$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/cd9157e8-4397-31f4-aca2-3b7f65fc5328.roa File: cd9157e8-4397-31f4-aca2-3b7f65fc5328.roa (raw, json) Hash identifier: uELdCo3EKFBg6Z5hLyQ3nAYuOpkaT6r2BV5jNmmbTn8= Subject key identifier: 3E:A6:1E:A9:B5:47:05:34:1E:C0:DE:4C:BC:9C:6F:09:5A:C8:D4:34 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584EA79BC120314AC354064D3B00 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/cd9157e8-4397-31f4-aca2-3b7f65fc5328.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 13335 IP address blocks: 172.64.212.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:9b:c1:20:31:4a:c3:54:06:4d:3b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=c017c849-3050-43d9-84b1-67667eee7024 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:44:30:bd:31:f4:67:c5:89:96:97:7a:9f:c9: dc:58:1c:97:66:70:91:c0:22:19:f3:d6:d0:e3:7c: ae:a0:c5:c1:32:eb:32:20:33:5b:e2:b2:fc:d7:5e: 7b:c1:45:a1:9d:47:04:76:07:90:18:45:b0:63:9b: bd:18:a4:5e:87:13:9b:ac:db:8f:b5:47:24:12:71: ac:a8:d9:20:42:0c:98:62:96:98:a5:da:17:7d:db: 8b:d6:38:42:7e:24:01:b0:1b:18:a2:2e:9a:a8:a7: ef:35:15:c3:b5:e2:b5:ae:65:cc:22:30:37:01:af: c3:d8:38:e1:94:06:51:3b:2e:16:44:e8:2b:f7:e4: 7d:6b:88:22:64:7e:7c:52:b9:a5:a5:b5:b8:4e:e1: 3e:0c:31:50:cb:72:8a:53:6a:88:8f:9c:aa:df:ec: cf:d5:c0:0f:c0:1c:07:4d:29:29:bf:9a:e0:86:d5: b0:26:42:a0:da:be:86:e4:74:b6:db:ee:52:6c:af: b1:78:77:2d:ad:9d:54:14:c4:2e:29:e8:e1:bb:73: bb:52:c0:f8:8e:a1:2b:2f:20:c1:6a:97:ab:98:b4: 8c:9b:e0:50:09:b1:78:d8:81:c6:53:8f:59:0d:14: 9d:4e:53:03:71:57:50:77:86:da:4d:d6:d8:38:a3: ee:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:A6:1E:A9:B5:47:05:34:1E:C0:DE:4C:BC:9C:6F:09:5A:C8:D4:34 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/cd9157e8-4397-31f4-aca2-3b7f65fc5328.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.64.212.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:fc:c6:21:f5:71:d7:0b:d7:b9:b5:e2:1c:af:93:71:ab:1b: 97:9b:3c:71:89:47:ba:bf:31:cd:01:6e:13:00:a5:89:80:4a: 23:1f:68:76:b6:0e:19:dd:55:56:e5:1c:39:e4:45:66:8b:75: 75:98:45:27:f6:f8:1a:6e:93:7e:69:08:42:96:c3:16:b1:2a: 3f:7c:08:b0:c2:6d:49:cf:88:42:3e:93:80:18:84:9d:71:59: 32:5c:01:b4:5e:1c:2c:89:a7:9c:18:51:80:8f:8d:57:26:db: 15:0f:34:8c:07:b5:18:be:49:b7:09:3c:3f:25:d7:0f:23:45: 8b:25:e5:fd:07:2d:15:e5:92:43:77:22:74:b2:4f:09:c0:ca: c0:d1:56:7c:7a:97:aa:0d:f0:9d:39:8e:ea:3a:2b:8d:a7:60: bb:67:f5:8d:91:f6:f4:a5:2e:20:fa:e3:f0:73:a5:c6:de:91: 04:53:1b:ce:a0:a2:59:43:01:b2:0f:8a:72:9f:12:6f:0f:60: 27:a9:98:ac:34:af:c7:58:c9:6a:99:b2:9c:d9:aa:a7:84:db: 6e:69:f8:44:64:a1:3b:43:98:93:65:50:de:17:d6:76:c4:95: 56:0a:2d:23:28:8c:1b:ce:42:65:36:7a:15:e7:e5:f5:6d:0e: 8e:8c:fa:7f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nm8EgMUrDVAZNOwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk YzAxN2M4NDktMzA1MC00M2Q5LTg0YjEtNjc2NjdlZWU3MDI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgEQwvTH0Z8WJlpd6n8ncWByXZnCRwCIZ89bQ 43yuoMXBMusyIDNb4rL81157wUWhnUcEdgeQGEWwY5u9GKRehxObrNuPtUckEnGs qNkgQgyYYpaYpdoXfduL1jhCfiQBsBsYoi6aqKfvNRXDteK1rmXMIjA3Aa/D2Djh lAZROy4WROgr9+R9a4giZH58UrmlpbW4TuE+DDFQy3KKU2qIj5yq3+zP1cAPwBwH TSkpv5rghtWwJkKg2r6G5HS22+5SbK+xeHctrZ1UFMQuKejhu3O7UsD4jqErLyDB apermLSMm+BQCbF42IHGU49ZDRSdTlMDcVdQd4baTdbYOKPuQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD6mHqm1RwU0HsDeTLycbwlayNQ0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvY2Q5MTU3ZTgtNDM5Ny0z MWY0LWFjYTItM2I3ZjY1ZmM1MzI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEDUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADb8xiH1cdcL17m14hyvk3GrG5ebPHGJR7q/Mc0BbhMApYmASiMfaHa2 DhndVVblHDnkRWaLdXWYRSf2+Bpuk35pCEKWwxaxKj98CLDCbUnPiEI+k4AYhJ1x WTJcAbReHCyJp5wYUYCPjVcm2xUPNIwHtRi+SbcJPD8l1w8jRYsl5f0HLRXlkkN3 InSyTwnAysDRVnx6l6oN8J05juo6K42nYLtn9Y2R9vSlLiD64/BzpcbekQRTG86g ollDAbIPinKfEm8PYCepmKw0r8dYyWqZspzZqqeE225p+ERkoTtDmJNlUN4X1nbE lVYKLSMojBvOQmU2ehXn5fVtDo6M+n8= -----END CERTIFICATE-----Generated at Wed Jul 29 04:02:25 2026 by rpki-client