$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b936e453-d0e2-3bfb-b80d-6fef940a9001.roa File: b936e453-d0e2-3bfb-b80d-6fef940a9001.roa (raw, json) Hash identifier: kd0mLEveJK3XxCx4KceT6IPTXCf5zBb84NpKv32PLy0= Subject key identifier: FC:E8:96:42:5F:FE:29:29:83:D3:95:18:60:26:77:A1:D1:43:96:B9 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584D7A0516D2B8D007C3EEB11780 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b936e453-d0e2-3bfb-b80d-6fef940a9001.roa Signing time: Sun 12 Apr 2026 01:00:24 +0000 ROA not before: Sun 12 Apr 2026 01:00:24 +0000 ROA not after: Sat 11 Jul 2026 01:00:24 +0000 asID: 14789 IP address blocks: 172.68.169.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:7a:05:16:d2:b8:d0:07:c3:ee:b1:17:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Apr 12 01:00:24 2026 GMT Not After : Jul 11 01:00:24 2026 GMT Subject: CN=a2e55921-a9af-4280-9dcb-3a232ac11f36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:a3:98:e0:9f:15:62:f4:df:4b:da:6e:c0:29: 97:b3:1e:e2:1d:ed:6a:0f:bf:28:16:ef:4e:9b:e0: 03:a2:9a:4a:66:82:a3:00:42:3e:48:5f:15:12:6d: 24:a2:43:24:f7:65:87:b7:a3:29:6b:9f:16:8d:9c: 42:54:0f:a7:4a:3d:e1:b6:57:0b:55:f9:2f:43:63: b2:35:2d:78:79:95:e4:b0:76:9a:2f:31:e0:12:6f: 53:69:43:a0:fc:e5:9b:b9:3f:e6:aa:8c:ab:ce:e6: 18:e2:b6:09:09:9f:f7:30:88:cf:e0:d6:4e:fa:25: 35:e4:ad:c8:35:da:c8:80:3d:18:0d:11:0a:dc:af: 46:3b:93:4d:82:c1:1b:ae:09:d7:41:13:93:b0:1c: 5f:33:55:ed:00:d9:eb:73:42:fc:28:20:80:ed:2b: 11:0b:60:29:62:89:b8:27:3f:88:e3:cc:d0:d5:5d: 80:4c:3a:03:a0:18:0c:b6:6b:3d:e6:c8:ef:24:24: d9:16:1c:32:0f:05:c5:62:30:c5:7a:ae:31:2b:de: 58:30:76:ed:b5:0e:11:8a:bd:3b:68:c0:bb:d3:e5: 74:81:20:ab:ea:7a:17:2c:24:c1:98:ce:d4:93:7e: da:5a:bf:0a:dc:82:b0:95:81:2c:a1:2c:74:5c:6d: dc:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:E8:96:42:5F:FE:29:29:83:D3:95:18:60:26:77:A1:D1:43:96:B9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b936e453-d0e2-3bfb-b80d-6fef940a9001.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.68.169.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:1f:dd:94:ad:94:fd:70:04:38:7b:ee:62:53:69:74:68:8b: 2d:f8:e5:3f:88:29:c1:38:6b:66:c6:a7:69:2b:e9:89:16:5f: 0a:69:37:b5:d2:52:29:5c:c7:4d:4c:82:1d:17:90:24:ef:fd: 3b:39:61:e5:eb:f5:f0:1c:9c:dd:1d:d4:52:b4:de:bf:d4:d2: 32:33:b4:3b:6d:b4:91:0a:6f:43:bd:60:43:3b:e0:10:58:40: b4:62:36:ca:36:42:63:08:bf:60:1b:54:8b:14:5b:01:db:76: a5:c2:82:b8:75:c2:e1:48:70:c9:e7:93:c5:15:a4:dc:c4:48: b3:97:25:64:8a:30:15:f6:94:71:04:ff:97:11:b6:c5:a8:b5: 33:8c:f7:cf:c5:56:26:d6:68:76:13:9c:33:ff:07:3e:aa:ef: f8:97:9f:cf:49:28:d7:55:cb:29:67:5d:d9:e9:67:70:2d:f5: 5a:e8:8c:4a:8d:00:71:92:a7:51:f3:68:e3:29:68:19:d2:5c: 30:f0:23:20:04:51:26:7b:c7:23:e2:ea:6e:dc:91:d4:31:ae: 06:cc:d1:a8:e7:f3:df:e3:37:ce:5c:72:a6:86:39:0f:3c:61: 4a:20:95:d3:52:73:0b:57:c9:77:00:3c:6f:9e:8e:91:02:e5: 17:44:04:91 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE16BRbSuNAHw+6xF4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDQxMjAxMDAyNFoXDTI2MDcxMTAxMDAyNFowLzEtMCsGA1UEAxMk YTJlNTU5MjEtYTlhZi00MjgwLTlkY2ItM2EyMzJhYzExZjM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgaOY4J8VYvTfS9puwCmXsx7iHe1qD78oFu9O m+ADoppKZoKjAEI+SF8VEm0kokMk92WHt6Mpa58WjZxCVA+nSj3htlcLVfkvQ2Oy NS14eZXksHaaLzHgEm9TaUOg/OWbuT/mqoyrzuYY4rYJCZ/3MIjP4NZO+iU15K3I NdrIgD0YDREK3K9GO5NNgsEbrgnXQROTsBxfM1XtANnrc0L8KCCA7SsRC2ApYom4 Jz+I48zQ1V2ATDoDoBgMtms95sjvJCTZFhwyDwXFYjDFeq4xK95YMHbttQ4Rir07 aMC70+V0gSCr6noXLCTBmM7Uk37aWr8K3IKwlYEsoSx0XG3cWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPzolkJf/ikpg9OVGGAmd6HRQ5a5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvYjkzNmU0NTMtZDBlMi0z YmZiLWI4MGQtNmZlZjk0MGE5MDAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArESpMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJYf3ZStlP1wBDh77mJTaXRoiy345T+IKcE4a2bGp2kr6YkWXwppN7XS Uilcx01Mgh0XkCTv/Ts5YeXr9fAcnN0d1FK03r/U0jIztDtttJEKb0O9YEM74BBY QLRiNso2QmMIv2AbVIsUWwHbdqXCgrh1wuFIcMnnk8UVpNzESLOXJWSKMBX2lHEE /5cRtsWotTOM98/FVibWaHYTnDP/Bz6q7/iXn89JKNdVyylnXdnpZ3At9VrojEqN AHGSp1HzaOMpaBnSXDDwIyAEUSZ7xyPi6m7ckdQxrgbM0ajn89/jN85ccqaGOQ88 YUogldNScwtXyXcAPG+ejpEC5RdEBJE= -----END CERTIFICATE-----Generated at Fri Apr 17 15:02:17 2026 by rpki-client