$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/9c1fbff9-85a2-3eee-9d47-5618fa42445f.roa File: 9c1fbff9-85a2-3eee-9d47-5618fa42445f.roa (raw, json) Hash identifier: rUheUadlO45jtZD0la2wgmyr0dVOILwt+msluj1Lq1Y= Subject key identifier: 3D:7E:82:43:53:DF:CA:D3:E4:C8:12:1D:60:D0:C6:E7:55:A5:BB:9C Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584D6AAA9225F79804C0CA0B7C78 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/9c1fbff9-85a2-3eee-9d47-5618fa42445f.roa Signing time: Mon 06 Apr 2026 13:00:30 +0000 ROA not before: Mon 06 Apr 2026 13:00:30 +0000 ROA not after: Sun 05 Jul 2026 13:00:30 +0000 asID: 13335 IP address blocks: 172.68.235.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:6a:aa:92:25:f7:98:04:c0:ca:0b:7c:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Apr 6 13:00:30 2026 GMT Not After : Jul 5 13:00:30 2026 GMT Subject: CN=81bae0e1-563f-4ab1-a914-0b2e2d724275 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:2a:bc:cc:6d:b6:87:ce:e4:ec:34:2d:88:0b: da:f1:89:1a:b3:5a:32:38:0c:45:2c:25:8e:f4:9c: bf:89:e4:aa:8e:7c:0c:7e:76:ee:bb:c3:ad:18:69: 50:5a:f6:52:7d:7f:56:04:ed:3f:d6:45:2d:92:fb: d2:eb:cb:42:7a:d0:7d:cb:f2:2b:a9:9a:27:72:97: b9:8e:4e:3d:53:f4:8a:4c:41:d7:01:fe:0e:fe:0a: 23:cf:66:8f:42:ee:70:b5:1b:55:29:03:df:e6:45: b9:0b:b5:6e:43:03:24:a6:57:69:73:b7:5d:55:d5: 42:6a:69:86:65:1b:d8:76:8c:87:02:77:d4:0a:2e: 64:ad:eb:83:d3:fa:48:7c:93:f0:38:d2:e6:63:af: 1c:74:a7:1c:52:53:4c:d3:94:75:e2:1d:6f:e1:6c: 4d:27:15:ae:31:31:1a:31:63:94:16:b1:d5:f8:dd: 7c:97:7c:ea:4e:7d:c3:40:6b:77:6b:fe:92:2d:fe: 40:64:4d:26:65:04:e4:d4:95:59:63:01:11:92:74: a8:26:66:fc:c1:5c:d1:61:a9:ac:69:6d:33:5d:dc: 04:71:40:e9:2f:14:d3:42:ae:9c:2e:41:bc:34:30: 12:e9:19:15:c7:06:df:5c:2b:cf:ed:14:61:45:88: 97:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:7E:82:43:53:DF:CA:D3:E4:C8:12:1D:60:D0:C6:E7:55:A5:BB:9C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/9c1fbff9-85a2-3eee-9d47-5618fa42445f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.68.235.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:46:0f:64:70:ba:83:b5:cd:d5:1c:6b:87:02:5c:26:2b:cf: 22:c2:5a:7c:c6:7d:b6:4a:70:96:01:3e:d0:fe:6f:c2:cf:98: 1b:d9:be:6f:53:8e:a5:66:a5:e4:44:6b:d1:1a:8b:ae:92:31: 3f:ef:b7:51:02:9a:71:90:40:0f:6c:ae:9d:40:8e:82:8b:ed: 32:6d:fe:ab:d8:b2:49:da:07:6a:29:69:8b:73:c6:90:33:64: 67:c9:3c:c1:f8:b3:12:a3:82:f7:67:c9:4b:0c:de:98:d6:c2: 7d:ad:40:ca:09:84:b5:c8:d2:b9:e6:1c:7d:a0:b7:01:bc:6b: fd:cb:a1:cb:61:83:1b:56:ca:f1:56:10:78:01:e4:0d:02:cc: 6c:f4:d9:af:0d:c9:74:ec:64:1f:53:15:3b:a3:7a:2d:72:8c: 60:df:76:49:22:72:5c:18:6b:19:02:a5:e9:60:3d:6d:47:e1: ce:94:de:46:80:d7:cf:fa:bc:47:b6:85:02:4f:b4:45:62:b1: 8a:a2:5b:bc:ad:46:72:ac:d1:d5:6f:38:64:8f:4e:9e:a8:a7: d1:99:74:3d:22:90:33:ce:cc:bc:a3:d4:ee:97:a9:e9:93:6c: 9d:8e:e7:48:00:59:3e:bb:05:fd:20:ef:36:85:3e:e1:1a:71: b4:b8:e4:99 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1qqpIl95gEwMoLfHgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDQwNjEzMDAzMFoXDTI2MDcwNTEzMDAzMFowLzEtMCsGA1UEAxMk ODFiYWUwZTEtNTYzZi00YWIxLWE5MTQtMGIyZTJkNzI0Mjc1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmSq8zG22h87k7DQtiAva8Ykas1oyOAxFLCWO 9Jy/ieSqjnwMfnbuu8OtGGlQWvZSfX9WBO0/1kUtkvvS68tCetB9y/IrqZoncpe5 jk49U/SKTEHXAf4O/gojz2aPQu5wtRtVKQPf5kW5C7VuQwMkpldpc7ddVdVCammG ZRvYdoyHAnfUCi5kreuD0/pIfJPwONLmY68cdKccUlNM05R14h1v4WxNJxWuMTEa MWOUFrHV+N18l3zqTn3DQGt3a/6SLf5AZE0mZQTk1JVZYwERknSoJmb8wVzRYams aW0zXdwEcUDpLxTTQq6cLkG8NDAS6RkVxwbfXCvP7RRhRYiXkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD1+gkNT38rT5MgSHWDQxudVpbucMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvOWMxZmJmZjktODVhMi0z ZWVlLTlkNDctNTYxOGZhNDI0NDVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArETrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEBGD2RwuoO1zdUca4cCXCYrzyLCWnzGfbZKcJYBPtD+b8LPmBvZvm9T jqVmpeREa9Eai66SMT/vt1ECmnGQQA9srp1AjoKL7TJt/qvYsknaB2opaYtzxpAz ZGfJPMH4sxKjgvdnyUsM3pjWwn2tQMoJhLXI0rnmHH2gtwG8a/3LocthgxtWyvFW EHgB5A0CzGz02a8NyXTsZB9TFTujei1yjGDfdkkiclwYaxkCpelgPW1H4c6U3kaA 18/6vEe2hQJPtEVisYqiW7ytRnKs0dVvOGSPTp6op9GZdD0ikDPOzLyj1O6XqemT bJ2O50gAWT67Bf0g7zaFPuEacbS45Jk= -----END CERTIFICATE-----Generated at Fri Apr 17 13:59:46 2026 by rpki-client