$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f5cc9135-e7d0-3032-9f18-6f8ea89813d5.roa File: f5cc9135-e7d0-3032-9f18-6f8ea89813d5.roa (raw, json) Hash identifier: 0Au8uDGWhNIJCzlhPN7eZOaGXom6AgerL0uXuYw1JGE= Subject key identifier: FC:43:85:F8:8B:A1:7E:1E:35:6A:6B:EE:EB:9F:67:D2:11:73:3D:8A Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584D6AAA9F44DE2C91BE73B20C00 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f5cc9135-e7d0-3032-9f18-6f8ea89813d5.roa Signing time: Mon 06 Apr 2026 13:00:30 +0000 ROA not before: Mon 06 Apr 2026 13:00:30 +0000 ROA not after: Sun 05 Jul 2026 13:00:30 +0000 asID: 13335 IP address blocks: 172.68.241.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:6a:aa:9f:44:de:2c:91:be:73:b2:0c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Apr 6 13:00:30 2026 GMT Not After : Jul 5 13:00:30 2026 GMT Subject: CN=1cbe61a8-8f87-4fe0-add0-460310d3b158 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:67:b2:57:c3:b8:b9:a9:4a:68:a2:40:a4:3b: 9e:34:38:50:7d:bd:35:a9:5c:ff:2e:14:1f:f1:bf: bb:05:e8:32:b7:78:47:a2:06:8a:3c:82:b4:f3:1c: d1:dc:03:d5:ef:32:16:2d:da:94:ce:e6:e6:6c:cb: c4:8f:53:39:da:e4:a2:97:06:5a:2d:52:23:c8:10: 6f:89:8e:38:fa:06:78:98:fc:ba:1b:72:ff:84:a4: 64:db:c6:0b:96:92:57:f1:fd:3f:f5:89:d3:69:b2: e2:8e:5b:7b:66:8f:7f:7f:07:51:30:68:60:4f:49: 64:e1:f1:69:41:5b:ca:7b:9a:3f:70:eb:db:74:6a: fe:91:fe:c2:cb:c3:34:f6:92:14:78:41:44:7a:9f: 50:bd:21:41:5b:7e:df:19:f7:d9:29:8e:b1:cb:0e: e5:11:d2:95:be:e1:e0:0c:67:26:3a:0d:c5:b3:fa: 5c:a3:ee:f4:cb:d0:d5:77:22:6c:be:c1:f8:81:fe: c6:d3:9d:1e:c0:86:d0:84:63:d8:65:27:20:09:c8: 6a:3e:b4:63:8a:ae:4f:87:06:db:5f:33:26:0b:5f: 26:43:2f:77:1c:78:15:37:22:81:a1:67:96:20:c4: 2d:b6:80:10:ad:d0:90:cb:6f:e6:db:46:83:31:56: 71:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:43:85:F8:8B:A1:7E:1E:35:6A:6B:EE:EB:9F:67:D2:11:73:3D:8A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f5cc9135-e7d0-3032-9f18-6f8ea89813d5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.68.241.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:4c:45:26:72:b0:bf:9e:98:0b:85:e2:fd:81:7c:4c:09:d7: 76:1a:06:7c:66:45:ea:31:2b:dc:78:c8:2a:56:6f:1c:d1:b1: 07:aa:09:e3:0f:01:b5:90:b6:90:54:3d:71:d9:d3:25:0b:20: cc:f3:90:09:6d:38:b4:60:ef:1b:92:5b:61:76:ab:6d:ef:a0: 11:b0:30:1a:96:ab:dc:bb:33:86:03:a4:26:70:09:bc:26:5d: 36:b1:c2:13:9b:01:ac:81:60:73:8e:f0:33:ec:40:bd:1d:51: 36:d5:14:34:52:0e:5c:0a:1c:d6:f3:5d:f6:07:94:f4:af:ea: 14:c3:9d:b6:be:8f:e0:c7:d2:2f:00:aa:f4:67:c4:c0:d9:26: a7:21:72:a3:7a:cf:02:bb:31:51:ea:95:0d:21:7b:6f:88:fc: a3:05:a7:58:2f:40:a6:2d:aa:5b:e9:99:b1:da:d1:03:7b:27: 7d:d2:12:30:82:20:48:aa:f8:71:e5:0d:06:44:e2:ab:cb:98: 4e:02:e1:90:ae:c9:57:04:43:92:36:85:b7:69:0a:eb:94:6c: 23:c3:59:a4:89:db:38:a1:d7:60:52:1e:ce:b0:89:d7:1b:72: 4c:98:ad:5b:13:3d:a8:3f:84:d8:24:6b:7d:fe:ef:79:9f:e7: ee:ff:4b:76 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1qqp9E3iyRvnOyDAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDQwNjEzMDAzMFoXDTI2MDcwNTEzMDAzMFowLzEtMCsGA1UEAxMk MWNiZTYxYTgtOGY4Ny00ZmUwLWFkZDAtNDYwMzEwZDNiMTU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr2eyV8O4ualKaKJApDueNDhQfb01qVz/LhQf 8b+7Begyt3hHogaKPIK08xzR3APV7zIWLdqUzubmbMvEj1M52uSilwZaLVIjyBBv iY44+gZ4mPy6G3L/hKRk28YLlpJX8f0/9YnTabLijlt7Zo9/fwdRMGhgT0lk4fFp QVvKe5o/cOvbdGr+kf7Cy8M09pIUeEFEep9QvSFBW37fGffZKY6xyw7lEdKVvuHg DGcmOg3Fs/pco+70y9DVdyJsvsH4gf7G050ewIbQhGPYZScgCchqPrRjiq5Phwbb XzMmC18mQy93HHgVNyKBoWeWIMQttoAQrdCQy2/m20aDMVZxFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPxDhfiLoX4eNWpr7uufZ9IRcz2KMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvZjVjYzkxMzUtZTdkMC0z MDMyLTlmMTgtNmY4ZWE4OTgxM2Q1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArETxMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFxMRSZysL+emAuF4v2BfEwJ13YaBnxmReoxK9x4yCpWbxzRsQeqCeMP AbWQtpBUPXHZ0yULIMzzkAltOLRg7xuSW2F2q23voBGwMBqWq9y7M4YDpCZwCbwm XTaxwhObAayBYHOO8DPsQL0dUTbVFDRSDlwKHNbzXfYHlPSv6hTDnba+j+DH0i8A qvRnxMDZJqchcqN6zwK7MVHqlQ0he2+I/KMFp1gvQKYtqlvpmbHa0QN7J33SEjCC IEiq+HHlDQZE4qvLmE4C4ZCuyVcEQ5I2hbdpCuuUbCPDWaSJ2zih12BSHs6widcb ckyYrVsTPag/hNgka33+73mf5+7/S3Y= -----END CERTIFICATE-----Generated at Fri Apr 17 15:20:42 2026 by rpki-client