$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/99cd086f-b993-42d9-8f47-c65df74d693b/e8d39bbe-cf52-3e2d-91c0-2b3b40420843.roa File: e8d39bbe-cf52-3e2d-91c0-2b3b40420843.roa (raw, json) Hash identifier: Y/21LeauAxre8dmjBdunqSa7SA1djPmdwErvi77iNmE= Subject key identifier: 07:E2:6C:52:D5:54:13:D7:53:D9:FB:1F:EB:13:0A:9D:11:77:3F:66 Certificate issuer: /CN=99cd086f-b993-42d9-8f47-c65df74d693b Certificate serial: 010D0C9F4328584DD625BB32C92A8DA866AD1020 Authority key identifier: C3:7C:6E:74:65:2F:44:92:72:76:3A:6D:8C:36:51:7C:69:F5:55:F7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/99cd086f-b993-42d9-8f47-c65df74d693b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/99cd086f-b993-42d9-8f47-c65df74d693b/e8d39bbe-cf52-3e2d-91c0-2b3b40420843.roa Signing time: Fri 15 May 2026 01:00:24 +0000 ROA not before: Fri 15 May 2026 01:00:24 +0000 ROA not after: Thu 13 Aug 2026 01:00:24 +0000 asID: 34689 IP address blocks: 162.254.86.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/99cd086f-b993-42d9-8f47-c65df74d693b/99cd086f-b993-42d9-8f47-c65df74d693b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/99cd086f-b993-42d9-8f47-c65df74d693b/99cd086f-b993-42d9-8f47-c65df74d693b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/99cd086f-b993-42d9-8f47-c65df74d693b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 04 Jun 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:d6:25:bb:32:c9:2a:8d:a8:66:ad:10:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=99cd086f-b993-42d9-8f47-c65df74d693b Validity Not Before: May 15 01:00:24 2026 GMT Not After : Aug 13 01:00:24 2026 GMT Subject: CN=2b590fb1-a871-4fb9-9feb-3f3f9f01527d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:09:49:21:bb:e0:e2:df:38:b3:10:4c:0d:22: 8d:d5:48:dd:00:8a:4d:b0:bc:35:73:f7:5f:e0:a0: 6a:96:29:8b:92:16:89:fe:3b:ee:47:75:8e:97:8b: 98:e3:27:98:0c:b0:f0:fc:02:56:08:ce:9f:1e:34: 08:f6:ff:7f:7d:47:d1:9d:28:6a:9a:a0:57:f4:b2: 18:61:03:12:dd:8b:64:61:d2:18:60:d2:25:29:5f: 39:e0:ef:5f:d7:00:84:b2:c6:ad:a2:39:1e:59:0b: 54:10:85:a5:b1:0e:88:f0:6c:f3:3a:df:f9:df:54: df:f7:f4:6b:3e:58:dd:1e:2d:dd:fd:28:6e:93:b7: 80:59:32:38:0d:95:29:5f:99:bd:8e:f2:86:ef:dc: 7e:23:09:fa:8c:5b:bb:84:1f:de:dc:20:06:7f:b3: ca:27:07:3c:ad:16:b0:51:4d:ec:e3:04:29:bf:9d: a0:84:e5:90:5e:b6:78:25:99:a1:19:f5:ce:ce:00: 8e:65:ec:99:82:3d:fd:92:4a:5e:e7:4e:fb:da:8d: 33:f2:f9:a3:86:3c:4d:ab:99:ab:16:5d:3f:6a:fa: 43:06:02:ae:41:bb:3f:a5:22:fa:8a:ad:4d:13:41: 88:d8:a4:c8:3a:fa:c5:ee:61:44:49:fa:ff:a5:28: 85:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:E2:6C:52:D5:54:13:D7:53:D9:FB:1F:EB:13:0A:9D:11:77:3F:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/99cd086f-b993-42d9-8f47-c65df74d693b/e8d39bbe-cf52-3e2d-91c0-2b3b40420843.