$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a9bb7ef7-8870-34ae-8eaa-cff24b2520c4.roa File: a9bb7ef7-8870-34ae-8eaa-cff24b2520c4.roa (raw, json) Hash identifier: PFxtJDmoL6D7mfqcFzeSsn+vSZGaLjRMuL0aTduTMjA= Subject key identifier: 75:2B:85:E9:56:7F:5E:22:AD:F8:24:BA:03:12:11:75:32:9D:25:85 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584D97555740ADF34C0A4EC3F8C0 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a9bb7ef7-8870-34ae-8eaa-cff24b2520c4.roa Signing time: Wed 22 Apr 2026 13:00:32 +0000 ROA not before: Wed 22 Apr 2026 13:00:32 +0000 ROA not after: Tue 21 Jul 2026 13:00:32 +0000 asID: 13335 IP address blocks: 172.68.55.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:97:55:57:40:ad:f3:4c:0a:4e:c3:f8:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Apr 22 13:00:32 2026 GMT Not After : Jul 21 13:00:32 2026 GMT Subject: CN=ef81bfb0-c98d-4ab0-b562-d3abe6f35887 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:11:6d:e8:47:6e:b4:f9:ba:e9:ef:99:9e:ac: 43:bf:9d:54:bd:c6:6d:ce:9e:7e:28:ae:98:87:78: 71:39:cc:1c:5c:1a:31:3b:e0:f6:33:2b:c0:e2:53: 16:98:be:b1:e1:b8:cb:80:d9:61:ed:62:cb:c6:3b: d1:e8:d8:b8:20:8a:d2:52:f1:d2:72:c9:bb:26:07: 61:00:2d:84:09:73:73:ed:41:09:61:8b:0e:56:71: 0a:9a:d1:64:81:a8:9e:30:35:88:6a:9c:fd:cb:7f: ba:83:32:00:78:fd:bc:22:a1:34:2d:bf:af:e8:1c: 3f:ba:b7:25:d5:72:55:e9:da:09:b3:a8:d7:25:ea: 83:4f:a5:26:c6:79:8d:b7:18:53:01:51:90:4f:a7: 5b:0b:2e:8f:6c:a6:7f:23:08:e0:25:a8:5f:c3:68: cf:34:2e:bb:84:1b:f2:59:ee:4e:5f:e4:27:6c:15: d3:00:d1:32:7e:74:33:28:98:56:e5:22:ce:7d:82: a2:b6:30:c2:ae:46:18:2d:d3:13:1a:e0:95:b6:5c: 8d:2c:37:e5:87:34:92:19:ba:49:61:1f:fe:76:81: df:83:e4:16:bf:ea:ba:da:e8:00:e1:b8:ea:99:9e: 68:bb:f9:2a:57:cc:fb:b7:06:3b:b5:fe:4f:be:02: 87:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:2B:85:E9:56:7F:5E:22:AD:F8:24:BA:03:12:11:75:32:9D:25:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a9bb7ef7-8870-34ae-8eaa-cff24b2520c4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.68.55.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:64:d8:c2:70:86:81:94:11:c9:a4:d1:c1:6f:c7:ea:41:3c: 0b:6e:b6:f8:dd:66:8d:7b:ff:0b:db:b2:7f:3b:12:fe:b9:a0: c9:b2:a7:2d:94:d2:ca:53:f3:45:11:8f:19:86:68:ab:88:5f: ab:bb:10:b0:f9:92:c4:75:1a:03:88:82:f4:03:b1:f6:cb:d4: a1:90:b5:3f:a1:f5:c6:f7:f7:9f:f3:37:28:95:69:2f:30:14: a0:0e:92:04:0a:bc:36:8b:6c:58:aa:e8:9d:9d:7e:83:16:39: f5:a4:60:20:68:d8:06:6d:6b:9e:5b:ee:98:cd:4d:f6:2c:ab: 6f:84:9b:47:36:ed:5e:7e:47:aa:2d:8b:64:5b:08:dd:f2:b6: d2:a3:3b:8e:83:b5:3b:fb:54:c8:dc:62:5f:70:d1:bf:b7:5d: a9:ab:fc:4d:e4:39:be:40:4f:aa:6b:81:8b:10:f1:20:fd:71: 7b:20:f0:52:62:13:27:eb:90:a2:26:76:99:e4:5c:a6:cb:1d: ef:fc:3a:97:91:e3:b4:ae:2a:11:f1:97:ec:ed:36:0d:0f:e6: 3d:77:37:e7:12:94:b9:72:86:e2:23:64:16:07:a7:f2:59:0c: d6:2c:d6:53:ba:9a:1e:86:9c:b7:df:09:3d:e4:cb:b6:a4:b9: f5:67:bd:f1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2XVVdArfNMCk7D+MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDQyMjEzMDAzMloXDTI2MDcyMTEzMDAzMlowLzEtMCsGA1UEAxMk ZWY4MWJmYjAtYzk4ZC00YWIwLWI1NjItZDNhYmU2ZjM1ODg3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9RFt6EdutPm66e+ZnqxDv51UvcZtzp5+KK6Y h3hxOcwcXBoxO+D2MyvA4lMWmL6x4bjLgNlh7WLLxjvR6Ni4IIrSUvHScsm7Jgdh AC2ECXNz7UEJYYsOVnEKmtFkgaieMDWIapz9y3+6gzIAeP28IqE0Lb+v6Bw/urcl 1XJV6doJs6jXJeqDT6UmxnmNtxhTAVGQT6dbCy6PbKZ/IwjgJahfw2jPNC67hBvy We5OX+QnbBXTANEyfnQzKJhW5SLOfYKitjDCrkYYLdMTGuCVtlyNLDflhzSSGbpJ YR/+doHfg+QWv+q62ugA4bjqmZ5ou/kqV8z7twY7tf5PvgKHowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHUrhelWf14irfgkugMSEXUynSWFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvYTliYjdlZjctODg3MC0z NGFlLThlYWEtY2ZmMjRiMjUyMGM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEQ3MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH9k2MJwhoGUEcmk0cFvx+pBPAtutvjdZo17/wvbsn87Ev65oMmypy2U 0spT80URjxmGaKuIX6u7ELD5ksR1GgOIgvQDsfbL1KGQtT+h9cb395/zNyiVaS8w FKAOkgQKvDaLbFiq6J2dfoMWOfWkYCBo2AZta55b7pjNTfYsq2+Em0c27V5+R6ot i2RbCN3yttKjO46DtTv7VMjcYl9w0b+3Xamr/E3kOb5AT6prgYsQ8SD9cXsg8FJi EyfrkKImdpnkXKbLHe/8OpeR47SuKhHxl+ztNg0P5j13N+cSlLlyhuIjZBYHp/JZ DNYs1lO6mh6GnLffCT3ky7akufVnvfE= -----END CERTIFICATE-----Generated at Wed May 13 10:45:43 2026 by rpki-client