$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/cd9157e8-4397-31f4-aca2-3b7f65fc5328.roa File: cd9157e8-4397-31f4-aca2-3b7f65fc5328.roa (raw, json) Hash identifier: lqZw+0QJeNyZ8KhSo6ZPdlJOJ2T2KTFAhlfbEtZL4Jo= Subject key identifier: 57:B2:28:42:DB:EB:D0:B0:67:17:24:F7:7D:C6:14:FC:B4:38:AD:A1 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584F4972BC4DADBCF1D21C45FBC0 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/cd9157e8-4397-31f4-aca2-3b7f65fc5328.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 13335 IP address blocks: 172.64.212.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 Oct 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:72:bc:4d:ad:bc:f1:d2:1c:45:fb:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=8a1ec8f3-fdfd-487f-b319-12a5e27ad4d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:e4:16:35:f4:f3:7d:99:8e:9d:58:85:84:61: f1:40:cf:2a:cb:43:97:3d:28:e5:3e:7c:e1:32:e4: e5:1f:4d:b8:ce:8a:0a:48:53:da:1d:11:74:dd:3e: 36:ab:4d:58:4b:be:8e:f2:93:40:fd:aa:a7:ac:b9: f7:d9:63:42:b9:b5:1e:fa:cf:28:c3:4a:c3:76:44: 03:0c:0a:f8:a1:83:9e:ab:57:55:95:bd:19:ce:f8: e9:af:bf:0f:21:2e:db:ab:68:7a:fb:f8:4e:1f:f3: 11:bb:b0:c4:93:34:a4:3f:3e:b3:38:89:3d:be:28: f0:58:28:4a:05:cf:06:68:ec:c3:0e:57:88:92:c8: c2:31:34:3f:14:c2:b8:c6:88:d1:b9:1b:64:28:96: af:8a:cc:a9:87:ce:86:6e:54:ba:77:a1:14:85:e0: f1:f1:39:91:4e:c2:6f:29:a5:ce:00:e7:78:c6:27: 23:5a:09:53:23:f0:c9:24:49:67:7f:78:95:1c:ae: 7f:3e:1f:a7:bf:c3:47:90:9e:d3:50:b1:e6:a6:7a: 79:66:03:6d:71:dc:ca:da:f9:83:ac:dd:5b:66:ec: bd:6e:9f:4a:d6:91:1b:ad:b0:43:a1:b9:53:03:43: 19:ac:56:bd:83:1f:78:2d:af:23:f5:bd:a7:75:c1: 86:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:B2:28:42:DB:EB:D0:B0:67:17:24:F7:7D:C6:14:FC:B4:38:AD:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/cd9157e8-4397-31f4-aca2-3b7f65fc5328.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.64.212.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9f:05:ff:bd:cd:95:7e:ea:e1:41:a4:1c:66:8c:b4:75:a0:7b: 1a:62:8c:56:2a:de:df:d1:d3:bb:05:3e:32:b3:8e:09:69:a8: 30:0c:bc:05:9a:11:24:82:ef:58:e5:6a:e2:f3:c5:fb:11:cf: ee:8c:ee:34:5e:91:d9:78:f3:e4:3c:5f:1e:7a:54:99:3c:7c: 8e:37:ea:a2:b6:da:cb:ae:c9:5d:4c:92:07:09:8c:dd:9e:52: fb:e4:88:4f:dd:8a:b7:d7:28:70:dd:9e:bb:3d:60:59:8c:9a: 1a:15:96:b0:5c:75:b5:4f:b4:07:e0:2b:af:7a:dd:a4:3b:12: 6e:63:dd:43:49:a1:26:e4:b5:d7:ef:10:ff:08:e1:bd:f0:5a: 43:5a:be:f0:83:ca:11:9b:87:11:31:db:68:06:11:5d:35:02: 17:33:4d:8a:94:a0:4b:41:6c:59:3f:45:c6:3c:98:3b:05:1d: 66:ef:d5:10:89:b1:c5:5f:77:df:45:e7:8a:c4:a8:90:12:95: 26:e1:6a:df:60:fe:73:80:5d:e5:5c:c1:ae:37:bb:2a:7e:be: de:ff:f2:86:a3:2a:c1:cf:6d:a5:79:b3:df:0c:37:a4:2d:d8: fe:f2:ab:46:6e:ca:10:c9:d8:b5:d7:c1:bf:27:47:7b:13:e7: 70:e9:b3:cd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JcrxNrbzx0hxF+8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk OGExZWM4ZjMtZmRmZC00ODdmLWIzMTktMTJhNWUyN2FkNGQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu+QWNfTzfZmOnViFhGHxQM8qy0OXPSjlPnzh MuTlH024zooKSFPaHRF03T42q01YS76O8pNA/aqnrLn32WNCubUe+s8ow0rDdkQD DAr4oYOeq1dVlb0Zzvjpr78PIS7bq2h6+/hOH/MRu7DEkzSkPz6zOIk9vijwWChK Bc8GaOzDDleIksjCMTQ/FMK4xojRuRtkKJavisyph86GblS6d6EUheDx8TmRTsJv KaXOAOd4xicjWglTI/DJJElnf3iVHK5/Ph+nv8NHkJ7TULHmpnp5ZgNtcdzK2vmD rN1bZuy9bp9K1pEbrbBDoblTA0MZrFa9gx94La8j9b2ndcGGtQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFeyKELb69CwZxck933GFPy0OK2hMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvY2Q5MTU3ZTgtNDM5Ny0z MWY0LWFjYTItM2I3ZjY1ZmM1MzI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEDUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ8F/73NlX7q4UGkHGaMtHWgexpijFYq3t/R07sFPjKzjglpqDAMvAWa ESSC71jlauLzxfsRz+6M7jRekdl48+Q8Xx56VJk8fI436qK22suuyV1MkgcJjN2e UvvkiE/dirfXKHDdnrs9YFmMmhoVlrBcdbVPtAfgK6963aQ7Em5j3UNJoSbktdfv EP8I4b3wWkNavvCDyhGbhxEx22gGEV01AhczTYqUoEtBbFk/RcY8mDsFHWbv1RCJ scVfd99F54rEqJASlSbhat9g/nOAXeVcwa43uyp+vt7/8oajKsHPbaV5s98MN6Qt 2P7yq0ZuyhDJ2LXXwb8nR3sT53Dps80= -----END CERTIFICATE-----Generated at Sun Oct 4 08:50:12 2026 by rpki-client