$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c2e14a63-0616-3d10-939b-1a56a7ff3282.roa File: c2e14a63-0616-3d10-939b-1a56a7ff3282.roa (raw, json) Hash identifier: 5PJ80aUPaX6cP8hqgP62IbLinMwXhBBKg6uNnXgbec8= Subject key identifier: 09:47:E3:30:AB:D2:31:7A:E0:C0:86:D7:D0:8F:3C:3E:80:6C:88:A2 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584D6AAA9F397E1BB72731D12000 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c2e14a63-0616-3d10-939b-1a56a7ff3282.roa Signing time: Mon 06 Apr 2026 13:00:30 +0000 ROA not before: Mon 06 Apr 2026 13:00:30 +0000 ROA not after: Sun 05 Jul 2026 13:00:30 +0000 asID: 13335 IP address blocks: 172.68.240.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:6a:aa:9f:39:7e:1b:b7:27:31:d1:20:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Apr 6 13:00:30 2026 GMT Not After : Jul 5 13:00:30 2026 GMT Subject: CN=9ff2ed1b-4f6b-491d-9ad8-113187eee328 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:d8:67:4f:87:12:6e:e8:d6:ff:b5:70:ef:85: 28:1f:2b:78:6b:52:d4:d2:b9:0d:de:6c:d5:c5:b8: ae:12:f3:f8:98:0c:eb:d2:14:7c:a5:c7:91:0e:03: ad:0f:2a:52:04:b0:93:bd:e2:27:d4:2c:90:14:7e: 17:4a:05:f7:51:9d:34:91:7e:01:1e:c9:f6:16:c5: 4e:67:cb:b7:42:dc:86:b2:a4:ae:c0:12:7a:35:71: a5:f2:62:c5:8f:0d:ec:d4:7c:b1:52:2b:cf:4c:6e: 6e:71:93:55:dc:90:f8:35:74:9a:91:21:42:ef:2b: 82:94:22:c0:fa:8a:7a:5f:a2:e9:36:06:65:8e:e3: 1f:b6:be:a9:a5:88:9f:a9:c7:01:8a:86:fb:d2:0a: 3b:d1:0e:b7:73:ea:1a:12:64:d8:eb:cf:31:61:fc: 3b:05:cd:5b:26:90:84:93:8c:8f:8a:8c:e6:8d:5d: ba:01:4a:77:0d:70:de:13:ad:4c:f0:30:7d:85:7c: 8d:71:df:b8:52:6d:2d:7b:7a:0a:d4:95:e8:ad:61: ad:43:5e:84:10:44:09:59:8c:05:5d:74:07:96:c2: 78:95:21:9d:46:0a:dc:20:49:b3:23:67:40:ec:b9: 99:04:e7:7a:fe:e9:81:e3:df:e5:f3:ee:3e:7b:bd: c1:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:47:E3:30:AB:D2:31:7A:E0:C0:86:D7:D0:8F:3C:3E:80:6C:88:A2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c2e14a63-0616-3d10-939b-1a56a7ff3282.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.68.240.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:9c:96:a7:a3:b1:a5:5c:2e:31:49:e4:c2:b3:9d:19:ae:e5: db:2a:59:00:57:92:42:1b:17:20:92:31:52:a4:ab:d7:02:89: b3:73:29:07:58:1c:f5:8f:3a:41:ed:1f:88:b4:e0:5a:e3:33: e6:6f:96:6b:9f:49:71:95:9a:28:6a:1b:ef:1f:68:11:1e:ff: 2e:43:c3:b5:ba:9a:70:bc:46:ec:9f:10:d3:92:ad:bc:b8:72: c8:21:4c:c0:54:3f:bc:64:57:68:d6:bd:ac:bf:74:d1:2c:98: 76:e8:c8:b5:84:9e:5a:07:29:02:bb:10:0b:8e:25:86:01:86: fc:03:25:60:aa:d5:9d:48:fe:8f:46:35:4b:4b:43:55:a1:20: dd:95:cb:0b:04:93:b2:bd:47:31:7e:9e:52:91:79:b5:5f:b5: 56:c8:4e:5b:b7:d7:6f:05:0e:08:4c:a1:71:c8:e3:69:7d:eb: ef:cb:e5:7b:e9:7c:25:ea:43:f0:d9:16:52:9b:29:ba:ae:08: 2d:b8:3c:ff:86:ea:b7:3c:f9:6b:24:03:eb:71:d8:e9:85:e9: 1e:ef:94:81:49:80:6f:6c:35:54:af:39:02:be:db:ae:60:07: 6b:02:52:b2:15:ea:75:b9:58:ea:99:91:e3:e6:c1:1c:c4:72: 08:f6:21:4d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1qqp85fhu3JzHRIAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDQwNjEzMDAzMFoXDTI2MDcwNTEzMDAzMFowLzEtMCsGA1UEAxMk OWZmMmVkMWItNGY2Yi00OTFkLTlhZDgtMTEzMTg3ZWVlMzI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4NhnT4cSbujW/7Vw74UoHyt4a1LU0rkN3mzV xbiuEvP4mAzr0hR8pceRDgOtDypSBLCTveIn1CyQFH4XSgX3UZ00kX4BHsn2FsVO Z8u3QtyGsqSuwBJ6NXGl8mLFjw3s1HyxUivPTG5ucZNV3JD4NXSakSFC7yuClCLA +op6X6LpNgZljuMftr6ppYifqccBiob70go70Q63c+oaEmTY688xYfw7Bc1bJpCE k4yPiozmjV26AUp3DXDeE61M8DB9hXyNcd+4Um0te3oK1JXorWGtQ16EEEQJWYwF XXQHlsJ4lSGdRgrcIEmzI2dA7LmZBOd6/umB49/l8+4+e73BwwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAlH4zCr0jF64MCG19CPPD6AbIiiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvYzJlMTRhNjMtMDYxNi0z ZDEwLTkzOWItMWE1NmE3ZmYzMjgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArETwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE+clqejsaVcLjFJ5MKznRmu5dsqWQBXkkIbFyCSMVKkq9cCibNzKQdY HPWPOkHtH4i04FrjM+ZvlmufSXGVmihqG+8faBEe/y5Dw7W6mnC8RuyfENOSrby4 csghTMBUP7xkV2jWvay/dNEsmHboyLWEnloHKQK7EAuOJYYBhvwDJWCq1Z1I/o9G NUtLQ1WhIN2VywsEk7K9RzF+nlKRebVftVbITlu3128FDghMoXHI42l96+/L5Xvp fCXqQ/DZFlKbKbquCC24PP+G6rc8+WskA+tx2OmF6R7vlIFJgG9sNVSvOQK+265g B2sCUrIV6nW5WOqZkePmwRzEcgj2IU0= -----END CERTIFICATE-----Generated at Fri Apr 17 17:22:25 2026 by rpki-client