$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a9ced301-e764-35f6-abb8-f3cbf23e84fc.roa File: a9ced301-e764-35f6-abb8-f3cbf23e84fc.roa (raw, json) Hash identifier: VNqmdbKkwrxoX54lnSzG8ydWrUPUVOsoKwEql0cGbk4= Subject key identifier: 62:58:6E:79:AC:99:B1:9F:38:EB:D5:2A:84:E1:5D:84:83:6D:43:F8 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584E0865E19B3D2181F23BFDB600 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a9ced301-e764-35f6-abb8-f3cbf23e84fc.roa Signing time: Tue 02 Jun 2026 01:00:10 +0000 ROA not before: Tue 02 Jun 2026 01:00:10 +0000 ROA not after: Mon 31 Aug 2026 01:00:10 +0000 asID: 13335 IP address blocks: 172.64.193.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 04 Jun 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:08:65:e1:9b:3d:21:81:f2:3b:fd:b6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Jun 2 01:00:10 2026 GMT Not After : Aug 31 01:00:10 2026 GMT Subject: CN=6d22ce53-bc4b-4bca-ac79-7e9e44f41dde Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:47:ee:d0:d6:88:cf:f6:f9:81:69:71:ae:68: f3:2d:ea:3b:70:37:16:31:b2:c6:48:5f:f1:74:b4: a2:fe:68:f3:91:ff:27:de:25:24:8a:22:c3:b6:72: 2e:32:52:07:d2:13:4a:65:96:9d:56:a2:dd:e1:ac: 2a:a1:6d:50:a2:d5:3d:5d:3e:12:47:da:90:91:9a: 00:c4:11:f7:4d:e2:1f:90:f6:f1:e7:4e:d9:10:fc: 1a:6c:5e:23:b6:43:ab:28:d7:f6:4e:77:4f:c0:b9: 15:4b:d5:ec:b0:e8:e6:33:11:80:92:3f:7a:f9:9b: e5:95:d7:38:88:53:51:45:ac:ac:3c:da:a0:5f:46: d2:fd:96:1f:b8:fd:59:a0:e0:47:c6:ff:7e:93:b3: bf:c7:62:ca:a0:4c:87:75:25:bb:a7:d6:3f:6a:a3: bb:00:26:78:27:b2:6f:d8:47:96:7f:5c:90:da:13: c8:f3:fc:66:1d:76:8c:1a:2f:2c:86:a3:b0:62:12: 06:52:1e:6c:8c:30:38:07:e0:02:2f:09:76:06:b4: 3a:20:90:74:11:ac:80:59:72:85:f9:11:f2:d8:dc: 7a:84:ad:2a:8e:bc:75:7e:d7:bd:81:c6:8a:78:0e: f8:10:ed:58:68:fb:bb:f1:b7:9e:8c:30:39:c5:6d: 1a:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:58:6E:79:AC:99:B1:9F:38:EB:D5:2A:84:E1:5D:84:83:6D:43:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a9ced301-e764-35f6-abb8-f3cbf23e84fc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.64.193.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bc:ff:c2:a3:5f:9c:3f:51:4f:e9:0e:4f:c1:4d:28:5b:9e:3c: 27:a3:6b:41:e8:0d:4f:c0:f7:a8:92:10:b7:68:1b:d4:a6:ed: 73:1d:61:10:66:b7:b9:00:f2:c6:12:5b:fb:0e:d5:94:e6:07: 9a:86:ba:85:ef:48:aa:c7:ba:e5:18:73:9a:9b:f0:01:bf:ac: d1:77:a8:f2:c9:70:d7:9d:74:bd:c6:42:d9:1e:d2:d6:5e:cd: ec:55:34:ec:b9:41:82:e4:6d:3d:fd:55:b3:70:b6:15:b7:fa: ad:1b:e3:5e:3c:88:3d:e9:5a:47:1c:d4:43:50:6e:20:ed:ac: 0e:b6:3b:cc:e6:3f:97:ac:66:90:c3:0e:df:af:80:6b:ee:96: 1e:00:f0:4e:0b:c9:69:0c:df:0c:7b:69:80:eb:04:03:f1:79: 9d:0a:c3:5b:ad:24:ab:77:e7:1c:90:91:d9:81:e2:dc:f4:f3: 37:6f:26:30:8e:cb:e3:60:4a:be:22:f2:b5:26:f4:62:b4:f6: 8c:1d:bd:2f:1e:2f:f1:9f:72:3b:6b:a8:1c:ec:bf:bd:20:7b: cf:8b:d7:5b:4f:1a:23:38:5f:60:07:77:6d:4c:8c:a7:59:eb: 43:b9:3b:cc:12:ac:9b:e0:e6:59:39:d0:27:1c:03:a8:0e:c5: 32:d5:74:10 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4IZeGbPSGB8jv9tgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDYwMjAxMDAxMFoXDTI2MDgzMTAxMDAxMFowLzEtMCsGA1UEAxMk NmQyMmNlNTMtYmM0Yi00YmNhLWFjNzktN2U5ZTQ0ZjQxZGRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp0fu0NaIz/b5gWlxrmjzLeo7cDcWMbLGSF/x dLSi/mjzkf8n3iUkiiLDtnIuMlIH0hNKZZadVqLd4awqoW1QotU9XT4SR9qQkZoA xBH3TeIfkPbx507ZEPwabF4jtkOrKNf2TndPwLkVS9XssOjmMxGAkj96+Zvlldc4 iFNRRaysPNqgX0bS/ZYfuP1ZoOBHxv9+k7O/x2LKoEyHdSW7p9Y/aqO7ACZ4J7Jv 2EeWf1yQ2hPI8/xmHXaMGi8shqOwYhIGUh5sjDA4B+ACLwl2BrQ6IJB0EayAWXKF +RHy2Nx6hK0qjrx1fte9gcaKeA74EO1YaPu78beejDA5xW0aOwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGJYbnmsmbGfOOvVKoThXYSDbUP4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvYTljZWQzMDEtZTc2NC0z NWY2LWFiYjgtZjNjYmYyM2U4NGZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEDBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALz/wqNfnD9RT+kOT8FNKFuePCeja0HoDU/A96iSELdoG9Sm7XMdYRBm t7kA8sYSW/sO1ZTmB5qGuoXvSKrHuuUYc5qb8AG/rNF3qPLJcNeddL3GQtke0tZe zexVNOy5QYLkbT39VbNwthW3+q0b4148iD3pWkcc1ENQbiDtrA62O8zmP5esZpDD Dt+vgGvulh4A8E4LyWkM3wx7aYDrBAPxeZ0Kw1utJKt35xyQkdmB4tz08zdvJjCO y+NgSr4i8rUm9GK09owdvS8eL/GfcjtrqBzsv70ge8+L11tPGiM4X2AHd21MjKdZ 60O5O8wSrJvg5lk50CccA6gOxTLVdBA= -----END CERTIFICATE-----Generated at Tue Jun 2 21:36:49 2026 by rpki-client