$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/db71e0a3-879e-332a-a6e7-f9ecfc3cf289.roa File: db71e0a3-879e-332a-a6e7-f9ecfc3cf289.roa (raw, json) Hash identifier: XTJeeY4O6tRAIWUc4vGwGs89wOxtdi+YoR73mGRGbgQ= Subject key identifier: 24:1E:B3:4A:30:BA:59:B7:CF:D5:3E:5F:04:D8:6B:43:26:5C:ED:30 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584ED001D40B7E4DECB51B5B5C00 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/db71e0a3-879e-332a-a6e7-f9ecfc3cf289.roa Signing time: Wed 12 Aug 2026 13:00:12 +0000 ROA not before: Wed 12 Aug 2026 13:00:12 +0000 ROA not after: Tue 10 Nov 2026 14:00:12 +0000 asID: 13335 IP address blocks: 172.64.214.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:d0:01:d4:0b:7e:4d:ec:b5:1b:5b:5c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 12 13:00:12 2026 GMT Not After : Nov 10 14:00:12 2026 GMT Subject: CN=60900722-dbdc-49a4-af8f-5ef5538b892b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:5e:ca:b8:95:f5:aa:3c:62:74:09:35:3f:ac: 87:a7:e7:e4:ef:e1:27:1c:11:2b:0c:40:ab:97:37: 7c:58:87:4d:73:93:b1:af:04:cc:b3:19:42:98:77: 9f:c8:7e:7a:8f:e5:c7:1f:94:86:f3:b6:2b:eb:0c: c3:5a:e8:fa:8d:31:89:ca:30:6a:e0:70:35:20:31: ec:42:52:21:16:6b:7d:fb:1c:99:7c:87:e9:29:d7: cb:a2:84:ae:1d:1a:1d:77:ba:88:0e:31:1d:fe:f9: 80:42:c1:53:35:3a:df:cd:17:c3:df:67:f2:15:f7: 8d:65:aa:d3:e3:db:de:79:15:c0:6b:e5:de:0e:f8: e5:e4:b7:e1:53:b6:13:69:bb:de:17:62:ab:0c:0f: 18:ec:ed:a7:b9:16:8c:3f:21:2f:c4:cb:fd:4a:8b: b7:21:4c:49:56:4e:62:53:6e:b2:d9:59:60:81:bd: 1a:2b:09:41:7e:c1:53:e1:65:62:ab:7c:10:ff:c6: 0a:9a:5d:b9:36:4d:c5:44:21:f8:09:89:6d:1a:d9: 50:b9:0f:40:6f:58:0a:ac:e0:59:02:24:9f:a4:76: 8d:04:19:bd:6b:7d:5e:37:a4:f6:fc:93:69:71:5b: d0:38:3f:01:88:e7:0a:7c:74:a1:06:22:2b:40:b5: 83:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:1E:B3:4A:30:BA:59:B7:CF:D5:3E:5F:04:D8:6B:43:26:5C:ED:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/db71e0a3-879e-332a-a6e7-f9ecfc3cf289.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.64.214.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:7f:b1:93:44:f6:dd:61:83:84:a8:13:67:03:f1:16:68:aa: 3a:69:9d:39:2c:3c:f6:8b:23:ed:8c:0d:ef:28:78:de:e3:ea: 24:b8:19:a4:12:26:d7:5c:5b:84:a2:eb:fa:79:28:da:7c:ef: 74:01:fe:2e:6a:da:00:5a:fa:86:11:4b:a6:7c:83:0b:72:0d: a2:8b:74:c5:45:b2:81:ae:52:fb:75:d2:73:54:99:72:41:93: a9:6f:85:0b:46:5b:a0:04:8a:0a:e2:6a:aa:5b:e2:79:8d:aa: 59:0e:8f:d7:11:67:6f:5a:40:2d:42:47:c8:b7:c8:75:fa:4a: 72:f4:e6:0b:80:9f:80:62:0b:f7:5b:93:66:ff:83:87:8b:7e: 73:f8:08:72:03:49:fc:f6:c4:d7:a9:23:e6:50:50:da:30:26: da:f7:cb:57:05:0d:9d:d3:0a:d7:65:e1:c8:12:10:d7:1d:50: da:41:83:6e:dc:7f:36:4b:e6:9a:4b:b2:6d:a7:38:0b:d6:d4: ac:7d:1e:0a:40:92:88:ba:fc:43:93:3c:a7:1e:f1:b0:16:f8: 4e:6e:8c:16:dc:1d:1e:fd:ff:81:b8:d0:3b:52:0d:e4:d4:eb: 15:2b:f6:89:59:4c:02:36:e5:c4:20:4f:8d:49:37:13:af:ac: 61:36:36:b8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7QAdQLfk3stRtbXAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDgxMjEzMDAxMloXDTI2MTExMDE0MDAxMlowLzEtMCsGA1UEAxMk NjA5MDA3MjItZGJkYy00OWE0LWFmOGYtNWVmNTUzOGI4OTJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArF7KuJX1qjxidAk1P6yHp+fk7+EnHBErDECr lzd8WIdNc5OxrwTMsxlCmHefyH56j+XHH5SG87Yr6wzDWuj6jTGJyjBq4HA1IDHs QlIhFmt9+xyZfIfpKdfLooSuHRodd7qIDjEd/vmAQsFTNTrfzRfD32fyFfeNZarT 49veeRXAa+XeDvjl5LfhU7YTabveF2KrDA8Y7O2nuRaMPyEvxMv9Sou3IUxJVk5i U26y2Vlggb0aKwlBfsFT4WViq3wQ/8YKml25Nk3FRCH4CYltGtlQuQ9Ab1gKrOBZ AiSfpHaNBBm9a31eN6T2/JNpcVvQOD8BiOcKfHShBiIrQLWD0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCQes0owulm3z9U+XwTYa0MmXO0wMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvZGI3MWUwYTMtODc5ZS0z MzJhLWE2ZTctZjllY2ZjM2NmMjg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEDWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABR/sZNE9t1hg4SoE2cD8RZoqjppnTksPPaLI+2MDe8oeN7j6iS4GaQS JtdcW4Si6/p5KNp873QB/i5q2gBa+oYRS6Z8gwtyDaKLdMVFsoGuUvt10nNUmXJB k6lvhQtGW6AEigriaqpb4nmNqlkOj9cRZ29aQC1CR8i3yHX6SnL05guAn4BiC/db k2b/g4eLfnP4CHIDSfz2xNepI+ZQUNowJtr3y1cFDZ3TCtdl4cgSENcdUNpBg27c fzZL5ppLsm2nOAvW1Kx9HgpAkoi6/EOTPKce8bAW+E5ujBbcHR79/4G40DtSDeTU 6xUr9olZTAI25cQgT41JNxOvrGE2Nrg= -----END CERTIFICATE-----Generated at Mon Sep 28 12:54:50 2026 by rpki-client