$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/eb8df8fd-63da-3e17-aeff-36bc2c5b2e73.roa File: eb8df8fd-63da-3e17-aeff-36bc2c5b2e73.roa (raw, json) Hash identifier: w0DV7xnHnWdiupwC6mHsB0IbJx91Da9eDKGsJ21SFFg= Subject key identifier: B8:BC:79:AB:9A:73:CB:98:6F:99:95:D4:04:BC:6E:4D:D4:80:E5:D2 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584ED861DA92F39353C31C368300 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/eb8df8fd-63da-3e17-aeff-36bc2c5b2e73.roa Signing time: Sat 15 Aug 2026 13:00:11 +0000 ROA not before: Sat 15 Aug 2026 13:00:11 +0000 ROA not after: Fri 13 Nov 2026 14:00:11 +0000 asID: 13335 IP address blocks: 172.64.222.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Sep 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:d8:61:da:92:f3:93:53:c3:1c:36:83:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 15 13:00:11 2026 GMT Not After : Nov 13 14:00:11 2026 GMT Subject: CN=f2b34952-aedf-4caa-ad8c-5ed25fd2e4ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:58:be:bc:18:dc:7f:7e:0e:36:0d:10:c3:d8: ff:f3:df:00:be:f9:0b:d5:7f:3f:07:0b:b4:df:c5: b4:75:55:d8:08:6a:40:99:f4:62:38:fa:79:12:27: 80:aa:41:96:38:07:f8:cf:28:3c:0f:a0:bd:d9:64: 81:81:b3:63:66:19:53:2a:ec:f6:09:02:84:1d:af: 30:e4:47:1e:ed:3a:63:34:a2:de:83:9a:da:c8:3a: 59:f8:04:dd:a3:18:08:0a:cf:65:45:07:f1:3d:c4: 2a:9d:79:4a:bf:61:27:50:97:c3:0e:dc:ae:cc:57: bd:8a:53:03:69:36:64:da:73:6f:82:74:09:19:72: 94:1d:50:51:bf:ca:c6:83:3c:7a:b3:86:22:79:e0: f1:56:47:3f:ed:f8:df:f1:c0:96:10:20:c1:02:9b: 6e:a7:72:08:89:71:69:a9:bd:9f:4b:65:3c:af:29: 80:39:94:36:d7:0f:7a:d5:60:77:49:4d:f0:67:65: 72:a2:1a:f6:b7:ec:7f:cc:d6:be:d0:51:66:68:f0: ea:0f:63:b0:52:e2:42:68:06:f2:a6:25:23:b1:18: e9:d9:84:40:68:8c:24:62:dc:32:03:f4:a7:fc:40: ba:27:de:ba:ca:1d:0f:e0:e9:85:a4:60:0e:79:ac: ad:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:BC:79:AB:9A:73:CB:98:6F:99:95:D4:04:BC:6E:4D:D4:80:E5:D2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/eb8df8fd-63da-3e17-aeff-36bc2c5b2e73.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.64.222.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:60:20:c9:fd:a9:d8:c7:4f:a3:2a:ad:c1:e0:c1:4e:94:1f: 26:e6:21:e5:35:41:25:71:3e:8b:f8:7b:d8:19:9d:ff:3f:d0: 84:cf:18:6a:49:78:c7:09:ac:dc:5d:e7:be:48:2d:73:36:8e: 28:30:51:e4:8a:10:39:b4:37:31:fc:6f:ad:86:76:34:51:f2: 94:98:38:af:6a:7d:8c:75:12:de:81:8a:eb:3d:d6:ee:b2:3e: 8d:8e:9a:20:64:52:57:8a:fb:e1:48:35:e8:aa:bd:30:44:70: 4b:04:9b:e2:bf:5d:ed:16:4f:4f:c4:cf:4d:6a:7d:7c:0c:50: 8c:fe:77:05:5a:87:c3:82:e9:35:bb:ae:20:72:cf:94:8d:9c: 58:80:95:b5:7a:b7:58:24:5a:1d:1e:53:d4:9f:e4:2f:b2:63: da:1f:87:56:7f:c6:1f:c7:57:09:f6:1c:57:73:bf:8f:64:e3: 0f:b1:fc:af:f6:f8:97:24:aa:1a:09:e6:7a:b1:d6:6a:e4:1e: 42:be:d5:98:a7:e3:d4:33:ac:c8:00:70:c8:2b:c8:54:8e:1b: 2f:33:29:2a:f0:1d:81:9e:9c:76:1a:b2:a4:ab:c2:5f:56:ce: 9a:85:80:fd:b2:f4:fe:0d:7f:39:c3:a7:eb:5b:ef:34:9c:83: 86:5d:b1:e7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7YYdqS85NTwxw2gwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDgxNTEzMDAxMVoXDTI2MTExMzE0MDAxMVowLzEtMCsGA1UEAxMk ZjJiMzQ5NTItYWVkZi00Y2FhLWFkOGMtNWVkMjVmZDJlNGNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlli+vBjcf34ONg0Qw9j/898AvvkL1X8/Bwu0 38W0dVXYCGpAmfRiOPp5EieAqkGWOAf4zyg8D6C92WSBgbNjZhlTKuz2CQKEHa8w 5Ece7TpjNKLeg5rayDpZ+ATdoxgICs9lRQfxPcQqnXlKv2EnUJfDDtyuzFe9ilMD aTZk2nNvgnQJGXKUHVBRv8rGgzx6s4YieeDxVkc/7fjf8cCWECDBAptup3IIiXFp qb2fS2U8rymAOZQ21w961WB3SU3wZ2Vyohr2t+x/zNa+0FFmaPDqD2OwUuJCaAby piUjsRjp2YRAaIwkYtwyA/Sn/EC6J966yh0P4OmFpGAOeaytsQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLi8eauac8uYb5mV1AS8bk3UgOXSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvZWI4ZGY4ZmQtNjNkYS0z ZTE3LWFlZmYtMzZiYzJjNWIyZTczLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEDeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACVgIMn9qdjHT6MqrcHgwU6UHybmIeU1QSVxPov4e9gZnf8/0ITPGGpJ eMcJrNxd575ILXM2jigwUeSKEDm0NzH8b62GdjRR8pSYOK9qfYx1Et6Bius91u6y Po2OmiBkUleK++FINeiqvTBEcEsEm+K/Xe0WT0/Ez01qfXwMUIz+dwVah8OC6TW7 riByz5SNnFiAlbV6t1gkWh0eU9Sf5C+yY9ofh1Z/xh/HVwn2HFdzv49k4w+x/K/2 +JckqhoJ5nqx1mrkHkK+1Zin49QzrMgAcMgryFSOGy8zKSrwHYGenHYasqSrwl9W zpqFgP2y9P4NfznDp+tb7zScg4Zdsec= -----END CERTIFICATE-----Generated at Tue Sep 1 02:50:50 2026 by rpki-client