$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab85686b-bac3-40d2-b46e-f2593fb0bc6b/a86e256b-b4bb-3be0-aaf7-201e06e81a58.roa File: a86e256b-b4bb-3be0-aaf7-201e06e81a58.roa (raw, json) Hash identifier: djTkVS0kR//EK2qN1GzEL4/5Ikfg0dSe4IsyyCRsiPo= Subject key identifier: F3:77:01:F8:6A:12:7D:87:DB:0A:87:C9:33:57:CE:E2:59:FD:DB:C5 Certificate issuer: /CN=ab85686b-bac3-40d2-b46e-f2593fb0bc6b Certificate serial: 010D0C9F4328584D95EFEEACE10F62B4BE009440 Authority key identifier: 0E:5E:F6:3E:A7:FF:42:C0:84:5C:18:ED:96:19:B7:6D:8A:D9:86:BE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab85686b-bac3-40d2-b46e-f2593fb0bc6b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab85686b-bac3-40d2-b46e-f2593fb0bc6b/a86e256b-b4bb-3be0-aaf7-201e06e81a58.roa Signing time: Wed 22 Apr 2026 01:00:23 +0000 ROA not before: Wed 22 Apr 2026 01:00:23 +0000 ROA not after: Tue 21 Jul 2026 01:00:23 +0000 asID: 399668 IP address blocks: 198.206.157.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab85686b-bac3-40d2-b46e-f2593fb0bc6b/ab85686b-bac3-40d2-b46e-f2593fb0bc6b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab85686b-bac3-40d2-b46e-f2593fb0bc6b/ab85686b-bac3-40d2-b46e-f2593fb0bc6b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab85686b-bac3-40d2-b46e-f2593fb0bc6b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 09 May 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:95:ef:ee:ac:e1:0f:62:b4:be:00:94:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab85686b-bac3-40d2-b46e-f2593fb0bc6b Validity Not Before: Apr 22 01:00:23 2026 GMT Not After : Jul 21 01:00:23 2026 GMT Subject: CN=9e3d173d-abe2-46e7-a93d-129b24cad06e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:9e:1d:85:d7:42:0f:bc:df:19:47:c7:98:d9: 60:99:3e:e1:6e:ea:7b:9d:4a:86:7d:e6:70:67:51: 7e:f4:88:2b:fa:79:db:34:42:88:c8:cb:ab:4b:0d: e2:ff:5c:87:ed:bd:1f:3f:56:5b:af:43:c9:3a:a1: 38:72:5a:71:43:10:f5:44:53:e0:b4:e4:9e:78:f3: 03:b9:6d:02:ed:0c:76:b2:d8:b3:24:11:94:f0:7e: 07:a8:7c:8a:da:82:88:d6:96:66:28:26:f6:31:fe: 52:af:bb:ef:97:9b:ae:d2:ec:1d:06:82:d1:3a:0b: 77:1e:2e:0d:0a:92:e7:83:6d:64:b4:23:6e:e4:c6: d7:ed:b0:f4:f0:03:57:0e:ec:8c:ae:be:6a:6a:98: a6:85:8e:74:e8:3d:29:a2:76:12:00:f8:f1:20:0a: 62:66:ec:b6:9d:31:5e:c8:2c:1e:e4:1d:a7:1a:29: d8:c8:a4:bf:68:9d:ad:6e:28:41:e8:d9:1e:64:c0: b5:39:60:f1:38:b4:74:e4:01:8f:64:c0:f8:d6:84: c6:b9:d4:f8:c0:8f:6e:e8:43:10:a5:0c:56:47:20: f2:e9:41:0a:91:8b:27:32:ec:2d:6b:64:fa:6c:f3: b2:43:de:5f:79:d3:8f:9d:56:a6:fb:51:08:3b:ec: 92:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:77:01:F8:6A:12:7D:87:DB:0A:87:C9:33:57:CE:E2:59:FD:DB:C5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab85686b-bac3-40d2-b46e-f2593fb0bc6b/a86e256b-b4bb-3be0-aaf7-201e06e81a58.