$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/993a34a4-9ea6-393c-88df-cbbc50aabb28.roa File: 993a34a4-9ea6-393c-88df-cbbc50aabb28.roa (raw, json) Hash identifier: ER9NOn1NhNaJ6yJBO6W81w62MKXkTrYD6xyVS/qC3Y0= Subject key identifier: A0:92:9F:D7:50:43:0D:96:FF:CC:A3:93:9A:59:F9:D7:28:83:A1:6F Certificate issuer: /CN=86fea470-b380-45c0-9f6b-033b7d884388 Certificate serial: 010D0C9F4328584EA788A08A5E09B5428F293A00 Authority key identifier: 08:74:8A:31:09:3C:2C:49:44:A1:2E:8A:D6:5C:9E:92:04:01:CF:16 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/993a34a4-9ea6-393c-88df-cbbc50aabb28.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 62563 IP address blocks: 186.190.210.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/86fea470-b380-45c0-9f6b-033b7d884388.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/86fea470-b380-45c0-9f6b-033b7d884388.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:88:a0:8a:5e:09:b5:42:8f:29:3a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86fea470-b380-45c0-9f6b-033b7d884388 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=e9fa47ac-fa62-40f2-ac32-b1e4ae08384e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:0a:20:ce:39:7b:0f:e3:19:ea:cc:33:42:ae: b9:7f:91:f4:21:1a:0a:ae:09:08:30:9c:16:7b:50: d2:ba:73:2f:f3:08:c0:4b:31:96:6d:7f:85:db:82: 79:37:12:84:38:2b:a5:b7:1b:63:5d:5c:ca:00:ac: c6:9b:6d:be:b9:53:f6:88:1e:e5:a2:2f:48:a5:85: ba:00:71:d6:08:15:69:73:f2:cd:22:26:30:73:e1: 9e:5e:77:2b:f0:4d:9e:a3:e6:85:da:16:c5:00:2b: cc:f1:52:80:49:2b:68:e7:23:c1:00:59:41:d8:ef: 8f:a2:22:1d:ea:e1:2b:2c:7a:79:3d:40:f2:db:cc: 2f:f4:18:0c:01:90:9d:eb:42:e2:50:1e:d0:0d:ac: 5c:44:1b:41:20:23:04:58:08:8e:f0:fc:5a:af:93: cb:5b:5a:77:d3:0c:69:6e:95:96:21:86:c7:d6:73: 58:67:5f:f0:17:ac:ef:de:08:3e:86:9d:37:1e:eb: e9:24:e8:b8:46:a9:f0:9f:3d:9a:95:e2:9c:bd:5f: 3b:bf:b0:b4:15:18:63:6b:b1:4d:5b:7d:c0:c2:a5: bf:de:6d:7e:84:7f:79:18:1c:e2:73:c4:39:b5:0d: a8:8f:2d:4c:bf:02:fa:ba:a3:a1:7c:c4:26:9f:68: 7d:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:92:9F:D7:50:43:0D:96:FF:CC:A3:93:9A:59:F9:D7:28:83:A1:6F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/993a34a4-9ea6-393c-88df-cbbc50aabb28.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/86fea470-b380-45c0-9f6b-033b7d884388.crl X509v3 Authority Key Identifier: keyid:08:74:8A:31:09:3C:2C:49:44:A1:2E:8A:D6:5C:9E:92:04:01:CF:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388.cer sbgp-ipAddrBlock: critical IPv4: 186.190.210.