$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a5ff2b3c-9545-361a-946b-cffbadce93f7.roa File: a5ff2b3c-9545-361a-946b-cffbadce93f7.roa (raw, json) Hash identifier: ffSdsKiwyfZeVJJi/2cbHtuNNAOJ2phRSOtQ1a5fqT4= Subject key identifier: 08:EA:5B:E8:A8:55:80:DD:41:6D:9B:2C:05:6F:DD:80:AF:6A:CA:54 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584D67DFEB69CC608B144F6AFC00 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a5ff2b3c-9545-361a-946b-cffbadce93f7.roa Signing time: Sun 05 Apr 2026 13:00:31 +0000 ROA not before: Sun 05 Apr 2026 13:00:31 +0000 ROA not after: Sat 04 Jul 2026 13:00:31 +0000 asID: 13335 IP address blocks: 172.68.79.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:67:df:eb:69:cc:60:8b:14:4f:6a:fc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Apr 5 13:00:31 2026 GMT Not After : Jul 4 13:00:31 2026 GMT Subject: CN=dcc37a13-14f2-4623-a3e0-b9ffe75cbcb2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:e9:99:9a:3e:16:a8:a2:f7:3a:6f:d2:a9:f4: 38:2e:d4:a7:59:84:c6:26:17:cc:93:c5:96:1d:bc: 11:41:db:30:a1:07:88:df:01:2b:05:12:47:32:86: 4c:cf:3d:38:a4:b1:f1:1d:45:6a:84:f2:46:a2:11: e5:69:25:e4:4a:c3:af:02:32:e4:72:85:d1:b6:e2: b7:31:4c:bd:01:0c:48:2f:f7:ed:41:fd:4e:01:b3: 70:e2:90:ed:4e:ea:32:88:df:c3:be:30:d9:4e:92: 79:9c:5a:68:45:6f:7f:2c:19:8f:46:b3:f1:dd:cc: 13:21:ca:e0:8e:68:ed:07:00:e7:28:93:e8:48:b4: 39:5d:58:be:b0:9b:79:fc:4d:4e:dd:90:79:5a:fc: 17:ff:18:18:64:51:c0:05:bf:69:70:a8:40:6f:ec: 8a:2a:28:6a:c7:62:1e:13:32:d0:ce:29:ee:5d:fc: fe:da:67:fa:f6:26:ae:f8:a1:d1:91:d5:f3:2e:65: bc:98:41:9b:1a:29:f5:ea:75:27:ee:e2:77:82:6c: e6:35:6a:10:73:8a:aa:85:1e:8e:94:dc:c2:b9:5e: fb:28:d1:ba:b9:32:b5:a1:03:fe:ff:51:17:5d:02: d2:95:7a:20:37:49:72:b7:f0:27:07:0f:6d:b1:45: c6:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:EA:5B:E8:A8:55:80:DD:41:6D:9B:2C:05:6F:DD:80:AF:6A:CA:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a5ff2b3c-9545-361a-946b-cffbadce93f7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.68.79.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bc:2d:41:24:39:42:a0:9d:65:84:cb:9e:7a:17:ee:cf:a8:00: 4e:f7:3c:4f:a1:73:f5:04:02:50:17:4c:1c:30:69:41:12:11: 13:89:65:a1:a0:f1:a2:f9:21:98:5f:24:54:49:2a:0a:9f:53: f5:3c:de:65:37:5e:e4:1e:1f:0f:ca:2a:c0:6d:4c:88:52:c8: 17:66:d5:fe:52:f8:72:4f:64:d4:c0:6e:a5:5c:d3:75:7c:68: 41:3b:86:9c:3c:01:57:02:d9:90:f0:ab:94:da:4b:34:0f:3b: fe:05:73:cc:ed:0f:4e:9c:a9:61:fa:8d:e5:09:5d:2d:b2:a2: 99:d9:0f:b1:b2:1f:e3:29:ac:84:38:ea:f1:dd:c3:81:d6:d6: 78:a9:59:b5:07:65:8c:a1:93:fc:3e:46:e8:c8:d2:48:1d:6f: 5d:f0:20:70:e8:31:0e:fc:c7:60:a2:29:5e:4d:13:d1:05:16: f1:4f:23:e4:ae:19:c5:72:a3:00:f6:25:3b:19:2e:dc:a0:55: f9:30:4d:db:12:81:5e:4a:5a:ac:f1:36:9e:1a:dd:77:5f:cf: 34:7d:5b:34:5d:60:12:cf:a8:f6:d4:c9:d6:03:92:70:c2:dc: 17:43:cc:6c:66:6f:85:dc:22:27:13:48:68:f5:e5:95:92:cf: a4:d1:51:a1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1n3+tpzGCLFE9q/AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDQwNTEzMDAzMVoXDTI2MDcwNDEzMDAzMVowLzEtMCsGA1UEAxMk ZGNjMzdhMTMtMTRmMi00NjIzLWEzZTAtYjlmZmU3NWNiY2IyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzOmZmj4WqKL3Om/SqfQ4LtSnWYTGJhfMk8WW HbwRQdswoQeI3wErBRJHMoZMzz04pLHxHUVqhPJGohHlaSXkSsOvAjLkcoXRtuK3 MUy9AQxIL/ftQf1OAbNw4pDtTuoyiN/DvjDZTpJ5nFpoRW9/LBmPRrPx3cwTIcrg jmjtBwDnKJPoSLQ5XVi+sJt5/E1O3ZB5WvwX/xgYZFHABb9pcKhAb+yKKihqx2Ie EzLQzinuXfz+2mf69iau+KHRkdXzLmW8mEGbGin16nUn7uJ3gmzmNWoQc4qqhR6O lNzCuV77KNG6uTK1oQP+/1EXXQLSlXogN0lyt/AnBw9tsUXGtwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAjqW+ioVYDdQW2bLAVv3YCvaspUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvYTVmZjJiM2MtOTU0NS0z NjFhLTk0NmItY2ZmYmFkY2U5M2Y3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArERPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALwtQSQ5QqCdZYTLnnoX7s+oAE73PE+hc/UEAlAXTBwwaUESEROJZaGg 8aL5IZhfJFRJKgqfU/U83mU3XuQeHw/KKsBtTIhSyBdm1f5S+HJPZNTAbqVc03V8 aEE7hpw8AVcC2ZDwq5TaSzQPO/4Fc8ztD06cqWH6jeUJXS2yopnZD7GyH+MprIQ4 6vHdw4HW1nipWbUHZYyhk/w+RujI0kgdb13wIHDoMQ78x2CiKV5NE9EFFvFPI+Su GcVyowD2JTsZLtygVfkwTdsSgV5KWqzxNp4a3XdfzzR9WzRdYBLPqPbUydYDknDC 3BdDzGxmb4XcIicTSGj15ZWSz6TRUaE= -----END CERTIFICATE-----Generated at Fri Apr 17 16:51:52 2026 by rpki-client