$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/cef30f1e-3901-3da5-ad67-60c39887457b.roa File: cef30f1e-3901-3da5-ad67-60c39887457b.roa (raw, json) Hash identifier: znIM+LW1raQ5FedGkWJFVV9YHpuBknN1Nly5Y6BP01E= Subject key identifier: 58:0A:D2:C6:5D:FE:30:77:34:31:64:5A:E1:D6:A6:09:A0:79:2A:B9 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584ED4325793A97A2E5DA8F5BC00 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/cef30f1e-3901-3da5-ad67-60c39887457b.roa Signing time: Fri 14 Aug 2026 01:00:13 +0000 ROA not before: Fri 14 Aug 2026 01:00:13 +0000 ROA not after: Thu 12 Nov 2026 02:00:13 +0000 asID: 13335 IP address blocks: 172.64.200.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:d4:32:57:93:a9:7a:2e:5d:a8:f5:bc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 14 01:00:13 2026 GMT Not After : Nov 12 02:00:13 2026 GMT Subject: CN=36bec5e1-344e-4755-b44a-458b9ae6db1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:43:d5:13:8f:24:f1:c4:49:1f:f6:07:61:96: 2b:9f:0e:64:ab:de:80:f5:c4:69:c4:4d:68:4d:74: 21:b9:44:0d:c3:9a:8c:df:2a:d6:d3:65:36:53:cb: 6d:f1:48:93:e8:f7:1c:c4:ca:d5:69:66:06:fd:ed: d9:74:37:85:71:c7:b5:ce:fe:a5:01:e6:c9:53:9c: 25:4e:0f:8f:34:fd:4a:80:3c:6f:5f:6c:e5:ed:11: 9b:7f:49:e8:3c:91:8f:ec:63:4a:ea:10:ce:1b:3c: 37:a8:bc:87:09:3f:51:09:ce:70:55:4f:f8:6d:10: f0:73:98:ba:60:00:5f:45:45:96:1b:1f:07:64:c9: d3:48:41:15:0e:a2:eb:de:98:0b:d3:1a:69:47:28: 55:a3:d8:6d:cb:a9:28:4d:c0:cf:a0:39:c0:26:b6: c3:98:e1:5b:60:63:a7:48:dc:40:d5:fc:2f:f9:3d: 4d:ad:9e:ea:5b:3b:8f:d7:e3:0d:54:f2:c1:f4:6e: da:b8:87:5e:5b:4e:91:39:c8:e6:b4:47:92:0f:21: 28:84:1e:35:43:41:4b:4c:b2:3b:8b:37:b7:9c:31: 33:e9:43:86:f7:33:c0:0d:92:0e:fe:a2:cc:ae:79: c4:34:c3:cb:d3:97:9a:73:d3:2f:9f:e7:72:5c:e3: 64:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:0A:D2:C6:5D:FE:30:77:34:31:64:5A:E1:D6:A6:09:A0:79:2A:B9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/cef30f1e-3901-3da5-ad67-60c39887457b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.64.200.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:50:8b:7f:1f:96:9d:4b:92:8d:b1:63:1b:c6:e5:aa:55:6c: bf:3d:de:49:74:70:6c:c5:33:73:69:b0:0f:1d:62:9b:b1:e1: 88:7c:34:25:9d:d8:a0:2d:67:ce:de:ae:8b:bc:92:6e:05:a3: 94:ae:4b:eb:d8:6c:46:d4:42:db:cd:dc:64:69:51:ad:8a:2e: ea:11:ab:8a:b9:07:be:57:e2:6b:a9:cb:14:ce:ac:29:17:6f: a8:cb:c6:b4:cb:6b:c9:06:32:e0:a7:b6:1d:e2:34:f0:3f:f6: 3b:c2:88:37:7e:7c:0e:ad:ab:e3:9e:65:2d:ac:86:db:0a:fb: 88:ff:f0:08:72:59:6e:cd:c1:d1:2e:e5:48:82:5b:a5:74:a2: c6:30:8e:46:90:63:9a:e8:9c:cb:d3:4e:ae:9a:98:6e:63:15: 37:e0:94:9b:67:8c:52:9a:2f:d8:cc:bf:2f:a3:48:0c:67:ae: 70:95:91:c7:8b:96:1f:cf:a6:7a:23:87:af:97:d4:c4:0c:df: 86:d1:bd:f6:6f:4b:4f:b6:48:80:ac:9f:70:6e:87:c4:07:db: 6c:7a:45:51:e3:57:28:c9:f2:70:f1:fb:39:a8:5a:31:20:3c: c7:c5:48:05:07:43:a3:f0:78:61:9d:20:59:11:bb:3f:8e:93: f7:60:eb:ed -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7UMleTqXouXaj1vAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDgxNDAxMDAxM1oXDTI2MTExMjAyMDAxM1owLzEtMCsGA1UEAxMk MzZiZWM1ZTEtMzQ0ZS00NzU1LWI0NGEtNDU4YjlhZTZkYjFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgkPVE48k8cRJH/YHYZYrnw5kq96A9cRpxE1o TXQhuUQNw5qM3yrW02U2U8tt8UiT6PccxMrVaWYG/e3ZdDeFcce1zv6lAebJU5wl Tg+PNP1KgDxvX2zl7RGbf0noPJGP7GNK6hDOGzw3qLyHCT9RCc5wVU/4bRDwc5i6 YABfRUWWGx8HZMnTSEEVDqLr3pgL0xppRyhVo9hty6koTcDPoDnAJrbDmOFbYGOn SNxA1fwv+T1NrZ7qWzuP1+MNVPLB9G7auIdeW06ROcjmtEeSDyEohB41Q0FLTLI7 ize3nDEz6UOG9zPADZIO/qLMrnnENMPL05eac9Mvn+dyXONkwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFgK0sZd/jB3NDFkWuHWpgmgeSq5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvY2VmMzBmMWUtMzkwMS0z ZGE1LWFkNjctNjBjMzk4ODc0NTdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEDIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG5Qi38flp1Lko2xYxvG5apVbL893kl0cGzFM3NpsA8dYpux4Yh8NCWd 2KAtZ87erou8km4Fo5SuS+vYbEbUQtvN3GRpUa2KLuoRq4q5B75X4mupyxTOrCkX b6jLxrTLa8kGMuCnth3iNPA/9jvCiDd+fA6tq+OeZS2shtsK+4j/8AhyWW7NwdEu 5UiCW6V0osYwjkaQY5ronMvTTq6amG5jFTfglJtnjFKaL9jMvy+jSAxnrnCVkceL lh/Ppnojh6+X1MQM34bRvfZvS0+2SICsn3Buh8QH22x6RVHjVyjJ8nDx+zmoWjEg PMfFSAUHQ6PweGGdIFkRuz+Ok/dg6+0= -----END CERTIFICATE-----Generated at Tue Sep 1 01:45:26 2026 by rpki-client