$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7894adcb-3be5-42b8-a76f-913809582611/86604c1e-e526-334e-ab61-1fb3393fb181.roa File: 86604c1e-e526-334e-ab61-1fb3393fb181.roa (raw, json) Hash identifier: yuEVFoGUOLPyJRxHAmcjgvC4K2nFL3K+kAdXqVToBTE= Subject key identifier: 77:1E:1D:67:C8:E6:A9:4C:73:9A:36:C9:B4:4B:71:FD:76:82:1A:71 Certificate issuer: /CN=7894adcb-3be5-42b8-a76f-913809582611 Certificate serial: 010D0C9F4328584EED521820023035B4E3E1D920 Authority key identifier: 5A:F7:62:9E:BF:84:43:86:83:3B:C5:BE:60:36:59:D6:76:BB:63:CA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7894adcb-3be5-42b8-a76f-913809582611.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7894adcb-3be5-42b8-a76f-913809582611/86604c1e-e526-334e-ab61-1fb3393fb181.roa Signing time: Sun 23 Aug 2026 01:00:12 +0000 ROA not before: Sun 23 Aug 2026 01:00:12 +0000 ROA not after: Sat 21 Nov 2026 02:00:12 +0000 asID: 12980 IP address blocks: 129.35.160.0/20 maxlen: 20 170.225.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7894adcb-3be5-42b8-a76f-913809582611/7894adcb-3be5-42b8-a76f-913809582611.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7894adcb-3be5-42b8-a76f-913809582611/7894adcb-3be5-42b8-a76f-913809582611.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7894adcb-3be5-42b8-a76f-913809582611.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ed:52:18:20:02:30:35:b4:e3:e1:d9:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7894adcb-3be5-42b8-a76f-913809582611 Validity Not Before: Aug 23 01:00:12 2026 GMT Not After : Nov 21 02:00:12 2026 GMT Subject: CN=a77c1f07-5fc9-4190-a283-a8c1d6b64873 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:c5:12:4f:ae:13:f3:71:2d:e2:eb:85:88:b4: f8:e5:2c:53:7c:0d:a8:0c:1e:16:e6:2b:66:b2:85: e1:73:c0:08:81:5c:10:18:ab:a0:e2:e4:0f:5e:a1: b8:ed:2d:33:1d:71:5e:1e:dd:be:d4:1d:cd:48:ce: 0e:37:ef:2a:32:71:f5:dc:4f:f6:8a:46:a9:a7:1f: 93:1e:47:7e:4f:89:38:07:85:64:d0:9b:b5:4d:43: c0:9e:fd:7f:4d:13:74:5c:5f:ce:0a:06:35:ca:e9: fe:13:0e:7f:da:cc:7b:3b:33:a5:30:c2:c4:c1:5a: 59:71:68:61:12:92:80:93:a4:dd:5f:f4:54:af:bc: b4:c6:ca:5b:2d:5e:9b:5e:57:33:5f:43:66:4d:4c: 1a:45:c2:e4:38:14:23:fb:4e:d0:d2:d3:96:3b:4c: f5:2b:77:24:ca:ca:f3:6c:3e:c0:a2:f2:29:82:bc: 86:41:83:e1:7a:77:e0:67:68:ed:56:17:ef:86:56: 33:42:95:4f:cd:b7:d4:4c:b3:96:cb:10:cd:77:19: 1d:50:e8:61:8c:8f:e9:72:a8:1e:8b:5c:fa:1a:39: 87:8e:37:07:76:fd:f5:19:54:18:a5:4f:f8:54:ae: ac:bd:0e:1b:95:98:5d:fe:03:52:1c:b0:27:85:f0: 25:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:1E:1D:67:C8:E6:A9:4C:73:9A:36:C9:B4:4B:71:FD:76:82:1A:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7894adcb-3be5-42b8-a76f-913809582611/86604c1e-e526-334e-ab61-1fb3393fb181.