$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/88ea44da-7bc3-3be9-b706-47800e8d3e09.roa File: 88ea44da-7bc3-3be9-b706-47800e8d3e09.roa (raw, json) Hash identifier: 4QrBWP5+N9Zj83iaE1JzY5JJ3ShwCqw5fsHPp8jtvqU= Subject key identifier: EA:18:F1:EC:2E:6B:08:37:AF:ED:E1:E0:BC:CA:F0:9C:82:8F:79:C3 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584D6C0FD2E3C629989DE0A5D380 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/88ea44da-7bc3-3be9-b706-47800e8d3e09.roa Signing time: Tue 07 Apr 2026 01:00:23 +0000 ROA not before: Tue 07 Apr 2026 01:00:23 +0000 ROA not after: Mon 06 Jul 2026 01:00:23 +0000 asID: 13335 IP address blocks: 172.68.228.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:6c:0f:d2:e3:c6:29:98:9d:e0:a5:d3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Apr 7 01:00:23 2026 GMT Not After : Jul 6 01:00:23 2026 GMT Subject: CN=786b3b6e-ae1e-4a5d-a8de-1048a19d9e5e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:b7:e1:4c:de:1b:bb:91:23:f3:7b:e9:a0:56: 51:f8:7a:65:da:4c:b5:1d:f9:ec:00:aa:19:da:f3: 05:1a:a2:c8:8f:c8:e5:26:53:9e:36:2b:fa:c9:94: 96:4b:b5:4f:0d:d5:e3:2a:ce:b5:69:d6:dd:84:f1: 56:04:f1:cf:a8:c1:48:46:11:1f:30:4a:0a:77:cd: ab:d2:a1:0d:6c:b3:76:f1:25:03:61:c2:95:3e:06: ef:01:9a:ce:40:31:d3:04:12:c3:12:96:17:2b:fb: c3:b4:4b:3e:dc:2c:a2:66:ab:da:3b:16:fc:2a:19: 06:39:9c:af:56:10:5a:e1:33:bc:48:75:4f:48:b8: 66:2b:61:d5:24:20:cb:d9:9f:5e:28:e2:f6:4b:54: 71:c4:5e:f4:50:c6:b2:3e:eb:56:97:66:e4:c3:bd: 56:fd:a6:40:b9:1f:4a:fa:0a:be:1c:25:9f:23:a0: 99:00:bf:66:11:2d:21:71:a2:f4:aa:fb:0f:fc:cc: 8e:1e:b0:e4:6f:2a:94:16:db:4c:ee:01:35:46:0c: d4:9c:04:09:27:66:4d:c4:00:1d:52:70:73:fa:a1: c7:c0:16:4b:a3:7f:48:04:96:36:7c:9f:8c:fa:8d: 2d:72:2a:3b:b8:0f:28:e9:56:d7:d0:b0:11:3c:dc: 7a:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:18:F1:EC:2E:6B:08:37:AF:ED:E1:E0:BC:CA:F0:9C:82:8F:79:C3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/88ea44da-7bc3-3be9-b706-47800e8d3e09.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.68.228.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:bb:48:b7:12:d6:2c:cf:0a:0f:a6:bd:cc:f9:cd:0e:33:4b: b4:4a:84:1c:d7:23:e0:2d:a3:87:26:44:b2:71:2c:bc:b0:a3: 20:08:af:da:fb:fe:14:12:e1:1d:7b:8a:21:1e:75:db:58:c8: 5e:12:1c:be:59:43:5f:0f:7d:31:fa:2f:09:3e:12:b2:d1:14: e2:42:2f:12:3a:fb:65:3d:de:52:b7:c5:db:ac:68:f0:4f:ee: f2:28:9b:72:9b:89:b9:24:76:51:4b:53:81:90:17:dd:46:97: 46:a2:ab:58:16:a5:90:e3:6d:b7:e8:f8:83:fb:8f:4a:0f:0a: 08:7e:e9:d5:36:d3:09:9d:ba:31:d6:3d:91:67:83:b2:0f:47: 37:35:15:b5:8b:f1:01:7b:5f:a6:bd:4b:22:5b:ae:76:1a:19: e0:51:36:bc:36:df:4d:8b:7a:ae:08:99:78:87:d9:2a:c0:55: 22:38:c9:07:88:a1:bb:c8:a0:e5:20:73:46:0a:f2:68:e9:71: 80:11:4d:35:9c:26:13:f4:12:9a:3f:ca:60:c5:89:1f:c8:76: 44:ac:22:ec:33:02:a7:6d:1a:46:85:ee:86:92:7c:ed:d9:35: 0c:02:2f:56:d9:dd:3d:8e:8c:93:f1:42:5d:06:02:a1:bd:d4: 6e:19:83:3a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1sD9LjximYneCl04AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDQwNzAxMDAyM1oXDTI2MDcwNjAxMDAyM1owLzEtMCsGA1UEAxMk Nzg2YjNiNmUtYWUxZS00YTVkLWE4ZGUtMTA0OGExOWQ5ZTVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7LfhTN4bu5Ej83vpoFZR+Hpl2ky1HfnsAKoZ 2vMFGqLIj8jlJlOeNiv6yZSWS7VPDdXjKs61adbdhPFWBPHPqMFIRhEfMEoKd82r 0qENbLN28SUDYcKVPgbvAZrOQDHTBBLDEpYXK/vDtEs+3CyiZqvaOxb8KhkGOZyv VhBa4TO8SHVPSLhmK2HVJCDL2Z9eKOL2S1RxxF70UMayPutWl2bkw71W/aZAuR9K +gq+HCWfI6CZAL9mES0hcaL0qvsP/MyOHrDkbyqUFttM7gE1RgzUnAQJJ2ZNxAAd UnBz+qHHwBZLo39IBJY2fJ+M+o0tcio7uA8o6VbX0LARPNx6AwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOoY8ewuawg3r+3h4LzK8JyCj3nDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvODhlYTQ0ZGEtN2JjMy0z YmU5LWI3MDYtNDc4MDBlOGQzZTA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrETkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI27SLcS1izPCg+mvcz5zQ4zS7RKhBzXI+Ato4cmRLJxLLywoyAIr9r7 /hQS4R17iiEeddtYyF4SHL5ZQ18PfTH6Lwk+ErLRFOJCLxI6+2U93lK3xdusaPBP 7vIom3KbibkkdlFLU4GQF91Gl0aiq1gWpZDjbbfo+IP7j0oPCgh+6dU20wmdujHW PZFng7IPRzc1FbWL8QF7X6a9SyJbrnYaGeBRNrw2302Leq4ImXiH2SrAVSI4yQeI obvIoOUgc0YK8mjpcYARTTWcJhP0Epo/ymDFiR/IdkSsIuwzAqdtGkaF7oaSfO3Z NQwCL1bZ3T2OjJPxQl0GAqG91G4Zgzo= -----END CERTIFICATE-----Generated at Fri Apr 17 12:22:09 2026 by rpki-client