$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/bf6212ce-7f1a-382a-9f01-f6d19134ea2c.roa File: bf6212ce-7f1a-382a-9f01-f6d19134ea2c.roa (raw, json) Hash identifier: /iCA0RgBOBGFfqi8QTbtDfctdEugVYoLGI5Qes0iAco= Subject key identifier: BA:B3:3E:3E:ED:9F:2D:8B:3E:64:B0:AE:CA:E9:B7:D5:B2:4F:23:FE Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584D6AAA9C3C89AF3AD48AD48A40 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/bf6212ce-7f1a-382a-9f01-f6d19134ea2c.roa Signing time: Mon 06 Apr 2026 13:00:30 +0000 ROA not before: Mon 06 Apr 2026 13:00:30 +0000 ROA not after: Sun 05 Jul 2026 13:00:30 +0000 asID: 13335 IP address blocks: 172.68.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:6a:aa:9c:3c:89:af:3a:d4:8a:d4:8a:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Apr 6 13:00:30 2026 GMT Not After : Jul 5 13:00:30 2026 GMT Subject: CN=17cff02a-f987-488a-8884-25a59a100880 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:cd:a6:5e:a9:75:a6:f5:53:2f:86:2f:98:08: 79:e4:2a:25:45:67:f2:60:fc:c8:dc:45:c0:ab:d6: 83:11:a7:a6:94:c7:52:e7:13:ef:a6:f8:db:34:47: e5:31:ec:23:fa:14:27:50:b6:2c:0e:41:32:79:bf: 72:2b:55:97:e0:96:30:30:da:23:d8:48:40:69:56: 67:bd:cb:7a:d0:43:bd:78:09:d5:36:a5:46:e8:08: 69:9e:5d:a7:bc:75:55:5b:4d:96:fc:56:59:06:ff: 87:3e:11:f9:00:a9:9b:54:43:f9:13:83:31:39:0b: 52:5f:00:30:ed:31:14:8b:01:91:93:c2:60:68:18: e2:65:0c:c0:b3:41:d9:ec:a5:a6:4e:01:34:ae:0c: 3a:9e:6e:85:a4:d6:a2:39:78:f5:d3:20:18:65:83: 7d:bc:32:9d:63:ea:a6:79:c1:45:d0:f0:72:7d:ff: b6:7e:c8:b3:d6:60:4a:6d:a0:b4:e2:14:a4:b7:ba: ca:6d:e7:f8:7b:41:0c:be:3e:5f:7c:7a:1c:c1:d3: 78:e2:27:05:d1:a4:07:e2:d1:0c:b5:bb:12:24:b0: f4:5e:62:69:de:95:16:80:c0:2f:c3:cf:9b:3b:24: f0:5c:fb:b9:75:c4:89:3f:4a:d6:b2:76:56:17:ab: 21:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:B3:3E:3E:ED:9F:2D:8B:3E:64:B0:AE:CA:E9:B7:D5:B2:4F:23:FE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/bf6212ce-7f1a-382a-9f01-f6d19134ea2c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.68.152.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:24:58:96:07:dc:01:a1:c3:57:83:a8:c3:b5:0b:9a:e2:58: 76:30:8f:1f:dc:58:96:f6:d1:b5:b5:8a:42:54:34:45:d2:e6: ae:2c:d2:14:f7:46:3c:0f:ff:e5:f3:cd:a4:78:01:6b:f2:dc: 86:ab:4c:f6:81:d2:60:6b:b4:15:5f:40:6c:75:68:25:6d:a4: 3e:ad:bf:17:55:53:7c:5a:9b:99:e5:b2:f9:4a:a3:45:a2:49: a9:f7:14:4c:af:c6:8d:e5:01:9a:4d:d4:3c:3e:ed:75:2c:9b: 15:02:0b:c7:14:69:2c:c0:5a:31:53:71:b7:3a:8b:51:85:c5: b9:f3:82:4a:18:2b:fb:41:87:27:bf:c3:68:e9:b5:36:09:da: a5:08:21:6e:69:62:be:f0:9c:40:86:14:23:fa:45:4b:3b:eb: f6:b4:07:87:60:d3:f3:cd:e5:c7:c1:75:21:1a:1a:7c:9b:3e: a9:3d:49:9e:ad:27:9d:8c:01:47:21:ed:58:af:0f:b2:11:fd: 05:79:a8:9d:95:85:42:d4:84:c1:d2:33:48:25:53:9e:38:73: 68:1c:2c:c5:97:93:8b:65:1c:04:87:d0:ce:10:08:f9:95:1a: fb:b3:12:2c:e3:0f:60:69:27:43:8f:31:12:69:c0:b5:87:30: ab:51:56:0c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1qqpw8ia861IrUikAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDQwNjEzMDAzMFoXDTI2MDcwNTEzMDAzMFowLzEtMCsGA1UEAxMk MTdjZmYwMmEtZjk4Ny00ODhhLTg4ODQtMjVhNTlhMTAwODgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzM2mXql1pvVTL4YvmAh55ColRWfyYPzI3EXA q9aDEaemlMdS5xPvpvjbNEflMewj+hQnULYsDkEyeb9yK1WX4JYwMNoj2EhAaVZn vct60EO9eAnVNqVG6Ahpnl2nvHVVW02W/FZZBv+HPhH5AKmbVEP5E4MxOQtSXwAw 7TEUiwGRk8JgaBjiZQzAs0HZ7KWmTgE0rgw6nm6FpNaiOXj10yAYZYN9vDKdY+qm ecFF0PByff+2fsiz1mBKbaC04hSkt7rKbef4e0EMvj5ffHocwdN44icF0aQH4tEM tbsSJLD0XmJp3pUWgMAvw8+bOyTwXPu5dcSJP0rWsnZWF6shnwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLqzPj7tny2LPmSwrsrpt9WyTyP+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvYmY2MjEyY2UtN2YxYS0z ODJhLTlmMDEtZjZkMTkxMzRlYTJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArESYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH8kWJYH3AGhw1eDqMO1C5riWHYwjx/cWJb20bW1ikJUNEXS5q4s0hT3 RjwP/+XzzaR4AWvy3IarTPaB0mBrtBVfQGx1aCVtpD6tvxdVU3xam5nlsvlKo0Wi San3FEyvxo3lAZpN1Dw+7XUsmxUCC8cUaSzAWjFTcbc6i1GFxbnzgkoYK/tBhye/ w2jptTYJ2qUIIW5pYr7wnECGFCP6RUs76/a0B4dg0/PN5cfBdSEaGnybPqk9SZ6t J52MAUch7VivD7IR/QV5qJ2VhULUhMHSM0glU544c2gcLMWXk4tlHASH0M4QCPmV GvuzEizjD2BpJ0OPMRJpwLWHMKtRVgw= -----END CERTIFICATE-----Generated at Fri Apr 17 19:14:08 2026 by rpki-client