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7894adcb-3be5-42b8-a76f-913809582611/7894adcb-3be5-42b8-a76f-913809582611.crl X509v3 Authority Key Identifier: keyid:5A:F7:62:9E:BF:84:43:86:83:3B:C5:BE:60:36:59:D6:76:BB:63:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7894adcb-3be5-42b8-a76f-913809582611.cer sbgp-ipAddrBlock: critical IPv4: 129.35.160.0/20 170.225.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:25:d5:f7:92:54:0c:6d:8a:a3:b9:03:7e:24:e8:37:07:ad: 70:c3:63:4f:a2:4d:09:a0:41:2f:06:5b:5d:b8:8d:f7:d9:e6: 7e:d3:80:c2:4d:d3:02:a7:50:0c:cc:a6:77:dd:f5:9b:2a:c9: ee:c2:a2:53:ba:cd:a0:9c:13:23:be:64:b6:b6:87:23:ba:19: 14:9c:50:97:64:4a:bc:46:7e:c8:01:7d:fc:41:2b:ec:37:be: 4d:3a:7c:1d:71:33:62:74:b0:08:d3:85:d1:b8:dc:ce:55:f7: 8b:dd:3e:e5:e2:ca:59:5a:60:50:38:cf:ba:f5:13:89:40:2f: 29:71:17:1a:5e:98:2e:5e:f2:ac:b6:ca:29:4e:14:0f:7d:91: 0f:36:ad:c1:26:19:80:12:ea:bb:79:ee:28:b1:8e:76:b3:46: 3d:f2:12:a5:b1:c9:15:7b:bc:ca:f9:03:b0:87:4b:a0:69:c7: 46:b5:a2:c7:c6:82:0a:93:14:81:75:e0:4f:29:12:fd:69:3a: e2:23:fc:4b:b1:d7:44:91:38:a6:33:58:29:e0:0f:7a:9a:90: 42:ac:2d:41:bc:90:dd:32:83:28:15:f0:cd:b2:18:ea:f0:19: 63:48:4d:8f:4e:fa:48:24:1a:52:24:2d:32:ac:9f:34:7c:16: a0:0c:3c:ed -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE7tUhggAjA1tOPh2SAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzg5NGFkY2ItM2JlNS00MmI4LWE3NmYtOTEzODA5NTgy NjExMB4XDTI2MDgyMzAxMDAxMloXDTI2MTEyMTAyMDAxMlowLzEtMCsGA1UEAxMk YTc3YzFmMDctNWZjOS00MTkwLWEyODMtYThjMWQ2YjY0ODczMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuMUST64T83Et4uuFiLT45SxTfA2oDB4W5itm soXhc8AIgVwQGKug4uQPXqG47S0zHXFeHt2+1B3NSM4ON+8qMnH13E/2ikappx+T Hkd+T4k4B4Vk0Ju1TUPAnv1/TRN0XF/OCgY1yun+Ew5/2sx7OzOlMMLEwVpZcWhh EpKAk6TdX/RUr7y0xspbLV6bXlczX0NmTUwaRcLkOBQj+07Q0tOWO0z1K3ckysrz bD7AovIpgryGQYPhenfgZ2jtVhfvhlYzQpVPzbfUTLOWyxDNdxkdUOhhjI/pcqge i1z6GjmHjjcHdv31GVQYpU/4VK6svQ4blZhd/gNSHLAnhfAl8QIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFHceHWfI5qlMc5o2ybRLcf12ghpxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS83ODk0 YWRjYi0zYmU1LTQyYjgtYTc2Zi05MTM4MDk1ODI2MTEvODY2MDRjMWUtZTUyNi0z MzRlLWFiNjEtMWZiMzM5M2ZiMTgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvNzg5NGFkY2ItM2JlNS00MmI4LWE3 NmYtOTEzODA5NTgyNjExLzc4OTRhZGNiLTNiZTUtNDJiOC1hNzZmLTkxMzgwOTU4 MjYxMS5jcmwwHwYDVR0jBBgwFoAUWvdinr+EQ4aDO8W+YDZZ1na7Y8owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS83ODk0YWRjYi0zYmU1LTQyYjgtYTc2Zi05MTM4 MDk1ODI2MTEuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQEgSOgAwQE quGAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAFQl1feSVAxtiqO5A34k6DcHrXDDY0+iTQmgQS8GW124jffZ 5n7TgMJN0wKnUAzMpnfd9Zsqye7ColO6zaCcEyO+ZLa2hyO6GRScUJdkSrxGfsgB ffxBK+w3vk06fB1xM2J0sAjThdG43M5V94vdPuXiyllaYFA4z7r1E4lALylxFxpe mC5e8qy2yilOFA99kQ82rcEmGYAS6rt57iixjnazRj3yEqWxyRV7vMr5A7CHS6Bp x0a1osfGggqTFIF14E8pEv1pOuIj/Eux10SROKYzWCngD3qakEKsLUG8kN0ygygV 8M2yGOrwGWNITY9O+kgkGlIkLTKsnzR8FqAMPO0= -----END CERTIFICATE-----Generated at Sat Sep 5 06:48:40 2026 by rpki-client