$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/fa477233-cd68-311e-b7b7-f7f4a8accfad.roa File: fa477233-cd68-311e-b7b7-f7f4a8accfad.roa (raw, json) Hash identifier: mJGzni9b0YbyOnqpJNpIchg5GAP98YCBcqQ/Coq3QRo= Subject key identifier: FC:98:4C:31:97:44:CA:C0:19:14:CF:1E:D9:97:26:D1:00:31:82:20 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584D6AAAA6B171B9EA8C432F16E0 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/fa477233-cd68-311e-b7b7-f7f4a8accfad.roa Signing time: Mon 06 Apr 2026 13:00:30 +0000 ROA not before: Mon 06 Apr 2026 13:00:30 +0000 ROA not after: Sun 05 Jul 2026 13:00:30 +0000 asID: 13335 IP address blocks: 172.68.176.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:6a:aa:a6:b1:71:b9:ea:8c:43:2f:16:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Apr 6 13:00:30 2026 GMT Not After : Jul 5 13:00:30 2026 GMT Subject: CN=3b8c0b6e-1bce-4fca-ae44-1f773b4e7aaf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:82:08:4c:14:9e:85:c2:91:6f:5d:8e:ee:ae: 3f:4f:09:77:3b:4b:ad:fc:96:6b:38:21:2f:34:f1: 3d:29:2e:69:ad:72:d0:f3:5a:50:b9:51:a7:da:37: 9d:cb:31:75:7e:86:41:c9:96:d9:b8:45:18:6e:af: 5c:f2:a0:26:c9:25:84:d5:9e:d5:b5:07:58:58:8d: 51:4b:1e:f5:89:cd:0d:fa:f3:1a:9b:87:6a:e6:cc: 48:9c:ee:da:ff:3b:df:39:d2:cd:ee:f0:92:31:eb: 63:8a:bb:7c:67:3d:ed:60:ee:7e:b2:8a:77:a1:da: a6:87:fe:b6:01:59:a4:f9:fb:5e:72:ca:ba:68:a6: b4:34:8d:ad:83:c5:89:b9:d2:65:18:ca:eb:40:c9: 40:0a:e6:90:23:df:7a:66:41:ba:72:be:b9:af:dc: 07:dc:14:39:4c:78:75:4e:ef:14:d9:f7:6a:2b:fb: f4:12:f9:0f:cb:34:68:42:58:f6:c2:25:b7:5f:3e: ed:46:a6:fd:15:ee:76:b9:80:3c:e7:d6:fb:ca:6d: a5:12:ec:3f:b4:e3:b1:d9:bf:b6:ac:44:9c:a0:5f: 5e:b0:4f:f1:6c:54:07:c1:82:70:c5:40:32:7d:93: 72:6c:d4:70:08:20:3b:8d:c6:a9:f8:ef:73:fc:3e: 30:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:98:4C:31:97:44:CA:C0:19:14:CF:1E:D9:97:26:D1:00:31:82:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/fa477233-cd68-311e-b7b7-f7f4a8accfad.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.68.176.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:75:25:df:dc:3f:b3:a4:57:01:18:21:ce:d3:a7:7e:8c:af: 4c:1f:1c:13:19:f1:f9:e1:5e:10:75:9f:de:af:b6:8b:e2:e1: 1f:5e:88:97:3c:5e:81:ac:76:60:ad:40:b2:d4:4b:a7:f5:d0: b4:f5:dd:1d:9c:76:3b:1a:39:9a:f0:64:d7:2f:b1:19:93:d7: e9:6e:ae:b3:c1:b7:24:34:86:b0:2c:24:a0:8d:cd:d8:77:29: 04:7c:94:b5:f5:d1:55:5a:ec:8c:ca:84:6c:06:ff:9e:c0:8c: 23:26:c2:17:9f:65:ea:97:42:27:1f:f6:95:2c:bc:d2:ed:d3: 30:72:0a:cc:e4:53:79:02:c2:9c:41:69:52:cd:dc:96:6e:30: 3d:48:c0:7b:35:34:d0:86:32:a7:0b:92:74:c8:22:c3:c2:f9: 90:63:46:40:19:82:ff:27:14:dc:20:2e:7d:d4:7a:6b:d4:1b: 16:d2:04:05:ee:46:6a:f4:a9:20:d8:aa:83:07:38:ac:35:80: d4:d5:86:af:d9:e0:62:14:e8:58:59:14:ee:1e:8f:73:60:0d: c7:cd:64:76:c9:d7:d1:ac:d3:3f:3c:7d:80:47:07:dd:92:ab: bb:49:25:a6:45:a0:20:01:74:85:b6:82:a6:2b:f9:88:fb:7b: 6f:34:82:40 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1qqqaxcbnqjEMvFuAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDQwNjEzMDAzMFoXDTI2MDcwNTEzMDAzMFowLzEtMCsGA1UEAxMk M2I4YzBiNmUtMWJjZS00ZmNhLWFlNDQtMWY3NzNiNGU3YWFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqoIITBSehcKRb12O7q4/Twl3O0ut/JZrOCEv NPE9KS5prXLQ81pQuVGn2jedyzF1foZByZbZuEUYbq9c8qAmySWE1Z7VtQdYWI1R Sx71ic0N+vMam4dq5sxInO7a/zvfOdLN7vCSMetjirt8Zz3tYO5+sop3odqmh/62 AVmk+ftecsq6aKa0NI2tg8WJudJlGMrrQMlACuaQI996ZkG6cr65r9wH3BQ5THh1 Tu8U2fdqK/v0EvkPyzRoQlj2wiW3Xz7tRqb9Fe52uYA859b7ym2lEuw/tOOx2b+2 rEScoF9esE/xbFQHwYJwxUAyfZNybNRwCCA7jcap+O9z/D4wlwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPyYTDGXRMrAGRTPHtmXJtEAMYIgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvZmE0NzcyMzMtY2Q2OC0z MTFlLWI3YjctZjdmNGE4YWNjZmFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArESwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABV1Jd/cP7OkVwEYIc7Tp36Mr0wfHBMZ8fnhXhB1n96vtovi4R9eiJc8 XoGsdmCtQLLUS6f10LT13R2cdjsaOZrwZNcvsRmT1+lurrPBtyQ0hrAsJKCNzdh3 KQR8lLX10VVa7IzKhGwG/57AjCMmwhefZeqXQicf9pUsvNLt0zByCszkU3kCwpxB aVLN3JZuMD1IwHs1NNCGMqcLknTIIsPC+ZBjRkAZgv8nFNwgLn3UemvUGxbSBAXu Rmr0qSDYqoMHOKw1gNTVhq/Z4GIU6FhZFO4ej3NgDcfNZHbJ19Gs0z88fYBHB92S q7tJJaZFoCABdIW2gqYr+Yj7e280gkA= -----END CERTIFICATE-----Generated at Fri Apr 17 19:15:06 2026 by rpki-client