$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a9ced301-e764-35f6-abb8-f3cbf23e84fc.roa File: a9ced301-e764-35f6-abb8-f3cbf23e84fc.roa (raw, json) Hash identifier: PCXSd7eciWLB8OIEY67wJGukxbMgYMt1mHklgccs790= Subject key identifier: A1:9D:16:D4:AE:5C:67:A0:FB:06:40:71:22:A3:45:2D:3F:52:76:7A Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584F4C3D71AE841DDA0B129B74C0 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a9ced301-e764-35f6-abb8-f3cbf23e84fc.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 13335 IP address blocks: 172.64.193.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:71:ae:84:1d:da:0b:12:9b:74:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=1a7ac089-c643-40e1-afdd-9749af01be94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:05:d0:99:e8:c8:cb:0f:90:f2:de:58:ec:14: 18:58:aa:48:66:9b:db:fb:df:67:f5:d4:9d:56:37: e3:92:b0:6d:8a:8a:50:4e:64:2b:32:be:fe:66:c1: 3d:ad:e1:a3:44:f7:0e:42:96:ae:28:96:aa:7d:f5: 11:de:5e:95:9f:b3:3b:62:19:db:45:8d:93:68:df: 89:44:b0:d8:59:eb:c2:36:6b:fd:6d:16:93:ca:0d: 1f:48:2d:63:95:d6:92:7a:aa:4f:c4:2b:bf:01:69: 2b:31:2f:f6:8f:f6:f7:88:36:5f:a8:64:80:fc:7c: bd:d0:99:b7:ca:d2:4f:d0:22:42:a5:37:bb:cf:05: 6a:80:83:8e:54:4f:21:c2:c5:79:ff:ae:df:3b:7d: 08:88:4f:4a:b8:c8:a1:de:e0:23:11:f1:cc:61:32: 9a:84:64:ef:a7:6f:42:a4:fa:a3:83:22:e7:56:cd: 5c:9c:08:5c:56:0c:f6:95:0f:ae:fd:b5:d1:ca:bd: 69:1e:1f:80:49:f2:37:84:b1:3e:87:ba:8f:8d:b2: e5:98:cb:fc:c2:8c:13:34:7d:61:71:24:c5:d3:7e: a1:fd:f3:2d:09:38:19:fd:03:19:ac:9d:88:65:19: c7:ef:9c:ba:96:15:1a:df:2f:8c:95:63:9e:c6:4f: fc:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:9D:16:D4:AE:5C:67:A0:FB:06:40:71:22:A3:45:2D:3F:52:76:7A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a9ced301-e764-35f6-abb8-f3cbf23e84fc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.64.193.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:25:92:df:14:7d:61:8e:d8:c9:76:d7:21:eb:fd:9f:e3:ef: 54:56:f3:68:eb:db:95:b7:79:06:4f:cf:f6:f5:9b:6c:93:08: 06:bb:ee:1c:1a:be:32:ba:77:7d:33:80:ec:fe:51:94:ca:2c: e6:5e:25:75:7e:f1:52:70:f9:98:a0:22:e4:3d:fa:d8:00:48: e2:6b:a6:2a:87:f7:8c:65:65:68:04:ed:0e:fb:47:11:cf:df: fc:d4:d3:cb:49:f7:a7:3a:0e:07:b9:34:13:07:81:93:53:8f: fb:fb:3f:50:5d:0b:5f:e8:40:b7:d2:38:8e:10:39:a1:a8:92: 45:ee:c6:12:e1:ae:5d:15:bb:30:b7:f0:06:3a:42:84:8d:52: 90:9e:d9:23:c8:91:e9:05:64:60:f8:5e:b3:cd:3f:87:85:30: b2:4f:8e:2a:99:2b:82:ed:e3:d2:ec:04:2c:05:ff:6d:f7:b2: 4a:c7:81:58:4a:48:88:5a:af:e5:81:9c:d7:79:5d:22:73:82: 27:85:d8:cc:80:f4:3d:a9:18:b4:66:d5:8f:f1:cc:c5:c6:cf: 92:3f:99:d2:37:98:c1:56:b8:ba:87:f3:8f:9d:f5:25:61:81: 85:ec:04:43:1d:29:d2:82:3e:68:44:64:b2:9f:b2:78:d8:07: 72:64:52:80 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPXGuhB3aCxKbdMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk MWE3YWMwODktYzY0My00MGUxLWFmZGQtOTc0OWFmMDFiZTk0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvgXQmejIyw+Q8t5Y7BQYWKpIZpvb+99n9dSd VjfjkrBtiopQTmQrMr7+ZsE9reGjRPcOQpauKJaqffUR3l6Vn7M7YhnbRY2TaN+J RLDYWevCNmv9bRaTyg0fSC1jldaSeqpPxCu/AWkrMS/2j/b3iDZfqGSA/Hy90Jm3 ytJP0CJCpTe7zwVqgIOOVE8hwsV5/67fO30IiE9KuMih3uAjEfHMYTKahGTvp29C pPqjgyLnVs1cnAhcVgz2lQ+u/bXRyr1pHh+ASfI3hLE+h7qPjbLlmMv8wowTNH1h cSTF036h/fMtCTgZ/QMZrJ2IZRnH75y6lhUa3y+MlWOexk/8MQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKGdFtSuXGeg+wZAcSKjRS0/UnZ6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvYTljZWQzMDEtZTc2NC0z NWY2LWFiYjgtZjNjYmYyM2U4NGZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEDBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADMlkt8UfWGO2Ml21yHr/Z/j71RW82jr25W3eQZPz/b1m2yTCAa77hwa vjK6d30zgOz+UZTKLOZeJXV+8VJw+ZigIuQ9+tgASOJrpiqH94xlZWgE7Q77RxHP 3/zU08tJ96c6Dge5NBMHgZNTj/v7P1BdC1/oQLfSOI4QOaGokkXuxhLhrl0VuzC3 8AY6QoSNUpCe2SPIkekFZGD4XrPNP4eFMLJPjiqZK4Lt49LsBCwF/233skrHgVhK SIhar+WBnNd5XSJzgieF2MyA9D2pGLRm1Y/xzMXGz5I/mdI3mMFWuLqH84+d9SVh gYXsBEMdKdKCPmhEZLKfsnjYB3JkUoA= -----END CERTIFICATE-----Generated at Sun Sep 27 12:38:15 2026 by rpki-client