$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/e1db1ef5-8875-37b0-a87d-5f3f1abd148d.roa File: e1db1ef5-8875-37b0-a87d-5f3f1abd148d.roa (raw, json) Hash identifier: QcAl1naCmZ1ENQGwtvAui4Vqp+zJCtOU5oqgnffTaSw= Subject key identifier: F7:0E:96:F2:70:F2:AF:56:40:ED:09:14:72:6C:A6:7C:1E:DF:AD:2E Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584D6C0FD26096CA05751A4D5600 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/e1db1ef5-8875-37b0-a87d-5f3f1abd148d.roa Signing time: Tue 07 Apr 2026 01:00:23 +0000 ROA not before: Tue 07 Apr 2026 01:00:23 +0000 ROA not after: Mon 06 Jul 2026 01:00:23 +0000 asID: 13335 IP address blocks: 172.68.188.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:6c:0f:d2:60:96:ca:05:75:1a:4d:56:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Apr 7 01:00:23 2026 GMT Not After : Jul 6 01:00:23 2026 GMT Subject: CN=a24ab55d-f705-4f11-9e19-dafd400780be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:9e:90:9e:cf:be:05:af:ba:83:b8:c7:30:d7: 2b:c2:4b:94:70:ff:d5:d8:68:5f:27:25:d7:ff:9b: 66:2c:ac:37:f7:19:63:73:01:15:b0:45:45:9d:79: 82:4c:a0:7c:ef:09:6f:f2:96:c5:37:ee:e0:0f:be: 8f:92:d4:61:3a:66:02:4f:bf:09:76:08:f3:71:80: af:6d:57:7c:ca:15:2e:0c:f0:49:85:71:7a:0d:df: 20:f5:e3:5f:28:47:b8:c4:b2:09:12:31:f4:0b:87: d8:d3:d0:80:39:66:33:57:33:fb:64:98:79:e7:07: ec:94:25:5a:db:f3:dc:29:79:d7:b8:4d:56:28:20: 2e:f8:9c:87:3b:5d:b5:f1:42:1f:87:ed:0b:62:63: 9b:ad:f7:2d:48:b2:03:6c:31:4e:1c:73:6f:c0:4b: 73:23:4c:3b:13:b2:9e:a9:51:d0:d9:e8:74:1d:71: c2:67:89:78:a7:2a:27:82:af:56:43:bb:10:cd:d4: 58:f7:26:33:d0:59:dd:1e:0e:aa:b0:a5:26:e7:07: 8a:db:1e:4d:00:c5:2c:5c:3b:66:8d:3e:74:f3:b7: ba:4b:25:55:ae:e4:b5:db:5c:92:c9:3e:5e:4c:ac: 84:ce:36:2c:aa:b8:5d:e8:d8:97:a2:af:8c:24:2b: 71:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:0E:96:F2:70:F2:AF:56:40:ED:09:14:72:6C:A6:7C:1E:DF:AD:2E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/e1db1ef5-8875-37b0-a87d-5f3f1abd148d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.68.188.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:e9:83:45:ae:1b:6f:f6:aa:7f:98:e5:a7:3a:07:41:2e:53: 70:8f:0c:85:03:58:1e:7d:4e:0b:13:27:5b:b9:0e:71:57:b1: 53:6f:38:8d:18:ff:31:b8:88:77:44:0d:d3:98:6f:58:b1:6e: 6d:ec:c1:db:fe:7a:73:06:f4:48:ec:35:dc:20:76:bb:e9:5c: 33:e8:d0:44:fd:c0:0c:27:53:d6:ad:ec:c2:4b:04:42:e2:5d: b5:7a:85:fe:ae:a0:ba:9d:dd:d4:50:ee:5e:c6:ed:38:5e:0e: b7:1e:16:84:e8:e1:0d:37:19:5f:51:32:2b:95:bd:7b:12:d3: 1d:c5:cb:53:a5:89:38:f1:03:da:4e:e5:46:39:09:ae:36:b1: f5:43:14:06:06:2e:b8:6a:8a:a0:2a:86:dc:b5:7b:5b:83:fc: cc:a8:2d:70:cb:a6:e4:37:c4:05:13:8e:46:96:8b:e0:fe:bf: f4:42:21:f2:e3:4c:5a:7d:0d:1c:1e:b4:85:1f:96:5f:c0:c3: 18:ec:01:87:4e:a9:14:72:ef:9c:f3:b0:6c:78:3b:03:90:7b: aa:61:d9:eb:0d:cc:57:9a:0a:dc:2b:5b:bb:35:39:55:1e:ac: aa:c4:a5:d5:7e:9b:a5:26:f6:4d:23:59:2e:e8:34:58:7d:cf: 00:a4:49:98 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1sD9JglsoFdRpNVgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDQwNzAxMDAyM1oXDTI2MDcwNjAxMDAyM1owLzEtMCsGA1UEAxMk YTI0YWI1NWQtZjcwNS00ZjExLTllMTktZGFmZDQwMDc4MGJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnp6Qns++Ba+6g7jHMNcrwkuUcP/V2GhfJyXX /5tmLKw39xljcwEVsEVFnXmCTKB87wlv8pbFN+7gD76PktRhOmYCT78JdgjzcYCv bVd8yhUuDPBJhXF6Dd8g9eNfKEe4xLIJEjH0C4fY09CAOWYzVzP7ZJh55wfslCVa 2/PcKXnXuE1WKCAu+JyHO1218UIfh+0LYmObrfctSLIDbDFOHHNvwEtzI0w7E7Ke qVHQ2eh0HXHCZ4l4pyongq9WQ7sQzdRY9yYz0FndHg6qsKUm5weK2x5NAMUsXDtm jT5087e6SyVVruS121ySyT5eTKyEzjYsqrhd6NiXoq+MJCtxRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPcOlvJw8q9WQO0JFHJspnwe360uMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvZTFkYjFlZjUtODg3NS0z N2IwLWE4N2QtNWYzZjFhYmQxNDhkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrES8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB/pg0WuG2/2qn+Y5ac6B0EuU3CPDIUDWB59TgsTJ1u5DnFXsVNvOI0Y /zG4iHdEDdOYb1ixbm3swdv+enMG9EjsNdwgdrvpXDPo0ET9wAwnU9at7MJLBELi XbV6hf6uoLqd3dRQ7l7G7TheDrceFoTo4Q03GV9RMiuVvXsS0x3Fy1OliTjxA9pO 5UY5Ca42sfVDFAYGLrhqiqAqhty1e1uD/MyoLXDLpuQ3xAUTjkaWi+D+v/RCIfLj TFp9DRwetIUfll/AwxjsAYdOqRRy75zzsGx4OwOQe6ph2esNzFeaCtwrW7s1OVUe rKrEpdV+m6Um9k0jWS7oNFh9zwCkSZg= -----END CERTIFICATE-----Generated at Fri Apr 17 14:37:08 2026 by rpki-client