$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/cce9a9a8-7742-3ed1-ac02-781a65455f83.roa File: cce9a9a8-7742-3ed1-ac02-781a65455f83.roa (raw, json) Hash identifier: d9CXJmseNDGAeN6hnR4GF1P1ZCmGFnj9npgP61aeO1U= Subject key identifier: 72:B2:DF:A4:D4:08:0F:D3:27:62:B9:61:A5:07:A9:89:BD:E1:AA:58 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584EED523D48D2CAB57348B74C80 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/cce9a9a8-7742-3ed1-ac02-781a65455f83.roa Signing time: Sun 23 Aug 2026 01:00:12 +0000 ROA not before: Sun 23 Aug 2026 01:00:12 +0000 ROA not after: Sat 21 Nov 2026 02:00:12 +0000 asID: 13335 IP address blocks: 172.64.66.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ed:52:3d:48:d2:ca:b5:73:48:b7:4c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 23 01:00:12 2026 GMT Not After : Nov 21 02:00:12 2026 GMT Subject: CN=b0220341-1b1d-4bb5-8fc6-331525272621 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:95:a6:1d:d7:ef:17:73:08:ec:88:4e:9b:61: 0a:bb:6b:09:05:15:ae:4d:5e:bd:12:f2:eb:22:a0: 14:4f:50:94:ef:96:10:e2:de:dc:30:27:b0:90:87: 34:7f:93:55:83:7e:60:4a:e8:fc:4d:d3:ae:f6:ee: 7f:04:20:1a:05:da:bc:84:ae:a0:1e:9c:78:2c:31: 4f:b5:82:75:d6:1c:4d:eb:f9:53:c9:bf:df:cc:fc: c5:1e:1a:c9:49:2f:7c:73:95:2d:06:84:dc:d7:d8: 21:1c:44:c1:30:67:1a:8b:8d:c3:63:de:ab:d6:04: 8c:a4:0a:28:80:5e:b9:10:bf:8c:f9:11:8c:20:7f: db:25:b2:02:1d:b1:2f:f6:fa:e1:3f:f4:13:b4:4d: 09:90:30:bb:c3:f8:f1:1f:87:e0:69:31:01:ce:a8: 0c:39:ed:2d:45:04:38:b1:db:c3:f4:36:2b:88:ce: 2a:27:74:70:eb:c9:26:48:7e:67:d3:21:76:ad:be: 6a:02:0f:21:84:e3:07:ce:c6:d5:9f:e9:ac:15:68: 01:90:d4:23:64:b7:f0:96:3c:1a:e9:36:d8:af:0c: 1f:83:b6:09:d2:a1:59:1b:f5:67:48:29:d0:a8:31: 0c:82:46:4f:35:b9:41:e7:88:f8:74:b8:b8:54:d4: de:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:B2:DF:A4:D4:08:0F:D3:27:62:B9:61:A5:07:A9:89:BD:E1:AA:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/cce9a9a8-7742-3ed1-ac02-781a65455f83.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.64.66.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:9b:e4:3f:7b:b8:c0:83:9c:2d:88:08:2f:0a:6e:10:73:2a: 58:f6:fd:ca:ac:80:45:de:f2:11:60:0a:b5:43:bb:d9:86:46: 9c:24:b7:5a:02:f9:2f:2f:67:57:43:7d:05:0c:6e:7e:9c:86: 50:4d:5e:d4:66:c5:a0:c6:d2:2a:84:db:76:84:54:e4:b7:a5: b3:01:38:76:74:6c:5c:86:0b:54:ec:37:48:59:b3:8b:82:3a: 21:fb:59:61:72:eb:3a:64:80:ab:12:b1:07:57:f1:a8:0b:bb: ab:a7:21:66:0a:14:7a:d9:cd:75:7a:18:6b:36:78:5a:a4:de: f3:0b:af:5f:55:4b:39:ed:e5:56:a6:cb:cd:7f:0e:97:77:de: ce:92:ae:ce:2d:c4:6f:8e:fd:7f:0b:59:ec:50:6d:75:b1:94: dd:a9:de:62:d1:56:1d:21:1b:ca:c9:3d:45:ea:c8:58:7f:43: 10:fe:96:1e:2b:5d:23:a3:f4:dd:3f:ac:7f:ed:86:57:ae:6b: 42:42:c8:dc:71:0f:98:79:db:28:6c:70:be:a2:e3:fc:f1:fb: f5:bc:e8:fa:af:2a:7e:56:21:fc:fb:3f:6d:a8:c2:7a:e3:e7: c8:77:2e:66:34:9e:7b:7e:77:8c:f2:8e:e2:85:87:c2:b6:30: f5:5c:f0:d1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7tUj1I0sq1c0i3TIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDgyMzAxMDAxMloXDTI2MTEyMTAyMDAxMlowLzEtMCsGA1UEAxMk YjAyMjAzNDEtMWIxZC00YmI1LThmYzYtMzMxNTI1MjcyNjIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAppWmHdfvF3MI7IhOm2EKu2sJBRWuTV69EvLr IqAUT1CU75YQ4t7cMCewkIc0f5NVg35gSuj8TdOu9u5/BCAaBdq8hK6gHpx4LDFP tYJ11hxN6/lTyb/fzPzFHhrJSS98c5UtBoTc19ghHETBMGcai43DY96r1gSMpAoo gF65EL+M+RGMIH/bJbICHbEv9vrhP/QTtE0JkDC7w/jxH4fgaTEBzqgMOe0tRQQ4 sdvD9DYriM4qJ3Rw68kmSH5n0yF2rb5qAg8hhOMHzsbVn+msFWgBkNQjZLfwljwa 6TbYrwwfg7YJ0qFZG/VnSCnQqDEMgkZPNblB54j4dLi4VNTehwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHKy36TUCA/TJ2K5YaUHqYm94apYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvY2NlOWE5YTgtNzc0Mi0z ZWQxLWFjMDItNzgxYTY1NDU1ZjgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEBCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAyb5D97uMCDnC2ICC8KbhBzKlj2/cqsgEXe8hFgCrVDu9mGRpwkt1oC +S8vZ1dDfQUMbn6chlBNXtRmxaDG0iqE23aEVOS3pbMBOHZ0bFyGC1TsN0hZs4uC OiH7WWFy6zpkgKsSsQdX8agLu6unIWYKFHrZzXV6GGs2eFqk3vMLr19VSznt5Vam y81/Dpd33s6Srs4txG+O/X8LWexQbXWxlN2p3mLRVh0hG8rJPUXqyFh/QxD+lh4r XSOj9N0/rH/thleua0JCyNxxD5h52yhscL6i4/zx+/W86PqvKn5WIfz7P22ownrj 58h3LmY0nnt+d4zyjuKFh8K2MPVc8NE= -----END CERTIFICATE-----Generated at Tue Sep 1 01:45:48 2026 by rpki-client