$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/9d97061d-b2c5-3b8b-9009-f596f0ac7f07.roa File: 9d97061d-b2c5-3b8b-9009-f596f0ac7f07.roa (raw, json) Hash identifier: feiUwR9kIBHWgbzjSfvDoCr3bdIs55phQ6szQ4j+zkg= Subject key identifier: AC:98:95:67:6A:07:34:63:53:38:B4:C2:77:73:80:F6:DE:A8:58:34 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584D6515390B417B48BFFC161240 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/9d97061d-b2c5-3b8b-9009-f596f0ac7f07.roa Signing time: Sat 04 Apr 2026 13:00:29 +0000 ROA not before: Sat 04 Apr 2026 13:00:29 +0000 ROA not after: Fri 03 Jul 2026 13:00:29 +0000 asID: 13335 IP address blocks: 172.68.43.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:65:15:39:0b:41:7b:48:bf:fc:16:12:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Apr 4 13:00:29 2026 GMT Not After : Jul 3 13:00:29 2026 GMT Subject: CN=5d9a2924-1a58-46fc-ac87-0dd197f20e77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:fb:5d:57:28:56:b5:ce:33:2b:df:c3:10:9e: 8b:4e:fc:9f:00:21:b4:61:c6:2b:11:45:65:96:81: 91:49:cb:45:3b:e1:01:5f:3c:5d:07:b9:99:90:12: 70:31:03:e0:cf:3d:6d:d2:b2:d8:ad:97:10:8d:9b: bf:ae:45:10:11:98:ac:90:8a:15:a4:e1:b1:b6:a5: 8a:3c:04:3a:49:f5:4f:4a:3d:f6:c1:57:5a:fc:e3: 0e:8a:9e:8e:e3:bf:61:50:db:6c:9f:99:87:a6:1b: a9:ce:d1:bd:23:36:41:61:a3:38:c6:cd:37:c0:c2: 3d:a6:1e:60:91:d7:5a:4b:49:90:e3:2f:03:57:10: 88:09:64:bd:0c:78:0f:5e:e3:6b:4e:d2:6e:04:76: f5:17:cb:00:57:c1:49:56:be:9f:ac:92:ba:d0:3d: d1:b3:e2:b9:eb:d8:32:0a:d2:6c:50:4d:43:a1:fb: cc:d4:72:f1:cb:27:16:47:55:e8:63:ef:b4:f5:b6: f3:fd:b0:c5:e7:df:7e:ed:3c:54:a1:1b:f2:fd:8a: ad:31:8f:9f:e7:f3:8b:78:28:89:e5:f6:d2:09:a7: 85:87:b5:7d:7d:60:f0:d5:49:8a:78:f7:85:5d:63: b4:39:dd:c1:96:40:5d:5c:3a:cb:ca:79:17:b7:64: b7:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:98:95:67:6A:07:34:63:53:38:B4:C2:77:73:80:F6:DE:A8:58:34 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/9d97061d-b2c5-3b8b-9009-f596f0ac7f07.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.68.43.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:e7:17:fd:af:8b:20:e6:ad:cf:af:8c:88:21:28:51:ec:d8: 08:83:d8:db:e0:13:50:1d:b9:82:7b:71:b5:d3:f6:47:76:cd: d7:4f:83:c1:a9:70:68:2f:37:c5:fe:68:53:a5:e0:85:26:54: dd:82:92:ed:41:9d:1c:ae:d0:1f:82:cb:08:82:e9:29:e6:29: 86:bf:91:17:d1:0e:af:28:f4:7f:13:bb:58:49:83:66:71:44: aa:6d:c6:9c:c5:a6:c9:ac:42:18:8e:62:ab:49:6b:3e:f1:6b: d9:81:ba:ec:3d:77:56:0d:f5:b5:00:27:ef:e8:c9:6b:d2:6a: 15:ab:c0:cd:3c:e3:48:59:55:01:9d:90:eb:f6:75:04:5e:77: 43:66:2a:74:87:de:74:1e:38:f7:b3:4a:84:bb:0f:26:d8:e1: 44:aa:04:b2:d4:60:6a:21:0c:fc:b2:d8:4e:b1:31:99:2d:72: 4a:7e:b9:b6:05:01:7b:d0:cf:9e:58:00:bf:a6:74:14:21:f3: 99:be:f9:29:75:92:24:15:d7:d1:b4:74:32:f4:9d:d2:74:7c: 19:a2:60:8d:9f:f1:e7:1b:75:df:30:40:5a:4b:0f:b6:70:c4: f5:6e:6b:ed:99:a2:17:47:55:68:60:7a:12:9a:72:f8:f0:0d: d8:d6:25:13 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1lFTkLQXtIv/wWEkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDQwNDEzMDAyOVoXDTI2MDcwMzEzMDAyOVowLzEtMCsGA1UEAxMk NWQ5YTI5MjQtMWE1OC00NmZjLWFjODctMGRkMTk3ZjIwZTc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjPtdVyhWtc4zK9/DEJ6LTvyfACG0YcYrEUVl loGRSctFO+EBXzxdB7mZkBJwMQPgzz1t0rLYrZcQjZu/rkUQEZiskIoVpOGxtqWK PAQ6SfVPSj32wVda/OMOip6O479hUNtsn5mHphupztG9IzZBYaM4xs03wMI9ph5g kddaS0mQ4y8DVxCICWS9DHgPXuNrTtJuBHb1F8sAV8FJVr6frJK60D3Rs+K569gy CtJsUE1DofvM1HLxyycWR1XoY++09bbz/bDF599+7TxUoRvy/YqtMY+f5/OLeCiJ 5fbSCaeFh7V9fWDw1UmKePeFXWO0Od3BlkBdXDrLynkXt2S3MwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKyYlWdqBzRjUzi0wndzgPbeqFg0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvOWQ5NzA2MWQtYjJjNS0z YjhiLTkwMDktZjU5NmYwYWM3ZjA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEQrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFznF/2viyDmrc+vjIghKFHs2AiD2NvgE1AduYJ7cbXT9kd2zddPg8Gp cGgvN8X+aFOl4IUmVN2Cku1BnRyu0B+CywiC6SnmKYa/kRfRDq8o9H8Tu1hJg2Zx RKptxpzFpsmsQhiOYqtJaz7xa9mBuuw9d1YN9bUAJ+/oyWvSahWrwM0840hZVQGd kOv2dQRed0NmKnSH3nQeOPezSoS7DybY4USqBLLUYGohDPyy2E6xMZktckp+ubYF AXvQz55YAL+mdBQh85m++Sl1kiQV19G0dDL0ndJ0fBmiYI2f8ecbdd8wQFpLD7Zw xPVua+2ZohdHVWhgehKacvjwDdjWJRM= -----END CERTIFICATE-----Generated at Sat Apr 18 01:44:30 2026 by rpki-client