$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a828f445-7e69-31da-984f-9c00c63f9e14.roa File: a828f445-7e69-31da-984f-9c00c63f9e14.roa (raw, json) Hash identifier: ITyfTfRv7fTzvOzqpUn8sW0Gu99ubVpEVTen1MJaTy8= Subject key identifier: C9:8E:73:2F:4B:C8:71:A6:A5:79:6B:41:4B:0C:9A:60:E5:DB:C3:A5 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584DAC4594B5EDE0A2549E049E00 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a828f445-7e69-31da-984f-9c00c63f9e14.roa Signing time: Thu 30 Apr 2026 01:00:26 +0000 ROA not before: Thu 30 Apr 2026 01:00:26 +0000 ROA not after: Wed 29 Jul 2026 01:00:26 +0000 asID: 13335 IP address blocks: 172.64.189.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 11 May 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:ac:45:94:b5:ed:e0:a2:54:9e:04:9e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Apr 30 01:00:26 2026 GMT Not After : Jul 29 01:00:26 2026 GMT Subject: CN=0d3b4059-9935-4144-8c7d-180a8aa8df20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:06:15:53:31:2f:79:6f:fa:07:8c:82:cb:67: 72:9b:b8:7d:98:5b:03:cd:9a:65:9e:97:47:cb:81: 03:0c:dd:5e:3a:ee:d4:f4:68:84:52:44:a1:38:63: d1:02:ec:5b:7b:00:30:43:a4:e9:38:5e:08:5f:b5: 38:de:f0:33:e4:6c:3f:e4:a1:7e:d5:1d:61:c0:32: 74:11:bd:dd:8b:41:bd:06:fc:54:81:6f:cf:f1:a8: 67:41:00:97:62:f4:b7:27:8d:c3:4e:ae:0e:48:36: 05:ea:8a:39:a3:d5:90:5c:28:21:ed:e5:58:cb:18: 47:2c:ee:f8:ed:af:af:f6:04:43:3a:d1:8e:fd:54: 07:af:d1:2c:63:a3:62:bd:59:0a:74:e7:a6:5a:33: d8:10:03:ca:71:82:ac:6c:9c:90:24:c0:f9:cc:55: 43:38:84:1b:96:ef:8e:44:bc:2f:68:7c:66:c3:6f: 76:53:7e:60:33:90:97:1f:62:3d:e2:02:2a:9f:3a: ba:c5:5d:c4:c2:2a:37:9e:2c:44:f6:70:08:78:a2: dd:72:ca:f6:8f:57:46:6a:12:78:45:05:36:78:e6: 30:a8:cd:76:c3:f9:9e:7c:ff:e3:b4:81:e0:d0:06: f6:ed:b2:f1:18:be:eb:2f:e4:b8:f8:08:0d:01:55: 41:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:8E:73:2F:4B:C8:71:A6:A5:79:6B:41:4B:0C:9A:60:E5:DB:C3:A5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a828f445-7e69-31da-984f-9c00c63f9e14.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.64.189.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:34:0e:6a:e8:ae:6d:1c:6f:f1:3a:4e:be:fb:09:c2:ae:61: be:48:6a:ed:9f:16:cf:8a:fc:6a:70:03:d5:36:51:eb:86:82: 23:9e:b3:8f:25:ed:41:9e:78:8a:c9:f5:01:e1:7b:83:5d:9e: b5:8c:7f:00:dc:03:7b:e4:e2:a1:57:66:8e:8d:7b:37:56:d5: 83:07:14:80:7e:5c:16:df:9d:4e:9c:e8:c1:85:16:62:b6:56: 7d:00:0e:5d:c8:61:9c:af:51:fc:ab:6f:30:a5:8b:dc:e3:9d: 6e:ec:1d:02:fe:5e:0b:ec:7f:04:61:c8:e9:c6:28:1d:ed:1c: fd:79:11:d7:e9:d5:28:02:27:85:d3:37:ec:66:65:f8:49:72: 67:b6:ca:77:82:f4:28:8f:d6:a7:6f:73:78:06:63:7e:85:ba: 4e:6f:15:45:e2:dd:22:77:c9:37:99:15:5f:e1:7b:09:74:20: 70:10:6c:e9:11:94:1e:cc:d4:5a:b7:23:23:a7:91:a1:15:bc: c2:c9:88:2c:27:6f:17:68:31:8e:8e:25:0f:39:5c:5a:66:bd: ba:18:b6:f8:1c:d0:c4:84:33:b8:a0:da:a6:28:b5:ec:23:e8: b3:fa:de:59:e8:6f:e3:03:8d:68:f9:e9:68:cd:14:58:67:15: 04:8b:e1:f1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2sRZS17eCiVJ4EngAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDQzMDAxMDAyNloXDTI2MDcyOTAxMDAyNlowLzEtMCsGA1UEAxMk MGQzYjQwNTktOTkzNS00MTQ0LThjN2QtMTgwYThhYThkZjIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAywYVUzEveW/6B4yCy2dym7h9mFsDzZplnpdH y4EDDN1eOu7U9GiEUkShOGPRAuxbewAwQ6TpOF4IX7U43vAz5Gw/5KF+1R1hwDJ0 Eb3di0G9BvxUgW/P8ahnQQCXYvS3J43DTq4OSDYF6oo5o9WQXCgh7eVYyxhHLO74 7a+v9gRDOtGO/VQHr9EsY6NivVkKdOemWjPYEAPKcYKsbJyQJMD5zFVDOIQblu+O RLwvaHxmw292U35gM5CXH2I94gIqnzq6xV3Ewio3nixE9nAIeKLdcsr2j1dGahJ4 RQU2eOYwqM12w/mefP/jtIHg0Ab27bLxGL7rL+S4+AgNAVVBdwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMmOcy9LyHGmpXlrQUsMmmDl28OlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvYTgyOGY0NDUtN2U2OS0z MWRhLTk4NGYtOWMwMGM2M2Y5ZTE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEC9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJQ0Dmrorm0cb/E6Tr77CcKuYb5Iau2fFs+K/GpwA9U2UeuGgiOes48l 7UGeeIrJ9QHhe4NdnrWMfwDcA3vk4qFXZo6NezdW1YMHFIB+XBbfnU6c6MGFFmK2 Vn0ADl3IYZyvUfyrbzCli9zjnW7sHQL+XgvsfwRhyOnGKB3tHP15Edfp1SgCJ4XT N+xmZfhJcme2yneC9CiP1qdvc3gGY36Fuk5vFUXi3SJ3yTeZFV/hewl0IHAQbOkR lB7M1Fq3IyOnkaEVvMLJiCwnbxdoMY6OJQ85XFpmvboYtvgc0MSEM7ig2qYotewj 6LP63lnob+MDjWj56WjNFFhnFQSL4fE= -----END CERTIFICATE-----Generated at Sat May 9 08:12:31 2026 by rpki-client