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab85686b-bac3-40d2-b46e-f2593fb0bc6b/ab85686b-bac3-40d2-b46e-f2593fb0bc6b.crl X509v3 Authority Key Identifier: keyid:0E:5E:F6:3E:A7:FF:42:C0:84:5C:18:ED:96:19:B7:6D:8A:D9:86:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab85686b-bac3-40d2-b46e-f2593fb0bc6b.cer sbgp-ipAddrBlock: critical IPv4: 198.206.157.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:b5:10:36:0a:51:3f:18:41:a3:55:a3:c2:38:82:e1:cb:4c: a6:77:5b:1b:7e:cb:f1:c1:eb:51:88:67:01:84:95:2f:a5:6e: 9a:bd:fc:67:ad:37:c7:1a:21:33:b6:b4:6e:52:b2:1c:95:07: f5:b9:83:99:7f:99:3e:4b:9b:67:04:72:b2:b1:95:c7:46:5c: 01:78:10:cb:ef:87:59:4a:5c:d8:db:e0:35:0e:2f:3c:0b:87: 27:33:6a:1b:96:da:99:2e:10:c0:32:13:a1:18:3a:47:dd:03: c9:34:b1:11:8e:44:3a:a7:24:a8:5b:eb:83:7f:2f:50:49:23: f3:07:88:04:9d:8f:5a:ce:66:bb:2d:90:89:a2:04:80:d7:65: 91:90:c0:86:72:5d:a7:a5:fc:76:ef:8c:82:0b:cb:8c:1a:14: 41:83:97:f7:e7:29:12:5e:49:93:96:29:8a:f9:27:ef:26:55: be:37:c1:52:d3:e6:17:cd:54:0c:e9:82:37:84:0d:86:9d:dc: 83:a0:2d:ea:39:8f:c1:d3:d7:92:29:0f:82:20:0a:a7:80:00: 68:01:78:62:b9:c1:84:00:83:dc:d7:00:4b:2c:9c:af:c4:43: 85:47:50:fe:e8:74:ca:8a:dd:5f:08:78:fc:0d:8d:da:ec:20: 88:70:71:d5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2V7+6s4Q9itL4AlEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWI4NTY4NmItYmFjMy00MGQyLWI0NmUtZjI1OTNmYjBi YzZiMB4XDTI2MDQyMjAxMDAyM1oXDTI2MDcyMTAxMDAyM1owLzEtMCsGA1UEAxMk OWUzZDE3M2QtYWJlMi00NmU3LWE5M2QtMTI5YjI0Y2FkMDZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA554dhddCD7zfGUfHmNlgmT7hbup7nUqGfeZw Z1F+9Igr+nnbNEKIyMurSw3i/1yH7b0fP1Zbr0PJOqE4clpxQxD1RFPgtOSeePMD uW0C7Qx2stizJBGU8H4HqHyK2oKI1pZmKCb2Mf5Sr7vvl5uu0uwdBoLROgt3Hi4N CpLng21ktCNu5MbX7bD08ANXDuyMrr5qapimhY506D0ponYSAPjxIApiZuy2nTFe yCwe5B2nGinYyKS/aJ2tbihB6NkeZMC1OWDxOLR05AGPZMD41oTGudT4wI9u6EMQ pQxWRyDy6UEKkYsnMuwta2T6bPOyQ95fedOPnVam+1EIO+ySrwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPN3AfhqEn2H2wqHyTNXzuJZ/dvFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9hYjg1 Njg2Yi1iYWMzLTQwZDItYjQ2ZS1mMjU5M2ZiMGJjNmIvYTg2ZTI1NmItYjRiYi0z YmUwLWFhZjctMjAxZTA2ZTgxYTU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYWI4NTY4NmItYmFjMy00MGQyLWI0 NmUtZjI1OTNmYjBiYzZiL2FiODU2ODZiLWJhYzMtNDBkMi1iNDZlLWYyNTkzZmIw YmM2Yi5jcmwwHwYDVR0jBBgwFoAUDl72Pqf/QsCEXBjtlhm3bYrZhr4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9hYjg1Njg2Yi1iYWMzLTQwZDItYjQ2ZS1mMjU5 M2ZiMGJjNmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxs6dMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIy1EDYKUT8YQaNVo8I4guHLTKZ3Wxt+y/HB61GIZwGElS+lbpq9/Get N8caITO2tG5SshyVB/W5g5l/mT5Lm2cEcrKxlcdGXAF4EMvvh1lKXNjb4DUOLzwL hyczahuW2pkuEMAyE6EYOkfdA8k0sRGORDqnJKhb64N/L1BJI/MHiASdj1rOZrst kImiBIDXZZGQwIZyXael/HbvjIILy4waFEGDl/fnKRJeSZOWKYr5J+8mVb43wVLT 5hfNVAzpgjeEDYad3IOgLeo5j8HT15IpD4IgCqeAAGgBeGK5wYQAg9zXAEssnK/E Q4VHUP7odMqK3V8IePwNjdrsIIhwcdU= -----END CERTIFICATE-----Generated at Thu May 7 03:15:18 2026 by rpki-client