$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/7321bb95-9641-32d8-b382-585fa09723f0.roa File: 7321bb95-9641-32d8-b382-585fa09723f0.roa (raw, json) Hash identifier: dmXbBi6KwMfo1R9T9REk7NZtSpSl8uR2zYFsmMAAsRY= Subject key identifier: E3:BD:9C:4E:3D:A8:3E:27:AD:EF:92:D3:6C:9B:76:9D:50:96:83:F0 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584D1B1A663622FAEF02B36FD200 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/7321bb95-9641-32d8-b382-585fa09723f0.roa Signing time: Mon 09 Mar 2026 01:00:32 +0000 ROA not before: Mon 09 Mar 2026 01:00:32 +0000 ROA not after: Sun 07 Jun 2026 01:00:32 +0000 asID: 14789 IP address blocks: 172.68.157.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 26 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1b:1a:66:36:22:fa:ef:02:b3:6f:d2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Mar 9 01:00:32 2026 GMT Not After : Jun 7 01:00:32 2026 GMT Subject: CN=66c6397c-4e0f-4090-8818-b1f13b2b0c11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:47:92:a3:0a:5c:ba:26:de:65:0e:75:79:79: 12:ab:49:02:10:35:3e:0f:11:c8:73:1e:6b:11:64: c4:9d:b5:db:ea:38:64:62:42:3a:32:f8:85:05:bf: ea:54:d3:ce:a9:bb:26:ae:63:e0:e1:b5:3e:41:7e: e1:74:77:84:37:90:72:81:fd:cf:9c:65:30:3d:03: 72:b6:08:45:27:47:e1:d9:93:0a:75:0a:17:43:f5: fd:28:aa:54:ec:d3:c8:4a:7d:49:1a:5f:b4:6c:0f: 18:26:57:2a:25:53:d9:ad:c6:84:da:bd:ad:7b:19: 5e:82:17:cb:24:42:50:17:e8:ed:63:96:b7:30:09: 6e:5d:10:ee:a2:8c:17:9e:cc:7a:53:b8:93:97:cd: 98:ab:5c:eb:44:c5:ec:ee:87:bf:a2:73:b0:77:d7: 15:76:8e:1b:67:9a:b0:00:f1:a0:4a:21:e5:45:d7: 49:54:84:fb:71:d7:01:01:38:c5:14:e5:2a:ff:6c: 14:9f:20:ba:40:0c:11:ec:a2:3e:66:a2:13:99:b7: ec:9e:e0:ad:a4:19:f6:97:b9:ed:25:ae:fc:46:00: 55:dc:3a:03:62:c4:76:68:c6:9d:7b:1c:02:f7:df: a2:58:76:a9:23:0c:79:aa:cd:a6:e0:2d:61:e1:2b: 18:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:BD:9C:4E:3D:A8:3E:27:AD:EF:92:D3:6C:9B:76:9D:50:96:83:F0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/7321bb95-9641-32d8-b382-585fa09723f0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.68.157.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a3:77:6a:2b:1b:62:d3:a1:54:7d:e4:e8:28:4d:c7:75:f8:30: c2:92:a4:2c:ff:10:71:22:5a:c7:79:c8:5f:41:1d:e7:b1:ff: d9:34:a9:f4:a6:a4:4b:c6:5a:62:4c:ad:03:33:13:51:7a:78: cf:c8:b1:71:5c:3d:20:cd:a4:1a:33:99:c3:51:a7:42:11:0b: 17:ea:70:07:47:60:6a:31:a7:c1:06:92:e9:ce:0b:1d:e9:8a: 44:9f:06:0d:40:8a:9e:f9:25:9f:f2:c3:24:ad:91:00:8c:b1: f2:07:f4:b0:55:b4:07:c0:72:24:5d:27:f6:73:c0:b3:6e:86: c8:12:e5:fa:f9:41:64:53:8f:cf:ce:46:49:93:65:74:cd:ee: e1:23:1a:bf:8e:8f:48:5e:0c:81:80:73:3a:16:64:75:6e:9f: ab:ef:c3:06:8e:45:a4:7f:f1:8f:d1:5a:b0:83:a9:ed:e1:06: 0e:8b:be:6b:2d:13:4c:ca:55:af:d4:c2:7a:be:47:a1:da:d5: d8:f7:72:24:cd:ca:cb:fc:8a:e1:ad:88:5a:3b:66:47:58:3a: 2a:3d:3b:7e:16:6d:ad:d6:1b:7a:10:53:0a:c3:86:3a:ff:d1: 75:de:10:f4:df:f8:39:c0:e0:57:1d:b9:d8:64:e9:85:50:28: f2:ff:74:87 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0bGmY2IvrvArNv0gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDMwOTAxMDAzMloXDTI2MDYwNzAxMDAzMlowLzEtMCsGA1UEAxMk NjZjNjM5N2MtNGUwZi00MDkwLTg4MTgtYjFmMTNiMmIwYzExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzEeSowpcuibeZQ51eXkSq0kCEDU+DxHIcx5r EWTEnbXb6jhkYkI6MviFBb/qVNPOqbsmrmPg4bU+QX7hdHeEN5Bygf3PnGUwPQNy tghFJ0fh2ZMKdQoXQ/X9KKpU7NPISn1JGl+0bA8YJlcqJVPZrcaE2r2texleghfL JEJQF+jtY5a3MAluXRDuoowXnsx6U7iTl82Yq1zrRMXs7oe/onOwd9cVdo4bZ5qw APGgSiHlRddJVIT7cdcBATjFFOUq/2wUnyC6QAwR7KI+ZqITmbfsnuCtpBn2l7nt Ja78RgBV3DoDYsR2aMadexwC99+iWHapIwx5qs2m4C1h4SsY6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOO9nE49qD4nre+S02ybdp1QloPwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNzMyMWJiOTUtOTY0MS0z MmQ4LWIzODItNTg1ZmEwOTcyM2YwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArESdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKN3aisbYtOhVH3k6ChNx3X4MMKSpCz/EHEiWsd5yF9BHeex/9k0qfSm pEvGWmJMrQMzE1F6eM/IsXFcPSDNpBozmcNRp0IRCxfqcAdHYGoxp8EGkunOCx3p ikSfBg1Aip75JZ/ywyStkQCMsfIH9LBVtAfAciRdJ/ZzwLNuhsgS5fr5QWRTj8/O RkmTZXTN7uEjGr+Oj0heDIGAczoWZHVun6vvwwaORaR/8Y/RWrCDqe3hBg6Lvmst E0zKVa/Uwnq+R6Ha1dj3ciTNysv8iuGtiFo7ZkdYOio9O34Wba3WG3oQUwrDhjr/ 0XXeEPTf+DnA4Fcdudhk6YVQKPL/dIc= -----END CERTIFICATE-----Generated at Tue Mar 24 16:50:36 2026 by rpki-client