ J/eb40DUZStrLV4eudvg8eo0XjSqe32BxVi66KlZ14y39MynlP4YG0sBvWNNz7qH 3RHAWOWm718LTc4G2VvrCF3PW3aQ16Vh9dXN3dLvAsAI/BqwWe7BJfQDpZI1FWMx Sj0SouEd2H2kzYB/+2dx2mcbVODPr21WhpauNnlDRpuSRmOFKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFItvmNsQ9Q32JQWCUVGm5ovRIWpdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvODQ2NjVjMGUtYjVkYy0z Mjc5LWI0MzQtZjJhNzBiYjJjMmY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArESEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADdD4hYEuJsl5egPvWb5oReM2Dsonai69QfVFMEENg7hK4/PVmb4j+5V nSZO3XORrjt47EaabUv35aK1iEDddNqI5Ch0toTSQbMhHuEMPtVzWsJ+fDsbVy74 eejyi8Q45tRTTQjRgvOHsOI4rbmqS7VWcMNOtJd7BLwXLVIvJc2QX/WcqsH7D07b erSgGK+FY75VDQlxES2HeFL+656RQ+q7wfiy5JWi7kAeQzQix65pkUwC6qPUDG9E yPUUDId5zpyvf5QsEr6qv9J0cg59vLvfdI6v9CrBmoUs/A8WgL8COutAjUmEPz3N AbUAINdNPb7rYuMgofkx7v3mpeV8RVk= -----END CERTIFICATE-----Generated at Fri Apr 17 19:44:00 2026 by rpki-client