$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ea889f97-d597-3f31-a846-eaa18b6fa964.roa File: ea889f97-d597-3f31-a846-eaa18b6fa964.roa (raw, json) Hash identifier: p3XD0cWoooq8M4C7bGxmMsEKU9ZBHu7MTbrWGdxgJYA= Subject key identifier: 70:5C:78:FA:F8:1B:D0:12:A5:41:54:4B:10:35:FD:7C:04:8F:D6:6E Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584D7A054D709FBED1FA64C46F00 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ea889f97-d597-3f31-a846-eaa18b6fa964.roa Signing time: Sun 12 Apr 2026 01:00:24 +0000 ROA not before: Sun 12 Apr 2026 01:00:24 +0000 ROA not after: Sat 11 Jul 2026 01:00:24 +0000 asID: 396982 IP address blocks: 172.68.158.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:7a:05:4d:70:9f:be:d1:fa:64:c4:6f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Apr 12 01:00:24 2026 GMT Not After : Jul 11 01:00:24 2026 GMT Subject: CN=6381047d-b676-41e0-a68d-aa25445e82a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:1f:7c:97:04:29:34:bf:e9:07:67:1d:1d:cd: 63:46:b6:eb:fe:df:42:82:c8:59:8c:30:95:6a:0d: 6f:6b:49:e4:09:73:b5:c3:06:16:9f:9b:66:e1:16: 04:45:f1:a0:01:f0:89:e8:87:b9:3b:91:35:ef:6a: cb:16:7c:ba:03:43:3c:10:ed:28:4d:3e:2c:53:e8: 1d:07:c1:08:c6:dd:66:5c:db:60:6c:2b:95:3b:4e: 26:6b:c3:f8:f3:d1:3c:96:78:aa:f9:73:31:8f:07: bc:d7:d5:9d:35:e7:53:dd:b1:e6:ce:6a:f0:40:06: 46:c0:a7:0a:4b:87:cc:0a:b6:96:47:f9:ff:fa:6f: 36:fc:d6:9e:22:9d:f9:5a:4b:7f:95:88:f6:17:10: 31:b5:78:47:1c:26:05:3f:86:7f:c7:d0:58:ec:7b: 3f:bf:28:f7:75:9f:d6:cb:45:50:64:17:44:5d:39: f2:f5:4b:50:c1:54:a9:45:9e:46:81:28:c7:6c:e3: dc:aa:93:1b:68:17:3d:3d:f3:dc:22:58:72:0e:29: de:bf:78:04:2b:d6:3c:70:ba:a8:93:80:e4:77:f8: d1:ba:07:30:d7:38:d9:af:8b:2d:9f:2d:20:d6:a7: 83:99:ec:76:1a:2f:0c:5a:4a:6f:28:eb:eb:cf:86: d7:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:5C:78:FA:F8:1B:D0:12:A5:41:54:4B:10:35:FD:7C:04:8F:D6:6E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ea889f97-d597-3f31-a846-eaa18b6fa964.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.68.158.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:e7:f0:be:ee:7e:4b:a7:64:28:b5:00:db:76:ff:2f:6c:40: c0:29:fc:f5:ce:8b:d8:40:9e:10:92:12:06:9b:22:62:e4:79: c3:69:db:a0:fc:9c:ab:0d:61:a8:aa:4d:5a:ff:98:54:c0:64: ae:aa:0e:f1:fa:55:25:1d:a3:97:69:24:2c:82:69:09:41:dd: f6:e0:6d:bb:23:dc:8e:c2:e6:36:83:90:11:28:46:ff:e3:9d: 8d:f4:60:1b:fd:07:83:31:56:37:16:dd:c5:65:c0:c9:0c:0e: d9:b3:0b:6d:5e:66:1c:97:bf:30:b2:e7:14:95:b7:ea:af:9f: 93:31:99:85:6f:9e:9f:4c:72:f4:73:f0:44:a2:e4:7f:64:01: 00:c7:48:a2:73:47:6e:6b:81:96:ed:04:ed:be:2c:8b:97:3a: 95:0f:17:3d:d6:ad:75:bf:ac:95:fb:fe:ac:89:56:3b:b4:2d: a8:59:17:d2:ca:74:99:55:1c:b2:a4:78:9d:97:11:cd:4e:bc: 24:30:61:f3:e5:de:89:12:5b:26:f1:f5:c0:40:72:c7:32:3c: 50:73:29:76:af:f7:4a:86:0c:6f:6b:ea:92:0a:c0:4b:b0:3e: 18:33:a2:9e:6e:09:1b:4f:76:fb:39:d0:85:1f:14:46:71:c1: a6:03:de:c9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE16BU1wn77R+mTEbwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDQxMjAxMDAyNFoXDTI2MDcxMTAxMDAyNFowLzEtMCsGA1UEAxMk NjM4MTA0N2QtYjY3Ni00MWUwLWE2OGQtYWEyNTQ0NWU4MmExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhx98lwQpNL/pB2cdHc1jRrbr/t9CgshZjDCV ag1va0nkCXO1wwYWn5tm4RYERfGgAfCJ6Ie5O5E172rLFny6A0M8EO0oTT4sU+gd B8EIxt1mXNtgbCuVO04ma8P489E8lniq+XMxjwe819WdNedT3bHmzmrwQAZGwKcK S4fMCraWR/n/+m82/NaeIp35Wkt/lYj2FxAxtXhHHCYFP4Z/x9BY7Hs/vyj3dZ/W y0VQZBdEXTny9UtQwVSpRZ5GgSjHbOPcqpMbaBc9PfPcIlhyDinev3gEK9Y8cLqo k4Dkd/jRugcw1zjZr4stny0g1qeDmex2Gi8MWkpvKOvrz4bXlQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHBcePr4G9ASpUFUSxA1/XwEj9ZuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvZWE4ODlmOTctZDU5Ny0z ZjMxLWE4NDYtZWFhMThiNmZhOTY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArESeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHrn8L7ufkunZCi1ANt2/y9sQMAp/PXOi9hAnhCSEgabImLkecNp26D8 nKsNYaiqTVr/mFTAZK6qDvH6VSUdo5dpJCyCaQlB3fbgbbsj3I7C5jaDkBEoRv/j nY30YBv9B4MxVjcW3cVlwMkMDtmzC21eZhyXvzCy5xSVt+qvn5MxmYVvnp9McvRz 8ESi5H9kAQDHSKJzR25rgZbtBO2+LIuXOpUPFz3WrXW/rJX7/qyJVju0LahZF9LK dJlVHLKkeJ2XEc1OvCQwYfPl3okSWybx9cBAcscyPFBzKXav90qGDG9r6pIKwEuw Phgzop5uCRtPdvs50IUfFEZxwaYD3sk= -----END CERTIFICATE-----Generated at Fri Apr 17 04:51:50 2026 by rpki-client