$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7894adcb-3be5-42b8-a76f-913809582611/86604c1e-e526-334e-ab61-1fb3393fb181.roa File: 86604c1e-e526-334e-ab61-1fb3393fb181.roa (raw, json) Hash identifier: KYZ9rOelT9opik/ivs1yu8Oqo9Wwa+UEYSaZ7P4eJT0= Subject key identifier: 6F:B8:98:FA:3F:A3:E8:BD:B6:E6:4D:2B:0A:44:ED:C6:45:AE:41:3D Certificate issuer: /CN=7894adcb-3be5-42b8-a76f-913809582611 Certificate serial: 010D0C9F4328584F8F3DC48D3C5893A695210900 Authority key identifier: 5A:F7:62:9E:BF:84:43:86:83:3B:C5:BE:60:36:59:D6:76:BB:63:CA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7894adcb-3be5-42b8-a76f-913809582611.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7894adcb-3be5-42b8-a76f-913809582611/86604c1e-e526-334e-ab61-1fb3393fb181.roa Signing time: Tue 20 Oct 2026 01:00:12 +0000 ROA not before: Tue 20 Oct 2026 01:00:12 +0000 ROA not after: Mon 18 Jan 2027 02:00:12 +0000 asID: 12980 IP address blocks: 129.35.160.0/20 maxlen: 20 170.225.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7894adcb-3be5-42b8-a76f-913809582611/7894adcb-3be5-42b8-a76f-913809582611.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7894adcb-3be5-42b8-a76f-913809582611/7894adcb-3be5-42b8-a76f-913809582611.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7894adcb-3be5-42b8-a76f-913809582611.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 29 Oct 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:8f:3d:c4:8d:3c:58:93:a6:95:21:09:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7894adcb-3be5-42b8-a76f-913809582611 Validity Not Before: Oct 20 01:00:12 2026 GMT Not After : Jan 18 02:00:12 2027 GMT Subject: CN=40a9211d-36c3-4b4e-bd71-b44ecacec10c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:37:78:61:1d:c6:d0:13:f6:fa:e2:d5:ef:4f: ca:48:e0:4d:b1:62:64:eb:72:a6:c5:e4:17:c1:26: 78:ab:cb:42:f6:d3:a0:0c:cb:c3:ac:94:82:2a:c2: d4:6d:47:c0:c6:05:ff:be:1d:bb:33:53:63:b8:d8: ac:1a:6e:ef:66:34:45:30:d2:54:1f:41:7d:a8:76: 24:e6:e7:44:b0:86:34:a4:6f:29:b4:35:ab:a0:0f: 91:cd:7c:ab:2f:d5:51:4c:5d:03:fa:33:17:b9:2c: 01:3a:50:12:11:5c:de:63:7d:e3:5d:99:b8:fb:46: cd:c8:93:5b:ec:81:a0:1b:e9:57:2f:37:27:58:4d: b5:6f:8f:d9:2e:c8:c4:8a:6b:d5:b5:6a:f9:d6:22: 55:59:f7:12:4e:fe:c2:d1:72:ce:92:ea:aa:3d:38: cf:5b:b5:e9:f5:cd:3c:2c:af:05:24:10:40:4b:1f: 92:ec:89:64:e1:8d:cc:31:12:fa:0d:bd:75:99:93: 51:87:23:8e:cb:5d:ed:28:a6:b6:d0:69:f6:ce:88: 31:73:a5:8d:3e:18:81:92:45:fd:08:9e:4a:e0:7b: 40:f7:ee:5f:75:e8:48:dc:f6:98:05:a7:92:37:e6: d7:b6:77:fb:fe:62:4f:d8:0b:1e:c4:52:94:75:ab: 32:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:B8:98:FA:3F:A3:E8:BD:B6:E6:4D:2B:0A:44:ED:C6:45:AE:41:3D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7894adcb-3be5-42b8-a76f-913809582611/86604c1e-e526-334e-ab61-1fb3393fb181.