$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/dceb209b-46e0-3072-8d69-8542b42ef807.roa File: dceb209b-46e0-3072-8d69-8542b42ef807.roa (raw, json) Hash identifier: ZW0sHAzQosFGAcbjaZhcijk8PdrTLRAW5xn1FLomnLQ= Subject key identifier: 0D:A8:37:AB:10:31:E0:20:9E:D5:FE:56:49:25:51:55:A3:FE:3A:5E Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584EEA877971F09C7DB9A3190978 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/dceb209b-46e0-3072-8d69-8542b42ef807.roa Signing time: Sat 22 Aug 2026 01:00:12 +0000 ROA not before: Sat 22 Aug 2026 01:00:12 +0000 ROA not after: Fri 20 Nov 2026 02:00:12 +0000 asID: 13335 IP address blocks: 172.64.151.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Sep 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ea:87:79:71:f0:9c:7d:b9:a3:19:09:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 22 01:00:12 2026 GMT Not After : Nov 20 02:00:12 2026 GMT Subject: CN=ef8aa43d-6c96-4b5c-8ebc-fe722eff1484 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:32:8c:e1:a7:0a:d5:7a:2c:60:3e:77:c1:63: 57:b3:66:85:d4:38:86:c8:85:e7:3a:9a:2c:57:56: 0f:26:6b:d5:ae:5c:26:de:e9:99:9d:d4:51:bf:cd: 7f:c0:17:3a:74:f6:40:e1:43:6a:e4:d2:e8:03:de: e3:d3:47:4d:80:69:e7:fb:ef:52:49:94:8d:b3:4c: 96:ea:e0:0a:67:96:92:37:51:ee:8d:a8:fd:12:3a: 0f:b1:f8:b2:86:eb:af:4a:c4:73:03:e5:28:15:b3: c4:00:49:1f:de:36:5c:f1:98:5c:2b:00:66:e1:62: 0c:7e:d2:31:9a:63:a5:2d:fb:2d:a6:57:f6:13:cc: 76:5a:c6:88:6d:a0:ee:87:5d:e0:6c:68:f0:53:f1: 56:01:cd:e5:c9:7b:ad:9c:62:8b:8b:a3:ef:9c:b7: 04:08:c8:db:1e:a5:07:a7:c8:fb:e1:f1:31:6b:14: ce:c5:4d:2b:2c:ac:d3:ce:0d:d2:a5:f8:50:b0:cd: e8:30:e8:78:93:30:9f:74:1c:56:7f:72:1c:96:72: ea:85:c4:e8:3f:86:46:e0:65:be:a7:7c:f1:a2:fb: 66:76:40:bd:28:05:63:9f:2e:3b:d8:23:09:a4:90: c9:ba:1b:06:37:68:75:d5:80:82:59:f7:04:12:2c: 17:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:A8:37:AB:10:31:E0:20:9E:D5:FE:56:49:25:51:55:A3:FE:3A:5E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/dceb209b-46e0-3072-8d69-8542b42ef807.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.64.151.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:80:c2:37:fb:d3:99:3e:72:53:f8:e0:03:84:b7:61:81:ba: b8:24:35:2d:f9:c4:7d:04:68:12:f1:c9:5c:ff:79:2a:2d:6c: 93:7e:e6:a3:1b:a0:17:a7:c4:8f:c4:ba:b6:2e:65:f4:27:5f: 49:b9:20:7d:b5:21:3e:3f:43:d1:84:69:13:4b:f3:08:54:59: ca:4d:5a:07:d9:1f:c7:36:88:05:d0:89:c0:bb:1e:4c:27:24: 04:90:c4:39:e7:f4:27:0d:8f:78:59:a0:ae:92:11:71:2c:f0: 60:95:e0:87:66:a0:0c:e0:2e:5d:d0:b9:19:ee:e0:f4:67:75: 79:36:5a:ed:eb:6c:8e:22:8a:2a:44:3e:ff:2b:4d:fb:ac:bf: db:55:a8:61:e9:21:a7:d4:f0:f5:a0:65:92:3b:0f:35:7c:71: df:b5:fa:44:17:75:94:a7:8d:a6:4d:0e:64:05:3c:c6:7d:6e: 28:d3:73:6e:20:79:a2:18:1f:c2:62:61:04:f4:8a:08:0c:fc: 35:07:32:f3:0b:de:14:e0:06:79:91:a1:3d:a9:4d:69:01:23: 0b:67:ae:c0:90:39:63:33:3b:8f:99:8a:3c:94:95:4f:19:66: 50:20:ab:bc:f7:16:4b:fa:de:9a:f8:63:b7:1b:92:3c:bc:68: aa:64:a9:9f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7qh3lx8Jx9uaMZCXgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDgyMjAxMDAxMloXDTI2MTEyMDAyMDAxMlowLzEtMCsGA1UEAxMk ZWY4YWE0M2QtNmM5Ni00YjVjLThlYmMtZmU3MjJlZmYxNDg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApDKM4acK1XosYD53wWNXs2aF1DiGyIXnOpos V1YPJmvVrlwm3umZndRRv81/wBc6dPZA4UNq5NLoA97j00dNgGnn++9SSZSNs0yW 6uAKZ5aSN1Hujaj9EjoPsfiyhuuvSsRzA+UoFbPEAEkf3jZc8ZhcKwBm4WIMftIx mmOlLfstplf2E8x2WsaIbaDuh13gbGjwU/FWAc3lyXutnGKLi6PvnLcECMjbHqUH p8j74fExaxTOxU0rLKzTzg3SpfhQsM3oMOh4kzCfdBxWf3IclnLqhcToP4ZG4GW+ p3zxovtmdkC9KAVjny472CMJpJDJuhsGN2h11YCCWfcEEiwXKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA2oN6sQMeAgntX+VkklUVWj/jpeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvZGNlYjIwOWItNDZlMC0z MDcyLThkNjktODU0MmI0MmVmODA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArECXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFOAwjf705k+clP44AOEt2GBurgkNS35xH0EaBLxyVz/eSotbJN+5qMb oBenxI/EurYuZfQnX0m5IH21IT4/Q9GEaRNL8whUWcpNWgfZH8c2iAXQicC7Hkwn JASQxDnn9CcNj3hZoK6SEXEs8GCV4IdmoAzgLl3QuRnu4PRndXk2Wu3rbI4iiipE Pv8rTfusv9tVqGHpIafU8PWgZZI7DzV8cd+1+kQXdZSnjaZNDmQFPMZ9bijTc24g eaIYH8JiYQT0iggM/DUHMvML3hTgBnmRoT2pTWkBIwtnrsCQOWMzO4+ZijyUlU8Z ZlAgq7z3Fkv63pr4Y7cbkjy8aKpkqZ8= -----END CERTIFICATE-----Generated at Tue Sep 1 02:10:42 2026 by rpki-client