$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b14328d0-b850-328b-afda-50e5c5ab2729.roa File: b14328d0-b850-328b-afda-50e5c5ab2729.roa (raw, json) Hash identifier: TlAI3akuq0m+qWK4eT0dgEWLqrfRBPTUge2awxWPB3Y= Subject key identifier: EC:AE:BD:DE:11:8A:3B:56:57:75:2C:8D:6E:64:80:45:9F:E2:09:EE Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584E4AEF653B6834B98DE1F7EF00 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b14328d0-b850-328b-afda-50e5c5ab2729.roa Signing time: Thu 25 Jun 2026 21:00:12 +0000 ROA not before: Thu 25 Jun 2026 21:00:12 +0000 ROA not after: Wed 23 Sep 2026 21:00:12 +0000 asID: 13335 IP address blocks: 172.64.233.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 Jul 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:4a:ef:65:3b:68:34:b9:8d:e1:f7:ef:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Jun 25 21:00:12 2026 GMT Not After : Sep 23 21:00:12 2026 GMT Subject: CN=5f3049f2-12b7-4f68-a361-6315af8a979e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:5f:c1:6d:44:56:68:0a:77:47:69:7e:2f:53: 8a:da:e9:f1:79:b2:8c:9f:50:87:8b:f5:80:16:f8: 24:72:3c:d7:44:fc:9e:cc:87:2e:e4:01:1e:b0:f9: 53:d2:6b:c4:35:b8:b8:43:9a:0d:45:e9:4b:bf:3c: cd:46:29:d9:4d:72:84:03:f3:e1:c1:d4:83:55:80: 1c:e4:ef:f8:0c:3b:be:6d:5e:58:1d:7c:09:58:5a: e6:44:ac:7a:fb:09:9f:b1:a1:17:a3:6e:6a:2a:9b: 84:b3:fa:79:ef:e5:7c:31:6a:e7:e9:5c:b3:f1:36: fa:53:11:37:03:b6:21:18:34:1e:46:d4:5b:e1:80: 2a:5a:16:fd:72:f3:9f:c4:27:60:9e:b5:f4:7a:95: 7a:3e:7c:d0:a9:f7:74:d3:12:16:8c:33:1f:e0:2e: b3:09:3d:16:66:27:65:cf:fa:81:96:71:f7:32:38: 25:8a:32:8c:32:c2:66:43:d0:ab:a9:4c:e4:cc:43: 91:53:b1:cb:a3:82:79:e6:04:dd:8a:b4:de:2f:57: c6:f1:a6:64:bc:5c:d2:0f:35:8e:18:20:8b:76:e0: e3:cc:76:c5:0f:6d:c8:4b:b4:24:f1:fd:ad:d5:69: 5d:22:28:6a:36:21:eb:0f:56:ab:e5:be:45:28:58: 3c:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:AE:BD:DE:11:8A:3B:56:57:75:2C:8D:6E:64:80:45:9F:E2:09:EE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b14328d0-b850-328b-afda-50e5c5ab2729.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.64.233.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:dd:37:63:b9:7c:f5:ad:a1:5a:f0:1b:24:ff:86:9c:f8:88: bb:47:a7:eb:28:4f:d2:84:22:7c:01:cf:72:61:b7:21:81:90: fc:c9:91:b6:b9:ed:23:d6:f0:09:ac:ea:e1:a6:14:b6:7e:b1: 19:32:27:6a:7f:95:60:b3:61:cb:76:15:fa:ee:6b:50:84:04: e0:16:88:61:f3:8f:eb:9b:25:a3:17:01:09:07:48:eb:25:a8: 36:70:5c:10:a0:3e:98:5b:97:dc:32:70:fb:35:f1:4e:d7:12: 80:cb:68:1d:fb:2e:0b:7c:19:b3:2a:19:bf:17:4f:8e:c1:ff: 01:91:4c:84:b3:81:c9:0a:f9:39:3a:6a:6c:2b:bc:97:9b:d7: cc:80:e8:30:da:77:63:a3:02:e0:16:11:65:da:a5:9c:22:49: 3c:98:8e:a8:e0:0d:c7:27:eb:8d:f2:65:7c:4a:ba:38:fc:39: 2e:e1:38:18:c8:59:bc:f3:4d:0b:f4:4b:21:d6:85:f5:bd:a1: 77:2b:dc:e8:2b:75:d4:37:31:71:9a:37:4f:6e:1c:7a:7a:02: 5d:8e:64:4e:6f:a7:61:be:2a:c4:88:78:9e:01:b2:d8:85:21: 4f:1a:9f:2c:ea:1c:e9:42:f5:9b:79:34:a8:43:31:9f:32:b1: d2:6b:27:30 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5K72U7aDS5jeH37wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDYyNTIxMDAxMloXDTI2MDkyMzIxMDAxMlowLzEtMCsGA1UEAxMk NWYzMDQ5ZjItMTJiNy00ZjY4LWEzNjEtNjMxNWFmOGE5NzllMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtF/BbURWaAp3R2l+L1OK2unxebKMn1CHi/WA FvgkcjzXRPyezIcu5AEesPlT0mvENbi4Q5oNRelLvzzNRinZTXKEA/PhwdSDVYAc 5O/4DDu+bV5YHXwJWFrmRKx6+wmfsaEXo25qKpuEs/p57+V8MWrn6Vyz8Tb6UxE3 A7YhGDQeRtRb4YAqWhb9cvOfxCdgnrX0epV6PnzQqfd00xIWjDMf4C6zCT0WZidl z/qBlnH3MjglijKMMsJmQ9CrqUzkzEORU7HLo4J55gTdirTeL1fG8aZkvFzSDzWO GCCLduDjzHbFD23IS7Qk8f2t1WldIihqNiHrD1ar5b5FKFg8HQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOyuvd4RijtWV3UsjW5kgEWf4gnuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvYjE0MzI4ZDAtYjg1MC0z MjhiLWFmZGEtNTBlNWM1YWIyNzI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEDpMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC3dN2O5fPWtoVrwGyT/hpz4iLtHp+soT9KEInwBz3JhtyGBkPzJkba5 7SPW8Ams6uGmFLZ+sRkyJ2p/lWCzYct2Ffrua1CEBOAWiGHzj+ubJaMXAQkHSOsl qDZwXBCgPphbl9wycPs18U7XEoDLaB37Lgt8GbMqGb8XT47B/wGRTISzgckK+Tk6 amwrvJeb18yA6DDad2OjAuAWEWXapZwiSTyYjqjgDccn643yZXxKujj8OS7hOBjI WbzzTQv0SyHWhfW9oXcr3OgrddQ3MXGaN09uHHp6Al2OZE5vp2G+KsSIeJ4BstiF IU8anyzqHOlC9Zt5NKhDMZ8ysdJrJzA= -----END CERTIFICATE-----Generated at Sat Jul 18 00:49:57 2026 by rpki-client