$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/453647a4-ccfc-32e4-85bf-b97ed763a038.roa File: 453647a4-ccfc-32e4-85bf-b97ed763a038.roa (raw, json) Hash identifier: +82bF/7fXYm7uyLidQmf16sVnRjg7darJynaG/+SpRo= Subject key identifier: 3A:1B:53:D3:2E:D5:C1:D1:F6:24:98:B3:44:8E:F1:CB:4F:E6:88:3A Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584D44FA67DF5799D33F2A878280 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/453647a4-ccfc-32e4-85bf-b97ed763a038.roa Signing time: Tue 24 Mar 2026 01:00:31 +0000 ROA not before: Tue 24 Mar 2026 01:00:31 +0000 ROA not after: Mon 22 Jun 2026 01:00:31 +0000 asID: 13335 IP address blocks: 172.68.103.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:44:fa:67:df:57:99:d3:3f:2a:87:82:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Mar 24 01:00:31 2026 GMT Not After : Jun 22 01:00:31 2026 GMT Subject: CN=27d27bf0-c324-4a54-93f9-b52c29c68878 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:b7:da:b6:f4:27:b7:80:10:0c:fb:c0:ca:69: 42:ab:1a:71:13:dd:62:8c:0a:f5:1e:bc:92:26:7c: 6a:77:27:76:d0:df:61:53:b4:ab:40:a4:6f:5f:73: b7:ec:23:64:d9:bc:3d:8a:8b:b9:71:45:20:9f:cd: 41:86:00:74:88:c7:78:8a:53:82:7e:ad:00:92:e7: b0:4e:21:5d:eb:5a:6c:c3:0f:5a:2c:88:99:97:9f: dc:4b:17:37:3d:d9:6c:b8:c8:61:74:e5:bb:de:c2: 33:b6:fa:bf:b3:fc:99:50:a0:f9:6a:f7:6c:4f:2b: a8:99:71:4b:db:c8:44:0e:b8:2f:a2:da:19:9a:db: 60:a0:a7:b6:37:92:6b:ab:36:e5:7d:4c:c4:c7:7e: 2d:c6:25:14:9c:de:49:94:09:0c:60:4d:88:5f:53: 9c:1a:55:80:c7:a4:0d:33:97:1b:4e:ca:89:9c:b8: f9:a7:79:f1:a2:86:c9:92:dc:c2:76:37:24:a1:06: cd:03:bc:2a:4e:67:68:39:69:ae:8f:2a:bd:c6:7f: 8a:b4:bb:38:da:9d:fb:95:0b:14:11:34:c6:29:84: b9:8a:56:36:09:5d:f4:4a:72:3c:7e:50:22:ac:78: 7e:ec:11:85:78:82:2a:40:5f:20:03:7d:3b:cd:33: b0:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:1B:53:D3:2E:D5:C1:D1:F6:24:98:B3:44:8E:F1:CB:4F:E6:88:3A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/453647a4-ccfc-32e4-85bf-b97ed763a038.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.68.103.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:3f:4f:5a:1c:bd:52:ed:ed:c6:36:bb:cd:6b:6e:aa:01:ee: 3a:a3:e0:8d:0b:fc:e8:d3:9f:57:82:44:06:e3:65:72:2c:09: 60:8b:cb:b0:67:5b:a7:71:f3:d4:5e:27:99:23:fc:bc:c4:80: 29:22:71:e8:e7:37:14:8d:83:7f:92:d0:f5:6b:27:33:9a:1e: 23:ab:69:cb:a4:e3:ea:22:ce:17:81:a2:ee:e5:b6:8e:38:2a: 63:8b:e9:cf:c6:0a:a6:19:30:a0:ed:9c:96:32:cd:e0:4f:07: d6:4f:37:d4:d7:09:4d:12:0c:14:85:93:22:18:e9:c9:78:f7: 0d:1c:92:00:37:0b:07:a9:12:9f:cf:e3:78:93:ba:55:4f:dd: 2d:f3:6c:54:78:98:ec:db:d9:be:19:ea:8d:f1:7a:ba:4c:ca: 9b:86:45:ec:cf:0c:67:b7:b2:b6:e1:26:b3:ba:97:27:99:ec: 76:a6:33:f5:ec:d0:87:c6:34:5f:74:cb:05:9b:06:b1:89:b0: da:66:12:be:e1:6d:61:bb:b1:8c:70:9a:4b:4f:42:09:8a:49: c4:c1:d0:37:ed:67:55:7d:10:05:3f:72:aa:69:a6:81:4a:08: ef:10:c6:96:9d:ae:22:b9:99:e8:d6:0f:3a:8c:e5:d4:93:36: fb:c9:7b:60 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1E+mffV5nTPyqHgoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDMyNDAxMDAzMVoXDTI2MDYyMjAxMDAzMVowLzEtMCsGA1UEAxMk MjdkMjdiZjAtYzMyNC00YTU0LTkzZjktYjUyYzI5YzY4ODc4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnLfatvQnt4AQDPvAymlCqxpxE91ijAr1HryS Jnxqdyd20N9hU7SrQKRvX3O37CNk2bw9iou5cUUgn81BhgB0iMd4ilOCfq0Akuew TiFd61psww9aLIiZl5/cSxc3PdlsuMhhdOW73sIztvq/s/yZUKD5avdsTyuomXFL 28hEDrgvotoZmttgoKe2N5JrqzblfUzEx34txiUUnN5JlAkMYE2IX1OcGlWAx6QN M5cbTsqJnLj5p3nxoobJktzCdjckoQbNA7wqTmdoOWmujyq9xn+KtLs42p37lQsU ETTGKYS5ilY2CV30SnI8flAirHh+7BGFeIIqQF8gA307zTOwcQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDobU9Mu1cHR9iSYs0SO8ctP5og6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNDUzNjQ3YTQtY2NmYy0z MmU0LTg1YmYtYjk3ZWQ3NjNhMDM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArERnMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACQ/T1ocvVLt7cY2u81rbqoB7jqj4I0L/OjTn1eCRAbjZXIsCWCLy7Bn W6dx89ReJ5kj/LzEgCkicejnNxSNg3+S0PVrJzOaHiOracuk4+oizheBou7lto44 KmOL6c/GCqYZMKDtnJYyzeBPB9ZPN9TXCU0SDBSFkyIY6cl49w0ckgA3CwepEp/P 43iTulVP3S3zbFR4mOzb2b4Z6o3xerpMypuGRezPDGe3srbhJrO6lyeZ7HamM/Xs 0IfGNF90ywWbBrGJsNpmEr7hbWG7sYxwmktPQgmKScTB0DftZ1V9EAU/cqpppoFK CO8QxpadriK5mejWDzqM5dSTNvvJe2A= -----END CERTIFICATE-----Generated at Thu Mar 26 16:09:33 2026 by rpki-client