$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/cd9157e8-4397-31f4-aca2-3b7f65fc5328.roa File: cd9157e8-4397-31f4-aca2-3b7f65fc5328.roa (raw, json) Hash identifier: iscK4RWj/YG4veHt5r4uD73sdHya6akHb92C8QbSss4= Subject key identifier: 61:0D:54:AF:88:45:F6:F3:FC:5D:7B:E2:1F:51:35:F6:7A:62:34:A2 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584E0435D537507689695A88B2A0 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/cd9157e8-4397-31f4-aca2-3b7f65fc5328.roa Signing time: Sun 31 May 2026 13:00:10 +0000 ROA not before: Sun 31 May 2026 13:00:10 +0000 ROA not after: Sat 29 Aug 2026 13:00:10 +0000 asID: 13335 IP address blocks: 172.64.212.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 04 Jun 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:04:35:d5:37:50:76:89:69:5a:88:b2:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: May 31 13:00:10 2026 GMT Not After : Aug 29 13:00:10 2026 GMT Subject: CN=d401d1c4-883f-4856-8872-c4cca25ca9fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:fa:dc:17:fd:59:e5:2a:68:56:dc:a8:2e:5d: 0f:e8:bc:ad:21:d2:04:91:3c:78:2f:03:e9:26:2d: 86:17:39:f8:43:1b:43:5d:f0:9a:96:42:d1:bb:c5: d0:19:3c:a8:6d:2f:45:81:ed:20:c8:85:f9:3e:79: ff:b3:21:f0:b8:56:ef:0d:09:e1:74:0c:d6:ab:42: a9:51:ef:b9:a1:e1:3d:97:76:f1:23:c6:04:90:a1: de:e2:35:2b:49:2e:2d:72:67:ff:5d:e6:7f:8a:3f: 80:8d:22:d3:94:c1:d3:df:b0:93:9d:b7:74:ea:e0: e5:7e:09:44:eb:63:c0:3b:51:10:fe:e2:21:8d:29: 6c:47:37:ff:7f:72:33:f7:58:34:73:6b:48:2b:be: 7c:d1:95:ad:bd:c6:ce:03:9b:70:02:56:44:12:67: 67:92:aa:e2:4f:64:e4:c2:7d:67:cd:c5:35:36:14: 1b:57:a5:08:5c:a7:37:f5:34:4d:aa:56:fc:2a:63: 3f:2e:9f:b5:b6:35:10:cc:7d:7c:7b:01:95:6a:aa: c4:25:0d:a3:d3:f2:72:cf:de:e0:86:93:3e:bd:33: de:18:c3:4b:c3:84:90:1d:db:1e:19:08:57:13:11: d1:a8:b1:80:ef:c1:56:fa:5a:ba:80:a0:ff:ce:db: 25:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:0D:54:AF:88:45:F6:F3:FC:5D:7B:E2:1F:51:35:F6:7A:62:34:A2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/cd9157e8-4397-31f4-aca2-3b7f65fc5328.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.64.212.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:1f:56:bd:a2:b9:98:0e:a9:78:32:be:ae:f1:a8:39:5f:a9: a2:72:52:bc:41:90:34:8a:e1:e1:91:78:64:64:52:41:51:44: ce:67:bb:6c:57:af:ed:95:a5:41:3f:7f:4b:d6:06:b2:41:91: 62:03:f2:d5:28:bf:f4:71:82:2f:c1:99:2b:b1:72:34:f8:ad: af:99:c6:d3:41:a3:31:d1:2d:ba:ec:75:31:1e:21:c2:16:f2: 6b:d0:39:b8:39:56:1a:f4:e3:af:06:34:27:21:c0:b2:72:01: 93:f3:38:35:e1:02:8c:95:9e:9d:89:c0:e6:54:ca:92:ae:cb: ff:9b:44:c4:1c:e4:03:b7:af:f8:ff:e7:40:27:04:01:1b:3a: c1:32:f0:eb:5c:a3:0b:3f:fc:c0:51:98:dd:f1:f0:0c:60:3e: b6:4f:d3:ad:13:97:8b:9b:11:61:d6:82:72:47:9f:01:a8:b9: 57:ff:37:37:71:09:91:8f:2b:8c:80:b8:67:27:e8:15:2c:e8: 45:bf:2e:4b:e9:d5:df:e8:52:8a:4e:8f:ad:59:ec:9c:c7:a6: 62:06:f2:53:9b:7b:3b:6a:89:44:53:32:1f:ab:1f:42:81:ab: 00:1d:5b:a0:7d:ec:9a:5b:c9:d3:ae:41:21:6f:1d:2e:58:b3: ec:00:56:e9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4ENdU3UHaJaVqIsqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDUzMTEzMDAxMFoXDTI2MDgyOTEzMDAxMFowLzEtMCsGA1UEAxMk ZDQwMWQxYzQtODgzZi00ODU2LTg4NzItYzRjY2EyNWNhOWZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkfrcF/1Z5SpoVtyoLl0P6LytIdIEkTx4LwPp Ji2GFzn4QxtDXfCalkLRu8XQGTyobS9Fge0gyIX5Pnn/syHwuFbvDQnhdAzWq0Kp Ue+5oeE9l3bxI8YEkKHe4jUrSS4tcmf/XeZ/ij+AjSLTlMHT37CTnbd06uDlfglE 62PAO1EQ/uIhjSlsRzf/f3Iz91g0c2tIK7580ZWtvcbOA5twAlZEEmdnkqriT2Tk wn1nzcU1NhQbV6UIXKc39TRNqlb8KmM/Lp+1tjUQzH18ewGVaqrEJQ2j0/Jyz97g hpM+vTPeGMNLw4SQHdseGQhXExHRqLGA78FW+lq6gKD/ztslTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGENVK+IRfbz/F174h9RNfZ6YjSiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvY2Q5MTU3ZTgtNDM5Ny0z MWY0LWFjYTItM2I3ZjY1ZmM1MzI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEDUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGMfVr2iuZgOqXgyvq7xqDlfqaJyUrxBkDSK4eGReGRkUkFRRM5nu2xX r+2VpUE/f0vWBrJBkWID8tUov/Rxgi/BmSuxcjT4ra+ZxtNBozHRLbrsdTEeIcIW 8mvQObg5Vhr0468GNCchwLJyAZPzODXhAoyVnp2JwOZUypKuy/+bRMQc5AO3r/j/ 50AnBAEbOsEy8Otcows//MBRmN3x8AxgPrZP060Tl4ubEWHWgnJHnwGouVf/Nzdx CZGPK4yAuGcn6BUs6EW/Lkvp1d/oUopOj61Z7JzHpmIG8lObeztqiURTMh+rH0KB qwAdW6B97JpbydOuQSFvHS5Ys+wAVuk= -----END CERTIFICATE-----Generated at Tue Jun 2 21:59:23 2026 by rpki-client