$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/3da7ba70-1bb3-3819-afcf-716cf19c6678.roa File: 3da7ba70-1bb3-3819-afcf-716cf19c6678.roa (raw, json) Hash identifier: o4+lQsmE7cBHpLAOSot/cgHHisLXPEiaZq69wqjT86I= Subject key identifier: 47:94:7D:30:01:C0:88:31:08:92:3C:10:7F:98:C9:24:B0:FD:37:02 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584F8F3DE311FA24C54E3E52B280 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/3da7ba70-1bb3-3819-afcf-716cf19c6678.roa Signing time: Tue 20 Oct 2026 01:00:12 +0000 ROA not before: Tue 20 Oct 2026 01:00:12 +0000 ROA not after: Mon 18 Jan 2027 02:00:12 +0000 asID: 13335 IP address blocks: 172.64.236.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 22 Oct 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:8f:3d:e3:11:fa:24:c5:4e:3e:52:b2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 20 01:00:12 2026 GMT Not After : Jan 18 02:00:12 2027 GMT Subject: CN=2c2f8dc6-daea-4429-8a30-6f8d2c4084f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:e3:28:1b:8e:60:f7:07:95:17:4c:07:a8:d5: e0:b0:7c:b1:b5:dc:7a:7b:a4:21:55:33:a3:5c:82: a3:3e:fe:a0:d3:af:dc:92:14:8f:af:f3:fa:eb:4e: 52:62:07:26:80:b1:df:55:00:6f:22:2b:ae:00:78: d1:02:fe:05:7d:e0:63:cf:47:59:ee:f0:8d:1b:c2: c6:68:90:74:e3:6b:98:27:96:6e:d1:1f:c6:15:b7: bd:0b:d5:df:ad:1f:9a:cf:15:01:c4:e0:77:20:75: c9:ab:8a:61:b7:a6:3f:a2:4a:f9:9e:49:9b:a3:0d: 3e:a6:33:ac:b6:fd:47:c9:ba:12:ea:87:7c:e0:1a: f0:df:ea:be:e9:c4:9a:fa:ef:bb:5d:5a:08:9b:87: bc:a8:be:3d:69:6f:e5:73:e7:fa:40:4e:93:bf:9f: c0:c0:2f:84:a3:88:15:97:a5:02:c7:52:98:ba:83: 7d:97:93:09:8b:5f:b9:00:76:1f:60:65:b2:89:fd: de:2b:03:e6:66:e8:70:c6:72:b1:24:b5:e5:fc:86: da:38:9f:14:ff:b6:c4:80:7e:0c:23:74:fb:7f:d2: be:41:60:0a:89:18:96:70:cd:4b:d1:72:90:8f:35: 22:ec:e0:e9:1e:5e:ed:e2:ee:96:2d:1b:91:a7:ad: cf:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:94:7D:30:01:C0:88:31:08:92:3C:10:7F:98:C9:24:B0:FD:37:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/3da7ba70-1bb3-3819-afcf-716cf19c6678.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.64.236.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:af:c5:f9:8b:52:a0:fd:12:25:20:23:4b:fa:b9:ca:39:3e: 90:b2:5e:e3:af:48:04:9d:47:b1:f0:eb:3c:c3:d1:ff:ee:01: 36:60:dc:79:f3:91:da:6c:d2:c1:37:71:91:18:b7:9d:03:38: cb:29:d3:7a:16:3f:d4:35:96:be:a9:11:c2:66:ad:83:40:07: c2:75:05:ac:d1:2c:35:a6:16:fa:e6:f0:0d:3d:98:f2:ba:dc: 0d:fe:91:5e:29:92:6c:14:01:d8:c7:d7:a3:4a:17:78:04:62: 03:4a:f6:20:57:51:05:c4:ca:20:15:c0:bf:d1:b4:4d:4f:76: f0:07:b2:8e:c5:b6:96:bf:2c:4a:4a:d7:2f:79:ec:a9:a0:7c: 82:d5:4c:6f:96:54:f9:27:9c:9f:1b:d7:51:6d:1f:fd:59:c4: 9c:92:9e:d5:56:cc:10:84:d1:5e:2d:f4:d2:31:f8:0f:be:c0: 39:bd:9f:c9:19:9d:1c:3b:98:b8:9b:0e:9e:a3:d0:58:bc:aa: fa:8c:f6:07:d0:e2:a7:36:58:19:a4:13:3d:95:61:3d:7d:77: a9:27:3c:e3:e8:77:5c:26:27:f4:fe:0f:0f:3b:bf:cc:23:d7: 07:d7:9c:3e:83:88:49:86:ce:32:1f:79:a1:2c:bd:12:ee:e8: b3:a8:d5:1b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+PPeMR+iTFTj5SsoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MTAyMDAxMDAxMloXDTI3MDExODAyMDAxMlowLzEtMCsGA1UEAxMk MmMyZjhkYzYtZGFlYS00NDI5LThhMzAtNmY4ZDJjNDA4NGY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3eMoG45g9weVF0wHqNXgsHyxtdx6e6QhVTOj XIKjPv6g06/ckhSPr/P6605SYgcmgLHfVQBvIiuuAHjRAv4FfeBjz0dZ7vCNG8LG aJB042uYJ5Zu0R/GFbe9C9XfrR+azxUBxOB3IHXJq4pht6Y/okr5nkmbow0+pjOs tv1HyboS6od84Brw3+q+6cSa+u+7XVoIm4e8qL49aW/lc+f6QE6Tv5/AwC+Eo4gV l6UCx1KYuoN9l5MJi1+5AHYfYGWyif3eKwPmZuhwxnKxJLXl/IbaOJ8U/7bEgH4M I3T7f9K+QWAKiRiWcM1L0XKQjzUi7ODpHl7t4u6WLRuRp63PFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEeUfTABwIgxCJI8EH+YySSw/TcCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvM2RhN2JhNzAtMWJiMy0z ODE5LWFmY2YtNzE2Y2YxOWM2Njc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEDsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACWvxfmLUqD9EiUgI0v6uco5PpCyXuOvSASdR7Hw6zzD0f/uATZg3Hnz kdps0sE3cZEYt50DOMsp03oWP9Q1lr6pEcJmrYNAB8J1BazRLDWmFvrm8A09mPK6 3A3+kV4pkmwUAdjH16NKF3gEYgNK9iBXUQXEyiAVwL/RtE1PdvAHso7Ftpa/LEpK 1y957KmgfILVTG+WVPknnJ8b11FtH/1ZxJySntVWzBCE0V4t9NIx+A++wDm9n8kZ nRw7mLibDp6j0Fi8qvqM9gfQ4qc2WBmkEz2VYT19d6knPOPod1wmJ/T+Dw87v8wj 1wfXnD6DiEmGzjIfeaEsvRLu6LOo1Rs= -----END CERTIFICATE-----Generated at Tue Oct 20 03:26:07 2026 by rpki-client