$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6f64cc24-ef62-4498-b9ab-965375ea0e8e/86835d99-6480-31d7-9ee1-ae9b52b891c7.roa File: 86835d99-6480-31d7-9ee1-ae9b52b891c7.roa (raw, json) Hash identifier: jL2msIGcSz9S83hhooCSqSGSaV2XS7a92C0wQJSzBEc= Subject key identifier: 91:BE:5E:10:C9:C7:BC:DD:A1:C2:77:C2:D3:70:1E:FD:D3:5F:52:5D Certificate issuer: /CN=6f64cc24-ef62-4498-b9ab-965375ea0e8e Certificate serial: 010D0C9F4328584DA81588D5B9F5F66EF9083580 Authority key identifier: A9:6A:9A:E3:3D:66:0D:C4:7C:C8:A4:02:58:D8:FD:15:E1:90:61:0F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6f64cc24-ef62-4498-b9ab-965375ea0e8e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6f64cc24-ef62-4498-b9ab-965375ea0e8e/86835d99-6480-31d7-9ee1-ae9b52b891c7.roa Signing time: Tue 28 Apr 2026 13:00:30 +0000 ROA not before: Tue 28 Apr 2026 13:00:30 +0000 ROA not after: Mon 27 Jul 2026 13:00:30 +0000 asID: 52423 IP address blocks: 199.33.68.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6f64cc24-ef62-4498-b9ab-965375ea0e8e/6f64cc24-ef62-4498-b9ab-965375ea0e8e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6f64cc24-ef62-4498-b9ab-965375ea0e8e/6f64cc24-ef62-4498-b9ab-965375ea0e8e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6f64cc24-ef62-4498-b9ab-965375ea0e8e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 May 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:a8:15:88:d5:b9:f5:f6:6e:f9:08:35:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f64cc24-ef62-4498-b9ab-965375ea0e8e Validity Not Before: Apr 28 13:00:30 2026 GMT Not After : Jul 27 13:00:30 2026 GMT Subject: CN=acf263c8-cf6a-42f3-b8ae-dc633f912649 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:3b:50:f3:86:df:e4:74:66:8f:ea:98:cc:62: c6:0f:f7:50:cd:f1:ee:60:b4:27:b2:1b:19:37:7d: f9:11:e3:f9:d6:16:42:4c:7a:83:16:30:37:1e:b9: 88:05:0b:18:80:91:90:ba:2e:97:52:e4:4f:dc:a2: 78:c7:7c:27:5d:1c:1b:da:99:62:f1:b4:90:1e:3d: 93:0b:15:64:bc:a5:56:33:92:a2:d0:97:6f:d8:ac: 6b:3b:2d:5f:d6:d2:a9:b4:94:f5:f1:d4:46:8b:f2: fb:92:53:96:6a:99:7f:4c:b6:83:71:3e:ef:3b:ba: 53:11:50:a3:b3:55:be:50:d2:7f:ce:6b:f9:c4:33: e3:59:9e:45:ab:25:96:bc:3b:fe:a2:0c:7d:15:c7: 4a:c5:be:a0:1d:5d:4a:12:76:23:59:db:61:6a:fe: 93:b8:45:0a:fa:d8:32:83:fc:87:b4:35:d4:c7:e3: 50:7e:bb:84:ce:4e:7e:2f:77:2e:2f:a9:fc:42:ad: f1:bf:d4:7e:0c:28:ae:23:88:2c:12:86:3d:de:e2: 8b:5c:c3:aa:a9:51:05:46:b9:a7:18:04:08:d2:cb: 94:84:60:9f:8d:b6:74:c9:4c:4d:6d:f5:99:8a:cd: c8:9b:ab:3c:20:87:2b:14:5a:14:cd:60:d9:d5:6a: 6a:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:BE:5E:10:C9:C7:BC:DD:A1:C2:77:C2:D3:70:1E:FD:D3:5F:52:5D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6f64cc24-ef62-4498-b9ab-965375ea0e8e/86835d99-6480-31d7-9ee1-ae9b52b891c7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6f64cc24-ef62-4498-b9ab-965375ea0e8e/6f64cc24-ef62-4498-b9ab-965375ea0e8e.crl X509v3 Authority Key Identifier: keyid:A9:6A:9A:E3:3D:66:0D:C4:7C:C8:A4:02:58:D8:FD:15:E1:90:61:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6f64cc24-ef62-4498-b9ab-965375ea0e8e.cer sbgp-ipAddrBlock: critical IPv4: 199.33.68.