$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/de500e77-15fe-3e3f-bfca-62daebbae3c0.roa File: de500e77-15fe-3e3f-bfca-62daebbae3c0.roa (raw, json) Hash identifier: WdGy40C4YE91fiS+SUtCLzmunwPH1dCQJWeQzmN+9Cs= Subject key identifier: 76:93:A3:A2:7C:B0:94:B0:69:04:3D:E7:60:8A:80:32:A0:ED:65:68 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584EE4F1F924F43AFE9844C55A00 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/de500e77-15fe-3e3f-bfca-62daebbae3c0.roa Signing time: Thu 20 Aug 2026 01:00:12 +0000 ROA not before: Thu 20 Aug 2026 01:00:12 +0000 ROA not after: Wed 18 Nov 2026 02:00:12 +0000 asID: 14789 IP address blocks: 172.64.204.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e4:f1:f9:24:f4:3a:fe:98:44:c5:5a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 20 01:00:12 2026 GMT Not After : Nov 18 02:00:12 2026 GMT Subject: CN=68d67ba0-e0d3-4e75-a0f1-202ef7c0b8db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:ab:f7:be:8b:a0:77:e8:e6:5c:c4:a7:62:d3: ef:b6:80:a5:22:92:db:5c:eb:b9:b7:8a:55:91:f0: 65:e2:26:e2:b5:29:59:11:eb:63:0d:58:92:6b:13: 29:33:e2:5f:bc:ab:1f:46:09:d7:96:38:00:f8:f4: e7:72:95:c7:14:f4:ab:6f:35:9c:54:22:11:7a:55: 9b:c3:57:a2:01:e8:eb:0a:65:a2:50:31:54:45:3a: c0:49:e0:53:0a:3a:6b:ff:5f:73:a0:b2:11:af:01: 42:5d:47:14:95:f1:bb:1e:87:7e:1b:15:94:8c:c6: e9:cd:75:2d:94:b5:9e:c0:9f:bd:c1:27:7d:63:03: f3:40:71:3b:77:6f:16:aa:93:dc:a9:6c:85:7c:38: ab:64:63:d6:10:98:ba:6b:1b:81:bb:2e:e0:80:19: b7:cf:5d:5e:26:5b:01:dc:a9:5d:3f:30:2b:4c:8f: f2:e8:4a:75:4e:0e:30:df:0e:5b:70:8c:69:d9:0f: 48:53:80:e8:58:bf:6d:d8:9d:e7:9f:d1:0e:9f:0c: 0c:d3:ac:84:d3:23:91:68:8a:7f:8f:62:a5:fd:2c: a3:99:b3:dc:98:34:8d:d9:d3:80:2e:e2:70:ba:6f: 45:60:4e:20:b8:59:00:2c:ee:29:8e:3c:d8:9f:4a: 25:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:93:A3:A2:7C:B0:94:B0:69:04:3D:E7:60:8A:80:32:A0:ED:65:68 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/de500e77-15fe-3e3f-bfca-62daebbae3c0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.64.204.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:10:7c:fa:a2:d2:ea:6f:bc:b0:34:09:37:a2:25:ca:21:cf: 49:77:73:5d:2a:b5:6c:ef:a2:35:d6:9c:33:45:0e:0c:95:54: 97:c2:00:c9:75:c8:6f:09:13:32:f9:f7:ad:41:6c:5c:15:f8: 76:b1:73:83:b3:7f:46:59:26:3f:6d:b6:04:0b:9e:b3:5e:9d: ff:ac:4f:d1:14:b8:41:5d:2b:2a:39:c1:29:52:c1:8d:6e:23: 46:9d:92:46:51:f4:9f:ce:9d:67:e1:9c:30:c0:eb:63:6f:15: 89:ce:91:e2:44:14:ef:e5:a7:a9:f5:e7:d4:da:e3:b5:46:35: 14:1f:64:b7:a8:7d:ca:58:3a:92:0a:08:48:ea:26:af:d0:e6: a8:6d:f6:5f:09:03:e5:8d:6e:a6:06:f7:5f:d0:cb:87:41:c1: 16:b5:29:5d:11:46:85:59:0e:1b:bb:58:da:df:77:57:5e:bb: c0:39:89:50:55:00:e8:d1:5b:b1:8c:f9:8b:f4:88:f4:4a:ba: ce:61:b2:9e:ae:f5:f6:0c:b0:77:a4:f2:8f:04:00:1a:d2:bd: 70:fd:6c:77:e3:9c:8e:2f:6a:48:73:77:9e:5c:6b:55:83:ea: 5e:32:aa:bb:17:d3:ec:37:b1:e2:6a:2b:5e:61:2f:b7:62:a7: 8a:d5:4f:9a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7k8fkk9Dr+mETFWgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDgyMDAxMDAxMloXDTI2MTExODAyMDAxMlowLzEtMCsGA1UEAxMk NjhkNjdiYTAtZTBkMy00ZTc1LWEwZjEtMjAyZWY3YzBiOGRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkqv3vougd+jmXMSnYtPvtoClIpLbXOu5t4pV kfBl4ibitSlZEetjDViSaxMpM+JfvKsfRgnXljgA+PTncpXHFPSrbzWcVCIRelWb w1eiAejrCmWiUDFURTrASeBTCjpr/19zoLIRrwFCXUcUlfG7Hod+GxWUjMbpzXUt lLWewJ+9wSd9YwPzQHE7d28WqpPcqWyFfDirZGPWEJi6axuBuy7ggBm3z11eJlsB 3KldPzArTI/y6Ep1Tg4w3w5bcIxp2Q9IU4DoWL9t2J3nn9EOnwwM06yE0yORaIp/ j2Kl/SyjmbPcmDSN2dOALuJwum9FYE4guFkALO4pjjzYn0ol1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHaTo6J8sJSwaQQ952CKgDKg7WVoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvZGU1MDBlNzctMTVmZS0z ZTNmLWJmY2EtNjJkYWViYmFlM2MwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEDMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEwQfPqi0upvvLA0CTeiJcohz0l3c10qtWzvojXWnDNFDgyVVJfCAMl1 yG8JEzL5961BbFwV+Haxc4Ozf0ZZJj9ttgQLnrNenf+sT9EUuEFdKyo5wSlSwY1u I0adkkZR9J/OnWfhnDDA62NvFYnOkeJEFO/lp6n159Ta47VGNRQfZLeofcpYOpIK CEjqJq/Q5qht9l8JA+WNbqYG91/Qy4dBwRa1KV0RRoVZDhu7WNrfd1deu8A5iVBV AOjRW7GM+Yv0iPRKus5hsp6u9fYMsHek8o8EABrSvXD9bHfjnI4vakhzd55ca1WD 6l4yqrsX0+w3seJqK15hL7dip4rVT5o= -----END CERTIFICATE-----Generated at Sun Sep 20 09:31:28 2026 by rpki-client