$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/82020009-ed32-332f-a1cc-4303afb6501d.roa File: 82020009-ed32-332f-a1cc-4303afb6501d.roa (raw, json) Hash identifier: W/0/HnekVFLUmHlUt8dZwVgpGNSTwzDHJMrVZOVzbTE= Subject key identifier: C9:40:08:72:BF:DD:5C:C0:06:C7:B8:60:71:43:5F:8E:25:DB:83:D3 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584DEF460240EB462BC69229FD80 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/82020009-ed32-332f-a1cc-4303afb6501d.roa Signing time: Sun 24 May 2026 01:00:27 +0000 ROA not before: Sun 24 May 2026 01:00:27 +0000 ROA not after: Sat 22 Aug 2026 01:00:27 +0000 asID: 13335 IP address blocks: 172.64.216.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 04 Jun 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:ef:46:02:40:eb:46:2b:c6:92:29:fd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: May 24 01:00:27 2026 GMT Not After : Aug 22 01:00:27 2026 GMT Subject: CN=9ba530c7-3459-4389-8769-bdc16b85120f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:18:9f:7d:07:e8:f8:e7:3e:15:86:13:50:b6: eb:6d:a6:61:fe:94:f1:ae:9a:03:f2:f6:33:6c:6e: a0:6d:aa:e3:58:a0:55:2f:b0:0a:05:9a:43:0d:8d: bb:00:10:20:04:1e:f7:88:a5:50:a2:01:da:09:be: f9:fc:a5:ca:a5:47:83:60:79:c4:c7:ef:31:43:e0: 10:2e:c7:0d:a9:7e:24:72:ee:df:0d:7f:cd:3a:31: 20:ad:46:9a:c6:ef:a5:49:f3:4f:4c:96:fb:16:99: f2:db:3e:c7:da:cb:e1:38:cb:a3:b1:22:86:3e:33: c7:fc:25:ce:5a:6a:aa:77:d1:0b:4c:81:14:64:4f: 72:69:42:de:32:6b:12:3b:7e:7d:90:14:eb:44:f5: b2:f1:6c:7d:19:7c:64:61:e2:5b:50:41:5c:af:c4: 6a:b3:4c:b2:11:32:09:95:5c:a2:34:2b:48:68:88: 39:96:86:3b:8a:a6:6d:38:9d:5b:ad:c4:4e:36:83: 83:75:ad:6a:d0:0c:9c:e0:e7:5b:38:30:1d:b1:40: c7:90:38:22:c7:63:f1:e4:85:c9:30:b3:b3:c6:22: db:01:8b:12:db:09:dd:7e:1f:a4:3f:27:4c:7d:c1: 17:6c:38:da:6b:0a:39:d0:dd:e5:ef:22:05:24:95: 5f:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:40:08:72:BF:DD:5C:C0:06:C7:B8:60:71:43:5F:8E:25:DB:83:D3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/82020009-ed32-332f-a1cc-4303afb6501d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.64.216.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:be:25:61:69:df:71:50:09:c7:14:76:6c:86:fc:ec:3f:76: c3:32:ca:93:30:f0:2e:53:80:c7:0f:27:ee:16:ed:60:98:2d: 87:a8:af:5a:9b:2a:cf:b3:f1:9d:a6:28:23:5e:27:8f:f6:dd: f1:8a:58:db:4b:9b:d3:85:bd:0a:9a:46:21:93:ad:f2:3f:7f: 08:d8:57:68:3d:87:93:f4:e9:36:c0:2d:e4:67:b1:f6:6e:14: 79:45:61:b2:eb:a7:3d:69:2c:ad:0b:ab:7d:80:5c:b8:47:f1: e5:d4:9c:2f:db:ea:bf:2e:84:3e:a5:62:a5:d9:2f:0c:89:e4: 01:d0:4b:34:7d:54:68:43:80:16:ef:cf:c2:83:2f:f6:d9:ea: 92:91:6d:12:58:99:29:5e:06:92:96:e9:6d:88:20:db:c5:4d: 9c:57:39:33:06:11:5c:f6:28:2d:0f:bb:c4:c9:b2:4a:df:d3: 96:af:23:b8:6b:aa:98:63:f5:9f:51:f6:fb:39:14:70:07:ce: 23:07:21:e6:c5:9c:70:73:84:a2:e7:ef:cc:16:44:87:bf:f4: 7b:b6:1a:7a:5b:5f:d6:bc:ba:db:e1:58:14:17:25:ef:97:ef: c9:7b:b2:0c:c3:a3:db:6d:a2:3b:69:b6:4f:23:67:71:92:ce: e7:94:a7:c4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3vRgJA60YrxpIp/YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDUyNDAxMDAyN1oXDTI2MDgyMjAxMDAyN1owLzEtMCsGA1UEAxMk OWJhNTMwYzctMzQ1OS00Mzg5LTg3NjktYmRjMTZiODUxMjBmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5xiffQfo+Oc+FYYTULbrbaZh/pTxrpoD8vYz bG6gbarjWKBVL7AKBZpDDY27ABAgBB73iKVQogHaCb75/KXKpUeDYHnEx+8xQ+AQ LscNqX4kcu7fDX/NOjEgrUaaxu+lSfNPTJb7Fpny2z7H2svhOMujsSKGPjPH/CXO Wmqqd9ELTIEUZE9yaULeMmsSO359kBTrRPWy8Wx9GXxkYeJbUEFcr8Rqs0yyETIJ lVyiNCtIaIg5loY7iqZtOJ1brcRONoODda1q0Ayc4OdbODAdsUDHkDgix2Px5IXJ MLOzxiLbAYsS2wndfh+kPydMfcEXbDjaawo50N3l7yIFJJVfbQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMlACHK/3VzABse4YHFDX44l24PTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvODIwMjAwMDktZWQzMi0z MzJmLWExY2MtNDMwM2FmYjY1MDFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEDYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF2+JWFp33FQCccUdmyG/Ow/dsMyypMw8C5TgMcPJ+4W7WCYLYeor1qb Ks+z8Z2mKCNeJ4/23fGKWNtLm9OFvQqaRiGTrfI/fwjYV2g9h5P06TbALeRnsfZu FHlFYbLrpz1pLK0Lq32AXLhH8eXUnC/b6r8uhD6lYqXZLwyJ5AHQSzR9VGhDgBbv z8KDL/bZ6pKRbRJYmSleBpKW6W2IINvFTZxXOTMGEVz2KC0Pu8TJskrf05avI7hr qphj9Z9R9vs5FHAHziMHIebFnHBzhKLn78wWRIe/9Hu2GnpbX9a8utvhWBQXJe+X 78l7sgzDo9ttojtptk8jZ3GSzueUp8Q= -----END CERTIFICATE-----Generated at Tue Jun 2 21:59:05 2026 by rpki-client