$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c9d99fac-c6d1-32d2-b980-ad974e633160.roa File: c9d99fac-c6d1-32d2-b980-ad974e633160.roa (raw, json) Hash identifier: bYigwsoJLrSvRVZand4TCIlvgZnQNQirdWRgYBpPG6Y= Subject key identifier: 13:2A:CA:EC:56:51:99:48:C2:9C:02:1E:40:93:5B:0F:65:33:04:19 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584DCF2B02289287BD5B16F36EA0 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c9d99fac-c6d1-32d2-b980-ad974e633160.roa Signing time: Tue 12 May 2026 13:00:30 +0000 ROA not before: Tue 12 May 2026 13:00:30 +0000 ROA not after: Mon 10 Aug 2026 13:00:30 +0000 asID: 13335 IP address blocks: 172.68.175.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:cf:2b:02:28:92:87:bd:5b:16:f3:6e:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: May 12 13:00:30 2026 GMT Not After : Aug 10 13:00:30 2026 GMT Subject: CN=6b459236-5453-4478-8514-a14346663793 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:0d:32:6b:c0:a6:cc:c0:ab:ae:9a:85:ee:74: 35:d3:7b:3e:cc:ac:19:db:5a:03:15:55:ce:c5:1a: 5f:a4:78:81:c7:74:9b:11:03:4e:63:28:c1:ab:7b: b8:7a:c7:d0:ed:bf:21:60:8f:93:d7:96:ca:7f:e8: b3:18:63:e5:6b:99:a3:8e:e8:53:bf:bd:f4:7e:c1: aa:1c:f3:ba:25:96:a6:2c:90:8a:06:be:f6:95:31: 78:04:66:1b:cf:ec:39:f9:88:c7:2a:eb:f0:9a:10: 7b:7e:eb:2b:75:00:1f:68:aa:73:ab:70:c1:da:05: e8:61:de:a7:c8:2a:a8:e9:f0:14:e6:39:ee:d1:25: f8:3e:ee:40:20:82:b2:64:ca:be:50:39:ed:c5:f2: 89:91:c1:bc:18:66:aa:1b:af:61:1a:aa:b5:f6:92: 64:ec:86:d5:6f:64:aa:b4:4e:ad:df:69:9e:fc:19: e7:bb:2a:f5:a1:60:0b:e6:3e:ee:ef:c4:26:2c:0e: 28:48:07:1b:a4:80:6e:5a:b9:d2:17:4d:ff:f7:69: 98:7b:dd:73:c3:05:69:ce:20:b0:72:f6:c3:7a:27: 34:16:ff:39:28:22:cd:ca:1a:83:32:a7:eb:b1:ae: 7d:63:ac:53:4d:ba:01:ec:2e:cb:5e:d8:0b:8c:5c: f6:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:2A:CA:EC:56:51:99:48:C2:9C:02:1E:40:93:5B:0F:65:33:04:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c9d99fac-c6d1-32d2-b980-ad974e633160.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.68.175.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:6b:13:0b:59:8e:e5:ce:e9:3f:d5:6b:a9:30:25:63:c7:46: 55:a4:82:68:90:a6:b5:50:1e:7f:c7:88:2d:88:25:47:dd:3c: d0:dc:0a:ce:5c:f5:49:54:5d:91:db:5b:d7:40:ef:1c:6b:2f: 12:87:78:a5:2e:1f:cc:78:05:f7:91:9f:a2:17:27:a1:bc:2e: 4e:55:60:34:6d:96:66:8e:53:94:d0:18:8e:44:28:e8:1e:58: fe:6a:87:1a:75:ab:e2:e5:aa:bf:30:04:e8:96:08:3e:d3:76: 75:dc:21:4b:17:63:9a:e4:33:79:24:12:40:23:a7:b1:ba:c7: a2:ed:42:5d:2a:96:6d:3d:b4:ad:73:86:ef:86:e0:a7:68:c9: 25:24:21:e6:6e:99:81:ae:39:f2:4e:5d:bc:dd:39:4b:45:1f: 0d:34:e7:a8:c2:9a:14:d3:ad:5c:45:2c:ec:78:a6:b6:01:da: c4:68:3b:a7:e0:4c:a2:3f:22:c4:d2:63:6a:66:20:c4:91:74: 95:01:77:67:02:a0:83:6d:9b:a7:f5:9f:cb:27:c7:0e:87:67: 47:06:4e:cb:99:a1:50:2e:73:12:23:dd:a4:32:0b:50:df:48: 13:21:2c:0f:8f:01:e7:11:4a:00:02:6d:c7:80:46:c7:ee:88: 0f:cc:b3:bb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3PKwIokoe9WxbzbqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDUxMjEzMDAzMFoXDTI2MDgxMDEzMDAzMFowLzEtMCsGA1UEAxMk NmI0NTkyMzYtNTQ1My00NDc4LTg1MTQtYTE0MzQ2NjYzNzkzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqQ0ya8CmzMCrrpqF7nQ103s+zKwZ21oDFVXO xRpfpHiBx3SbEQNOYyjBq3u4esfQ7b8hYI+T15bKf+izGGPla5mjjuhTv730fsGq HPO6JZamLJCKBr72lTF4BGYbz+w5+YjHKuvwmhB7fusrdQAfaKpzq3DB2gXoYd6n yCqo6fAU5jnu0SX4Pu5AIIKyZMq+UDntxfKJkcG8GGaqG69hGqq19pJk7IbVb2Sq tE6t32me/Bnnuyr1oWAL5j7u78QmLA4oSAcbpIBuWrnSF03/92mYe91zwwVpziCw cvbDeic0Fv85KCLNyhqDMqfrsa59Y6xTTboB7C7LXtgLjFz2MQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBMqyuxWUZlIwpwCHkCTWw9lMwQZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvYzlkOTlmYWMtYzZkMS0z MmQyLWI5ODAtYWQ5NzRlNjMzMTYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArESvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJRrEwtZjuXO6T/Va6kwJWPHRlWkgmiQprVQHn/HiC2IJUfdPNDcCs5c 9UlUXZHbW9dA7xxrLxKHeKUuH8x4BfeRn6IXJ6G8Lk5VYDRtlmaOU5TQGI5EKOge WP5qhxp1q+Llqr8wBOiWCD7TdnXcIUsXY5rkM3kkEkAjp7G6x6LtQl0qlm09tK1z hu+G4KdoySUkIeZumYGuOfJOXbzdOUtFHw0056jCmhTTrVxFLOx4prYB2sRoO6fg TKI/IsTSY2pmIMSRdJUBd2cCoINtm6f1n8snxw6HZ0cGTsuZoVAucxIj3aQyC1Df SBMhLA+PAecRSgACbceARsfuiA/Ms7s= -----END CERTIFICATE-----Generated at Wed May 13 13:22:51 2026 by rpki-client