$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ae8962d4-6998-363c-995d-41f1a8571cbc.roa File: ae8962d4-6998-363c-995d-41f1a8571cbc.roa (raw, json) Hash identifier: wz9BqLSY+kMYsRdYIsjaQ8zQpUSNW9hl97ucrkiDOMI= Subject key identifier: 82:1A:B6:8C:F2:47:DB:B2:D6:C9:41:61:5E:4D:70:9B:94:C3:C9:10 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584D6C0FC2F9DFC863BAB11E25E0 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ae8962d4-6998-363c-995d-41f1a8571cbc.roa Signing time: Tue 07 Apr 2026 01:00:23 +0000 ROA not before: Tue 07 Apr 2026 01:00:23 +0000 ROA not after: Mon 06 Jul 2026 01:00:23 +0000 asID: 13335 IP address blocks: 172.68.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:6c:0f:c2:f9:df:c8:63:ba:b1:1e:25:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Apr 7 01:00:23 2026 GMT Not After : Jul 6 01:00:23 2026 GMT Subject: CN=c320382e-4585-414c-992c-d0d011b82577 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:7b:fc:ec:5d:8d:fd:e2:ce:03:74:49:d0:82: cf:7c:25:f8:41:17:db:7e:f2:d9:06:9d:ed:c9:10: 56:e2:bb:60:f8:4c:60:52:d0:f1:af:85:b7:f1:fc: fa:52:fb:61:b9:ca:44:0c:24:61:b9:4e:4d:82:e4: ca:53:dd:6d:66:f1:33:64:53:4a:b1:21:28:55:6c: 83:8e:8e:62:a5:db:cb:1f:e0:45:c8:1d:57:47:e9: 6e:80:13:11:98:e8:a2:2d:53:33:8e:29:ae:5f:fe: de:5d:e9:c2:1b:21:c3:ce:98:ad:a1:b8:cd:65:ca: 7f:ef:8d:1f:b6:41:0d:1c:9a:a5:8f:79:3b:e9:a6: d0:28:e2:8b:49:26:1e:30:e8:a4:cb:87:68:1c:41: 94:0b:21:cf:80:d2:0a:ad:f9:76:68:52:47:58:ff: 39:92:38:ca:7f:84:e7:53:20:54:0e:98:42:1a:5c: 49:a2:52:21:2f:89:bf:0d:32:bc:60:7e:40:56:57: 5d:da:6d:94:53:34:1f:d6:ec:44:1e:59:4d:33:46: cb:99:c3:93:80:29:18:6a:46:19:92:a3:22:fb:03: 0a:e6:a0:eb:ef:91:1f:53:95:46:4f:c0:b0:e3:34: ce:56:a7:21:68:01:f7:ea:7f:63:8f:5e:e2:01:86: f7:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:1A:B6:8C:F2:47:DB:B2:D6:C9:41:61:5E:4D:70:9B:94:C3:C9:10 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ae8962d4-6998-363c-995d-41f1a8571cbc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.68.191.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:3f:54:e2:6b:f2:f3:87:02:6f:92:9b:02:48:d3:67:1a:fb: c9:9e:d2:3d:ac:73:44:1b:6c:d3:f3:60:45:70:1d:02:23:02: a6:c6:22:28:16:35:fb:85:b0:47:01:71:86:5c:a2:b6:b9:31: 67:1c:61:fd:a7:44:3f:d8:e8:27:f0:8e:41:0b:7f:dd:7e:c4: 91:99:a2:18:d7:66:4b:37:8a:3e:5b:23:13:89:5a:ad:99:91: 4b:ed:c4:98:31:f6:16:74:62:e2:b9:fc:c3:6d:ad:18:4a:53: ec:f9:e5:62:7b:58:17:4e:46:db:fb:9e:22:b7:47:76:29:c1: 93:77:80:e5:c0:2c:c8:6c:d3:e4:45:5c:69:41:2e:ae:61:9d: 5e:9b:d0:00:b0:b9:b9:d1:8e:33:d5:4f:0c:33:54:28:a6:8c: 7c:66:54:06:17:b2:91:e5:ed:1c:1d:45:3d:1e:8c:be:5c:eb: 86:98:f0:75:b5:3b:8b:99:66:6e:59:01:30:56:00:e4:ec:d0: 11:44:49:78:5b:6a:60:36:14:95:71:df:62:c2:36:fc:5c:dc: 6a:ce:e6:85:8b:9b:88:03:5f:8e:7a:8a:c5:6f:79:0a:88:dd: 41:d0:91:b9:23:76:a0:44:82:65:9a:54:de:0c:e8:cc:3a:bf: c8:46:6e:7c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1sD8L538hjurEeJeAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDQwNzAxMDAyM1oXDTI2MDcwNjAxMDAyM1owLzEtMCsGA1UEAxMk YzMyMDM4MmUtNDU4NS00MTRjLTk5MmMtZDBkMDExYjgyNTc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkHv87F2N/eLOA3RJ0ILPfCX4QRfbfvLZBp3t yRBW4rtg+ExgUtDxr4W38fz6UvthucpEDCRhuU5NguTKU91tZvEzZFNKsSEoVWyD jo5ipdvLH+BFyB1XR+lugBMRmOiiLVMzjimuX/7eXenCGyHDzpitobjNZcp/740f tkENHJqlj3k76abQKOKLSSYeMOiky4doHEGUCyHPgNIKrfl2aFJHWP85kjjKf4Tn UyBUDphCGlxJolIhL4m/DTK8YH5AVldd2m2UUzQf1uxEHllNM0bLmcOTgCkYakYZ kqMi+wMK5qDr75EfU5VGT8Cw4zTOVqchaAH36n9jj17iAYb38QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIIatozyR9uy1slBYV5NcJuUw8kQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvYWU4OTYyZDQtNjk5OC0z NjNjLTk5NWQtNDFmMWE4NTcxY2JjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArES/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHc/VOJr8vOHAm+SmwJI02ca+8me0j2sc0QbbNPzYEVwHQIjAqbGIigW NfuFsEcBcYZcora5MWccYf2nRD/Y6CfwjkELf91+xJGZohjXZks3ij5bIxOJWq2Z kUvtxJgx9hZ0YuK5/MNtrRhKU+z55WJ7WBdORtv7niK3R3YpwZN3gOXALMhs0+RF XGlBLq5hnV6b0ACwubnRjjPVTwwzVCimjHxmVAYXspHl7RwdRT0ejL5c64aY8HW1 O4uZZm5ZATBWAOTs0BFESXhbamA2FJVx32LCNvxc3GrO5oWLm4gDX456isVveQqI 3UHQkbkjdqBEgmWaVN4M6Mw6v8hGbnw= -----END CERTIFICATE-----Generated at Fri Apr 17 18:47:38 2026 by rpki-client