$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f9ec32f1-295b-385b-bd51-b6d09948d218.roa File: f9ec32f1-295b-385b-bd51-b6d09948d218.roa (raw, json) Hash identifier: 5Tw8DJF7at7uPRqcsEqKs44Xovepfc3ncasnHKKHmUY= Subject key identifier: AC:92:38:AD:3B:30:8F:25:98:C6:52:DF:A1:64:39:43:42:04:32:C1 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584CEE8CB90098D3D8461029E880 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f9ec32f1-295b-385b-bd51-b6d09948d218.roa Signing time: Sat 21 Feb 2026 02:00:32 +0000 ROA not before: Sat 21 Feb 2026 02:00:32 +0000 ROA not after: Fri 22 May 2026 01:00:32 +0000 asID: 14789 IP address blocks: 172.68.218.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ee:8c:b9:00:98:d3:d8:46:10:29:e8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Feb 21 02:00:32 2026 GMT Not After : May 22 01:00:32 2026 GMT Subject: CN=620976cf-8a31-4e16-b08d-7e1f37f883e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:33:dc:1c:38:64:44:d4:a2:6c:6a:3d:47:57: 82:eb:29:62:7f:e9:b4:62:f4:c8:fa:77:a0:d1:a0: f8:5e:50:41:19:50:24:ae:c7:c4:0b:b2:32:40:b9: b2:de:32:6e:d2:24:89:f7:8e:1f:7f:b4:d5:56:15: 94:3e:2c:b6:67:41:10:ce:d3:7f:9c:28:1c:34:d0: 6b:f8:0c:e8:78:1d:23:bf:75:40:8c:5b:a2:c9:1e: e8:33:3d:f6:fc:76:cc:5e:90:23:1b:b2:ee:67:e8: 70:bb:c8:9a:0c:b5:18:8f:7f:fd:d2:66:74:1a:3d: b6:b9:1e:c5:dc:e9:52:ca:19:ec:40:c6:2c:f0:9a: b7:51:dc:b0:74:f1:28:23:d6:25:de:42:a1:b8:aa: 99:5c:44:8f:ff:cb:0e:6d:17:cb:44:00:2d:34:60: 57:11:1e:44:7c:6e:65:6f:be:e1:e3:7e:44:1e:dc: 69:db:73:ef:6e:b2:03:b8:1a:97:26:80:7a:48:50: 95:11:35:b9:f1:2d:87:26:1e:c2:63:53:8c:fc:ca: c9:2d:ea:84:ee:4d:80:a9:51:1e:0d:4f:a9:70:3e: d4:98:3a:39:d1:98:ab:8b:f6:9e:b8:0d:9d:9f:26: a2:2b:2a:12:ce:ec:10:b9:25:1e:7d:33:19:c7:0b: 72:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:92:38:AD:3B:30:8F:25:98:C6:52:DF:A1:64:39:43:42:04:32:C1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f9ec32f1-295b-385b-bd51-b6d09948d218.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.68.218.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:1e:a7:7a:24:40:52:7a:34:5b:ec:ea:8e:5c:7d:4e:10:74: 24:06:96:ca:60:b5:1c:31:c4:e2:4c:25:95:d9:e4:08:9b:92: 2f:6e:27:b7:58:43:9d:4e:ac:3b:d4:5b:54:33:63:37:43:c7: 02:17:f1:8a:29:6e:bb:81:ed:d6:07:1c:d2:5f:5c:2a:18:92: 5b:27:d7:19:dc:54:2e:1d:6a:d5:a7:9c:fc:c9:9e:d9:17:4b: df:19:63:fb:c2:38:a1:6f:7c:de:7e:34:84:26:8d:8d:cc:69: 04:90:e8:94:5b:b5:f7:4b:ab:bc:28:d4:06:7b:d5:be:d1:d4: e8:4c:80:72:69:c5:ff:77:56:1c:3e:48:ed:a9:59:13:f8:2f: 7c:3e:96:ba:3f:c2:b4:8d:0e:6d:39:51:be:0c:aa:d3:8d:fa: 26:fa:5d:4e:3a:d6:79:8f:c7:e8:1b:47:9a:02:fb:b3:4d:46: 88:c6:91:f8:78:b3:8f:dd:34:0b:e1:05:50:3b:a7:9c:cf:c8: bf:3f:5a:d2:25:03:ac:8a:50:c4:25:35:2d:58:99:fa:6d:81: 35:ac:3b:7a:87:b0:72:45:c9:85:ef:63:17:72:69:5e:f6:0e: 65:88:f7:c1:7d:0c:54:47:77:87:19:4c:76:75:b2:ca:73:48: 01:98:a8:8f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzujLkAmNPYRhAp6IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDIyMTAyMDAzMloXDTI2MDUyMjAxMDAzMlowLzEtMCsGA1UEAxMk NjIwOTc2Y2YtOGEzMS00ZTE2LWIwOGQtN2UxZjM3Zjg4M2U0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkDPcHDhkRNSibGo9R1eC6ylif+m0YvTI+neg 0aD4XlBBGVAkrsfEC7IyQLmy3jJu0iSJ944ff7TVVhWUPiy2Z0EQztN/nCgcNNBr +AzoeB0jv3VAjFuiyR7oMz32/HbMXpAjG7LuZ+hwu8iaDLUYj3/90mZ0Gj22uR7F 3OlSyhnsQMYs8Jq3UdywdPEoI9Yl3kKhuKqZXESP/8sObRfLRAAtNGBXER5EfG5l b77h435EHtxp23PvbrIDuBqXJoB6SFCVETW58S2HJh7CY1OM/MrJLeqE7k2AqVEe DU+pcD7UmDo50Ziri/aeuA2dnyaiKyoSzuwQuSUefTMZxwtykQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKySOK07MI8lmMZS36FkOUNCBDLBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvZjllYzMyZjEtMjk1Yi0z ODViLWJkNTEtYjZkMDk5NDhkMjE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArETaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH4ep3okQFJ6NFvs6o5cfU4QdCQGlspgtRwxxOJMJZXZ5Aibki9uJ7dY Q51OrDvUW1QzYzdDxwIX8YopbruB7dYHHNJfXCoYklsn1xncVC4datWnnPzJntkX S98ZY/vCOKFvfN5+NIQmjY3MaQSQ6JRbtfdLq7wo1AZ71b7R1OhMgHJpxf93Vhw+ SO2pWRP4L3w+lro/wrSNDm05Ub4MqtON+ib6XU461nmPx+gbR5oC+7NNRojGkfh4 s4/dNAvhBVA7p5zPyL8/WtIlA6yKUMQlNS1YmfptgTWsO3qHsHJFyYXvYxdyaV72 DmWI98F9DFRHd4cZTHZ1sspzSAGYqI8= -----END CERTIFICATE-----Generated at Sun Mar 1 21:01:28 2026 by rpki-client