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:9e:3b:b2:c7:59:e7:8c:3d:48:08:4b:90:e1:7d:b3:fc:78: 08:7b:2d:7e:c7:59:99:a1:1d:39:1a:9a:b9:04:28:f2:a8:e1: c1:a9:08:ba:72:15:94:74:c4:41:95:a2:c5:8c:b9:a9:28:0d: e2:fd:f5:7e:37:35:92:b4:d3:10:0b:50:27:6e:a8:90:8b:df: 32:96:56:53:82:ef:8d:de:41:f2:96:a1:f8:6c:b3:ea:8a:31: ec:46:5f:d0:c9:8b:6f:aa:d8:9f:d5:50:66:68:e5:61:ab:cd: 74:95:a6:59:60:56:e4:84:b7:03:c4:1a:4f:c4:d7:0c:00:df: 65:cb:70:f9:8a:54:5d:d4:f3:00:53:7d:20:2b:33:d3:f7:c0: 6a:e6:6b:01:06:19:2b:d0:61:70:58:47:da:1d:0b:09:ae:9f: 15:8d:f8:29:e2:76:05:50:75:60:5a:e2:de:6b:0c:b2:ba:f7: 7e:9c:df:ad:1c:0c:71:04:cf:90:47:37:80:0a:3c:c3:85:a4: 16:79:1e:25:bd:b8:93:f3:64:f3:8b:32:d9:9b:c2:ba:db:52: 5a:ce:19:1d:33:37:1a:d2:d6:6c:50:19:58:4a:8a:85:f1:ec: 04:1d:18:e8:47:39:29:aa:92:dc:37:e4:1d:8c:5e:b9:40:fe: 7a:b6:15:71 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6niKCKXgm1Qo8pOgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODZmZWE0NzAtYjM4MC00NWMwLTlmNmItMDMzYjdkODg0 Mzg4MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk ZTlmYTQ3YWMtZmE2Mi00MGYyLWFjMzItYjFlNGFlMDgzODRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhAogzjl7D+MZ6swzQq65f5H0IRoKrgkIMJwW e1DSunMv8wjASzGWbX+F24J5NxKEOCultxtjXVzKAKzGm22+uVP2iB7loi9IpYW6 AHHWCBVpc/LNIiYwc+GeXncr8E2eo+aF2hbFACvM8VKASSto5yPBAFlB2O+PoiId 6uErLHp5PUDy28wv9BgMAZCd60LiUB7QDaxcRBtBICMEWAiO8Pxar5PLW1p30wxp bpWWIYbH1nNYZ1/wF6zv3gg+hp03HuvpJOi4Rqnwnz2aleKcvV87v7C0FRhja7FN W33AwqW/3m1+hH95GBzic8Q5tQ2ojy1MvwL6uqOhfMQmn2h9GQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKCSn9dQQw2W/8yjk5pZ+dcog6FvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS84NmZl YTQ3MC1iMzgwLTQ1YzAtOWY2Yi0wMzNiN2Q4ODQzODgvOTkzYTM0YTQtOWVhNi0z OTNjLTg4ZGYtY2JiYzUwYWFiYjI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvODZmZWE0NzAtYjM4MC00NWMwLTlm NmItMDMzYjdkODg0Mzg4Lzg2ZmVhNDcwLWIzODAtNDVjMC05ZjZiLTAzM2I3ZDg4 NDM4OC5jcmwwHwYDVR0jBBgwFoAUCHSKMQk8LElEoS6K1lyekgQBzxYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS84NmZlYTQ3MC1iMzgwLTQ1YzAtOWY2Yi0wMzNi N2Q4ODQzODguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAur7SMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEieO7LHWeeMPUgIS5DhfbP8eAh7LX7HWZmhHTkamrkEKPKo4cGpCLpy FZR0xEGVosWMuakoDeL99X43NZK00xALUCduqJCL3zKWVlOC743eQfKWofhss+qK MexGX9DJi2+q2J/VUGZo5WGrzXSVpllgVuSEtwPEGk/E1wwA32XLcPmKVF3U8wBT fSArM9P3wGrmawEGGSvQYXBYR9odCwmunxWN+CnidgVQdWBa4t5rDLK6936c360c DHEEz5BHN4AKPMOFpBZ5HiW9uJPzZPOLMtmbwrrbUlrOGR0zNxrS1mxQGVhKioXx 7AQdGOhHOSmqktw35B2MXrlA/nq2FXE= -----END CERTIFICATE-----Generated at Thu Sep 10 20:36:51 2026 by rpki-client