$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/bf848636-49a1-3402-b530-30cd588d3624.roa File: bf848636-49a1-3402-b530-30cd588d3624.roa (raw, json) Hash identifier: Bzj7JFh3wzu36PGHlcRkssIEwdPAZs3U5/ScchPTs84= Subject key identifier: 82:60:C7:5F:A3:60:95:4A:06:B5:21:CD:BA:A9:84:FA:3C:34:6C:09 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584F4974A0DEACD2BD2A81558D80 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/bf848636-49a1-3402-b530-30cd588d3624.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 13335 IP address blocks: 172.64.218.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 Oct 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:74:a0:de:ac:d2:bd:2a:81:55:8d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=f917893f-9183-4e7e-ab64-8fb16bcd3dff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:34:f8:9c:cb:83:c4:0c:10:94:6d:86:a6:86: 26:6e:51:45:97:94:c3:06:7e:39:0d:c0:bf:78:3f: 58:af:46:49:10:ca:f7:93:48:46:08:bc:47:a9:42: 44:80:98:b1:90:0d:55:c8:0d:ab:a7:81:f1:42:d4: 64:a7:b2:01:ff:23:ec:cc:92:2f:33:bc:8d:67:40: 38:37:7f:1c:fd:94:df:04:c0:e4:fd:b4:da:ad:e9: f0:85:75:15:83:d9:ff:8e:ff:03:0d:23:63:e5:2b: 0c:72:63:36:8c:e2:e4:c4:3f:8f:79:98:98:e3:2f: 56:a8:29:c7:33:b3:be:c6:06:82:8e:40:22:7f:a1: 3b:00:03:08:dc:a5:41:a0:ef:9e:65:34:65:d9:68: 2c:40:a8:d4:c7:94:6a:15:e2:0d:3d:aa:c6:47:a7: 54:4e:87:18:a8:ad:63:09:6c:88:36:0c:26:a6:99: 4a:fa:0d:3c:c0:fb:99:e7:0d:bb:32:3e:97:c0:44: 5c:95:eb:7d:f3:b4:ba:e5:62:5f:59:c3:99:f5:0e: 31:c8:9e:c4:8d:41:b9:02:92:55:d5:fd:88:fa:3f: f4:70:dd:2a:0f:e8:2e:ab:46:8e:72:2a:48:09:2e: 03:93:a0:c2:95:13:cc:3d:a0:f0:d4:a3:6a:bd:12: 87:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:60:C7:5F:A3:60:95:4A:06:B5:21:CD:BA:A9:84:FA:3C:34:6C:09 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/bf848636-49a1-3402-b530-30cd588d3624.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.64.218.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:4e:4b:e3:60:ec:54:ac:14:fa:8f:2b:91:5a:17:10:7e:f5: dd:0b:d2:45:ef:61:ad:45:da:60:e7:4b:40:0c:0c:5a:0d:93: 02:07:57:d7:c6:f7:c3:0b:44:fa:8f:6a:2b:50:ef:a0:0e:82: c4:44:a0:d3:2d:b0:8a:18:d4:94:9b:cc:f9:9c:d3:60:e7:09: 44:b4:04:48:7e:cc:ec:2b:2e:c8:48:07:cb:d5:17:9e:6c:bf: f4:82:7f:8c:1d:de:eb:1c:3c:a6:62:77:2c:7c:2c:35:8b:12: f7:bd:4a:c1:61:f4:00:31:35:4f:1e:f8:a1:b9:7e:a1:2b:64: 08:46:a5:b6:4d:e9:0e:4e:d0:4d:95:58:17:56:fc:81:47:8c: 75:fb:c2:4d:f2:b3:8c:30:e1:60:75:2d:41:43:91:7f:80:d3: 08:c0:3c:fd:ae:df:34:20:53:d8:59:3e:28:17:23:f8:69:75: 4b:9e:10:0b:6e:c2:81:37:97:5d:80:60:92:b8:63:6e:fa:e7: 89:0c:f4:25:cd:e1:46:c7:2d:db:a6:ea:5d:c8:9a:4a:28:4c: e1:69:33:2c:44:ed:80:4e:28:74:80:27:0e:cf:4b:e0:ce:16: f8:a2:03:0e:95:46:f8:1d:a3:1e:c3:48:44:dd:c8:52:5a:ce: 83:58:82:5d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdKDerNK9KoFVjYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZjkxNzg5M2YtOTE4My00ZTdlLWFiNjQtOGZiMTZiY2QzZGZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmzT4nMuDxAwQlG2GpoYmblFFl5TDBn45DcC/ eD9Yr0ZJEMr3k0hGCLxHqUJEgJixkA1VyA2rp4HxQtRkp7IB/yPszJIvM7yNZ0A4 N38c/ZTfBMDk/bTarenwhXUVg9n/jv8DDSNj5SsMcmM2jOLkxD+PeZiY4y9WqCnH M7O+xgaCjkAif6E7AAMI3KVBoO+eZTRl2WgsQKjUx5RqFeINParGR6dUTocYqK1j CWyINgwmpplK+g08wPuZ5w27Mj6XwERclet987S65WJfWcOZ9Q4xyJ7EjUG5ApJV 1f2I+j/0cN0qD+guq0aOcipICS4Dk6DClRPMPaDw1KNqvRKHKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIJgx1+jYJVKBrUhzbqphPo8NGwJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvYmY4NDg2MzYtNDlhMS0z NDAyLWI1MzAtMzBjZDU4OGQzNjI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEDaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGBOS+Ng7FSsFPqPK5FaFxB+9d0L0kXvYa1F2mDnS0AMDFoNkwIHV9fG 98MLRPqPaitQ76AOgsREoNMtsIoY1JSbzPmc02DnCUS0BEh+zOwrLshIB8vVF55s v/SCf4wd3uscPKZidyx8LDWLEve9SsFh9AAxNU8e+KG5fqErZAhGpbZN6Q5O0E2V WBdW/IFHjHX7wk3ys4ww4WB1LUFDkX+A0wjAPP2u3zQgU9hZPigXI/hpdUueEAtu woE3l12AYJK4Y27654kM9CXN4UbHLdum6l3ImkooTOFpMyxE7YBOKHSAJw7PS+DO FviiAw6VRvgdox7DSETdyFJazoNYgl0= -----END CERTIFICATE-----Generated at Thu Oct 8 10:50:44 2026 by rpki-client