$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/8627e138-18eb-3240-b2e2-3617e6053b50.roa File: 8627e138-18eb-3240-b2e2-3617e6053b50.roa (raw, json) Hash identifier: ujarr4pxU3Oa3eHllEqtHAjh2+fHLb/4qjVvClrkFIU= Subject key identifier: 74:8D:D9:D4:A7:37:B2:52:D3:11:DE:53:E4:B6:03:D9:82:88:FA:51 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584D8D90024332AF90E3B3BFD680 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/8627e138-18eb-3240-b2e2-3617e6053b50.roa Signing time: Sun 19 Apr 2026 01:00:23 +0000 ROA not before: Sun 19 Apr 2026 01:00:23 +0000 ROA not after: Sat 18 Jul 2026 01:00:23 +0000 asID: 14789 IP address blocks: 172.68.233.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 11 May 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8d:90:02:43:32:af:90:e3:b3:bf:d6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Apr 19 01:00:23 2026 GMT Not After : Jul 18 01:00:23 2026 GMT Subject: CN=af2cd3eb-9151-4ba6-8c6a-69493c1f9362 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:33:58:ac:69:96:e3:93:3f:0a:4e:77:43:3e: 95:c2:bf:4e:c0:39:0b:7f:af:77:54:95:65:f6:35: c0:bd:e8:7b:dc:0c:d6:38:88:f8:5b:74:35:0f:d1: c0:39:b1:82:79:49:d5:3b:3f:2a:fa:94:3f:39:20: 51:bc:b3:2e:69:33:88:cd:a4:7d:31:14:92:84:96: 9f:f1:f4:1a:69:3e:33:2d:76:71:a1:2f:74:68:46: ca:26:d5:19:71:4f:29:14:f3:79:f1:04:d8:07:e3: 61:df:ad:d5:3f:36:ca:2a:1b:92:27:58:c3:33:3e: 21:dc:d5:e6:6b:10:f3:61:b7:e9:08:3d:f9:5a:b8: 7e:b5:27:f1:0e:62:c7:7c:c7:47:b5:95:68:36:41: 46:5c:47:c7:83:82:d3:f4:6a:0d:da:fe:64:d8:47: bc:e4:df:82:ae:da:03:9d:20:8d:d2:cf:ac:b9:13: 55:9c:46:ae:2a:b4:99:a8:1e:31:e3:cc:1e:89:8d: 22:7b:25:da:e6:2a:3c:87:0c:2e:0b:4b:71:59:bf: c9:fe:55:c9:4d:b1:73:5a:6d:41:4b:bb:c7:2d:a1: e6:0b:53:65:a1:b9:9a:f0:bf:75:c9:d2:6c:d9:8b: f7:fc:3a:b3:fa:23:4f:aa:a7:54:dc:cc:e6:97:cc: 52:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:8D:D9:D4:A7:37:B2:52:D3:11:DE:53:E4:B6:03:D9:82:88:FA:51 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/8627e138-18eb-3240-b2e2-3617e6053b50.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.68.233.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9d:0f:1f:64:97:86:ee:1d:85:de:80:0d:3d:e0:c6:ff:bf:df: 58:0d:da:53:52:24:b8:96:aa:e9:f7:ff:d7:80:7c:a9:e3:cc: cd:0a:8c:ab:c4:ef:ad:1f:22:8b:d6:3a:6a:2f:95:a4:73:11: 5b:50:2c:eb:df:58:95:f7:bb:a8:37:66:4c:2b:c9:90:90:af: f8:17:d8:75:3f:cf:de:fe:02:74:f0:90:ae:fe:53:64:78:bd: 1a:90:79:7a:15:de:2d:64:7c:3e:27:c0:6e:af:37:06:f4:f6: ef:aa:92:40:a5:ce:90:64:e5:1a:78:31:77:fa:ba:70:46:4e: 1f:02:57:c6:9d:83:34:4b:3e:ad:a5:03:8b:15:6c:7d:7a:80: 06:06:3b:b0:58:05:6a:5d:8f:be:ff:56:eb:bd:c5:6d:71:b3: 60:d8:44:ad:f0:e8:c9:af:c6:d7:af:5e:a3:c8:38:f9:04:1d: c0:dd:62:b7:69:b3:35:7d:a7:51:e8:41:45:cf:da:3a:08:3a: 4f:9c:37:bb:4c:fb:fa:eb:45:52:2f:f0:69:f4:61:d7:58:65: b5:13:43:93:a2:f3:99:64:be:ac:9c:8f:ab:9a:04:e0:6a:89: 65:90:25:60:d0:d8:e7:ae:01:75:1f:a3:db:d8:fe:94:fe:be: 28:7c:8e:78 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2NkAJDMq+Q47O/1oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDQxOTAxMDAyM1oXDTI2MDcxODAxMDAyM1owLzEtMCsGA1UEAxMk YWYyY2QzZWItOTE1MS00YmE2LThjNmEtNjk0OTNjMWY5MzYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnTNYrGmW45M/Ck53Qz6Vwr9OwDkLf693VJVl 9jXAveh73AzWOIj4W3Q1D9HAObGCeUnVOz8q+pQ/OSBRvLMuaTOIzaR9MRSShJaf 8fQaaT4zLXZxoS90aEbKJtUZcU8pFPN58QTYB+Nh363VPzbKKhuSJ1jDMz4h3NXm axDzYbfpCD35Wrh+tSfxDmLHfMdHtZVoNkFGXEfHg4LT9GoN2v5k2Ee85N+CrtoD nSCN0s+suRNVnEauKrSZqB4x48weiY0ieyXa5io8hwwuC0txWb/J/lXJTbFzWm1B S7vHLaHmC1Nlobma8L91ydJs2Yv3/Dqz+iNPqqdU3Mzml8xSnQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHSN2dSnN7JS0xHeU+S2A9mCiPpRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvODYyN2UxMzgtMThlYi0z MjQwLWIyZTItMzYxN2U2MDUzYjUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArETpMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ0PH2SXhu4dhd6ADT3gxv+/31gN2lNSJLiWqun3/9eAfKnjzM0KjKvE 760fIovWOmovlaRzEVtQLOvfWJX3u6g3ZkwryZCQr/gX2HU/z97+AnTwkK7+U2R4 vRqQeXoV3i1kfD4nwG6vNwb09u+qkkClzpBk5Rp4MXf6unBGTh8CV8adgzRLPq2l A4sVbH16gAYGO7BYBWpdj77/Vuu9xW1xs2DYRK3w6MmvxtevXqPIOPkEHcDdYrdp szV9p1HoQUXP2joIOk+cN7tM+/rrRVIv8Gn0YddYZbUTQ5Oi85lkvqycj6uaBOBq iWWQJWDQ2OeuAXUfo9vY/pT+vih8jng= -----END CERTIFICATE-----Generated at Sat May 9 06:13:15 2026 by rpki-client