$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b7658ce1-405c-3cd3-9e57-f57a34667ce8.roa File: b7658ce1-405c-3cd3-9e57-f57a34667ce8.roa (raw, json) Hash identifier: qTJq/8lX1OYaz4W41Q2sxAHmIkdjLDhHg7Bh8VqnNac= Subject key identifier: 29:ED:B8:00:E7:03:DB:AD:F7:AC:0B:0C:92:B6:25:80:60:FE:24:F0 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584D55BCBC4F4F7EF9E86F9F6680 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b7658ce1-405c-3cd3-9e57-f57a34667ce8.roa Signing time: Mon 30 Mar 2026 01:00:23 +0000 ROA not before: Mon 30 Mar 2026 01:00:23 +0000 ROA not after: Sun 28 Jun 2026 01:00:23 +0000 asID: 14789 IP address blocks: 172.68.145.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:55:bc:bc:4f:4f:7e:f9:e8:6f:9f:66:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Mar 30 01:00:23 2026 GMT Not After : Jun 28 01:00:23 2026 GMT Subject: CN=7b20be13-db98-4bfd-8152-c433573f399f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:bf:b1:f8:c7:3a:75:99:b9:8c:36:0c:7b:a1: 8f:0f:91:5f:a6:88:e8:0e:0d:ae:8e:1c:27:f3:b5: d6:8f:fe:14:d3:1b:63:36:b2:5d:d9:8a:dc:f1:27: 2e:21:6d:e7:3d:3b:57:f8:d0:2a:23:1c:41:47:91: 27:38:cd:6a:f4:30:19:10:1c:b2:98:29:3c:3e:a7: 5e:53:7f:6c:9d:97:59:f6:e5:41:7f:b1:ef:92:41: 4a:f7:56:36:b8:24:78:45:9b:ba:cd:d1:52:8f:21: ad:35:e5:38:75:a8:43:b4:ba:b9:9f:b7:eb:1e:01: ba:93:2f:77:18:31:d5:84:c3:7d:1d:c9:c9:c3:bd: 3d:a5:16:2a:9f:5e:27:64:a5:79:fc:12:13:66:3e: 0a:1a:53:89:d0:6f:9c:6f:4c:ab:6f:4b:46:72:34: 91:03:70:4e:79:fb:6c:c2:d1:e6:a9:0e:75:39:3d: 59:18:2c:e1:4a:7c:4b:9b:da:9d:2a:3b:8d:7b:27: 16:7b:f9:4c:2f:1b:75:db:52:3f:ca:b0:9e:a6:cd: bb:01:f8:0a:aa:9e:6b:09:64:2a:53:05:2c:24:6e: b6:58:c1:76:28:c0:4e:97:4f:2e:0f:fa:9c:40:d1: f2:16:d5:28:01:dd:23:d4:b1:29:cd:6e:b5:19:c1: fb:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:ED:B8:00:E7:03:DB:AD:F7:AC:0B:0C:92:B6:25:80:60:FE:24:F0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b7658ce1-405c-3cd3-9e57-f57a34667ce8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.68.145.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:c3:8e:76:04:32:8f:ff:6e:6c:93:21:a5:13:24:6c:59:66: 9b:da:93:8b:2b:03:64:bd:3f:aa:0d:c8:f5:d2:4e:dd:72:5a: 31:cd:0a:0e:7c:5c:98:3e:13:2d:78:0d:d5:4c:9d:23:6a:b8: d3:ee:a5:63:80:9c:96:88:24:04:a2:50:1a:2a:a2:01:b2:7d: 0f:94:91:ae:21:11:31:1a:af:4a:67:ca:b5:72:d4:7b:35:50: 4a:1d:43:d1:37:03:f7:aa:3e:38:59:6d:2c:a7:a6:59:0a:44: f0:15:88:12:9a:fe:4d:4a:67:02:58:7c:f7:b3:16:65:61:4a: 0a:b1:ac:45:dc:59:d0:b3:b3:2b:07:e1:e4:f5:09:9e:a9:95: 12:16:e7:d6:b2:e8:e6:97:53:4e:bf:bb:fe:6d:a5:83:5c:4e: d0:da:7c:76:91:2d:80:5a:89:df:d7:fa:7a:cc:20:50:85:dc: e8:7f:55:b0:73:f0:3d:4c:4e:de:7c:22:9c:eb:92:dc:0a:d1: f8:22:af:47:94:0a:8d:f4:a8:69:d1:73:f6:e1:ae:e6:31:09: 7b:e8:fc:11:4d:81:ab:bb:32:6a:07:65:98:08:5a:b9:fd:05: 37:2f:80:e1:ad:0f:28:17:48:97:e7:08:9f:32:81:4f:e3:3b: b0:1a:57:3a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1VvLxPT3756G+fZoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDMzMDAxMDAyM1oXDTI2MDYyODAxMDAyM1owLzEtMCsGA1UEAxMk N2IyMGJlMTMtZGI5OC00YmZkLTgxNTItYzQzMzU3M2YzOTlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk7+x+Mc6dZm5jDYMe6GPD5FfpojoDg2ujhwn 87XWj/4U0xtjNrJd2Yrc8ScuIW3nPTtX+NAqIxxBR5EnOM1q9DAZEByymCk8Pqde U39snZdZ9uVBf7HvkkFK91Y2uCR4RZu6zdFSjyGtNeU4dahDtLq5n7frHgG6ky93 GDHVhMN9HcnJw709pRYqn14nZKV5/BITZj4KGlOJ0G+cb0yrb0tGcjSRA3BOefts wtHmqQ51OT1ZGCzhSnxLm9qdKjuNeycWe/lMLxt121I/yrCeps27AfgKqp5rCWQq UwUsJG62WMF2KMBOl08uD/qcQNHyFtUoAd0j1LEpzW61GcH7/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCntuADnA9ut96wLDJK2JYBg/iTwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvYjc2NThjZTEtNDA1Yy0z Y2QzLTllNTctZjU3YTM0NjY3Y2U4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArESRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAnDjnYEMo//bmyTIaUTJGxZZpvak4srA2S9P6oNyPXSTt1yWjHNCg58 XJg+Ey14DdVMnSNquNPupWOAnJaIJASiUBoqogGyfQ+Uka4hETEar0pnyrVy1Hs1 UEodQ9E3A/eqPjhZbSynplkKRPAViBKa/k1KZwJYfPezFmVhSgqxrEXcWdCzsysH 4eT1CZ6plRIW59ay6OaXU06/u/5tpYNcTtDafHaRLYBaid/X+nrMIFCF3Oh/VbBz 8D1MTt58IpzrktwK0fgir0eUCo30qGnRc/bhruYxCXvo/BFNgau7MmoHZZgIWrn9 BTcvgOGtDygXSJfnCJ8ygU/jO7AaVzo= -----END CERTIFICATE-----Generated at Fri Apr 17 22:48:59 2026 by rpki-client