$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/31d3a050-3ee6-45bf-992f-9ac005f3ff84/cb22155d-db2e-393b-81cf-71d00304cacb.roa File: cb22155d-db2e-393b-81cf-71d00304cacb.roa (raw, json) Hash identifier: QU0Yx+jeHusB92lskCf640NHxq7XjvktHBZHlHPFb/U= Subject key identifier: D6:2B:3A:AF:46:88:09:15:88:18:51:90:59:A2:60:33:75:3C:C6:C3 Certificate issuer: /CN=31d3a050-3ee6-45bf-992f-9ac005f3ff84 Certificate serial: 010D0C9F4328584F8DD8586B409D950506C7EA00 Authority key identifier: AB:00:D1:33:68:0F:2D:4C:58:E5:6F:8B:5D:DC:58:89:20:FE:92:EB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/31d3a050-3ee6-45bf-992f-9ac005f3ff84.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/31d3a050-3ee6-45bf-992f-9ac005f3ff84/cb22155d-db2e-393b-81cf-71d00304cacb.roa Signing time: Mon 19 Oct 2026 13:00:12 +0000 ROA not before: Mon 19 Oct 2026 13:00:12 +0000 ROA not after: Sun 17 Jan 2027 14:00:12 +0000 asID: 13451 IP address blocks: 172.86.128.0/20 maxlen: 20 208.90.160.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/31d3a050-3ee6-45bf-992f-9ac005f3ff84/31d3a050-3ee6-45bf-992f-9ac005f3ff84.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/31d3a050-3ee6-45bf-992f-9ac005f3ff84/31d3a050-3ee6-45bf-992f-9ac005f3ff84.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/31d3a050-3ee6-45bf-992f-9ac005f3ff84.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:8d:d8:58:6b:40:9d:95:05:06:c7:ea:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=31d3a050-3ee6-45bf-992f-9ac005f3ff84 Validity Not Before: Oct 19 13:00:12 2026 GMT Not After : Jan 17 14:00:12 2027 GMT Subject: CN=84a16f8a-b848-4bd5-9747-60467f106484 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:38:19:2b:8d:87:a8:bd:09:ac:ad:b1:5c:0a: 11:a2:eb:6e:cb:c7:bc:04:e4:db:6e:ff:0e:58:da: 03:df:72:49:0c:f8:f1:1a:b9:f3:03:08:fb:0e:77: 30:9d:07:8e:15:05:5f:f2:e6:8f:b1:e2:fc:56:0b: c7:63:93:ad:8e:44:ce:21:fa:05:a1:0b:98:8c:dd: 84:eb:c9:76:15:fa:bc:77:73:aa:15:85:fd:3e:22: ba:dd:63:5d:00:c9:42:4f:d6:78:9a:ae:f7:95:fb: 90:90:fc:26:8a:6e:ac:1b:25:e2:c6:19:9a:6a:75: 2e:fa:ff:17:ac:a5:b0:e9:e6:91:87:c9:c3:a9:45: 2b:08:c9:51:27:5a:76:8a:e5:0b:3b:28:76:c7:ca: 62:fb:6b:1d:4b:ef:a3:c5:83:00:a9:50:81:7e:ac: d3:44:e9:dd:a6:78:5d:97:3d:f8:19:3b:1b:7a:af: d8:80:2b:69:0a:8d:2d:cd:ab:a8:e1:9d:60:cc:4a: 4a:f3:db:a7:f6:d6:ca:07:bc:f6:61:06:dd:bd:26: ab:bd:24:d4:46:ed:79:cc:af:cf:48:10:98:27:cd: 4e:03:0a:03:95:aa:ce:43:0a:3b:e3:9d:a1:0b:7f: a6:db:31:72:65:ec:1b:b7:18:ee:a1:f6:63:ad:53: 1b:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:2B:3A:AF:46:88:09:15:88:18:51:90:59:A2:60:33:75:3C:C6:C3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/31d3a050-3ee6-45bf-992f-9ac005f3ff84/cb22155d-db2e-393b-81cf-71d00304cacb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/31d3a050-3ee6-45bf-992f-9ac005f3ff84/31d3a050-3ee6-45bf-992f-9ac005f3ff84.crl X509v3 Authority Key Identifier: keyid:AB:00:D1:33:68:0F:2D:4C:58:E5:6F:8B:5D:DC:58:89:20:FE:92:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/31d3a050-3ee6-45bf-992f-9ac005f3ff84.cer sbgp-ipAddrBlock: critical IPv4: 172.86.128.0/20 208.90.160.