$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/38f04789-bbe7-3d34-8d74-0ee8e1e83360.roa File: 38f04789-bbe7-3d34-8d74-0ee8e1e83360.roa (raw, json) Hash identifier: htAiVydmRUUjjDvRyH6Kf8dL7uyw6Rq5Vfa0DWfp1jg= Subject key identifier: 2D:FB:A5:F9:D1:5D:11:FB:82:E7:2C:DF:1F:89:54:4E:19:1C:F5:9D Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584EEA8779A09035968A7160BBF0 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/38f04789-bbe7-3d34-8d74-0ee8e1e83360.roa Signing time: Sat 22 Aug 2026 01:00:12 +0000 ROA not before: Sat 22 Aug 2026 01:00:12 +0000 ROA not after: Fri 20 Nov 2026 02:00:12 +0000 asID: 13335 IP address blocks: 172.64.159.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ea:87:79:a0:90:35:96:8a:71:60:bb:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 22 01:00:12 2026 GMT Not After : Nov 20 02:00:12 2026 GMT Subject: CN=929270db-ea5b-4eff-b82f-91e2a0f86605 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:78:53:db:af:15:43:0e:d0:07:86:c3:b6:cc: 95:94:23:53:d9:fe:12:0a:96:f8:7b:59:77:60:bb: 4f:f6:c3:cb:84:c1:9c:3e:74:20:f3:38:9c:18:2e: bf:b3:57:d1:b5:69:16:93:c3:c9:a8:3a:08:5d:01: fd:71:ac:85:5b:b1:f2:23:21:c9:3d:39:d6:f5:23: d9:7f:9f:22:19:1d:cc:4e:3c:ab:80:41:27:3c:79: ef:cf:a4:75:87:5b:fb:35:da:b3:cb:04:12:82:6a: dc:9a:53:58:b4:d3:77:dd:b2:71:cb:66:5a:ea:b8: f3:5a:48:f3:e8:ac:6a:9b:9b:f0:94:da:69:55:fc: 43:7a:5d:fe:fe:92:75:63:08:ec:d6:ed:cb:a7:4f: 96:d0:a3:67:11:af:a6:fa:56:a9:a3:f1:54:fd:92: bc:45:37:9b:d1:63:1d:0e:92:23:30:75:a9:c6:06: 20:dc:40:9a:44:a8:57:bc:b6:b0:9a:37:a9:55:12: 2c:a2:d1:ef:d5:44:7b:d4:c3:b9:f3:af:4c:9d:86: 4b:16:97:ba:70:1f:ac:2b:9f:1d:cf:1f:99:11:46: 5e:00:dd:69:f4:8e:48:de:12:41:97:5c:68:bb:9e: 64:75:08:29:95:3d:ce:35:93:0d:27:ee:a2:52:bd: 6e:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:FB:A5:F9:D1:5D:11:FB:82:E7:2C:DF:1F:89:54:4E:19:1C:F5:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/38f04789-bbe7-3d34-8d74-0ee8e1e83360.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.64.159.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:3e:3a:9e:08:80:9e:71:86:19:5d:24:25:6f:56:62:a8:1f: 44:87:7a:8d:dd:a6:f1:55:5a:c7:15:50:1d:3b:c1:e5:58:c9: 47:b3:f7:ab:ad:52:fd:24:d6:9b:8d:63:8d:52:79:ac:92:ee: cd:51:88:27:8d:e6:ec:79:f5:67:aa:ef:be:47:50:aa:5e:93: 0e:11:ff:d0:27:91:ea:ae:90:27:1d:7c:a3:0a:6f:81:8a:fb: 96:65:be:10:15:4b:5b:15:7e:fb:3a:5a:5f:8b:a8:fe:ba:16: ad:0a:eb:b2:1b:a1:82:ea:68:4a:47:ce:76:18:c6:0b:74:e5: 2a:5c:bc:eb:88:bf:ac:47:9c:20:3c:3f:6f:fe:37:63:a5:63: 18:35:78:07:43:96:48:5d:5e:83:2a:9a:82:19:f9:a9:b7:8f: 95:2e:e5:30:10:cf:d2:bd:b2:7b:01:b6:76:d3:e6:93:0c:39: ab:79:b4:00:76:42:e0:ad:19:9e:80:93:5e:6c:a7:31:55:a5: 00:16:02:ee:b7:2a:03:6d:6a:ad:38:82:19:53:1f:4a:fa:1e: d3:35:7c:bc:6b:57:b5:90:8b:37:de:45:c6:7e:27:4b:d1:2c: 66:b7:a9:af:47:6e:27:f7:59:63:72:31:57:78:12:3a:b1:82: a7:2e:e9:53 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7qh3mgkDWWinFgu/AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDgyMjAxMDAxMloXDTI2MTEyMDAyMDAxMlowLzEtMCsGA1UEAxMk OTI5MjcwZGItZWE1Yi00ZWZmLWI4MmYtOTFlMmEwZjg2NjA1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgXhT268VQw7QB4bDtsyVlCNT2f4SCpb4e1l3 YLtP9sPLhMGcPnQg8zicGC6/s1fRtWkWk8PJqDoIXQH9cayFW7HyIyHJPTnW9SPZ f58iGR3MTjyrgEEnPHnvz6R1h1v7NdqzywQSgmrcmlNYtNN33bJxy2Za6rjzWkjz 6Kxqm5vwlNppVfxDel3+/pJ1Ywjs1u3Lp0+W0KNnEa+m+lapo/FU/ZK8RTeb0WMd DpIjMHWpxgYg3ECaRKhXvLawmjepVRIsotHv1UR71MO5869MnYZLFpe6cB+sK58d zx+ZEUZeAN1p9I5I3hJBl1xou55kdQgplT3ONZMNJ+6iUr1utwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC37pfnRXRH7gucs3x+JVE4ZHPWdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMzhmMDQ3ODktYmJlNy0z ZDM0LThkNzQtMGVlOGUxZTgzMzYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArECfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEs+Op4IgJ5xhhldJCVvVmKoH0SHeo3dpvFVWscVUB07weVYyUez96ut Uv0k1puNY41SeayS7s1RiCeN5ux59Weq775HUKpekw4R/9AnkequkCcdfKMKb4GK +5ZlvhAVS1sVfvs6Wl+LqP66Fq0K67IboYLqaEpHznYYxgt05SpcvOuIv6xHnCA8 P2/+N2OlYxg1eAdDlkhdXoMqmoIZ+am3j5Uu5TAQz9K9snsBtnbT5pMMOat5tAB2 QuCtGZ6Ak15spzFVpQAWAu63KgNtaq04ghlTH0r6HtM1fLxrV7WQizfeRcZ+J0vR LGa3qa9Hbif3WWNyMVd4Ejqxgqcu6VM= -----END CERTIFICATE-----Generated at Tue Sep 22 07:08:01 2026 by rpki-client