$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/efd0da62-170f-3a0e-b80d-9db169fdb224.roa File: efd0da62-170f-3a0e-b80d-9db169fdb224.roa (raw, json) Hash identifier: 2KjU2cjXbjHrbIehCwGCW9PvUxT1CESqn4vADwOhEeE= Subject key identifier: 3F:96:C9:54:14:A6:7C:B0:E3:4D:DD:8B:3C:48:5E:EE:2D:00:4F:C3 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584D6C0FC3C87160246166726500 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/efd0da62-170f-3a0e-b80d-9db169fdb224.roa Signing time: Tue 07 Apr 2026 01:00:23 +0000 ROA not before: Tue 07 Apr 2026 01:00:23 +0000 ROA not after: Mon 06 Jul 2026 01:00:23 +0000 asID: 13335 IP address blocks: 172.68.237.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:6c:0f:c3:c8:71:60:24:61:66:72:65:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Apr 7 01:00:23 2026 GMT Not After : Jul 6 01:00:23 2026 GMT Subject: CN=5784dbb0-5408-4a6e-a9f3-96845c4d1bb9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:02:0d:55:7b:0d:cb:ed:53:8d:d7:fd:c6:a9: 21:eb:c8:ce:30:e4:1f:0f:c0:dc:67:b2:35:28:ee: fb:cb:70:e1:9a:a5:cc:cc:bb:71:c1:0b:d6:9e:fa: 87:4e:38:a9:4c:4e:8e:b8:c9:3a:9c:fa:10:cf:3a: d5:54:83:57:76:3b:bf:82:f7:ce:39:5a:ee:ba:0c: 2c:8b:17:c1:48:a6:9a:a9:b0:c2:33:c9:5b:7c:56: 4e:97:16:7c:7a:b2:08:f9:91:35:c7:2e:5b:16:48: 92:67:26:48:f6:0e:4e:89:84:e1:de:65:f1:4e:d0: ab:e9:8d:67:2f:f4:76:8f:a8:ba:2c:9e:5b:2c:52: f4:6d:c5:c1:63:d1:9d:4e:af:27:04:6a:07:ba:10: 10:41:ac:b6:8c:7c:94:50:6c:6e:4f:f1:82:98:82: 58:04:72:f8:92:0c:e8:46:69:68:b7:46:cc:cf:59: f5:c7:56:dc:ab:48:26:fc:15:56:d9:aa:98:bc:00: 55:d6:98:d2:78:0b:b9:45:d0:37:4c:64:2d:09:fd: 85:af:1a:61:48:b9:3e:39:57:6d:52:ad:7a:5d:78: d1:87:70:b5:35:e3:37:76:cc:2a:96:39:3d:e9:13: 22:88:1e:db:52:a6:52:c9:ca:0c:91:3e:79:bb:00: 70:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:96:C9:54:14:A6:7C:B0:E3:4D:DD:8B:3C:48:5E:EE:2D:00:4F:C3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/efd0da62-170f-3a0e-b80d-9db169fdb224.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.68.237.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:b9:02:47:e0:98:7f:44:3f:d9:f1:f0:ac:76:22:e7:ac:42: 46:7a:4e:97:f4:ab:7a:1b:13:2a:74:c2:92:8d:29:6a:3e:ed: 3d:d7:83:b8:00:2e:b0:c5:cd:d6:78:61:a6:ac:67:ba:a0:d9: ef:95:d1:dd:3c:4f:65:25:3c:15:6c:15:56:29:c2:10:d6:88: 50:a8:cc:a3:fb:8c:c3:ce:59:7b:31:70:b6:93:cf:03:41:65: 1b:73:f1:a5:45:29:70:0e:bc:19:49:8b:90:32:dc:63:00:62: 4e:d6:ec:e5:d2:bf:9e:84:68:63:34:c6:82:69:3e:69:cc:29: 4a:e1:c6:6c:fd:41:c0:f4:b8:dc:44:6a:61:8d:69:b8:db:66: 43:3c:b6:47:bf:6d:e6:2a:f7:b2:e7:45:71:1e:4c:06:76:e4: 8f:a6:e9:c3:50:61:93:ea:31:4b:60:5a:66:2b:e8:e5:0e:fd: 30:4d:34:8f:13:9d:72:60:fd:b1:be:cd:6e:11:cb:2c:b8:9a: 99:02:5f:0d:aa:2e:16:c4:49:60:d1:09:fd:9e:8a:d6:37:ee: 15:ea:c7:64:8a:4a:58:76:5c:4a:45:1a:35:66:b3:92:ca:81: f0:d8:fc:be:62:f6:90:e6:0e:5c:f0:65:a8:05:c7:17:53:6a: 53:73:70:d8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1sD8PIcWAkYWZyZQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDQwNzAxMDAyM1oXDTI2MDcwNjAxMDAyM1owLzEtMCsGA1UEAxMk NTc4NGRiYjAtNTQwOC00YTZlLWE5ZjMtOTY4NDVjNGQxYmI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAswINVXsNy+1Tjdf9xqkh68jOMOQfD8DcZ7I1 KO77y3DhmqXMzLtxwQvWnvqHTjipTE6OuMk6nPoQzzrVVINXdju/gvfOOVruugws ixfBSKaaqbDCM8lbfFZOlxZ8erII+ZE1xy5bFkiSZyZI9g5OiYTh3mXxTtCr6Y1n L/R2j6i6LJ5bLFL0bcXBY9GdTq8nBGoHuhAQQay2jHyUUGxuT/GCmIJYBHL4kgzo Rmlot0bMz1n1x1bcq0gm/BVW2aqYvABV1pjSeAu5RdA3TGQtCf2FrxphSLk+OVdt Uq16XXjRh3C1NeM3dswqljk96RMiiB7bUqZSycoMkT55uwBwOwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD+WyVQUpnyw403dizxIXu4tAE/DMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvZWZkMGRhNjItMTcwZi0z YTBlLWI4MGQtOWRiMTY5ZmRiMjI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArETtMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADK5AkfgmH9EP9nx8Kx2IuesQkZ6Tpf0q3obEyp0wpKNKWo+7T3Xg7gA LrDFzdZ4YaasZ7qg2e+V0d08T2UlPBVsFVYpwhDWiFCozKP7jMPOWXsxcLaTzwNB ZRtz8aVFKXAOvBlJi5Ay3GMAYk7W7OXSv56EaGM0xoJpPmnMKUrhxmz9QcD0uNxE amGNabjbZkM8tke/beYq97LnRXEeTAZ25I+m6cNQYZPqMUtgWmYr6OUO/TBNNI8T nXJg/bG+zW4Ryyy4mpkCXw2qLhbESWDRCf2eitY37hXqx2SKSlh2XEpFGjVms5LK gfDY/L5i9pDmDlzwZagFxxdTalNzcNg= -----END CERTIFICATE-----Generated at Fri Apr 17 12:17:54 2026 by rpki-client