$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/7ab427f7-6403-3405-a603-4f4e80ce9dfe.roa File: 7ab427f7-6403-3405-a603-4f4e80ce9dfe.roa (raw, json) Hash identifier: R1gL2YvmpafJT80u71xBlb4+yXaBSww054ASdT46Qr4= Subject key identifier: CB:4B:5C:22:F9:4A:CF:5A:4F:24:42:12:90:81:E4:F7:F8:EA:26:1A Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584EED5236B59D5573144860D280 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/7ab427f7-6403-3405-a603-4f4e80ce9dfe.roa Signing time: Sun 23 Aug 2026 01:00:12 +0000 ROA not before: Sun 23 Aug 2026 01:00:12 +0000 ROA not after: Sat 21 Nov 2026 02:00:12 +0000 asID: 13335 IP address blocks: 172.64.235.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ed:52:36:b5:9d:55:73:14:48:60:d2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 23 01:00:12 2026 GMT Not After : Nov 21 02:00:12 2026 GMT Subject: CN=8425e4f4-d6b7-4072-8bc7-8374e579afa6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:65:a1:fa:f8:e3:ae:ff:31:47:91:e1:a9:bc: 3e:13:5c:4f:57:dd:a2:35:eb:20:4b:58:e3:4c:c1: 0f:fb:8c:84:5a:25:af:d0:36:ed:28:29:ea:a1:d7: 33:6f:a3:ea:0a:85:a2:32:a7:bd:99:ad:34:fd:92: d8:77:79:43:40:e6:69:16:bf:5b:b4:fd:57:0f:a8: f6:67:b6:52:00:03:78:e4:60:8f:9f:d0:15:72:26: 4a:e4:16:8b:07:d0:2d:e8:fe:b3:5b:d0:a7:b4:d6: 82:c0:4f:6f:a7:77:b1:d2:3e:22:6e:39:32:d8:e8: 88:10:ff:aa:bc:53:ee:e3:e2:ed:42:bc:2a:6a:d3: 27:28:bf:4c:4e:3f:a2:15:3c:d0:ce:56:7a:ce:78: 2d:06:8b:86:33:78:cd:0b:82:d6:7f:78:2c:59:61: eb:3d:c6:3f:96:e1:05:48:83:ea:dd:a9:a7:b1:0f: 54:20:57:3e:27:cb:c4:73:85:d2:b9:70:02:a1:e5: 85:a7:93:fa:af:0e:d5:04:5b:4a:e0:46:73:a9:29: 0a:1e:d3:98:0a:5c:06:4e:bf:c5:66:e2:b2:1d:80: 10:a9:29:16:17:6e:52:3c:16:9a:ac:fa:df:88:7d: fc:b7:34:dd:82:0b:4e:20:7d:95:a4:f5:8d:bd:f0: 6d:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:4B:5C:22:F9:4A:CF:5A:4F:24:42:12:90:81:E4:F7:F8:EA:26:1A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/7ab427f7-6403-3405-a603-4f4e80ce9dfe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.64.235.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b6:63:c1:31:a2:2c:bd:37:fb:57:d7:75:34:30:ca:54:67:2b: b9:c9:a0:18:1d:a3:43:5b:f3:23:3d:97:42:31:94:b4:87:15: 5c:7c:43:a5:91:30:57:58:c9:06:bb:60:ac:67:20:d3:84:1f: a5:86:4f:5a:3e:68:24:30:70:16:db:e3:87:c7:24:8c:ac:6e: c1:86:0c:7e:97:9c:7c:70:1e:77:c0:0f:f4:b3:d6:06:42:b0: 0b:b6:2b:06:ec:76:25:f1:7d:9e:5e:5a:e1:07:00:af:58:3d: 4f:7b:44:3f:30:eb:75:08:be:ee:a7:93:91:d0:c9:1d:c2:a6: 93:97:66:8d:a6:32:db:19:49:1c:04:5b:d0:64:20:08:04:16: b1:36:8d:46:35:84:88:c9:f4:af:d1:41:f1:f1:3b:2a:99:9b: a5:5f:06:a5:91:2e:33:f7:59:20:19:4c:94:45:1a:3d:63:fd: 33:08:45:df:d7:05:fb:0c:06:38:df:87:3e:8a:59:d7:04:8b: 81:98:28:0a:ad:a1:3c:9c:93:10:c5:5f:2d:27:c8:84:83:ce: df:69:45:37:78:52:c6:5d:48:75:69:41:f9:53:e9:87:68:d4: 4a:ee:b9:0a:3d:d6:72:48:25:69:44:3f:fd:a5:30:23:ae:46: ee:d9:e7:8f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7tUja1nVVzFEhg0oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDgyMzAxMDAxMloXDTI2MTEyMTAyMDAxMlowLzEtMCsGA1UEAxMk ODQyNWU0ZjQtZDZiNy00MDcyLThiYzctODM3NGU1NzlhZmE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhmWh+vjjrv8xR5Hhqbw+E1xPV92iNesgS1jj TMEP+4yEWiWv0DbtKCnqodczb6PqCoWiMqe9ma00/ZLYd3lDQOZpFr9btP1XD6j2 Z7ZSAAN45GCPn9AVciZK5BaLB9At6P6zW9CntNaCwE9vp3ex0j4ibjky2OiIEP+q vFPu4+LtQrwqatMnKL9MTj+iFTzQzlZ6zngtBouGM3jNC4LWf3gsWWHrPcY/luEF SIPq3amnsQ9UIFc+J8vEc4XSuXACoeWFp5P6rw7VBFtK4EZzqSkKHtOYClwGTr/F ZuKyHYAQqSkWF25SPBaarPrfiH38tzTdggtOIH2VpPWNvfBtKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMtLXCL5Ss9aTyRCEpCB5Pf46iYaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvN2FiNDI3ZjctNjQwMy0z NDA1LWE2MDMtNGY0ZTgwY2U5ZGZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEDrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALZjwTGiLL03+1fXdTQwylRnK7nJoBgdo0Nb8yM9l0IxlLSHFVx8Q6WR MFdYyQa7YKxnINOEH6WGT1o+aCQwcBbb44fHJIysbsGGDH6XnHxwHnfAD/Sz1gZC sAu2KwbsdiXxfZ5eWuEHAK9YPU97RD8w63UIvu6nk5HQyR3CppOXZo2mMtsZSRwE W9BkIAgEFrE2jUY1hIjJ9K/RQfHxOyqZm6VfBqWRLjP3WSAZTJRFGj1j/TMIRd/X BfsMBjjfhz6KWdcEi4GYKAqtoTyckxDFXy0nyISDzt9pRTd4UsZdSHVpQflT6Ydo 1EruuQo91nJIJWlEP/2lMCOuRu7Z548= -----END CERTIFICATE-----Generated at Tue Sep 22 07:07:52 2026 by rpki-client