$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d5d4701b-ffd4-3e77-a16f-208f836800af.roa File: d5d4701b-ffd4-3e77-a16f-208f836800af.roa (raw, json) Hash identifier: wnyU4IwcrIDRHWMwnUyMvxlp9EG99ysh2SFHMhG4jdI= Subject key identifier: 6F:54:FE:DC:A3:95:46:47:CD:86:E2:2F:37:6D:9F:18:74:33:34:CF Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584D6AAA94ECABFE177B111026E0 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d5d4701b-ffd4-3e77-a16f-208f836800af.roa Signing time: Mon 06 Apr 2026 13:00:30 +0000 ROA not before: Mon 06 Apr 2026 13:00:30 +0000 ROA not after: Sun 05 Jul 2026 13:00:30 +0000 asID: 13335 IP address blocks: 172.64.68.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:6a:aa:94:ec:ab:fe:17:7b:11:10:26:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Apr 6 13:00:30 2026 GMT Not After : Jul 5 13:00:30 2026 GMT Subject: CN=96f208d4-292a-41b0-bbf4-d530ad81dc91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:7b:0d:1e:3f:b9:d3:d1:c3:29:d4:c2:f7:b6: f7:c9:7e:0c:1e:41:26:b4:08:ff:82:af:dd:59:b2: 59:19:93:ca:2f:46:57:97:6d:d2:c6:35:10:18:74: cf:42:f0:2a:5c:49:9f:05:e3:37:4c:da:72:2a:61: cc:b8:c6:ec:ad:a8:ca:67:22:25:9e:61:19:86:21: a0:61:bb:ab:48:97:8c:b2:c4:b4:b2:59:24:3a:9d: 3b:57:9b:29:7f:cf:cf:37:2b:ba:29:33:0a:31:50: 7b:2e:54:9f:2d:c2:f6:4f:ce:34:30:cf:fe:b1:c3: c1:9b:e8:64:27:57:17:18:b7:64:f4:eb:33:38:28: 8e:1b:94:c3:1a:83:76:84:00:cf:3b:7a:8d:d7:6e: 46:d2:40:bf:c6:07:ae:a7:87:37:ba:eb:ec:48:18: ab:6b:05:af:30:b1:81:d1:10:34:a3:f4:70:30:dd: 15:b5:04:1d:a1:c4:09:12:69:e7:f5:83:1a:bb:ca: 48:c5:fc:6a:b0:06:24:55:68:b7:19:56:7e:47:6e: 9c:cb:fe:4b:4b:55:61:be:e1:85:c4:ce:90:da:0f: 31:bb:d9:97:9e:18:1b:cf:1c:4b:8e:22:b2:3a:b7: 3b:73:01:49:a9:fe:e7:57:9f:cf:3f:b2:33:a2:ec: 64:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:54:FE:DC:A3:95:46:47:CD:86:E2:2F:37:6D:9F:18:74:33:34:CF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d5d4701b-ffd4-3e77-a16f-208f836800af.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.64.68.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:10:2d:88:49:e6:53:21:8f:41:84:64:b2:78:26:87:eb:35: 10:2a:37:b2:cc:b5:b2:85:a2:7d:a6:56:29:a7:86:ae:2f:c6: 89:5c:65:e9:97:48:85:9b:bf:81:0f:5f:9f:ea:22:58:89:15: 4f:58:8a:72:3d:97:87:c1:ef:63:07:1e:53:9e:ab:3c:92:d0: 91:02:c2:8c:55:29:e5:28:c3:cd:de:07:3e:a7:d0:bb:bf:f1: 7c:c1:20:1e:aa:dd:c7:d0:9f:8e:02:e9:37:85:23:11:6d:bc: d1:3d:1a:cb:f5:7d:ca:f6:20:9e:10:b1:b5:d4:f2:eb:70:94: de:59:ee:5c:7e:95:94:18:ba:f0:a3:89:27:e5:9c:98:6d:5d: b6:8e:56:7d:93:bd:47:38:44:79:3d:31:7b:fb:f6:5a:69:60: af:30:a7:5a:be:07:87:06:2c:8c:15:9e:d6:96:c6:96:85:12: e0:f2:39:eb:0d:ba:73:bb:6f:78:8d:0f:b7:a2:19:70:c5:19: d5:a6:5d:fc:37:33:80:ca:ca:6e:54:90:c7:7b:88:e3:72:3a: 4b:9c:fd:d0:d5:49:d6:23:8e:48:fe:a2:54:b2:4e:41:e1:fd: 3d:15:2f:ff:d4:81:61:84:10:15:a9:d0:82:71:96:6d:21:17: cb:af:aa:70 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1qqpTsq/4XexEQJuAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDQwNjEzMDAzMFoXDTI2MDcwNTEzMDAzMFowLzEtMCsGA1UEAxMk OTZmMjA4ZDQtMjkyYS00MWIwLWJiZjQtZDUzMGFkODFkYzkxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv3sNHj+509HDKdTC97b3yX4MHkEmtAj/gq/d WbJZGZPKL0ZXl23SxjUQGHTPQvAqXEmfBeM3TNpyKmHMuMbsrajKZyIlnmEZhiGg YburSJeMssS0slkkOp07V5spf8/PNyu6KTMKMVB7LlSfLcL2T840MM/+scPBm+hk J1cXGLdk9OszOCiOG5TDGoN2hADPO3qN125G0kC/xgeup4c3uuvsSBirawWvMLGB 0RA0o/RwMN0VtQQdocQJEmnn9YMau8pIxfxqsAYkVWi3GVZ+R26cy/5LS1VhvuGF xM6Q2g8xu9mXnhgbzxxLjiKyOrc7cwFJqf7nV5/PP7IzouxkcwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG9U/tyjlUZHzYbiLzdtnxh0MzTPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvZDVkNDcwMWItZmZkNC0z ZTc3LWExNmYtMjA4ZjgzNjgwMGFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEBEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFIQLYhJ5lMhj0GEZLJ4JofrNRAqN7LMtbKFon2mVimnhq4vxolcZemX SIWbv4EPX5/qIliJFU9YinI9l4fB72MHHlOeqzyS0JECwoxVKeUow83eBz6n0Lu/ 8XzBIB6q3cfQn44C6TeFIxFtvNE9Gsv1fcr2IJ4QsbXU8utwlN5Z7lx+lZQYuvCj iSflnJhtXbaOVn2TvUc4RHk9MXv79lppYK8wp1q+B4cGLIwVntaWxpaFEuDyOesN unO7b3iND7eiGXDFGdWmXfw3M4DKym5UkMd7iONyOkuc/dDVSdYjjkj+olSyTkHh /T0VL//UgWGEEBWp0IJxlm0hF8uvqnA= -----END CERTIFICATE-----Generated at Fri Apr 17 14:44:58 2026 by rpki-client