$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/0cbe8530-f129-3176-94d8-58d92cf0968e.roa File: 0cbe8530-f129-3176-94d8-58d92cf0968e.roa (raw, json) Hash identifier: btLMspQ5IydQsnCp9UziLtMTko6nYtnycH5GjefyEKg= Subject key identifier: 24:89:D7:AD:91:E8:0C:EF:5C:35:35:A1:73:9D:0D:6B:25:A2:74:EC Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584D8D8FF74522A550490FEC6480 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/0cbe8530-f129-3176-94d8-58d92cf0968e.roa Signing time: Sun 19 Apr 2026 01:00:23 +0000 ROA not before: Sun 19 Apr 2026 01:00:23 +0000 ROA not after: Sat 18 Jul 2026 01:00:23 +0000 asID: 13335 IP address blocks: 172.68.136.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 11 May 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8d:8f:f7:45:22:a5:50:49:0f:ec:64:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Apr 19 01:00:23 2026 GMT Not After : Jul 18 01:00:23 2026 GMT Subject: CN=3e494121-db0f-4309-8583-9ed5b014be5f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:47:0d:b5:e9:ec:1f:a5:a1:6c:94:87:ff:4a: 00:1b:67:f8:8e:d9:82:22:19:7b:04:31:cc:2f:3c: dc:7e:be:54:ee:53:92:30:67:c1:96:b3:aa:bb:8c: b6:c6:5a:df:bf:74:06:5e:57:c9:24:3c:1a:44:91: 70:c4:34:96:03:fa:69:a9:d1:24:7e:48:8d:a1:d0: 04:88:9c:c3:35:17:6f:8b:6a:6e:f3:c4:95:ea:fc: 34:be:0f:cb:e3:5f:db:75:41:cf:e9:68:16:35:c3: ee:26:e1:9f:40:c3:66:55:0a:87:3c:58:f4:90:8c: c2:cd:3a:71:17:b9:c3:4c:38:ae:d3:e2:39:fc:6c: 1d:cc:fb:45:51:8f:bb:df:0e:c7:75:76:b0:1f:63: 58:ac:2a:f1:d7:a2:81:c3:2e:3c:2c:f8:16:52:a4: d9:24:77:8a:14:91:d8:dc:a5:a2:79:65:c0:46:a9: 0a:9a:ff:46:25:ed:b7:f9:f2:57:d0:73:7e:70:b8: a3:98:ad:c8:a2:cb:61:b9:d8:46:09:c3:ab:c6:ef: c6:19:a9:47:ae:27:7f:fc:52:13:58:ff:a5:23:8c: 7a:0a:5f:cc:f1:21:18:00:9b:4d:9d:51:3c:d3:97: 1b:0e:f1:28:3d:ab:7c:06:77:b1:f0:0f:f9:b9:98: b5:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:89:D7:AD:91:E8:0C:EF:5C:35:35:A1:73:9D:0D:6B:25:A2:74:EC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/0cbe8530-f129-3176-94d8-58d92cf0968e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.68.136.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b0:0b:b1:7d:36:f2:75:94:21:13:25:43:70:00:28:d3:f9:e8: 71:a4:3d:67:41:22:8b:f4:0c:c3:b6:9c:44:68:22:1f:63:e6: f9:fa:6e:95:0e:08:0e:65:96:cb:bd:7f:67:1e:4f:36:15:2a: ae:c9:fe:e3:7e:68:eb:fd:fa:25:3b:b2:b9:dd:3a:01:e5:18: 11:18:ff:f5:3d:04:e4:0e:8b:49:a1:69:a6:07:08:cc:65:e0: 49:98:72:40:63:a3:a5:54:fe:81:9c:15:bb:dd:2c:68:ba:62: 7a:d2:83:12:8c:c7:50:9a:61:c0:2a:a9:0b:a7:67:7b:68:9b: b9:6d:13:22:7b:64:d0:e7:ea:65:91:69:83:5e:62:90:6c:95: eb:23:47:ca:6b:a1:ac:0c:ba:ca:4f:6f:5f:86:25:d1:ef:5c: 07:9d:19:ad:18:ea:cb:4e:09:ec:a5:f1:ec:73:3a:4f:ae:0b: c1:e0:b0:27:23:95:73:d1:fd:de:d9:a2:43:25:87:53:aa:dd: 7f:90:00:a9:f8:05:ce:4a:ce:16:ab:3f:b8:41:40:cf:7d:b1: 35:7d:74:d1:f3:71:a2:f6:23:3b:c7:39:55:38:94:0c:90:b5: 53:64:1e:b5:81:ab:7d:fc:6d:59:e9:d3:70:06:d9:ae:04:b5: 3b:e7:6c:cf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2Nj/dFIqVQSQ/sZIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDQxOTAxMDAyM1oXDTI2MDcxODAxMDAyM1owLzEtMCsGA1UEAxMk M2U0OTQxMjEtZGIwZi00MzA5LTg1ODMtOWVkNWIwMTRiZTVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArUcNtensH6WhbJSH/0oAG2f4jtmCIhl7BDHM Lzzcfr5U7lOSMGfBlrOqu4y2xlrfv3QGXlfJJDwaRJFwxDSWA/ppqdEkfkiNodAE iJzDNRdvi2pu88SV6vw0vg/L41/bdUHP6WgWNcPuJuGfQMNmVQqHPFj0kIzCzTpx F7nDTDiu0+I5/GwdzPtFUY+73w7HdXawH2NYrCrx16KBwy48LPgWUqTZJHeKFJHY 3KWieWXARqkKmv9GJe23+fJX0HN+cLijmK3IosthudhGCcOrxu/GGalHrid//FIT WP+lI4x6Cl/M8SEYAJtNnVE805cbDvEoPat8Bnex8A/5uZi12QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCSJ162R6AzvXDU1oXOdDWslonTsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMGNiZTg1MzAtZjEyOS0z MTc2LTk0ZDgtNThkOTJjZjA5NjhlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArESIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALALsX028nWUIRMlQ3AAKNP56HGkPWdBIov0DMO2nERoIh9j5vn6bpUO CA5llsu9f2ceTzYVKq7J/uN+aOv9+iU7srndOgHlGBEY//U9BOQOi0mhaaYHCMxl 4EmYckBjo6VU/oGcFbvdLGi6YnrSgxKMx1CaYcAqqQunZ3tom7ltEyJ7ZNDn6mWR aYNeYpBslesjR8proawMuspPb1+GJdHvXAedGa0Y6stOCeyl8exzOk+uC8HgsCcj lXPR/d7ZokMlh1Oq3X+QAKn4Bc5KzharP7hBQM99sTV9dNHzcaL2IzvHOVU4lAyQ tVNkHrWBq338bVnp03AG2a4EtTvnbM8= -----END CERTIFICATE-----Generated at Sat May 9 08:14:19 2026 by rpki-client