$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c7a222f4-d550-33a0-8f0d-27e1447389c6.roa File: c7a222f4-d550-33a0-8f0d-27e1447389c6.roa (raw, json) Hash identifier: MGlmvI4y31MEHjFMnUk9Uk/nuiAwOGTSQQqwfksFxNY= Subject key identifier: 48:8A:3C:30:7B:C8:E2:AE:25:69:DE:D3:B1:F6:B0:84:03:77:61:82 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584EED522AA178D7C6E51976F000 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c7a222f4-d550-33a0-8f0d-27e1447389c6.roa Signing time: Sun 23 Aug 2026 01:00:12 +0000 ROA not before: Sun 23 Aug 2026 01:00:12 +0000 ROA not after: Sat 21 Nov 2026 02:00:12 +0000 asID: 13335 IP address blocks: 172.64.234.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ed:52:2a:a1:78:d7:c6:e5:19:76:f0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 23 01:00:12 2026 GMT Not After : Nov 21 02:00:12 2026 GMT Subject: CN=2ca68b0b-1958-44cf-8dd9-7a37d4f482ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:b6:6d:89:67:86:eb:0a:30:09:41:43:e2:b1: 1b:5f:cd:9e:d5:f9:7e:bb:96:ac:99:bb:87:45:74: d4:bc:4c:6b:fe:4d:b3:a2:d7:45:6f:4f:3f:f6:55: ca:7e:65:25:3b:62:92:0e:3d:4f:46:e4:f6:86:91: a9:24:28:50:9c:64:57:80:89:7a:8f:ae:6b:99:3c: e2:1a:44:ee:82:7e:75:eb:65:31:ff:06:b7:21:b6: 25:51:9b:cc:26:dc:4a:cc:d4:34:e2:43:87:dd:fe: e9:d7:94:e2:ef:61:67:34:6c:1b:21:cd:76:38:9d: 8b:0a:73:a8:e9:17:e8:70:43:f7:1d:a3:55:ab:eb: ff:3f:8c:08:9b:d0:f0:fd:e8:6c:fe:51:c0:04:2b: 7b:71:ea:60:28:fb:9c:f5:26:38:83:1a:33:2b:82: 09:4c:c1:57:ba:5a:85:bf:08:c9:ac:1c:31:2b:dc: a4:74:46:a9:df:cb:24:2c:6e:2e:d3:34:ff:81:a1: 14:70:d7:30:79:9c:7d:a2:ff:7a:54:b7:11:48:08: a9:22:e0:32:57:ef:36:29:c3:28:30:40:28:75:e0: 8a:b8:2b:d9:41:63:14:75:02:a8:e0:76:26:9a:b8: 86:e0:db:71:57:9f:67:7a:a8:41:3f:3a:1c:92:77: bd:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:8A:3C:30:7B:C8:E2:AE:25:69:DE:D3:B1:F6:B0:84:03:77:61:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c7a222f4-d550-33a0-8f0d-27e1447389c6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.64.234.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:21:8c:6e:49:2a:08:d7:33:bb:1d:f3:3d:06:3c:59:7c:6e: 00:15:46:aa:69:6b:7d:5e:a5:80:15:1e:ed:9e:79:21:7d:29: a6:b4:85:10:74:6a:7b:68:20:1b:9b:10:28:b9:f0:7b:80:14: 94:cb:78:cd:8f:47:b7:7a:2a:bb:b2:df:55:cc:a2:0d:94:d9: 38:63:f2:67:38:c1:11:bc:22:b9:b1:5c:09:f5:c0:f9:6a:e0: 86:c2:06:b9:02:9f:af:34:08:b9:08:0f:05:f5:c9:51:01:98: 4f:1d:4c:9f:e3:a7:15:84:1c:ef:94:70:a9:70:a2:84:3b:57: a8:ef:12:c7:ff:64:63:99:dd:46:44:6f:aa:b8:67:9e:0e:e0: a9:aa:d4:9b:06:93:de:43:a0:4b:e8:10:ab:74:c5:2e:a5:d8: e4:a8:7a:43:93:49:13:c1:84:35:2a:ec:e9:bd:32:94:fe:e7: 3e:48:0d:76:47:b0:8c:7d:ba:03:f8:65:f3:7b:b2:f5:1c:ec: d4:58:ed:76:31:b6:80:fe:58:4c:4b:cb:0c:e0:bd:b9:f1:0b: ea:fe:eb:d8:d6:27:ad:09:60:a1:c0:bb:29:6f:d6:9b:f8:cc: 79:46:a9:b9:90:7e:ae:ab:0a:8b:36:49:c0:94:cb:60:b9:2e: 5c:62:05:bd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7tUiqheNfG5Rl28AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDgyMzAxMDAxMloXDTI2MTEyMTAyMDAxMlowLzEtMCsGA1UEAxMk MmNhNjhiMGItMTk1OC00NGNmLThkZDktN2EzN2Q0ZjQ4MmFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjrZtiWeG6wowCUFD4rEbX82e1fl+u5asmbuH RXTUvExr/k2zotdFb08/9lXKfmUlO2KSDj1PRuT2hpGpJChQnGRXgIl6j65rmTzi GkTugn5162Ux/wa3IbYlUZvMJtxKzNQ04kOH3f7p15Ti72FnNGwbIc12OJ2LCnOo 6RfocEP3HaNVq+v/P4wIm9Dw/ehs/lHABCt7cepgKPuc9SY4gxozK4IJTMFXulqF vwjJrBwxK9ykdEap38skLG4u0zT/gaEUcNcweZx9ov96VLcRSAipIuAyV+82KcMo MEAodeCKuCvZQWMUdQKo4HYmmriG4NtxV59neqhBPzockne9GwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEiKPDB7yOKuJWne07H2sIQDd2GCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvYzdhMjIyZjQtZDU1MC0z M2EwLThmMGQtMjdlMTQ0NzM4OWM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEDqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAIhjG5JKgjXM7sd8z0GPFl8bgAVRqppa31epYAVHu2eeSF9Kaa0hRB0 antoIBubECi58HuAFJTLeM2PR7d6Kruy31XMog2U2Thj8mc4wRG8IrmxXAn1wPlq 4IbCBrkCn680CLkIDwX1yVEBmE8dTJ/jpxWEHO+UcKlwooQ7V6jvEsf/ZGOZ3UZE b6q4Z54O4Kmq1JsGk95DoEvoEKt0xS6l2OSoekOTSRPBhDUq7Om9MpT+5z5IDXZH sIx9ugP4ZfN7svUc7NRY7XYxtoD+WExLywzgvbnxC+r+69jWJ60JYKHAuylv1pv4 zHlGqbmQfq6rCos2ScCUy2C5LlxiBb0= -----END CERTIFICATE-----Generated at Sun Sep 20 17:59:57 2026 by rpki-client