$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c9cc68ad-acd2-3cc5-a1af-7f34b02d4cfa.roa File: c9cc68ad-acd2-3cc5-a1af-7f34b02d4cfa.roa (raw, json) Hash identifier: xIdj2tUlWiaaWxSUWGOXWp4ztgvBiwnE+MUYq+KFUFo= Subject key identifier: 22:DA:DB:F9:13:3B:B7:FB:92:E1:8A:45:E7:99:5E:AD:DF:E8:3F:E6 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584DCF2B08685B644E46AAD5B500 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c9cc68ad-acd2-3cc5-a1af-7f34b02d4cfa.roa Signing time: Tue 12 May 2026 13:00:30 +0000 ROA not before: Tue 12 May 2026 13:00:30 +0000 ROA not after: Mon 10 Aug 2026 13:00:30 +0000 asID: 13335 IP address blocks: 172.68.173.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:cf:2b:08:68:5b:64:4e:46:aa:d5:b5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: May 12 13:00:30 2026 GMT Not After : Aug 10 13:00:30 2026 GMT Subject: CN=d30f877d-3deb-410f-bf3f-4b2b230146d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:d5:c6:60:84:d7:b8:e8:0e:b1:7b:74:40:ef: e6:c0:64:f5:e2:8b:8a:2d:01:f1:c8:77:ab:86:11: 92:a9:0f:9f:42:cb:59:d0:27:aa:aa:e9:69:55:ac: 55:8a:ad:bf:ae:1e:0f:ff:ee:6a:8b:0f:ac:02:f4: cb:2a:3d:53:62:01:bb:0a:02:e1:ce:5c:96:dd:f7: 6f:cb:c8:d0:88:6d:44:0c:a3:8b:40:1f:63:0f:51: 57:a5:a7:be:c0:88:7e:e1:dc:05:07:b5:62:0d:09: 56:d1:b2:6b:a0:e7:44:b7:ad:92:ed:c1:83:0e:28: 4b:99:6e:e0:8c:de:9e:b8:b0:3d:9f:60:14:2b:22: 4f:8a:95:87:d7:ec:07:1e:bf:91:87:15:ee:5a:db: 07:30:c4:42:10:62:10:43:b7:35:67:1d:e5:ca:c0: 7d:54:6a:eb:ee:0c:20:94:77:b6:35:7c:a6:15:22: bb:2f:b4:00:8b:c6:e4:d1:54:a1:1d:f9:8e:40:13: b1:90:b6:5c:3f:40:7e:55:6a:bf:1e:87:a3:0d:2c: 04:e8:a0:ac:e9:19:91:a3:30:9a:55:21:c8:4d:27: b9:a9:f6:00:a2:b8:1b:4a:88:b9:f4:03:ec:44:8c: d7:6e:b8:14:6d:23:b9:28:77:bb:eb:9e:a1:ab:af: b6:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:DA:DB:F9:13:3B:B7:FB:92:E1:8A:45:E7:99:5E:AD:DF:E8:3F:E6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c9cc68ad-acd2-3cc5-a1af-7f34b02d4cfa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.68.173.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9e:8d:1b:2d:66:d6:bb:59:5c:9c:c7:e3:72:c5:3c:ea:4b:6f: c8:cf:f5:4b:d0:30:93:77:10:75:fb:6c:88:42:26:29:2f:24: 7e:64:41:9e:b0:04:81:cb:7f:af:61:d5:e3:27:e4:55:72:d9: 8e:14:96:0d:03:22:df:b5:45:aa:4b:f1:2d:0e:89:5e:96:77: bb:ef:65:a3:7f:28:f2:f9:64:b5:fa:f8:b1:8a:27:16:5a:45: 1c:0a:a0:2f:d9:96:6f:75:3a:c1:51:d0:70:75:03:81:5c:ec: ed:af:87:01:4f:73:d0:a8:07:29:ed:e4:0a:02:75:b8:f8:c7: 42:5b:3a:14:d8:51:55:99:dd:7f:ce:6e:40:76:e9:9d:e0:ba: ca:ac:89:b0:b3:65:af:40:e5:a8:5e:2c:ae:f3:5d:f0:fc:fa: 54:d0:02:a7:6d:85:30:43:a6:0f:f8:90:31:3a:c5:64:21:9c: fa:af:0c:a2:1d:1e:0c:8e:2e:fe:35:10:b9:88:70:95:bf:96: 0b:73:c8:6c:cd:35:ff:17:a1:af:44:82:3b:c2:72:0e:57:f7: d7:7d:de:a3:5b:35:d9:09:b4:f9:83:4c:f9:4e:cc:eb:0e:0b: 79:08:10:97:c8:38:1a:cc:8d:06:21:7d:e8:b3:7a:b6:46:81: 5e:fe:45:34 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3PKwhoW2RORqrVtQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDUxMjEzMDAzMFoXDTI2MDgxMDEzMDAzMFowLzEtMCsGA1UEAxMk ZDMwZjg3N2QtM2RlYi00MTBmLWJmM2YtNGIyYjIzMDE0NmQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAidXGYITXuOgOsXt0QO/mwGT14ouKLQHxyHer hhGSqQ+fQstZ0CeqqulpVaxViq2/rh4P/+5qiw+sAvTLKj1TYgG7CgLhzlyW3fdv y8jQiG1EDKOLQB9jD1FXpae+wIh+4dwFB7ViDQlW0bJroOdEt62S7cGDDihLmW7g jN6euLA9n2AUKyJPipWH1+wHHr+RhxXuWtsHMMRCEGIQQ7c1Zx3lysB9VGrr7gwg lHe2NXymFSK7L7QAi8bk0VShHfmOQBOxkLZcP0B+VWq/HoejDSwE6KCs6RmRozCa VSHITSe5qfYAorgbSoi59APsRIzXbrgUbSO5KHe7656hq6+2GQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCLa2/kTO7f7kuGKReeZXq3f6D/mMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvYzljYzY4YWQtYWNkMi0z Y2M1LWExYWYtN2YzNGIwMmQ0Y2ZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEStMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ6NGy1m1rtZXJzH43LFPOpLb8jP9UvQMJN3EHX7bIhCJikvJH5kQZ6w BIHLf69h1eMn5FVy2Y4Ulg0DIt+1RapL8S0OiV6Wd7vvZaN/KPL5ZLX6+LGKJxZa RRwKoC/Zlm91OsFR0HB1A4Fc7O2vhwFPc9CoBynt5AoCdbj4x0JbOhTYUVWZ3X/O bkB26Z3gusqsibCzZa9A5aheLK7zXfD8+lTQAqdthTBDpg/4kDE6xWQhnPqvDKId HgyOLv41ELmIcJW/lgtzyGzNNf8Xoa9EgjvCcg5X99d93qNbNdkJtPmDTPlOzOsO C3kIEJfIOBrMjQYhfeizerZGgV7+RTQ= -----END CERTIFICATE-----Generated at Wed May 13 10:57:45 2026 by rpki-client