$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/eb35d793-a103-3fde-83ee-d9d506017bfa.roa File: eb35d793-a103-3fde-83ee-d9d506017bfa.roa (raw, json) Hash identifier: bLWa/J2zDJ4Br/O9oXsiiEKixmWp2f+C4eJTC4tObPM= Subject key identifier: BF:39:16:9B:0A:88:A7:6E:85:60:B4:91:77:DF:81:27:49:CF:B3:8F Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584D1B1A61CBD8B4260A5B92B9D0 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/eb35d793-a103-3fde-83ee-d9d506017bfa.roa Signing time: Mon 09 Mar 2026 01:00:32 +0000 ROA not before: Mon 09 Mar 2026 01:00:32 +0000 ROA not after: Sun 07 Jun 2026 01:00:32 +0000 asID: 14789 IP address blocks: 172.68.250.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 26 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1b:1a:61:cb:d8:b4:26:0a:5b:92:b9:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Mar 9 01:00:32 2026 GMT Not After : Jun 7 01:00:32 2026 GMT Subject: CN=7585c86f-4fc8-4d30-911f-2b109f413662 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:72:d6:f7:e3:8f:78:4d:a0:d7:d3:c7:6c:43: 79:48:06:e5:35:c9:d7:bd:6f:eb:b5:79:45:e0:31: 10:04:c9:e1:a6:4c:c8:fd:70:4f:aa:55:91:d9:5e: 08:a5:77:26:84:bf:4f:3b:80:f1:5b:4c:17:02:ef: 26:ae:e6:8a:60:81:4a:11:f0:f0:b5:52:78:ee:62: 89:61:c7:b7:1d:cf:74:e7:22:56:0f:d9:7b:d7:6d: 87:cc:a9:6e:ea:04:bc:f3:61:f1:b9:8d:bc:cf:51: c1:76:92:74:5e:d2:18:b3:7e:dc:50:a2:4e:97:24: bc:67:5a:72:65:45:2d:27:99:55:a4:e9:40:dc:a9: b7:20:c5:d6:f1:d8:5e:60:92:67:16:da:98:45:0c: 7f:f0:31:a3:b6:93:3d:17:74:b4:f3:b3:00:6c:d9: 21:1f:0b:d9:b1:22:97:92:16:70:ae:1b:54:95:48: d9:5f:27:8f:fe:6a:dd:8b:39:74:09:98:a8:35:87: c0:8c:83:80:5b:53:7d:4b:ff:97:fc:a2:3a:b4:90: 3e:7a:c7:ff:fa:9d:8e:ef:30:64:de:43:72:5c:26: 27:2b:05:5f:5e:a6:28:b6:ec:72:a0:22:fe:81:b2: a5:ae:52:8a:4c:80:ae:9e:c6:ff:8d:85:10:b9:66: f3:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:39:16:9B:0A:88:A7:6E:85:60:B4:91:77:DF:81:27:49:CF:B3:8F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/eb35d793-a103-3fde-83ee-d9d506017bfa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.68.250.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:b0:e1:57:b9:40:72:c3:73:44:45:27:b9:91:4c:4d:82:0e: da:04:4d:95:ac:d2:39:40:96:97:68:e8:73:8e:69:71:26:c1: 46:34:ef:cb:0b:3b:d6:f4:6d:1f:df:19:b3:16:ba:90:34:47: 4f:a7:3e:01:30:df:f1:6a:93:22:0f:18:0c:dc:05:ca:2c:43: a8:39:e0:c9:63:a8:7e:f7:1c:d5:11:51:9e:05:da:d0:24:d8: fb:33:49:9c:c2:c9:fd:aa:07:9f:00:e0:52:63:85:34:d8:2d: c9:85:19:4e:ec:31:c5:2f:c1:cb:76:e7:c9:5a:ac:0f:fa:37: d3:98:20:c9:90:a3:83:38:ff:69:d0:65:8d:bb:aa:52:11:19: f6:33:66:8f:43:e9:92:7a:a5:1d:0a:8a:b5:9d:9b:53:53:ff: 02:45:8d:18:4b:04:2a:c3:e9:6e:66:43:9e:84:70:01:82:3d: 9c:25:13:9f:2b:ed:65:40:75:00:71:d3:c7:40:0c:b5:13:a0: 9c:8c:34:39:62:a1:7f:03:78:04:40:18:ce:75:98:f5:58:73: b3:ca:c2:4c:d2:99:bd:8d:7d:5d:5e:86:2f:92:a9:ce:0e:29: 22:fd:4b:be:a3:46:34:0a:48:b0:82:ca:3d:bf:78:85:cd:29: d8:33:0c:e0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0bGmHL2LQmCluSudAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDMwOTAxMDAzMloXDTI2MDYwNzAxMDAzMlowLzEtMCsGA1UEAxMk NzU4NWM4NmYtNGZjOC00ZDMwLTkxMWYtMmIxMDlmNDEzNjYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApXLW9+OPeE2g19PHbEN5SAblNcnXvW/rtXlF 4DEQBMnhpkzI/XBPqlWR2V4IpXcmhL9PO4DxW0wXAu8mruaKYIFKEfDwtVJ47mKJ Yce3Hc905yJWD9l7122HzKlu6gS882HxuY28z1HBdpJ0XtIYs37cUKJOlyS8Z1py ZUUtJ5lVpOlA3Km3IMXW8dheYJJnFtqYRQx/8DGjtpM9F3S087MAbNkhHwvZsSKX khZwrhtUlUjZXyeP/mrdizl0CZioNYfAjIOAW1N9S/+X/KI6tJA+esf/+p2O7zBk 3kNyXCYnKwVfXqYotuxyoCL+gbKlrlKKTICunsb/jYUQuWbz2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL85FpsKiKduhWC0kXffgSdJz7OPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvZWIzNWQ3OTMtYTEwMy0z ZmRlLTgzZWUtZDlkNTA2MDE3YmZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArET6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADew4Ve5QHLDc0RFJ7mRTE2CDtoETZWs0jlAlpdo6HOOaXEmwUY078sL O9b0bR/fGbMWupA0R0+nPgEw3/FqkyIPGAzcBcosQ6g54MljqH73HNURUZ4F2tAk 2PszSZzCyf2qB58A4FJjhTTYLcmFGU7sMcUvwct258larA/6N9OYIMmQo4M4/2nQ ZY27qlIRGfYzZo9D6ZJ6pR0KirWdm1NT/wJFjRhLBCrD6W5mQ56EcAGCPZwlE58r 7WVAdQBx08dADLUToJyMNDlioX8DeARAGM51mPVYc7PKwkzSmb2NfV1ehi+Sqc4O KSL9S76jRjQKSLCCyj2/eIXNKdgzDOA= -----END CERTIFICATE-----Generated at Tue Mar 24 16:48:17 2026 by rpki-client