$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/61c29f1a-1ac2-342b-ade0-b88e086703d1.roa File: 61c29f1a-1ac2-342b-ade0-b88e086703d1.roa (raw, json) Hash identifier: LtYZ2k20BnB4ae8QSziDZW2Mfvx1osQ+O3PFIJN68Rw= Subject key identifier: FF:89:89:F0:38:2A:A1:EB:87:24:11:D3:D0:AC:3C:36:B5:9B:B3:E1 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584EED5236880FDEEA64A7646580 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/61c29f1a-1ac2-342b-ade0-b88e086703d1.roa Signing time: Sun 23 Aug 2026 01:00:12 +0000 ROA not before: Sun 23 Aug 2026 01:00:12 +0000 ROA not after: Sat 21 Nov 2026 02:00:12 +0000 asID: 13335 IP address blocks: 172.64.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ed:52:36:88:0f:de:ea:64:a7:64:65:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 23 01:00:12 2026 GMT Not After : Nov 21 02:00:12 2026 GMT Subject: CN=d51a8855-f98a-455e-9c84-026337231b8c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:17:0a:81:30:bb:38:d3:00:c9:a8:cb:8c:af: b7:ae:47:28:1f:09:28:00:53:48:ef:0e:e2:b1:cb: b1:84:94:6c:88:0c:3b:bb:9b:33:35:c8:7d:96:ce: 00:c1:e0:9a:7b:2e:27:16:5b:b3:42:3a:be:af:57: 58:af:02:c6:a2:8e:1f:01:c9:67:b1:74:50:a5:7b: 89:bb:47:5d:fb:3c:db:3e:cc:40:ee:c4:8e:4c:22: fb:62:09:92:27:33:d1:e7:76:88:a5:c4:10:b4:81: e6:00:79:f6:5a:f3:2b:46:ca:4a:a5:e4:09:ca:d5: d8:90:39:ce:68:1d:4a:ce:09:45:87:f8:75:59:e5: 04:ce:16:2a:3d:56:c4:64:fd:96:87:b1:71:f1:0f: 80:5a:c4:a0:c8:bc:2b:0d:8f:c3:49:f9:22:16:24: 84:2a:d3:bf:f2:ca:15:a9:88:7f:67:c1:d4:5e:bf: 00:29:75:c0:41:a3:ef:f7:06:6e:9a:8e:f9:c9:02: 3b:19:e9:f2:b0:48:52:ed:d2:fb:cd:94:94:70:2b: 27:03:b0:45:41:ef:50:1b:fd:4e:92:0f:5d:c3:e0: cd:cc:59:4f:94:cc:c5:ca:6c:6a:1d:23:c3:30:fd: 6b:7f:74:53:ec:fa:ba:06:78:50:c5:cc:f0:ea:1b: 1c:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:89:89:F0:38:2A:A1:EB:87:24:11:D3:D0:AC:3C:36:B5:9B:B3:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/61c29f1a-1ac2-342b-ade0-b88e086703d1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.64.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c0:fc:07:56:a1:5e:52:bc:81:0b:30:e5:3e:39:73:30:9a:c4: 86:33:58:40:ff:42:d4:04:41:71:7d:86:b9:4f:85:2e:06:0a: 0f:0b:49:2f:7f:87:c4:9d:b2:f9:07:6d:06:f8:0d:86:d7:89: d9:41:d7:e6:21:bf:2f:b2:2c:7b:07:91:eb:8d:9c:ea:04:2a: a5:c1:02:2b:f6:e6:6b:e0:89:89:06:45:e5:e0:60:4e:32:9c: c7:b1:ff:a3:5b:83:dc:db:4c:12:d0:cd:ba:52:c6:9f:96:fe: f8:87:91:81:d0:63:00:fc:11:2a:e1:10:65:0a:d4:53:23:e7: 47:61:c2:5f:79:43:13:f2:72:73:0c:70:c6:39:7a:e4:37:1b: 54:be:ba:39:12:1a:cd:7b:03:3c:a0:c9:54:c7:ea:5b:e7:37: e7:d3:e6:01:7f:c3:7e:8b:08:ca:1d:6d:38:79:c1:4b:5b:9a: 05:72:ed:66:e0:18:42:82:08:f2:d6:ee:a7:c0:2d:62:57:94: fe:52:05:73:f4:e0:bb:17:f0:41:89:3f:04:e3:68:72:04:db: 41:73:ac:55:c9:a6:c1:c0:d7:05:c9:ba:97:f4:e4:00:df:fc: a2:d7:73:2e:46:5e:8d:7e:f1:d4:d2:52:6d:41:15:b7:ab:e0: dc:5f:81:b4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7tUjaID97qZKdkZYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDgyMzAxMDAxMloXDTI2MTEyMTAyMDAxMlowLzEtMCsGA1UEAxMk ZDUxYTg4NTUtZjk4YS00NTVlLTljODQtMDI2MzM3MjMxYjhjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlhcKgTC7ONMAyajLjK+3rkcoHwkoAFNI7w7i scuxhJRsiAw7u5szNch9ls4AweCaey4nFluzQjq+r1dYrwLGoo4fAclnsXRQpXuJ u0dd+zzbPsxA7sSOTCL7YgmSJzPR53aIpcQQtIHmAHn2WvMrRspKpeQJytXYkDnO aB1KzglFh/h1WeUEzhYqPVbEZP2Wh7Fx8Q+AWsSgyLwrDY/DSfkiFiSEKtO/8soV qYh/Z8HUXr8AKXXAQaPv9wZumo75yQI7GenysEhS7dL7zZSUcCsnA7BFQe9QG/1O kg9dw+DNzFlPlMzFymxqHSPDMP1rf3RT7Pq6BnhQxczw6hscXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP+JifA4KqHrhyQR09CsPDa1m7PhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNjFjMjlmMWEtMWFjMi0z NDJiLWFkZTAtYjg4ZTA4NjcwM2QxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErECAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMD8B1ahXlK8gQsw5T45czCaxIYzWED/QtQEQXF9hrlPhS4GCg8LSS9/ h8SdsvkHbQb4DYbXidlB1+Yhvy+yLHsHkeuNnOoEKqXBAiv25mvgiYkGReXgYE4y nMex/6Nbg9zbTBLQzbpSxp+W/viHkYHQYwD8ESrhEGUK1FMj50dhwl95QxPycnMM cMY5euQ3G1S+ujkSGs17AzygyVTH6lvnN+fT5gF/w36LCModbTh5wUtbmgVy7Wbg GEKCCPLW7qfALWJXlP5SBXP04LsX8EGJPwTjaHIE20FzrFXJpsHA1wXJupf05ADf /KLXcy5GXo1+8dTSUm1BFber4NxfgbQ= -----END CERTIFICATE-----Generated at Sun Sep 20 19:16:55 2026 by rpki-client