$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/eb8df8fd-63da-3e17-aeff-36bc2c5b2e73.roa File: eb8df8fd-63da-3e17-aeff-36bc2c5b2e73.roa (raw, json) Hash identifier: 8hDhbZTgf7V7sD9XXFbIt71CU/sDcb+UtQpOoUdrHEE= Subject key identifier: 12:3A:F8:C7:8B:5D:E8:D9:91:42:54:EB:5E:8D:5F:2F:66:C0:1D:91 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584F7A4D8A4CB580516E89D514E0 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/eb8df8fd-63da-3e17-aeff-36bc2c5b2e73.roa Signing time: Mon 12 Oct 2026 13:00:12 +0000 ROA not before: Mon 12 Oct 2026 13:00:12 +0000 ROA not after: Sun 10 Jan 2027 14:00:12 +0000 asID: 13335 IP address blocks: 172.64.222.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 20 Oct 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7a:4d:8a:4c:b5:80:51:6e:89:d5:14:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 12 13:00:12 2026 GMT Not After : Jan 10 14:00:12 2027 GMT Subject: CN=687be086-b323-4b5b-89a2-2526d5491e0b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:3b:29:97:c1:e8:75:e3:2a:b8:bc:1e:30:1a: ca:d1:9b:fb:5e:0c:b5:a8:62:09:15:11:b8:8a:4a: e7:c9:25:df:35:73:08:82:02:35:2d:96:9e:7d:3c: 99:56:f1:96:05:b0:29:81:99:06:85:c8:4f:de:5a: c1:68:59:a8:10:82:53:30:3f:7a:3e:46:60:f5:b3: e6:39:2b:81:89:73:53:f4:e6:78:ef:83:61:1d:c2: bb:b1:76:43:b1:1f:f6:4c:d1:63:e7:50:2a:d8:22: 8b:c1:9e:ed:0a:27:8c:1e:9a:b5:d8:f2:67:4f:bb: 66:96:3a:47:f7:b4:78:b9:e0:47:ee:65:72:3e:df: 02:bb:d1:6a:ec:15:c7:84:27:17:9f:06:98:f3:b6: 40:ca:87:da:02:50:71:1a:c5:8c:90:14:79:80:d2: 35:bb:88:09:4c:4c:01:94:bb:cc:a8:39:67:13:e3: 03:f9:53:81:0a:45:f6:2b:f5:72:f6:ad:d5:d9:de: 91:e3:d2:89:48:99:cd:e5:b7:da:ff:21:33:47:7e: f2:aa:b1:54:36:15:f9:cb:90:4f:03:e0:89:dd:d0: 22:7f:2d:f7:3e:e1:ae:7f:8d:86:0c:9b:9e:91:ce: 10:77:2a:49:9e:fc:92:30:52:7f:34:b3:c1:19:a1: b6:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:3A:F8:C7:8B:5D:E8:D9:91:42:54:EB:5E:8D:5F:2F:66:C0:1D:91 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/eb8df8fd-63da-3e17-aeff-36bc2c5b2e73.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.64.222.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:f9:cc:6f:86:49:b3:85:a2:0f:11:af:df:ab:bd:30:8b:7c: f0:c4:3d:b6:9b:26:1a:ed:f9:d7:9a:eb:6f:e4:d2:c8:ec:2d: 22:bb:5c:a1:d8:d0:da:41:62:90:88:b2:b3:d5:be:e7:1b:95: ec:4b:27:d2:75:45:d3:49:af:b4:17:91:9b:39:3c:af:34:4c: 60:2b:86:79:7b:d0:93:b3:42:f4:a2:9b:f5:f8:de:18:2d:26: 36:b6:b3:4e:df:41:a0:9f:b0:a1:af:ac:b7:cf:a4:61:e5:8f: d4:e0:3a:6c:ff:2a:fa:f3:1c:08:86:6b:e8:e9:e9:94:d7:0a: 0b:7d:43:2a:3b:41:6a:c5:69:89:a9:fc:50:22:1f:4f:6b:22: f8:0b:08:27:37:dc:13:2d:9b:97:9e:b8:51:a7:47:33:69:d5: 08:8d:34:73:8b:51:97:79:81:0b:3f:00:d3:bf:26:09:7b:2a: 1e:86:85:45:c9:63:8e:69:fc:a0:f8:d5:33:27:4d:ba:ee:e3: 35:68:59:7d:31:dc:dc:e2:ff:fb:fa:c2:0a:c2:8d:cc:72:e7: 05:68:a1:93:38:46:a0:0c:c3:c7:91:9a:0a:61:c0:01:a9:70: bc:e4:81:19:23:02:a4:ff:cf:27:d6:c2:57:e8:07:c6:f0:c7: 82:46:dc:b2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE96TYpMtYBRbonVFOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MTAxMjEzMDAxMloXDTI3MDExMDE0MDAxMlowLzEtMCsGA1UEAxMk Njg3YmUwODYtYjMyMy00YjViLTg5YTItMjUyNmQ1NDkxZTBiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArTspl8HodeMquLweMBrK0Zv7Xgy1qGIJFRG4 ikrnySXfNXMIggI1LZaefTyZVvGWBbApgZkGhchP3lrBaFmoEIJTMD96PkZg9bPm OSuBiXNT9OZ474NhHcK7sXZDsR/2TNFj51Aq2CKLwZ7tCieMHpq12PJnT7tmljpH 97R4ueBH7mVyPt8Cu9Fq7BXHhCcXnwaY87ZAyofaAlBxGsWMkBR5gNI1u4gJTEwB lLvMqDlnE+MD+VOBCkX2K/Vy9q3V2d6R49KJSJnN5bfa/yEzR37yqrFUNhX5y5BP A+CJ3dAify33PuGuf42GDJuekc4QdypJnvySMFJ/NLPBGaG2kwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBI6+MeLXejZkUJU616NXy9mwB2RMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvZWI4ZGY4ZmQtNjNkYS0z ZTE3LWFlZmYtMzZiYzJjNWIyZTczLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEDeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADP5zG+GSbOFog8Rr9+rvTCLfPDEPbabJhrt+dea62/k0sjsLSK7XKHY 0NpBYpCIsrPVvucblexLJ9J1RdNJr7QXkZs5PK80TGArhnl70JOzQvSim/X43hgt Jja2s07fQaCfsKGvrLfPpGHlj9TgOmz/KvrzHAiGa+jp6ZTXCgt9Qyo7QWrFaYmp /FAiH09rIvgLCCc33BMtm5eeuFGnRzNp1QiNNHOLUZd5gQs/ANO/Jgl7Kh6GhUXJ Y45p/KD41TMnTbru4zVoWX0x3Nzi//v6wgrCjcxy5wVooZM4RqAMw8eRmgphwAGp cLzkgRkjAqT/zyfWwlfoB8bwx4JG3LI= -----END CERTIFICATE-----Generated at Mon Oct 19 04:15:26 2026 by rpki-client