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7894adcb-3be5-42b8-a76f-913809582611/7894adcb-3be5-42b8-a76f-913809582611.crl X509v3 Authority Key Identifier: keyid:5A:F7:62:9E:BF:84:43:86:83:3B:C5:BE:60:36:59:D6:76:BB:63:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7894adcb-3be5-42b8-a76f-913809582611.cer sbgp-ipAddrBlock: critical IPv4: 129.35.160.0/20 170.225.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:00:86:24:f1:fe:f0:62:e4:9b:1d:eb:65:59:ae:d8:49:2f: 03:b6:dc:af:e1:d4:ae:1d:56:a9:d0:75:4b:97:f1:dc:14:19: 24:06:37:ec:0d:d7:d4:a2:4e:fc:44:ef:6d:04:ae:5b:2a:42: 1a:f9:3f:8a:c4:f4:d9:f5:43:df:9f:e2:15:3a:65:c7:2b:87: 05:f8:9d:07:f7:d5:a8:f1:6c:5f:ac:be:7e:40:13:d8:eb:84: 5b:67:12:37:3b:ea:37:7b:0b:ba:c1:86:4e:75:38:ce:08:db: 3f:af:b7:71:62:f3:69:d2:a2:4b:fa:fe:0f:c0:7b:21:1a:46: 4f:a7:80:d8:00:55:af:cb:5e:c9:d4:6d:14:82:13:9b:f8:5b: 4e:82:14:c3:fb:b0:70:a2:36:28:6b:16:89:12:28:ce:11:79: de:7f:28:fe:1a:87:08:62:15:c4:8d:30:44:76:91:27:48:f4: 1e:13:c5:1c:57:94:6b:c0:6d:51:05:49:4d:31:91:d4:a2:c2: be:1b:62:bd:80:9a:28:23:70:94:ed:73:05:8a:70:26:3d:04: 6d:62:cb:1f:74:9a:da:6d:48:09:fb:9f:7f:bf:ef:84:b4:49: 59:fa:ae:49:d2:26:7d:b1:de:d9:bc:59:ab:5d:ab:41:b2:88: a5:e2:03:8f -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE+PPcSNPFiTppUhCQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzg5NGFkY2ItM2JlNS00MmI4LWE3NmYtOTEzODA5NTgy NjExMB4XDTI2MTAyMDAxMDAxMloXDTI3MDExODAyMDAxMlowLzEtMCsGA1UEAxMk NDBhOTIxMWQtMzZjMy00YjRlLWJkNzEtYjQ0ZWNhY2VjMTBjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoDd4YR3G0BP2+uLV70/KSOBNsWJk63KmxeQX wSZ4q8tC9tOgDMvDrJSCKsLUbUfAxgX/vh27M1NjuNisGm7vZjRFMNJUH0F9qHYk 5udEsIY0pG8ptDWroA+RzXyrL9VRTF0D+jMXuSwBOlASEVzeY33jXZm4+0bNyJNb 7IGgG+lXLzcnWE21b4/ZLsjEimvVtWr51iJVWfcSTv7C0XLOkuqqPTjPW7Xp9c08 LK8FJBBASx+S7Ilk4Y3MMRL6Db11mZNRhyOOy13tKKa20Gn2zogxc6WNPhiBkkX9 CJ5K4HtA9+5fdehI3PaYBaeSN+bXtnf7/mJP2AsexFKUdasytQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFG+4mPo/o+i9tuZNKwpE7cZFrkE9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS83ODk0 YWRjYi0zYmU1LTQyYjgtYTc2Zi05MTM4MDk1ODI2MTEvODY2MDRjMWUtZTUyNi0z MzRlLWFiNjEtMWZiMzM5M2ZiMTgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvNzg5NGFkY2ItM2JlNS00MmI4LWE3 NmYtOTEzODA5NTgyNjExLzc4OTRhZGNiLTNiZTUtNDJiOC1hNzZmLTkxMzgwOTU4 MjYxMS5jcmwwHwYDVR0jBBgwFoAUWvdinr+EQ4aDO8W+YDZZ1na7Y8owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS83ODk0YWRjYi0zYmU1LTQyYjgtYTc2Zi05MTM4 MDk1ODI2MTEuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQEgSOgAwQE quGAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAAIAhiTx/vBi5Jsd62VZrthJLwO23K/h1K4dVqnQdUuX8dwU GSQGN+wN19SiTvxE720ErlsqQhr5P4rE9Nn1Q9+f4hU6ZccrhwX4nQf31ajxbF+s vn5AE9jrhFtnEjc76jd7C7rBhk51OM4I2z+vt3Fi82nSokv6/g/AeyEaRk+ngNgA Va/LXsnUbRSCE5v4W06CFMP7sHCiNihrFokSKM4Red5/KP4ahwhiFcSNMER2kSdI 9B4TxRxXlGvAbVEFSU0xkdSiwr4bYr2AmigjcJTtcwWKcCY9BG1iyx90mtptSAn7 n3+/74S0SVn6rknSJn2x3tm8Watdq0GyiKXiA48= -----END CERTIFICATE-----Generated at Wed Oct 28 11:43:41 2026 by rpki-client