$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/1b5fef39-5a4c-321e-84b1-eddc4e632be8.roa File: 1b5fef39-5a4c-321e-84b1-eddc4e632be8.roa (raw, json) Hash identifier: dpBbzZ6duLHE8iQ0CvyOH+Vrem0bXStA1/2o4FflGWo= Subject key identifier: 00:8B:8C:F8:DC:D9:39:A1:A2:BF:7F:B7:E3:46:10:83:C1:57:D6:A9 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584EEA87797D5C5CA2AC7FC97580 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/1b5fef39-5a4c-321e-84b1-eddc4e632be8.roa Signing time: Sat 22 Aug 2026 01:00:12 +0000 ROA not before: Sat 22 Aug 2026 01:00:12 +0000 ROA not after: Fri 20 Nov 2026 02:00:12 +0000 asID: 13335 IP address blocks: 172.64.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ea:87:79:7d:5c:5c:a2:ac:7f:c9:75:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 22 01:00:12 2026 GMT Not After : Nov 20 02:00:12 2026 GMT Subject: CN=5214b496-5e10-4b07-9108-764e5528e0af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:ba:c9:1c:b8:6b:81:b5:63:f6:1b:22:32:33: 52:15:12:ec:37:36:45:db:14:1e:73:d4:eb:c6:56: 4b:c7:7a:3e:1c:14:69:c5:b2:e8:19:11:50:20:f3: 9d:53:11:84:96:86:8f:da:cf:53:b3:1e:69:4e:68: 3a:4b:a6:77:fc:2f:9f:79:d7:27:09:4a:b9:c3:c3: 17:0e:ee:39:18:2d:cc:20:45:57:c4:72:51:52:c4: ba:9c:0b:b4:65:e7:ac:a5:35:a7:de:f1:c5:47:f2: 3f:15:ba:22:68:2a:18:70:ad:63:6d:83:ed:9f:1b: b2:0e:25:51:2c:92:c1:5e:76:e5:3f:4f:aa:97:17: df:b6:2a:58:9a:e7:9d:04:d5:f3:de:90:01:fd:dd: ad:90:ef:a8:f3:c0:15:b5:cd:fc:86:6d:9e:b7:a7: ce:bf:03:b1:1b:56:b0:cc:df:29:5e:46:34:74:0c: 07:34:c9:17:a2:02:17:cc:38:33:e7:e5:2d:f0:7b: 3d:1e:8d:75:3d:04:72:7c:2a:63:44:dd:f7:b5:fe: 6e:b5:3b:9f:a4:60:35:58:42:7a:fe:dc:09:cb:74: fa:82:3c:49:65:f8:10:35:f9:6a:b3:8a:4b:4e:c0: 5c:ad:a8:34:a4:46:93:c5:20:ed:93:97:6d:6e:ec: e9:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:8B:8C:F8:DC:D9:39:A1:A2:BF:7F:B7:E3:46:10:83:C1:57:D6:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/1b5fef39-5a4c-321e-84b1-eddc4e632be8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.64.153.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9c:5c:fc:b7:4c:b4:1b:56:49:e3:d4:34:07:1b:00:d7:da:28: 46:18:c2:94:15:af:bc:80:48:05:81:e0:9d:5c:40:0a:d1:b5: a6:99:4a:d3:18:9e:ab:ef:aa:d9:c6:67:84:87:fa:88:db:6c: 02:7e:cd:f1:04:85:aa:37:89:19:2d:a9:6a:76:ce:4e:45:19: 36:1f:e5:3c:33:48:58:be:55:98:03:a6:fd:fa:48:4d:f6:21: ef:9b:0d:1f:a8:41:46:7c:49:aa:37:e9:f8:18:e6:15:23:da: 63:31:b4:b0:26:73:27:98:df:88:95:8a:d7:c9:c1:89:83:fe: 41:d2:5f:2b:8d:b8:07:f4:ad:22:83:da:6e:c7:1c:bd:7f:ac: c5:f9:ce:bc:ab:ad:9b:7a:aa:03:74:d6:4c:3e:aa:07:7a:0e: 51:b6:78:cb:03:e1:6b:6b:2f:f4:ea:59:df:a5:63:84:a0:27: 34:72:31:c8:19:7a:d2:04:21:34:ee:a7:b2:50:e9:95:92:5f: 43:9e:05:58:22:cc:c9:7b:20:7f:76:70:ef:ce:a2:7d:f1:cc: ab:fd:b8:2e:1d:fe:b9:bf:3b:70:e5:7e:4d:32:90:5d:05:f6: d8:f4:15:ae:88:3d:ff:ed:90:e6:94:e7:77:57:08:d3:ea:7e: 5a:97:68:57 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7qh3l9XFyirH/JdYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDgyMjAxMDAxMloXDTI2MTEyMDAyMDAxMlowLzEtMCsGA1UEAxMk NTIxNGI0OTYtNWUxMC00YjA3LTkxMDgtNzY0ZTU1MjhlMGFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxbrJHLhrgbVj9hsiMjNSFRLsNzZF2xQec9Tr xlZLx3o+HBRpxbLoGRFQIPOdUxGEloaP2s9Tsx5pTmg6S6Z3/C+fedcnCUq5w8MX Du45GC3MIEVXxHJRUsS6nAu0ZeespTWn3vHFR/I/FboiaCoYcK1jbYPtnxuyDiVR LJLBXnblP0+qlxfftipYmuedBNXz3pAB/d2tkO+o88AVtc38hm2et6fOvwOxG1aw zN8pXkY0dAwHNMkXogIXzDgz5+Ut8Hs9Ho11PQRyfCpjRN33tf5utTufpGA1WEJ6 /twJy3T6gjxJZfgQNflqs4pLTsBcrag0pEaTxSDtk5dtbuzpcQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFACLjPjc2Tmhor9/t+NGEIPBV9apMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMWI1ZmVmMzktNWE0Yy0z MjFlLTg0YjEtZWRkYzRlNjMyYmU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArECZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJxc/LdMtBtWSePUNAcbANfaKEYYwpQVr7yASAWB4J1cQArRtaaZStMY nqvvqtnGZ4SH+ojbbAJ+zfEEhao3iRktqWp2zk5FGTYf5TwzSFi+VZgDpv36SE32 Ie+bDR+oQUZ8Sao36fgY5hUj2mMxtLAmcyeY34iVitfJwYmD/kHSXyuNuAf0rSKD 2m7HHL1/rMX5zryrrZt6qgN01kw+qgd6DlG2eMsD4WtrL/TqWd+lY4SgJzRyMcgZ etIEITTup7JQ6ZWSX0OeBVgizMl7IH92cO/Oon3xzKv9uC4d/rm/O3Dlfk0ykF0F 9tj0Fa6IPf/tkOaU53dXCNPqflqXaFc= -----END CERTIFICATE-----Generated at Mon Sep 21 14:58:24 2026 by rpki-client