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/99cd086f-b993-42d9-8f47-c65df74d693b/99cd086f-b993-42d9-8f47-c65df74d693b.crl X509v3 Authority Key Identifier: keyid:C3:7C:6E:74:65:2F:44:92:72:76:3A:6D:8C:36:51:7C:69:F5:55:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/99cd086f-b993-42d9-8f47-c65df74d693b.cer sbgp-ipAddrBlock: critical IPv4: 162.254.86.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:9b:af:d6:80:28:04:d7:53:79:a6:0d:e7:bc:25:30:65:3c: bc:36:42:b6:27:08:d9:5f:3e:4c:fb:ec:fa:9b:f8:6f:a6:b1: d3:2e:e4:d3:23:65:ad:a1:c7:e7:db:6c:30:13:24:8e:11:7f: 22:29:ff:3d:7c:77:ae:22:d2:f8:19:14:7c:78:08:d4:94:f6: d7:a2:d3:8d:8d:9b:ae:ca:b6:9b:61:71:46:95:d9:a0:8a:06: 85:ff:eb:b1:d6:72:66:5f:06:09:3e:98:6a:70:10:f8:65:94: 20:59:fc:7e:51:22:fc:45:9d:f3:2b:67:f5:a4:22:f5:c0:75: 9e:6c:f0:90:74:db:88:fc:ae:c4:bb:62:1b:8d:48:bc:2b:9f: 80:c8:cc:ec:eb:8c:74:a0:db:55:88:70:f9:0a:aa:66:86:b9: 6c:82:5c:b3:d3:d6:b6:64:fd:1f:ed:91:ae:ef:0a:3a:f3:ac: f5:d4:1e:02:e3:ea:e4:53:2a:c8:30:95:9b:6c:17:a7:6e:65: 21:ff:7c:c3:fa:b3:53:94:b7:b3:ae:f1:a7:08:19:49:d1:35: fd:d5:bb:5f:ee:f3:fc:68:eb:ba:31:1f:fa:2a:26:b5:60:5c: d8:f2:d2:ca:5c:a3:5c:79:fe:39:0e:03:ae:26:1d:a8:d8:b8: 37:80:df:d8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3WJbsyySqNqGatECAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTljZDA4NmYtYjk5My00MmQ5LThmNDctYzY1ZGY3NGQ2 OTNiMB4XDTI2MDUxNTAxMDAyNFoXDTI2MDgxMzAxMDAyNFowLzEtMCsGA1UEAxMk MmI1OTBmYjEtYTg3MS00ZmI5LTlmZWItM2YzZjlmMDE1MjdkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxwlJIbvg4t84sxBMDSKN1UjdAIpNsLw1c/df 4KBqlimLkhaJ/jvuR3WOl4uY4yeYDLDw/AJWCM6fHjQI9v9/fUfRnShqmqBX9LIY YQMS3YtkYdIYYNIlKV854O9f1wCEssatojkeWQtUEIWlsQ6I8GzzOt/531Tf9/Rr PljdHi3d/Shuk7eAWTI4DZUpX5m9jvKG79x+Iwn6jFu7hB/e3CAGf7PKJwc8rRaw UU3s4wQpv52ghOWQXrZ4JZmhGfXOzgCOZeyZgj39kkpe50772o0z8vmjhjxNq5mr Fl0/avpDBgKuQbs/pSL6iq1NE0GI2KTIOvrF7mFESfr/pSiFrQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAfibFLVVBPXU9n7H+sTCp0Rdz9mMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85OWNk MDg2Zi1iOTkzLTQyZDktOGY0Ny1jNjVkZjc0ZDY5M2IvZThkMzliYmUtY2Y1Mi0z ZTJkLTkxYzAtMmIzYjQwNDIwODQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTljZDA4NmYtYjk5My00MmQ5LThm NDctYzY1ZGY3NGQ2OTNiLzk5Y2QwODZmLWI5OTMtNDJkOS04ZjQ3LWM2NWRmNzRk NjkzYi5jcmwwHwYDVR0jBBgwFoAUw3xudGUvRJJydjptjDZRfGn1VfcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85OWNkMDg2Zi1iOTkzLTQyZDktOGY0Ny1jNjVk Zjc0ZDY5M2IuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAov5WMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEqbr9aAKATXU3mmDee8JTBlPLw2QrYnCNlfPkz77Pqb+G+msdMu5NMj Za2hx+fbbDATJI4RfyIp/z18d64i0vgZFHx4CNSU9tei042Nm67KtpthcUaV2aCK BoX/67HWcmZfBgk+mGpwEPhllCBZ/H5RIvxFnfMrZ/WkIvXAdZ5s8JB024j8rsS7 YhuNSLwrn4DIzOzrjHSg21WIcPkKqmaGuWyCXLPT1rZk/R/tka7vCjrzrPXUHgLj 6uRTKsgwlZtsF6duZSH/fMP6s1OUt7Ou8acIGUnRNf3Vu1/u8/xo67oxH/oqJrVg XNjy0spco1x5/jkOA64mHajYuDeA39g= -----END CERTIFICATE-----Generated at Tue Jun 2 22:09:41 2026 by rpki-client