$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/bf848636-49a1-3402-b530-30cd588d3624.roa File: bf848636-49a1-3402-b530-30cd588d3624.roa (raw, json) Hash identifier: 2TeBTvVR1R4p6yQUjyXbAJZhFxcLlmMPOdl1ImQy4G4= Subject key identifier: 55:CA:16:AE:D7:DB:33:85:49:D8:ED:5A:3F:E5:8E:93:BA:5C:A6:B6 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584EA793410C153B24F7FBDD8040 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/bf848636-49a1-3402-b530-30cd588d3624.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 13335 IP address blocks: 172.64.218.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:93:41:0c:15:3b:24:f7:fb:dd:80:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=4d11364f-8142-4b76-bef6-5c3c0ea18ba9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:28:5f:df:9f:df:a8:6c:a2:8f:bb:9c:ba:e8: 98:d5:3e:11:24:b6:1d:92:bd:19:49:f6:b0:5e:cd: 6e:90:c4:71:de:35:91:26:16:6f:84:1a:cc:06:b5: 2d:6d:2e:dd:75:98:fa:72:52:7f:c5:80:d0:ba:c4: 75:84:cd:39:4d:7e:d1:ad:71:6f:06:1f:fb:3a:d7: 09:1d:d8:11:d7:de:51:04:b3:de:38:e5:6b:a0:68: 52:f4:a6:37:61:3b:71:4d:80:39:d9:94:c3:53:2e: 73:cc:9c:15:2f:47:52:c5:12:a1:e5:fc:d6:95:d5: a8:2b:cf:2d:70:fd:b2:88:e2:07:94:9a:be:82:34: 45:e0:43:09:d5:b6:13:3c:c3:c1:93:7d:c0:9c:47: e0:75:d2:cb:31:3c:85:3c:4b:aa:2d:f7:a4:3d:64: a1:8b:a5:b7:65:a9:fc:1f:71:7d:55:92:6e:f8:27: 8c:91:35:53:75:8b:ab:b0:0e:df:69:af:84:ae:7e: 9f:e6:3f:24:0c:84:c8:68:4c:56:0b:8a:86:b6:a0: e7:b9:67:38:93:8d:91:66:7f:b4:e2:94:a9:fd:f3: e9:8a:3e:98:f9:2c:43:4d:d9:62:ec:82:f3:b2:47: 03:f3:03:a0:89:bf:04:ab:40:30:a6:92:7a:f5:8b: 4a:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:CA:16:AE:D7:DB:33:85:49:D8:ED:5A:3F:E5:8E:93:BA:5C:A6:B6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/bf848636-49a1-3402-b530-30cd588d3624.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.64.218.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:4d:2b:eb:b2:8d:64:5b:e1:43:6c:d6:3c:e7:56:dd:26:8b: 38:5c:76:75:81:67:b2:d1:b2:44:97:3b:65:f0:ee:12:92:fd: 87:65:cb:3b:9d:25:ee:b1:21:7b:a1:79:07:d4:72:b4:62:e9: 02:d2:aa:b2:1e:dc:68:82:fb:4e:24:63:6a:08:d5:22:b3:b4: 5e:04:80:70:b3:60:a8:4f:44:e2:0d:d6:60:8f:74:ca:62:0d: cb:9c:26:e8:f2:a4:89:9d:e2:50:19:51:87:d3:f2:28:ba:92: aa:f6:e9:4a:f6:5f:b5:4c:10:91:60:4b:5e:ed:d2:97:69:1b: 24:bb:d4:93:fa:65:79:44:a4:47:7e:8b:cc:27:3e:df:8c:69: d4:86:05:6d:a0:1d:5e:d3:62:83:78:f6:0c:ac:3c:3e:1b:62: 90:d5:66:cf:64:af:98:7a:47:23:5e:fb:64:23:64:bd:4a:bd: 22:29:28:eb:e5:59:6f:e0:bb:43:69:6e:0c:da:22:c2:4a:f4: 05:83:54:90:38:aa:8e:4a:17:e6:39:b6:8e:ed:7a:53:79:ff: 67:53:35:ac:d4:5e:66:49:0c:ea:7c:a7:2d:aa:7c:18:51:b5: c8:7b:09:99:77:07:0f:5a:3c:78:a9:5e:3d:86:61:67:fd:27: 38:e1:01:b9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nk0EMFTsk9/vdgEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk NGQxMTM2NGYtODE0Mi00Yjc2LWJlZjYtNWMzYzBlYTE4YmE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoShf35/fqGyij7ucuuiY1T4RJLYdkr0ZSfaw Xs1ukMRx3jWRJhZvhBrMBrUtbS7ddZj6clJ/xYDQusR1hM05TX7RrXFvBh/7OtcJ HdgR195RBLPeOOVroGhS9KY3YTtxTYA52ZTDUy5zzJwVL0dSxRKh5fzWldWoK88t cP2yiOIHlJq+gjRF4EMJ1bYTPMPBk33AnEfgddLLMTyFPEuqLfekPWShi6W3Zan8 H3F9VZJu+CeMkTVTdYursA7faa+Ern6f5j8kDITIaExWC4qGtqDnuWc4k42RZn+0 4pSp/fPpij6Y+SxDTdli7ILzskcD8wOgib8Eq0AwppJ69YtK8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFXKFq7X2zOFSdjtWj/ljpO6XKa2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvYmY4NDg2MzYtNDlhMS0z NDAyLWI1MzAtMzBjZDU4OGQzNjI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEDaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACdNK+uyjWRb4UNs1jznVt0mizhcdnWBZ7LRskSXO2Xw7hKS/Ydlyzud Je6xIXuheQfUcrRi6QLSqrIe3GiC+04kY2oI1SKztF4EgHCzYKhPROIN1mCPdMpi DcucJujypImd4lAZUYfT8ii6kqr26Ur2X7VMEJFgS17t0pdpGyS71JP6ZXlEpEd+ i8wnPt+MadSGBW2gHV7TYoN49gysPD4bYpDVZs9kr5h6RyNe+2QjZL1KvSIpKOvl WW/gu0NpbgzaIsJK9AWDVJA4qo5KF+Y5to7telN5/2dTNazUXmZJDOp8py2qfBhR tch7CZl3Bw9aPHipXj2GYWf9JzjhAbk= -----END CERTIFICATE-----Generated at Wed Jul 29 09:14:11 2026 by rpki-client