$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/8db5dc3a-96b0-3b11-8d05-06459869a1d9.roa File: 8db5dc3a-96b0-3b11-8d05-06459869a1d9.roa (raw, json) Hash identifier: Ltgiymwg9l9sHEXmB/4BDdzY51aHi5UDQ8QXUO4IKsY= Subject key identifier: D0:9C:C2:66:DB:83:DB:76:34:E5:12:99:C6:A6:FF:01:E6:63:2F:8D Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584DFEA07515609F187EF249F500 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/8db5dc3a-96b0-3b11-8d05-06459869a1d9.roa Signing time: Fri 29 May 2026 13:00:10 +0000 ROA not before: Fri 29 May 2026 13:00:10 +0000 ROA not after: Thu 27 Aug 2026 13:00:10 +0000 asID: 14789 IP address blocks: 172.64.197.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 16 Jun 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:fe:a0:75:15:60:9f:18:7e:f2:49:f5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: May 29 13:00:10 2026 GMT Not After : Aug 27 13:00:10 2026 GMT Subject: CN=10baefbf-27d4-4644-87b9-7d42588cc8e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:86:0c:33:8e:6c:e2:ee:3a:7b:e0:ce:11:c8: c7:f4:5c:24:f2:36:13:f3:1c:93:f3:bb:e4:7f:3d: c7:a6:7c:85:dc:46:7e:44:05:23:6c:e7:50:ff:77: 53:fc:00:b2:ca:01:47:45:07:a5:6e:61:d8:3d:2a: e4:b5:57:53:60:30:17:61:14:f4:82:07:cb:52:dd: de:44:8f:4f:fc:f1:e4:b1:97:c1:72:e4:68:cc:fc: 8c:b4:2c:91:44:e5:4a:29:69:26:19:73:4c:96:5d: fc:d3:0d:be:3a:c2:12:5d:80:cd:a1:a3:af:a2:92: f0:45:c0:f1:17:d9:d0:7c:5c:9e:90:28:73:d1:93: 04:a1:e8:e7:52:ab:29:52:39:16:71:9b:37:71:90: 27:7d:16:4e:c7:9e:02:3a:86:c4:91:cd:60:08:30: 92:ab:33:b3:5d:71:81:3f:b8:32:46:d2:e5:56:bf: 60:53:45:16:db:04:3d:5a:ad:5a:2e:53:4f:b7:8b: 01:63:f8:66:2d:2a:86:73:06:aa:07:98:04:ce:06: 30:a0:20:7d:b9:1b:4f:fd:17:86:dd:cf:7c:c9:37: 80:d2:77:0c:02:e8:6c:11:f5:5b:3a:b3:62:05:10: 45:e0:a7:65:14:84:6d:e5:f0:87:bb:8c:51:59:ed: 01:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:9C:C2:66:DB:83:DB:76:34:E5:12:99:C6:A6:FF:01:E6:63:2F:8D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/8db5dc3a-96b0-3b11-8d05-06459869a1d9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.64.197.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:82:61:30:9e:5e:21:34:90:76:26:db:70:c5:8c:9c:6d:83: 76:fc:d3:8e:a6:91:96:e8:e4:ed:15:59:35:1e:be:43:79:44: 0a:53:0d:68:2d:b8:9c:18:e4:bd:f4:cc:9f:21:6c:db:ae:da: 5a:4b:17:6d:37:2b:2d:05:2b:1b:fc:e0:89:00:98:d7:bf:dd: a8:d7:da:9b:41:7a:b5:24:3b:a4:1d:6c:81:7c:51:36:43:25: 33:c2:b5:ab:59:c6:e2:52:7a:e2:03:26:be:53:ca:a2:40:49: f1:ec:69:27:c9:d2:d0:7c:ca:97:c9:1b:2f:c1:41:28:de:ec: 05:d7:06:6c:9e:a2:67:44:f1:24:a0:95:8e:10:22:4e:77:46: 5e:ad:c6:63:27:88:d2:ca:4a:ca:7a:6c:d9:fc:e3:8a:fc:93: 38:40:ed:e2:fa:13:98:a5:f8:ad:6c:d9:d1:d8:98:50:76:1a: f2:0c:d6:d9:01:6b:1a:97:62:07:8a:48:c4:e3:12:65:ca:a2: a0:fc:2c:1b:dd:9a:49:19:43:2c:59:67:10:da:fb:c0:7f:4c: 02:c2:db:51:e0:20:c5:99:b5:66:84:f2:ee:18:e3:e2:d3:12: 72:d7:a0:77:f9:25:50:e1:c9:5a:58:58:38:7e:93:49:c4:e5: 17:23:36:f7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3+oHUVYJ8YfvJJ9QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDUyOTEzMDAxMFoXDTI2MDgyNzEzMDAxMFowLzEtMCsGA1UEAxMk MTBiYWVmYmYtMjdkNC00NjQ0LTg3YjktN2Q0MjU4OGNjOGU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtYYMM45s4u46e+DOEcjH9Fwk8jYT8xyT87vk fz3HpnyF3EZ+RAUjbOdQ/3dT/ACyygFHRQelbmHYPSrktVdTYDAXYRT0ggfLUt3e RI9P/PHksZfBcuRozPyMtCyRROVKKWkmGXNMll380w2+OsISXYDNoaOvopLwRcDx F9nQfFyekChz0ZMEoejnUqspUjkWcZs3cZAnfRZOx54COobEkc1gCDCSqzOzXXGB P7gyRtLlVr9gU0UW2wQ9Wq1aLlNPt4sBY/hmLSqGcwaqB5gEzgYwoCB9uRtP/ReG 3c98yTeA0ncMAuhsEfVbOrNiBRBF4KdlFIRt5fCHu4xRWe0B8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNCcwmbbg9t2NOUSmcam/wHmYy+NMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvOGRiNWRjM2EtOTZiMC0z YjExLThkMDUtMDY0NTk4NjlhMWQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEDFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADKCYTCeXiE0kHYm23DFjJxtg3b8046mkZbo5O0VWTUevkN5RApTDWgt uJwY5L30zJ8hbNuu2lpLF203Ky0FKxv84IkAmNe/3ajX2ptBerUkO6QdbIF8UTZD JTPCtatZxuJSeuIDJr5TyqJASfHsaSfJ0tB8ypfJGy/BQSje7AXXBmyeomdE8SSg lY4QIk53Rl6txmMniNLKSsp6bNn844r8kzhA7eL6E5il+K1s2dHYmFB2GvIM1tkB axqXYgeKSMTjEmXKoqD8LBvdmkkZQyxZZxDa+8B/TALC21HgIMWZtWaE8u4Y4+LT EnLXoHf5JVDhyVpYWDh+k0nE5RcjNvc= -----END CERTIFICATE-----Generated at Sat Jun 13 21:30:12 2026 by rpki-client