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:76:56:f0:a2:fd:22:08:07:06:8e:b4:94:bf:71:14:06:19: 1d:da:81:0b:de:5d:49:98:58:eb:ba:7e:db:b7:ac:68:dd:25: 49:15:11:6b:0b:ec:6f:5e:b5:72:00:c2:86:e7:59:76:42:c8: 30:dc:7e:99:20:b3:0c:1b:1b:8c:3b:c4:c9:31:03:86:f2:6f: ec:c4:bd:11:09:45:50:f4:28:5d:76:ba:ef:00:85:07:8a:7f: 82:73:55:0f:db:e4:c1:6d:88:95:92:88:3d:59:1c:5a:5c:26: 4a:dc:55:2b:07:1c:c4:75:5b:89:22:0b:9c:f1:c8:8a:f3:6a: 94:60:7c:72:a2:03:34:73:9c:ab:3c:a3:cf:ea:14:a5:cd:be: e8:35:54:e7:07:7e:c0:e2:72:2b:0d:25:f1:e4:10:1a:fb:2d: 7d:fb:eb:68:a4:33:95:8f:32:10:43:6c:56:00:fb:63:5a:0b: 6e:d8:8a:13:eb:44:ba:5c:7d:33:48:2a:ce:db:ca:2a:49:e2: 8a:e9:b9:fa:59:1b:f9:5d:db:76:09:34:6f:66:d6:0c:95:b0: b0:76:4d:b6:e1:67:6f:c8:ae:67:f0:cf:25:45:c6:a8:db:48: 79:00:48:13:a4:b7:98:b0:56:57:8c:e0:05:2d:20:ff:de:55: 73:f3:b0:e5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2oFYjVufX2bvkINYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmY2NGNjMjQtZWY2Mi00NDk4LWI5YWItOTY1Mzc1ZWEw ZThlMB4XDTI2MDQyODEzMDAzMFoXDTI2MDcyNzEzMDAzMFowLzEtMCsGA1UEAxMk YWNmMjYzYzgtY2Y2YS00MmYzLWI4YWUtZGM2MzNmOTEyNjQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjTtQ84bf5HRmj+qYzGLGD/dQzfHuYLQnshsZ N335EeP51hZCTHqDFjA3HrmIBQsYgJGQui6XUuRP3KJ4x3wnXRwb2pli8bSQHj2T CxVkvKVWM5Ki0Jdv2KxrOy1f1tKptJT18dRGi/L7klOWapl/TLaDcT7vO7pTEVCj s1W+UNJ/zmv5xDPjWZ5FqyWWvDv+ogx9FcdKxb6gHV1KEnYjWdthav6TuEUK+tgy g/yHtDXUx+NQfruEzk5+L3cuL6n8Qq3xv9R+DCiuI4gsEoY93uKLXMOqqVEFRrmn GAQI0suUhGCfjbZ0yUxNbfWZis3Im6s8IIcrFFoUzWDZ1WpqywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJG+XhDJx7zdocJ3wtNwHv3TX1JdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82ZjY0 Y2MyNC1lZjYyLTQ0OTgtYjlhYi05NjUzNzVlYTBlOGUvODY4MzVkOTktNjQ4MC0z MWQ3LTllZTEtYWU5YjUyYjg5MWM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNmY2NGNjMjQtZWY2Mi00NDk4LWI5 YWItOTY1Mzc1ZWEwZThlLzZmNjRjYzI0LWVmNjItNDQ5OC1iOWFiLTk2NTM3NWVh MGU4ZS5jcmwwHwYDVR0jBBgwFoAUqWqa4z1mDcR8yKQCWNj9FeGQYQ8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82ZjY0Y2MyNC1lZjYyLTQ0OTgtYjlhYi05NjUz NzVlYTBlOGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxyFEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEh2VvCi/SIIBwaOtJS/cRQGGR3agQveXUmYWOu6ftu3rGjdJUkVEWsL 7G9etXIAwobnWXZCyDDcfpkgswwbG4w7xMkxA4byb+zEvREJRVD0KF12uu8AhQeK f4JzVQ/b5MFtiJWSiD1ZHFpcJkrcVSsHHMR1W4kiC5zxyIrzapRgfHKiAzRznKs8 o8/qFKXNvug1VOcHfsDicisNJfHkEBr7LX3762ikM5WPMhBDbFYA+2NaC27YihPr RLpcfTNIKs7byipJ4orpufpZG/ld23YJNG9m1gyVsLB2TbbhZ2/IrmfwzyVFxqjb SHkASBOkt5iwVleM4AUtIP/eVXPzsOU= -----END CERTIFICATE-----Generated at Wed May 6 04:08:02 2026 by rpki-client