$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/96d5aedb-9494-37ce-b4cc-58549e72ab1d.roa File: 96d5aedb-9494-37ce-b4cc-58549e72ab1d.roa (raw, json) Hash identifier: RXimF95Fb35NLHz7ZqpYscX8Ox9dcg7th0LexCmg7ZY= Subject key identifier: 1F:99:8B:AB:6E:3F:77:F1:02:42:92:48:F1:9D:17:ED:C3:69:7D:36 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584D87FA940643588013ABD573C0 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/96d5aedb-9494-37ce-b4cc-58549e72ab1d.roa Signing time: Fri 17 Apr 2026 01:00:27 +0000 ROA not before: Fri 17 Apr 2026 01:00:27 +0000 ROA not after: Thu 16 Jul 2026 01:00:27 +0000 asID: 14789 IP address blocks: 172.68.58.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:87:fa:94:06:43:58:80:13:ab:d5:73:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Apr 17 01:00:27 2026 GMT Not After : Jul 16 01:00:27 2026 GMT Subject: CN=2658d2a8-9b2d-45a3-b524-e6467a80bd6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:79:82:42:68:3e:d9:4c:11:99:3b:74:f8:e8: 46:2f:97:10:54:ca:bd:0b:5f:92:d9:be:36:35:0a: 63:a0:94:f0:2e:62:4b:e0:e9:3a:4a:90:6a:4e:51: 8d:2e:ad:c0:a0:fe:72:30:e3:a0:52:cc:f8:a0:3e: 4a:98:5c:f3:4f:b1:c3:0f:c7:ac:70:4b:11:d3:98: ec:1d:2c:8e:cc:42:73:d6:0a:93:8e:b5:77:99:54: 60:29:22:92:a9:68:6e:a7:7d:fe:95:2d:50:49:8f: a9:57:fc:ba:8f:cc:bc:28:23:2c:63:59:75:58:f5: 4e:e2:61:c2:5b:37:97:57:97:23:54:40:82:62:f8: ea:e3:ff:83:8a:1c:9f:d5:da:f2:f4:3a:69:01:78: 6d:52:1e:48:b4:39:df:2f:3a:56:25:a3:29:72:53: f8:d6:70:aa:1a:2a:c1:7a:3f:a9:25:c4:4e:7a:a3: 15:6b:02:ba:5c:4d:c8:ed:e4:ec:ba:ce:dc:a1:91: ab:58:da:70:e3:d6:b6:3b:0c:f8:e0:42:52:af:bc: 88:39:b9:63:ed:c6:6f:03:76:5b:49:4b:bf:c9:61: af:55:15:e4:c1:4e:e0:15:7f:41:ed:b2:f1:0e:24: 60:f2:3a:64:c9:37:68:04:fa:03:31:21:3d:db:ff: d4:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:99:8B:AB:6E:3F:77:F1:02:42:92:48:F1:9D:17:ED:C3:69:7D:36 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/96d5aedb-9494-37ce-b4cc-58549e72ab1d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.68.58.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:c0:40:d4:57:86:0c:20:a8:48:4c:e1:6c:ad:f6:95:63:b8: 0c:7a:99:97:6a:82:7a:a7:b7:02:c1:39:04:6a:f5:d2:f7:7e: 80:10:e2:56:b2:6c:d9:a3:06:db:0c:9e:ac:36:c0:30:34:f9: 51:2e:f8:eb:49:e0:b2:f6:06:6c:67:52:8a:ff:bd:00:8d:0c: 7e:b8:7b:07:c8:57:36:98:a2:04:03:e0:8f:02:6a:23:69:d6: 87:17:74:fd:60:23:c2:52:2e:3a:e8:e6:74:4d:0f:e1:4e:ca: 70:d0:7b:f4:cd:47:80:b5:03:51:ca:0c:ee:2b:a7:ae:4e:86: 8b:c0:88:f7:e8:b7:4f:25:f3:83:f6:f4:a5:1a:2a:18:cc:b9: a0:8f:58:60:c3:a7:b3:14:1a:02:fe:38:18:9d:21:a4:44:cc: e6:a5:67:55:91:a0:ca:af:2a:05:19:32:bc:f3:6a:e3:8a:58: 6b:53:5a:84:77:3e:1c:ca:df:8b:1f:19:14:9b:0a:a1:ca:c7: ce:8b:73:64:18:26:c0:32:8d:95:ca:ec:5e:72:5b:a2:e0:83: 96:a4:e1:e4:67:e6:82:d9:03:f1:63:fa:35:9d:42:fe:f6:9b: b0:30:bf:a7:3e:6e:b1:04:32:b5:ab:71:af:eb:53:67:61:7f: a0:6c:6d:45 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2H+pQGQ1iAE6vVc8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDQxNzAxMDAyN1oXDTI2MDcxNjAxMDAyN1owLzEtMCsGA1UEAxMk MjY1OGQyYTgtOWIyZC00NWEzLWI1MjQtZTY0NjdhODBiZDZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh3mCQmg+2UwRmTt0+OhGL5cQVMq9C1+S2b42 NQpjoJTwLmJL4Ok6SpBqTlGNLq3AoP5yMOOgUsz4oD5KmFzzT7HDD8escEsR05js HSyOzEJz1gqTjrV3mVRgKSKSqWhup33+lS1QSY+pV/y6j8y8KCMsY1l1WPVO4mHC WzeXV5cjVECCYvjq4/+Dihyf1dry9DppAXhtUh5ItDnfLzpWJaMpclP41nCqGirB ej+pJcROeqMVawK6XE3I7eTsus7coZGrWNpw49a2Owz44EJSr7yIOblj7cZvA3Zb SUu/yWGvVRXkwU7gFX9B7bLxDiRg8jpkyTdoBPoDMSE92//URQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB+Zi6tuP3fxAkKSSPGdF+3DaX02MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvOTZkNWFlZGItOTQ5NC0z N2NlLWI0Y2MtNTg1NDllNzJhYjFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEQ6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADTAQNRXhgwgqEhM4Wyt9pVjuAx6mZdqgnqntwLBOQRq9dL3foAQ4lay bNmjBtsMnqw2wDA0+VEu+OtJ4LL2BmxnUor/vQCNDH64ewfIVzaYogQD4I8CaiNp 1ocXdP1gI8JSLjro5nRND+FOynDQe/TNR4C1A1HKDO4rp65OhovAiPfot08l84P2 9KUaKhjMuaCPWGDDp7MUGgL+OBidIaREzOalZ1WRoMqvKgUZMrzzauOKWGtTWoR3 PhzK34sfGRSbCqHKx86Lc2QYJsAyjZXK7F5yW6Lgg5ak4eRn5oLZA/Fj+jWdQv72 m7Awv6c+brEEMrWrca/rU2dhf6BsbUU= -----END CERTIFICATE-----Generated at Sat Apr 18 03:02:20 2026 by rpki-client