$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/23b42f68-c776-3bc4-ab18-251501f596c9.roa File: 23b42f68-c776-3bc4-ab18-251501f596c9.roa (raw, json) Hash identifier: FBV1aV5nefuLrL2zqvZ1CiBOyx0CVbk7WejF0mx4zoI= Subject key identifier: 98:9F:66:3A:7F:41:9E:15:F7:DF:4C:14:74:8F:73:D4:0E:C0:8F:DD Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584EEA8772620BAA8A827A4E68C0 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/23b42f68-c776-3bc4-ab18-251501f596c9.roa Signing time: Sat 22 Aug 2026 01:00:12 +0000 ROA not before: Sat 22 Aug 2026 01:00:12 +0000 ROA not after: Fri 20 Nov 2026 02:00:12 +0000 asID: 13335 IP address blocks: 172.64.40.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ea:87:72:62:0b:aa:8a:82:7a:4e:68:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 22 01:00:12 2026 GMT Not After : Nov 20 02:00:12 2026 GMT Subject: CN=8953ecf1-8f73-43c6-a29b-d6073edda1db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:5e:eb:c1:ac:a0:45:81:47:80:6e:15:44:40: 94:ea:35:cc:5b:27:dd:ff:66:b1:1e:81:af:53:41: c1:7f:f9:87:f0:c2:f0:d2:26:c6:91:49:df:5a:4a: 81:08:d6:e1:0a:5d:48:ca:af:81:6d:dd:b1:d0:8a: d1:61:a7:c9:78:9b:f6:5a:21:10:75:ec:ce:bc:2c: 47:1b:1d:62:17:9d:ef:c9:8b:ab:d2:1e:3b:29:56: 8a:2c:2b:ed:0c:39:03:9a:70:12:11:68:e3:62:46: a5:9e:b3:14:27:ea:9d:e8:a5:e7:e3:4b:c9:91:b7: a9:90:7a:14:45:f3:aa:b5:2f:1f:1c:97:10:fb:4f: 7b:c7:90:37:75:e5:85:f2:ca:2a:5a:69:9c:74:76: 86:f8:57:00:3b:a6:fb:ed:88:bc:4d:4f:b9:a5:30: 81:9a:37:8a:bd:00:2e:ce:5c:17:39:3c:03:cf:7b: 91:15:b5:22:a7:c9:0c:c7:31:9c:bf:24:7d:6a:0a: b5:82:ce:68:97:c1:0f:6a:47:01:ec:a2:33:de:42: 18:e7:82:fd:3f:e1:3e:04:5f:bf:24:c7:22:a3:fb: 46:a1:b3:1c:50:04:23:e3:5f:7b:48:c3:d1:51:73: f1:9a:91:5a:c0:b5:4d:6f:2a:fb:ad:45:79:d2:c2: 74:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:9F:66:3A:7F:41:9E:15:F7:DF:4C:14:74:8F:73:D4:0E:C0:8F:DD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/23b42f68-c776-3bc4-ab18-251501f596c9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.64.40.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:12:24:8b:95:21:aa:b5:97:fd:7e:d6:ac:e6:08:8a:b0:08: 83:16:d1:13:b9:15:fd:e6:6b:02:8f:54:5b:e6:f0:5a:30:5d: 04:2c:57:63:a1:85:c0:90:8d:12:7c:6d:00:84:81:a9:91:20: 1d:72:71:9d:b2:39:bd:bd:1c:60:0d:24:c7:f9:40:a8:c4:01: f2:05:de:bd:13:53:00:62:07:34:8c:8e:86:80:81:c8:d9:44: 64:2d:ab:7a:77:80:0f:14:15:74:9e:50:4c:03:2b:e5:32:90: f4:a5:7a:a2:75:1b:aa:27:96:f5:e7:0c:4b:72:1e:1e:55:19: 4d:3f:2a:e2:86:cb:2c:98:52:a0:ab:49:31:10:56:b3:50:ed: 3d:30:fb:08:2b:1b:cf:1f:ab:d0:86:1b:10:02:04:f0:74:14: 09:08:64:0f:a7:b1:b6:43:de:3b:71:cf:2f:72:2b:a1:0a:f2: c7:ae:e2:6c:5c:ec:b7:fa:20:83:41:32:fc:36:83:77:a7:ab: 2a:25:d1:b4:94:ec:eb:7b:32:3e:0b:53:76:34:d0:03:0f:3b: 98:b9:3d:9a:d8:08:36:bd:a4:0c:c6:70:a8:fb:eb:4c:bd:62: 7e:29:c4:c4:95:d8:b3:a7:d1:c7:dd:74:16:b6:fb:cf:e0:d8: 20:ba:08:98 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7qh3JiC6qKgnpOaMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDgyMjAxMDAxMloXDTI2MTEyMDAyMDAxMlowLzEtMCsGA1UEAxMk ODk1M2VjZjEtOGY3My00M2M2LWEyOWItZDYwNzNlZGRhMWRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmV7rwaygRYFHgG4VRECU6jXMWyfd/2axHoGv U0HBf/mH8MLw0ibGkUnfWkqBCNbhCl1Iyq+Bbd2x0IrRYafJeJv2WiEQdezOvCxH Gx1iF53vyYur0h47KVaKLCvtDDkDmnASEWjjYkalnrMUJ+qd6KXn40vJkbepkHoU RfOqtS8fHJcQ+097x5A3deWF8soqWmmcdHaG+FcAO6b77Yi8TU+5pTCBmjeKvQAu zlwXOTwDz3uRFbUip8kMxzGcvyR9agq1gs5ol8EPakcB7KIz3kIY54L9P+E+BF+/ JMcio/tGobMcUAQj4197SMPRUXPxmpFawLVNbyr7rUV50sJ0qwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJifZjp/QZ4V999MFHSPc9QOwI/dMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMjNiNDJmNjgtYzc3Ni0z YmM0LWFiMTgtMjUxNTAxZjU5NmM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEAoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABoSJIuVIaq1l/1+1qzmCIqwCIMW0RO5Ff3mawKPVFvm8FowXQQsV2Oh hcCQjRJ8bQCEgamRIB1ycZ2yOb29HGANJMf5QKjEAfIF3r0TUwBiBzSMjoaAgcjZ RGQtq3p3gA8UFXSeUEwDK+UykPSleqJ1G6onlvXnDEtyHh5VGU0/KuKGyyyYUqCr STEQVrNQ7T0w+wgrG88fq9CGGxACBPB0FAkIZA+nsbZD3jtxzy9yK6EK8seu4mxc 7Lf6IINBMvw2g3enqyol0bSU7Ot7Mj4LU3Y00AMPO5i5PZrYCDa9pAzGcKj760y9 Yn4pxMSV2LOn0cfddBa2+8/g2CC6CJg= -----END CERTIFICATE-----Generated at Mon Sep 28 05:14:32 2026 by rpki-client