$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c3e3b8c0-be07-3843-b18d-6586f47d2704.roa File: c3e3b8c0-be07-3843-b18d-6586f47d2704.roa (raw, json) Hash identifier: PLktDTkpULmWLw6eqMkNbxDGxtc08ZQT5rSfAbKxD1Y= Subject key identifier: BC:07:DF:2C:DF:CE:C7:0A:67:27:8A:56:2D:71:79:BB:6D:94:EA:9E Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584D6C0FC34EFBBEEB216323AB60 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c3e3b8c0-be07-3843-b18d-6586f47d2704.roa Signing time: Tue 07 Apr 2026 01:00:23 +0000 ROA not before: Tue 07 Apr 2026 01:00:23 +0000 ROA not after: Mon 06 Jul 2026 01:00:23 +0000 asID: 13335 IP address blocks: 172.68.201.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:6c:0f:c3:4e:fb:be:eb:21:63:23:ab:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Apr 7 01:00:23 2026 GMT Not After : Jul 6 01:00:23 2026 GMT Subject: CN=2c51988d-1700-4a76-948b-9a297e4afb98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:24:0f:9b:32:ea:27:59:93:4f:6c:a8:cf:9e: 2f:c2:35:2f:4c:12:c5:d9:35:f0:5b:0f:ee:9f:6a: 9a:72:5a:6e:fe:49:6a:48:cb:fa:81:4d:84:2f:e2: 96:05:5b:52:d0:ec:97:8a:a0:e9:07:41:49:40:e3: 5e:aa:5b:39:c3:fc:8e:0c:0e:5f:13:3e:c3:97:42: d0:57:b1:f7:2c:6e:12:27:92:34:21:17:0e:66:24: a6:00:13:a2:2d:1f:60:51:20:b0:79:5b:4b:f8:97: 8c:31:3d:31:3c:90:37:6a:92:d3:dd:13:ac:f8:ef: 95:76:f7:13:6c:53:05:ac:09:23:69:65:4c:09:8a: 57:4f:8a:98:9b:4a:47:52:cb:76:f2:67:73:04:16: b4:12:57:3c:5c:75:5d:d9:c9:10:de:0d:c5:57:ac: 7d:97:d9:24:e0:1f:c3:e3:fc:a2:b3:18:d9:8f:f0: e2:93:4f:9d:62:1b:91:89:c5:2f:8a:2b:dd:af:8b: a5:94:65:52:dc:59:56:4a:39:ee:2b:98:f0:4b:15: 25:5b:cd:fd:c3:b3:16:46:30:94:6d:8c:00:0a:a2: f9:8a:ec:15:88:51:9e:a0:34:f3:6c:49:f9:89:5f: 57:83:b7:01:34:45:2f:6a:a2:a2:bb:b4:13:24:e6: ff:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:07:DF:2C:DF:CE:C7:0A:67:27:8A:56:2D:71:79:BB:6D:94:EA:9E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c3e3b8c0-be07-3843-b18d-6586f47d2704.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.68.201.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption aa:66:ea:fb:0a:fc:b2:b2:c9:21:e5:f4:e1:b6:8a:7e:3b:0d: 57:02:a2:87:75:f7:a1:53:85:70:9e:94:7b:b5:3c:68:b7:de: 36:1d:23:85:ef:5d:e6:4a:93:23:3c:b5:d7:f4:7c:84:3f:8f: 4e:72:e5:ea:65:03:fb:23:f3:3e:99:51:1b:7e:c1:1a:74:dd: a3:f3:57:d3:36:e8:c0:6e:0b:8e:aa:00:d4:a3:ab:36:4d:98: 44:f6:da:1c:09:fd:e3:73:bd:a3:9d:41:46:ed:ce:d4:a4:1b: eb:d4:5d:e5:a1:6d:1c:f1:64:79:ad:d9:c7:d8:46:0a:30:8a: 32:2a:af:4f:93:a0:f1:a0:33:d3:c5:e4:89:46:fa:e8:a4:e4: 20:e7:f5:d1:89:be:2a:fd:36:1a:0a:83:69:03:47:91:1d:3f: bc:df:17:cc:a1:8a:d5:e0:f5:a1:20:8c:f6:d4:a6:9d:dc:e2: 02:eb:79:ee:50:9a:0e:38:72:e8:3d:bd:0d:c2:2b:44:6f:34: 10:e8:db:a9:bb:83:8f:26:ab:e7:b0:d3:b6:f1:44:f2:e0:cb: 67:1b:55:5c:d4:97:a0:f9:4f:bd:94:69:93:9f:bc:23:ba:b2: 5d:8d:4d:29:cc:b0:dd:96:05:cc:07:18:73:e8:79:f1:37:d1: 33:3b:a2:ed -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1sD8NO+77rIWMjq2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDQwNzAxMDAyM1oXDTI2MDcwNjAxMDAyM1owLzEtMCsGA1UEAxMk MmM1MTk4OGQtMTcwMC00YTc2LTk0OGItOWEyOTdlNGFmYjk4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoCQPmzLqJ1mTT2yoz54vwjUvTBLF2TXwWw/u n2qaclpu/klqSMv6gU2EL+KWBVtS0OyXiqDpB0FJQONeqls5w/yODA5fEz7Dl0LQ V7H3LG4SJ5I0IRcOZiSmABOiLR9gUSCweVtL+JeMMT0xPJA3apLT3ROs+O+VdvcT bFMFrAkjaWVMCYpXT4qYm0pHUst28mdzBBa0Elc8XHVd2ckQ3g3FV6x9l9kk4B/D 4/yisxjZj/Dik0+dYhuRicUviivdr4ullGVS3FlWSjnuK5jwSxUlW839w7MWRjCU bYwACqL5iuwViFGeoDTzbEn5iV9Xg7cBNEUvaqKiu7QTJOb/1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLwH3yzfzscKZyeKVi1xebttlOqeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvYzNlM2I4YzAtYmUwNy0z ODQzLWIxOGQtNjU4NmY0N2QyNzA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArETJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKpm6vsK/LKyySHl9OG2in47DVcCood196FThXCelHu1PGi33jYdI4Xv XeZKkyM8tdf0fIQ/j05y5eplA/sj8z6ZURt+wRp03aPzV9M26MBuC46qANSjqzZN mET22hwJ/eNzvaOdQUbtztSkG+vUXeWhbRzxZHmt2cfYRgowijIqr0+ToPGgM9PF 5IlG+uik5CDn9dGJvir9NhoKg2kDR5EdP7zfF8yhitXg9aEgjPbUpp3c4gLree5Q mg44cug9vQ3CK0RvNBDo26m7g48mq+ew07bxRPLgy2cbVVzUl6D5T72UaZOfvCO6 sl2NTSnMsN2WBcwHGHPoefE30TM7ou0= -----END CERTIFICATE-----Generated at Fri Apr 17 22:21:57 2026 by rpki-client