$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a86e2875-6486-34db-98be-d50c611a23a2.roa File: a86e2875-6486-34db-98be-d50c611a23a2.roa (raw, json) Hash identifier: bC5a3aT6vKjkFH+UqFXgEKkz89GOMm0++G9e64B3qK0= Subject key identifier: 24:27:F6:79:85:6E:90:52:1A:3E:F7:7F:B7:A3:18:2B:56:9C:FF:54 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584D6AAAA4BEB6C0CF1597B75200 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a86e2875-6486-34db-98be-d50c611a23a2.roa Signing time: Mon 06 Apr 2026 13:00:30 +0000 ROA not before: Mon 06 Apr 2026 13:00:30 +0000 ROA not after: Sun 05 Jul 2026 13:00:30 +0000 asID: 13335 IP address blocks: 172.68.64.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:6a:aa:a4:be:b6:c0:cf:15:97:b7:52:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Apr 6 13:00:30 2026 GMT Not After : Jul 5 13:00:30 2026 GMT Subject: CN=771db207-fcda-408c-9a95-f89ad192a2fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:96:3b:74:85:80:40:eb:1d:79:9e:d4:35:fe: bf:cf:ea:21:15:37:f2:41:52:00:74:66:12:4c:f8: f3:a4:31:5d:ee:f1:3a:4f:d7:26:c0:fa:fb:87:3a: 60:56:c3:5a:16:1f:28:ff:3a:ad:3f:23:5c:85:e7: f0:90:17:cb:7a:56:98:b7:69:29:13:6e:7f:07:0b: d5:ff:70:20:cc:ef:3a:fa:2e:5e:9c:b3:ba:15:d8: 01:77:9a:aa:33:3b:ba:08:49:bc:aa:e2:d7:6a:41: f7:28:dd:e7:98:86:1a:d4:03:d0:fa:20:5a:47:e6: a7:65:53:7c:be:5d:ed:15:b2:38:5e:71:0e:c4:b5: 34:60:1c:73:dc:c1:dc:ba:2e:68:aa:ca:25:f1:f6: fc:c4:70:4c:45:09:86:62:df:eb:d6:fe:e6:a1:ce: 6e:1e:62:2d:72:58:f6:3d:f6:27:9c:1e:ba:4c:ff: 28:01:33:d2:f0:bc:cd:50:ee:f6:ca:6e:97:74:ca: 77:58:e0:b1:23:02:b4:6d:f0:8b:d6:0b:2e:25:e2: ae:b4:65:21:fb:17:7f:a3:cf:e7:76:b0:50:f3:c4: 87:32:12:f9:a1:a5:99:0f:2a:d8:59:6d:d5:f1:f7: c4:54:76:29:00:8a:18:5f:4a:25:cb:d8:b3:eb:05: 15:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:27:F6:79:85:6E:90:52:1A:3E:F7:7F:B7:A3:18:2B:56:9C:FF:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a86e2875-6486-34db-98be-d50c611a23a2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.68.64.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:e4:04:2b:74:67:23:c7:21:68:0f:e7:27:83:ba:88:ab:b2: c5:2e:38:10:37:3a:92:12:29:14:d5:a1:52:92:38:19:e9:cb: b1:c8:f3:80:c6:25:b6:9f:2a:61:5c:9f:fc:dd:4c:b5:03:60: 4e:be:44:af:77:0a:46:99:c9:76:9c:60:10:6e:9b:ff:c4:55: ca:51:c3:f3:72:28:64:ce:6c:bf:7e:72:4c:d8:72:d1:eb:37: 74:8f:bb:f4:65:43:2b:9a:3c:36:4d:49:95:67:63:d9:87:30: f0:9f:43:3d:db:34:ab:d7:cd:93:9e:70:bf:9d:76:25:0b:19: 5b:9a:9f:80:75:32:fa:02:b3:1d:36:02:ce:19:f8:cc:65:4c: 19:b5:c6:c4:55:cf:b5:98:52:df:dd:78:83:02:d4:b8:91:e0: ce:fb:e0:62:85:87:67:0b:f0:e3:81:02:01:b2:f9:99:0b:8d: b8:f4:07:f8:0f:87:1f:cf:a0:72:cb:d1:52:56:ed:3f:a3:68: 0e:ba:fb:06:ac:15:d1:1b:32:76:7d:7f:4b:3b:0c:67:2e:20: 4e:2c:42:d0:ce:36:72:66:c6:ce:b1:ee:18:25:b7:f7:90:67: da:1e:88:6d:79:73:40:be:cb:c6:6d:15:51:0f:98:e7:e2:0f: 08:45:a6:ce -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1qqqS+tsDPFZe3UgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDQwNjEzMDAzMFoXDTI2MDcwNTEzMDAzMFowLzEtMCsGA1UEAxMk NzcxZGIyMDctZmNkYS00MDhjLTlhOTUtZjg5YWQxOTJhMmZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmpY7dIWAQOsdeZ7UNf6/z+ohFTfyQVIAdGYS TPjzpDFd7vE6T9cmwPr7hzpgVsNaFh8o/zqtPyNchefwkBfLelaYt2kpE25/BwvV /3AgzO86+i5enLO6FdgBd5qqMzu6CEm8quLXakH3KN3nmIYa1APQ+iBaR+anZVN8 vl3tFbI4XnEOxLU0YBxz3MHcui5oqsol8fb8xHBMRQmGYt/r1v7moc5uHmItclj2 PfYnnB66TP8oATPS8LzNUO72ym6XdMp3WOCxIwK0bfCL1gsuJeKutGUh+xd/o8/n drBQ88SHMhL5oaWZDyrYWW3V8ffEVHYpAIoYX0oly9iz6wUVcQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCQn9nmFbpBSGj73f7ejGCtWnP9UMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvYTg2ZTI4NzUtNjQ4Ni0z NGRiLTk4YmUtZDUwYzYxMWEyM2EyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArERAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJHkBCt0ZyPHIWgP5yeDuoirssUuOBA3OpISKRTVoVKSOBnpy7HI84DG JbafKmFcn/zdTLUDYE6+RK93CkaZyXacYBBum//EVcpRw/NyKGTObL9+ckzYctHr N3SPu/RlQyuaPDZNSZVnY9mHMPCfQz3bNKvXzZOecL+ddiULGVuan4B1MvoCsx02 As4Z+MxlTBm1xsRVz7WYUt/deIMC1LiR4M774GKFh2cL8OOBAgGy+ZkLjbj0B/gP hx/PoHLL0VJW7T+jaA66+wasFdEbMnZ9f0s7DGcuIE4sQtDONnJmxs6x7hglt/eQ Z9oeiG15c0C+y8ZtFVEPmOfiDwhFps4= -----END CERTIFICATE-----Generated at Fri Apr 17 17:25:46 2026 by rpki-client