$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/42d74275-958b-3cf8-95ba-d4f4a66e65b0.roa File: 42d74275-958b-3cf8-95ba-d4f4a66e65b0.roa (raw, json) Hash identifier: EpnMl2gADUz0Cf7zeLVsd98a6ED67FrJW42mJkHINHA= Subject key identifier: 8C:A9:E6:57:4F:36:EF:95:DF:8E:80:36:78:53:07:21:65:D1:62:02 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584EE42323D0822B1CB2AA4B3A70 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/42d74275-958b-3cf8-95ba-d4f4a66e65b0.roa Signing time: Wed 19 Aug 2026 18:03:37 +0000 ROA not before: Wed 19 Aug 2026 18:03:37 +0000 ROA not after: Fri 30 Jul 2027 04:00:00 +0000 asID: 13335 IP address blocks: 172.64.96.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e4:23:23:d0:82:2b:1c:b2:aa:4b:3a:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 19 18:03:37 2026 GMT Not After : Jul 30 04:00:00 2027 GMT Subject: CN=4e88cfb4-9c2e-4511-85e6-869b993dfb42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:04:bb:af:c4:25:fe:14:0a:05:8a:22:02:c1: f2:d5:e5:a9:2d:f3:7d:bf:ab:c8:6a:34:d4:06:4c: 72:02:70:0d:16:1f:47:b0:68:fc:81:b3:4e:4a:4f: d9:d8:df:19:a4:09:36:f9:2d:26:6b:a9:f6:26:8e: c6:53:05:da:2b:d7:c4:97:06:d3:d0:a0:89:40:36: 73:a7:95:90:8b:8f:75:1c:a6:b0:c1:b9:23:96:24: 4f:f0:1d:1f:dc:bc:f3:a0:99:28:10:9d:a2:f6:7d: aa:89:1b:f4:db:5a:e7:7b:8c:4d:3a:20:ec:b8:83: 46:4d:ad:19:25:cc:4e:74:7e:16:92:eb:c7:2b:19: b0:d3:d3:77:c5:e3:84:bd:c9:b3:bc:f4:f0:bb:68: ed:26:e9:eb:91:f5:18:35:db:d9:4f:ff:71:dc:99: b5:0b:c4:2a:ca:62:c8:d4:bf:04:84:84:4a:7b:47: 07:a6:a7:8a:06:f2:78:0b:9e:89:ad:5d:2f:87:c8: 26:13:63:e0:1d:66:f5:8b:0a:a0:db:52:1a:57:c9: 31:bb:91:dc:e8:10:dd:74:a1:d4:1a:ff:b2:dc:00: 14:61:88:0d:af:ff:1d:5b:e6:3d:77:5e:04:2f:f0: 40:7a:0d:3c:e5:e9:62:3c:08:1f:83:40:19:5f:ce: 07:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:A9:E6:57:4F:36:EF:95:DF:8E:80:36:78:53:07:21:65:D1:62:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/42d74275-958b-3cf8-95ba-d4f4a66e65b0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.64.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:d2:4a:73:a6:b1:a0:a8:f0:f0:37:74:46:4c:97:29:27:47: b2:43:b8:1d:34:db:b3:14:b9:98:11:7e:de:68:47:8c:ab:3c: ca:9f:af:e1:84:26:c4:3c:b0:77:7f:ed:d1:8f:df:a5:69:b8: d4:f2:bd:fc:d2:65:e8:f6:38:89:13:5c:cb:4d:c0:37:9d:64: ff:0e:dc:02:52:e0:0b:9a:03:57:fc:33:31:75:51:26:e7:5f: 87:81:ec:aa:e5:28:48:3f:64:87:08:8a:be:7f:e2:c6:eb:aa: 05:b3:a5:6e:18:62:ea:fc:9d:ca:25:04:fe:62:2f:78:99:2b: 81:5d:90:23:5a:94:c6:42:68:67:28:93:c8:3b:af:ec:ea:4b: 93:e2:3b:8a:e2:e7:cb:e8:61:72:94:2f:21:33:72:05:db:77: 98:e2:f0:ef:e3:93:fa:d4:c2:a3:71:c6:19:bb:45:76:dd:db: a2:38:2e:88:90:d9:93:e9:92:a1:69:c8:46:92:5e:01:cb:a3: cf:bc:eb:ba:87:e3:e3:50:39:06:2e:33:07:dd:32:b3:6a:d3: 3c:e7:e1:e9:c5:66:36:f3:21:03:1e:b0:d7:37:5d:62:19:bf: 17:a6:96:34:85:9f:ad:78:15:50:da:09:15:84:be:42:44:a4: 3c:d4:42:84 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7kIyPQgiscsqpLOnAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDgxOTE4MDMzN1oXDTI3MDczMDA0MDAwMFowLzEtMCsGA1UEAxMk NGU4OGNmYjQtOWMyZS00NTExLTg1ZTYtODY5Yjk5M2RmYjQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkwS7r8Ql/hQKBYoiAsHy1eWpLfN9v6vIajTU BkxyAnANFh9HsGj8gbNOSk/Z2N8ZpAk2+S0ma6n2Jo7GUwXaK9fElwbT0KCJQDZz p5WQi491HKawwbkjliRP8B0f3LzzoJkoEJ2i9n2qiRv021rne4xNOiDsuINGTa0Z JcxOdH4WkuvHKxmw09N3xeOEvcmzvPTwu2jtJunrkfUYNdvZT/9x3Jm1C8QqymLI 1L8EhIRKe0cHpqeKBvJ4C56JrV0vh8gmE2PgHWb1iwqg21IaV8kxu5Hc6BDddKHU Gv+y3AAUYYgNr/8dW+Y9d14EL/BAeg085eliPAgfg0AZX84H6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIyp5ldPNu+V346ANnhTByFl0WICMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNDJkNzQyNzUtOTU4Yi0z Y2Y4LTk1YmEtZDRmNGE2NmU2NWIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErEBgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABXSSnOmsaCo8PA3dEZMlyknR7JDuB0027MUuZgRft5oR4yrPMqfr+GE JsQ8sHd/7dGP36VpuNTyvfzSZej2OIkTXMtNwDedZP8O3AJS4AuaA1f8MzF1USbn X4eB7KrlKEg/ZIcIir5/4sbrqgWzpW4YYur8ncolBP5iL3iZK4FdkCNalMZCaGco k8g7r+zqS5PiO4ri58voYXKULyEzcgXbd5ji8O/jk/rUwqNxxhm7RXbd26I4LoiQ 2ZPpkqFpyEaSXgHLo8+867qH4+NQOQYuMwfdMrNq0zzn4enFZjbzIQMesNc3XWIZ vxemljSFn614FVDaCRWEvkJEpDzUQoQ= -----END CERTIFICATE-----Generated at Tue Sep 1 01:58:03 2026 by rpki-client