$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/96b013dd-09c9-3eee-b8f3-bf32170faddb.roa File: 96b013dd-09c9-3eee-b8f3-bf32170faddb.roa (raw, json) Hash identifier: NASDeCfp+TMT2VwwhAUY/7dDX0zubFC6L+wnGHaRao4= Subject key identifier: 04:B9:21:6A:D7:78:A2:71:8E:1D:05:F8:46:0E:FB:44:FA:1D:07:BB Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584EE4234063A6351FF3E7D3F980 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/96b013dd-09c9-3eee-b8f3-bf32170faddb.roa Signing time: Wed 19 Aug 2026 18:03:51 +0000 ROA not before: Wed 19 Aug 2026 18:03:51 +0000 ROA not after: Mon 10 Apr 2028 04:00:00 +0000 asID: 2914 IP address blocks: 206.86.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 18 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e4:23:40:63:a6:35:1f:f3:e7:d3:f9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Aug 19 18:03:51 2026 GMT Not After : Apr 10 04:00:00 2028 GMT Subject: CN=af23f2ca-5fa6-4754-b21f-1281cd94e62c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:f2:de:4b:c6:d2:25:56:b9:7c:da:f3:90:7b: 46:36:bc:5c:b2:4c:ad:88:c6:78:b2:26:e6:41:6d: bf:81:4a:ec:8b:35:53:90:e5:95:b7:be:c8:85:2e: c2:a8:b7:ef:5f:bc:bd:b0:96:c0:99:a3:b4:97:2d: 92:3a:2c:78:fd:f4:a3:03:89:97:b6:5e:ac:c3:7a: 1c:ef:e2:cf:3e:5f:2d:6e:2e:5f:e5:9f:e9:7e:81: 5b:72:47:6b:47:b5:b1:e4:b3:26:45:2e:96:b6:13: f4:e6:22:04:f7:13:c1:c4:2c:ac:c9:fa:c2:26:f3: ce:1c:32:88:07:16:89:17:77:ce:a4:d8:09:b1:83: 4b:4b:2e:e6:92:3a:aa:79:41:5a:24:fe:ce:2f:6d: 17:bf:5d:a2:9b:1a:37:10:6a:e9:66:28:ca:35:21: ef:98:0b:cd:2f:e6:f3:a2:8b:8e:2d:2d:56:a3:03: 43:52:43:e4:2c:a6:f2:ab:e6:df:49:5d:f7:9e:98: 93:38:ee:9c:d2:ed:d6:be:16:bd:ac:1c:e1:cc:99: b6:4f:1a:17:93:26:91:f6:1a:87:70:e2:cf:3e:bc: b9:aa:99:52:02:87:0e:5f:ef:bd:61:9e:2b:55:a5: 4c:44:75:52:d5:5d:1a:e0:5e:75:4b:78:d9:4f:72: dd:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:B9:21:6A:D7:78:A2:71:8E:1D:05:F8:46:0E:FB:44:FA:1D:07:BB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/96b013dd-09c9-3eee-b8f3-bf32170faddb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 206.86.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ac:43:11:60:89:9b:d5:a3:24:91:19:8c:bf:6c:3d:c3:69:2e: e9:3e:7d:99:01:b5:2e:6e:8b:0c:88:3a:4a:39:67:5d:81:46: c8:8e:7b:d4:a1:91:ac:be:59:d7:b2:2d:90:5f:2b:d9:05:0b: ee:68:4f:62:37:34:54:48:ed:4f:10:15:e6:db:d7:33:38:82: 2a:4a:9a:94:d3:e0:c6:6e:46:bf:42:80:84:ec:83:57:1a:60: 85:1e:52:a4:a7:94:6b:d3:de:ed:70:28:20:2d:20:67:9f:db: cd:66:49:c0:ce:f5:e1:58:29:17:59:f9:f9:c7:30:ce:93:50: f3:77:56:71:2f:fc:f6:38:01:8e:ae:55:00:e5:10:00:b7:92: 49:08:03:b5:c2:b0:20:3f:09:5c:b7:41:fd:99:46:21:a6:b2: 76:2d:3e:25:b0:4b:04:3a:82:27:87:54:d0:db:7d:cb:fc:d3: 54:f1:20:fd:11:3e:b8:a6:e5:a3:0b:da:27:34:79:8a:90:58: c4:7b:ae:0a:ca:24:95:c2:ee:83:2a:03:37:a3:65:e7:71:38: cf:a3:16:a4:80:e0:bb:1d:82:0a:12:4c:96:c1:38:a1:84:2a: 01:87:f7:e3:d2:e1:7c:80:a0:b8:a4:b5:46:76:56:80:f0:3e: 6d:79:2f:eb -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE7kI0BjpjUf8+fT+YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI2MDgxOTE4MDM1MVoXDTI4MDQxMDA0MDAwMFowLzEtMCsGA1UEAxMk YWYyM2YyY2EtNWZhNi00NzU0LWIyMWYtMTI4MWNkOTRlNjJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlfLeS8bSJVa5fNrzkHtGNrxcskytiMZ4sibm QW2/gUrsizVTkOWVt77IhS7CqLfvX7y9sJbAmaO0ly2SOix4/fSjA4mXtl6sw3oc 7+LPPl8tbi5f5Z/pfoFbckdrR7Wx5LMmRS6WthP05iIE9xPBxCysyfrCJvPOHDKI BxaJF3fOpNgJsYNLSy7mkjqqeUFaJP7OL20Xv12imxo3EGrpZijKNSHvmAvNL+bz oouOLS1WowNDUkPkLKbyq+bfSV33npiTOO6c0u3Wvha9rBzhzJm2TxoXkyaR9hqH cOLPPry5qplSAocOX++9YZ4rVaVMRHVS1V0a4F51S3jZT3LdtwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFAS5IWrXeKJxjh0F+EYO+0T6HQe7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvOTZiMDEzZGQtMDljOS0z ZWVlLWI4ZjMtYmYzMjE3MGZhZGRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAzlYwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEArEMRYImb1aMkkRmMv2w9w2ku6T59mQG1Lm6LDIg6SjlnXYFGyI571KGR rL5Z17ItkF8r2QUL7mhPYjc0VEjtTxAV5tvXMziCKkqalNPgxm5Gv0KAhOyDVxpg hR5SpKeUa9Pe7XAoIC0gZ5/bzWZJwM714VgpF1n5+ccwzpNQ83dWcS/89jgBjq5V AOUQALeSSQgDtcKwID8JXLdB/ZlGIaaydi0+JbBLBDqCJ4dU0Nt9y/zTVPEg/RE+ uKblowvaJzR5ipBYxHuuCsoklcLugyoDN6Nl53E4z6MWpIDgux2CChJMlsE4oYQq AYf349LhfICguKS1RnZWgPA+bXkv6w== -----END CERTIFICATE-----Generated at Thu Sep 17 12:12:19 2026 by rpki-client