$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d2c0f41e-f72f-30d5-9058-84029b6d64e3.roa File: d2c0f41e-f72f-30d5-9058-84029b6d64e3.roa (raw, json) Hash identifier: ZdOuXrDPx3Lu2HgXqe1N9uZxnXIpYMA0YM6AYQEtTlQ= Subject key identifier: D8:DC:7A:C5:0A:44:13:DB:A8:DE:AC:B3:19:F3:51:D3:B6:45:F7:EF Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584EED52367C1BEF1C2F83EDDEA0 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d2c0f41e-f72f-30d5-9058-84029b6d64e3.roa Signing time: Sun 23 Aug 2026 01:00:12 +0000 ROA not before: Sun 23 Aug 2026 01:00:12 +0000 ROA not after: Sat 21 Nov 2026 02:00:12 +0000 asID: 13335 IP address blocks: 172.64.112.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ed:52:36:7c:1b:ef:1c:2f:83:ed:de:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 23 01:00:12 2026 GMT Not After : Nov 21 02:00:12 2026 GMT Subject: CN=8c29ef70-3584-4b3d-a685-3f6237695877 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:e0:18:00:48:0a:e2:09:31:04:a6:8e:6b:2c: db:bb:19:a5:df:29:cb:de:59:90:60:24:0f:63:aa: 15:19:d6:a5:33:18:53:2e:06:e4:81:b8:fc:f3:1e: 8f:b2:fe:ad:57:a5:71:51:bf:04:d5:6a:89:cd:d3: 72:0c:c7:70:87:c4:43:9c:4f:c4:5e:57:81:73:b7: aa:db:c8:f7:bc:ce:bd:79:40:03:4a:52:76:a9:1e: 14:93:ea:e5:de:df:2c:5f:dc:6b:88:dc:e8:a2:b0: 86:6b:17:f4:9b:2f:f0:0c:1d:78:2d:73:a0:d4:27: 8c:0e:3c:1a:05:44:30:5c:24:b7:b8:00:48:22:59: 10:bd:1c:1b:9d:ef:b2:9a:82:31:b5:64:6b:83:23: a0:15:42:b2:cd:2f:5c:98:44:6f:a3:92:1f:ac:37: 6b:ad:bf:0a:61:98:21:73:88:35:1c:54:cb:f6:bc: a0:52:2b:37:fc:0b:ec:30:96:fb:5f:c5:4a:08:bc: 07:4e:0a:ac:9d:26:aa:9b:49:22:05:5c:46:67:78: b5:6e:7e:47:5e:92:45:ee:b4:4c:06:8a:a2:6a:71: 3a:37:dc:d4:45:6d:5d:6e:92:b3:bf:f0:05:19:db: fe:d1:69:37:a4:6d:c4:04:c0:f9:ad:e3:14:10:da: a5:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:DC:7A:C5:0A:44:13:DB:A8:DE:AC:B3:19:F3:51:D3:B6:45:F7:EF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d2c0f41e-f72f-30d5-9058-84029b6d64e3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.64.112.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:04:2b:5f:5b:6d:2e:1f:d8:f0:c2:c0:10:cc:10:51:56:1d: 84:33:a9:e3:dc:06:4c:2b:f5:99:93:82:f9:7b:d0:b6:80:05: d0:70:1d:17:0b:58:47:aa:78:20:4c:16:94:f7:cf:e4:d2:ba: 4e:08:cc:27:82:34:b8:a0:b0:ec:3b:e0:e2:e9:18:49:a1:5e: ee:6f:0f:70:b9:85:82:d4:68:e4:9e:87:6b:16:f5:fb:e1:18: f8:38:9e:f0:3d:77:9a:43:7c:ed:0a:c8:15:97:18:e0:76:bc: 9a:e9:d6:8b:96:4a:93:98:b6:5a:7a:8e:54:f0:58:80:7a:c9: 20:64:e4:bf:9c:74:d2:83:d1:86:04:c8:dc:1b:80:53:28:35: cb:6d:9c:79:34:45:77:c3:b3:77:7d:44:14:6e:7a:2f:af:6f: a1:57:d6:34:b1:7a:f6:98:23:b4:54:3d:fc:39:21:70:1b:c4: 8c:48:81:e8:8b:8c:e7:2c:63:c6:ec:68:bb:7e:b7:3c:74:c6: 5b:13:44:a4:a6:73:41:79:d0:70:cf:f0:b7:3b:fc:99:04:7c: 03:07:f3:59:b3:77:29:c9:2a:12:94:c7:9c:37:f5:5d:24:07: d1:fa:5e:24:b4:51:92:72:b6:a2:8f:2f:cf:bc:d7:34:e2:92: 65:65:c4:26 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7tUjZ8G+8cL4Pt3qAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDgyMzAxMDAxMloXDTI2MTEyMTAyMDAxMlowLzEtMCsGA1UEAxMk OGMyOWVmNzAtMzU4NC00YjNkLWE2ODUtM2Y2MjM3Njk1ODc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtOAYAEgK4gkxBKaOayzbuxml3ynL3lmQYCQP Y6oVGdalMxhTLgbkgbj88x6Psv6tV6VxUb8E1WqJzdNyDMdwh8RDnE/EXleBc7eq 28j3vM69eUADSlJ2qR4Uk+rl3t8sX9xriNzoorCGaxf0my/wDB14LXOg1CeMDjwa BUQwXCS3uABIIlkQvRwbne+ymoIxtWRrgyOgFUKyzS9cmERvo5IfrDdrrb8KYZgh c4g1HFTL9rygUis3/AvsMJb7X8VKCLwHTgqsnSaqm0kiBVxGZ3i1bn5HXpJF7rRM BoqianE6N9zURW1dbpKzv/AFGdv+0Wk3pG3EBMD5reMUENqlSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNjcesUKRBPbqN6ssxnzUdO2RffvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvZDJjMGY0MWUtZjcyZi0z MGQ1LTkwNTgtODQwMjliNmQ2NGUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErEBwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE4EK19bbS4f2PDCwBDMEFFWHYQzqePcBkwr9ZmTgvl70LaABdBwHRcL WEeqeCBMFpT3z+TSuk4IzCeCNLigsOw74OLpGEmhXu5vD3C5hYLUaOSeh2sW9fvh GPg4nvA9d5pDfO0KyBWXGOB2vJrp1ouWSpOYtlp6jlTwWIB6ySBk5L+cdNKD0YYE yNwbgFMoNcttnHk0RXfDs3d9RBRuei+vb6FX1jSxevaYI7RUPfw5IXAbxIxIgeiL jOcsY8bsaLt+tzx0xlsTRKSmc0F50HDP8Lc7/JkEfAMH81mzdynJKhKUx5w39V0k B9H6XiS0UZJytqKPL8+81zTikmVlxCY= -----END CERTIFICATE-----Generated at Sun Sep 27 13:37:37 2026 by rpki-client