$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a828f445-7e69-31da-984f-9c00c63f9e14.roa File: a828f445-7e69-31da-984f-9c00c63f9e14.roa (raw, json) Hash identifier: qCENWem34egEbQ4Crl0qAZt/kqNB2SoKc671zljZEaI= Subject key identifier: A7:5F:E4:84:F0:2F:56:DC:28:D8:51:8A:17:75:F0:49:74:CA:F7:D7 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584F2EED2998DEB9DD80FD02E900 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a828f445-7e69-31da-984f-9c00c63f9e14.roa Signing time: Tue 15 Sep 2026 13:00:12 +0000 ROA not before: Tue 15 Sep 2026 13:00:12 +0000 ROA not after: Mon 14 Dec 2026 14:00:12 +0000 asID: 13335 IP address blocks: 172.64.189.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:2e:ed:29:98:de:b9:dd:80:fd:02:e9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Sep 15 13:00:12 2026 GMT Not After : Dec 14 14:00:12 2026 GMT Subject: CN=485bf607-024d-4dd3-b43e-64ac3c347e9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:0f:2c:3a:73:43:20:9d:a7:c3:55:5d:1e:72: c2:e9:ec:d1:4c:6a:e8:cd:a2:5c:e2:a5:33:e6:21: c0:20:58:46:b1:2b:c7:56:92:9a:5b:7b:2c:6f:ae: ff:9e:82:3c:d4:ba:53:42:10:d6:54:38:4d:30:f9: c9:31:d0:1d:25:30:18:51:9d:ed:05:04:2a:1a:fb: 6e:28:3e:a1:f5:19:dc:7e:34:f9:ea:58:1f:66:8e: c2:11:00:79:62:c7:6c:f9:64:96:56:8c:fc:11:19: a1:05:bd:6f:d5:98:82:97:b5:a8:5a:93:59:cf:3e: e4:fe:80:de:81:ce:0b:c9:f1:e7:28:e2:df:e4:c8: 47:0a:5a:8b:25:cb:c1:c3:dc:9e:0b:0c:a8:78:c5: 69:d4:43:90:08:71:81:a9:70:6b:c3:91:de:78:dc: 62:ee:44:7b:bc:74:5a:56:ff:35:b6:37:b4:09:fe: a4:b2:c0:25:00:5e:6d:33:ac:35:10:94:09:c7:f5: 98:c4:62:65:0a:78:e0:2e:6c:60:c7:35:a4:3d:1b: 1a:ad:26:ba:41:b7:30:e5:4e:ff:10:b0:d3:19:75: f7:14:3d:62:05:a0:99:49:8c:3f:9a:ca:30:bb:94: 76:4f:66:cb:c6:e1:cb:61:56:72:0a:5b:1e:e0:7c: 0f:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:5F:E4:84:F0:2F:56:DC:28:D8:51:8A:17:75:F0:49:74:CA:F7:D7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a828f445-7e69-31da-984f-9c00c63f9e14.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.64.189.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:6e:2f:c8:2f:d8:f2:04:26:67:52:32:60:3b:56:ef:78:51: c5:05:9b:96:39:62:b7:aa:1b:1b:89:fa:44:17:07:c5:87:45: ff:e1:fd:59:f6:12:6c:d4:05:0e:bf:1d:f9:77:ed:c5:97:f1: 31:5f:de:d3:02:cc:76:81:cd:42:eb:cf:7e:96:d7:1d:08:12: 36:7e:6f:cd:90:e4:6c:28:ae:db:f6:71:c9:05:9f:40:c2:e1: 9d:ce:5e:53:c1:bd:0e:6a:1c:d5:22:2d:36:c9:0a:3b:e5:20: 75:9b:df:ec:4c:cc:c6:40:c4:23:32:89:c0:f8:63:52:77:3a: 2c:28:53:b0:05:df:c7:a1:5b:19:12:ab:09:40:85:97:e9:c3: a6:9b:ec:58:37:83:4f:23:6d:5c:3e:0d:fd:a6:35:57:9c:e0: 72:32:65:a6:ff:f9:5c:b7:b3:9a:0a:1f:67:f7:06:9b:43:2e: c3:24:4d:0e:87:4f:ec:92:b0:c2:c9:24:47:84:10:7b:45:aa: 92:af:20:c4:53:10:09:bf:7f:55:af:9a:74:bb:5d:64:5f:0a: 99:42:28:81:9f:e6:97:6f:62:34:a5:2e:7d:8d:f0:97:fc:ae: d0:08:55:00:7f:aa:c8:b9:bd:15:8f:58:0e:60:12:36:c8:61: 3e:d9:15:04 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8u7SmY3rndgP0C6QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDkxNTEzMDAxMloXDTI2MTIxNDE0MDAxMlowLzEtMCsGA1UEAxMk NDg1YmY2MDctMDI0ZC00ZGQzLWI0M2UtNjRhYzNjMzQ3ZTliMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgw8sOnNDIJ2nw1VdHnLC6ezRTGrozaJc4qUz 5iHAIFhGsSvHVpKaW3ssb67/noI81LpTQhDWVDhNMPnJMdAdJTAYUZ3tBQQqGvtu KD6h9RncfjT56lgfZo7CEQB5Ysds+WSWVoz8ERmhBb1v1ZiCl7WoWpNZzz7k/oDe gc4LyfHnKOLf5MhHClqLJcvBw9yeCwyoeMVp1EOQCHGBqXBrw5HeeNxi7kR7vHRa Vv81tje0Cf6kssAlAF5tM6w1EJQJx/WYxGJlCnjgLmxgxzWkPRsarSa6Qbcw5U7/ ELDTGXX3FD1iBaCZSYw/msowu5R2T2bLxuHLYVZyClse4HwP3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKdf5ITwL1bcKNhRihd18El0yvfXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvYTgyOGY0NDUtN2U2OS0z MWRhLTk4NGYtOWMwMGM2M2Y5ZTE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEC9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIJuL8gv2PIEJmdSMmA7Vu94UcUFm5Y5YreqGxuJ+kQXB8WHRf/h/Vn2 EmzUBQ6/Hfl37cWX8TFf3tMCzHaBzULrz36W1x0IEjZ+b82Q5Gwortv2cckFn0DC 4Z3OXlPBvQ5qHNUiLTbJCjvlIHWb3+xMzMZAxCMyicD4Y1J3OiwoU7AF38ehWxkS qwlAhZfpw6ab7Fg3g08jbVw+Df2mNVec4HIyZab/+Vy3s5oKH2f3BptDLsMkTQ6H T+ySsMLJJEeEEHtFqpKvIMRTEAm/f1WvmnS7XWRfCplCKIGf5pdvYjSlLn2N8Jf8 rtAIVQB/qsi5vRWPWA5gEjbIYT7ZFQQ= -----END CERTIFICATE-----Generated at Tue Sep 22 06:21:03 2026 by rpki-client