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bf:dc:96:11:cb:58:0d:ce:48:76:cf:50:52:4c:9d:99:fd:b5: ac:39:c7:4b:ce:fb:b6:94:fb:16:5a:c9:e7:88:93:44:52:68: b1:14:7a:36:76:3a:f3:f5:fc:78:5b:aa:1d:cd:f1:40:64:ce: ac:48:f0:96:0e:bb:cf:bb:46:9b:bd:4c:92:3e:98:62:7f:23: be:b6:9a:8e:ee:60:b3:a3:ce:dc:2d:93:8b:d4:5a:28:12:2d: f3:d0:da:bc:08:01:d3:51:ae:50:15:42:c1:c4:16:a4:c1:66: d7:3c:43:b3:99:13:6f:65:93:a7:f0:50:84:c9:88:12:9a:8f: a0:fa:39:b2:c7:cc:b7:16:58:cd:e6:ac:f8:3f:6c:8e:28:3c: 8f:cd:09:d2:85:d7:a4:cc:48:61:ec:b1:10:b2:f0:0d:da:fc: 76:0b:59:2c:3d:d8:63:15:06:eb:58:62:a2:c4:6c:d2:4a:c2: 8b:3b:63:de:c5:7c:9e:93:75:8b:59:db:56:02:bd:86:19:f7: c6:95:70:2a:37:e7:9d:86:b1:21:eb:e3:60:85:52:b9:9f:f6: 79:e4:fe:92:03:90:e4:fd:85:c0:a9:28:0a:3c:8c:fb:36:7e: f0:e1:94:0e:5b:24:45:f8:aa:94:fc:61:88:59:7e:d5:e0:c6: a4:21:30:40 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE+N2FhrQJ2VBQbH6gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzFkM2EwNTAtM2VlNi00NWJmLTk5MmYtOWFjMDA1ZjNm Zjg0MB4XDTI2MTAxOTEzMDAxMloXDTI3MDExNzE0MDAxMlowLzEtMCsGA1UEAxMk ODRhMTZmOGEtYjg0OC00YmQ1LTk3NDctNjA0NjdmMTA2NDg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgjgZK42HqL0JrK2xXAoRoutuy8e8BOTbbv8O WNoD33JJDPjxGrnzAwj7DncwnQeOFQVf8uaPseL8VgvHY5OtjkTOIfoFoQuYjN2E 68l2Ffq8d3OqFYX9PiK63WNdAMlCT9Z4mq73lfuQkPwmim6sGyXixhmaanUu+v8X rKWw6eaRh8nDqUUrCMlRJ1p2iuULOyh2x8pi+2sdS++jxYMAqVCBfqzTROndpnhd lz34GTsbeq/YgCtpCo0tzauo4Z1gzEpK89un9tbKB7z2YQbdvSarvSTURu15zK/P SBCYJ81OAwoDlarOQwo7452hC3+m2zFyZewbtxjuofZjrVMb9wIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFNYrOq9GiAkViBhRkFmiYDN1PMbDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zMWQz YTA1MC0zZWU2LTQ1YmYtOTkyZi05YWMwMDVmM2ZmODQvY2IyMjE1NWQtZGIyZS0z OTNiLTgxY2YtNzFkMDAzMDRjYWNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMzFkM2EwNTAtM2VlNi00NWJmLTk5 MmYtOWFjMDA1ZjNmZjg0LzMxZDNhMDUwLTNlZTYtNDViZi05OTJmLTlhYzAwNWYz ZmY4NC5jcmwwHwYDVR0jBBgwFoAUqwDRM2gPLUxY5W+LXdxYiSD+kuswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8zMWQzYTA1MC0zZWU2LTQ1YmYtOTkyZi05YWMw MDVmM2ZmODQuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQErFaAAwQD 0FqgMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAL/clhHLWA3OSHbPUFJMnZn9taw5x0vO+7aU+xZayeeIk0RS aLEUejZ2OvP1/Hhbqh3N8UBkzqxI8JYOu8+7Rpu9TJI+mGJ/I762mo7uYLOjztwt k4vUWigSLfPQ2rwIAdNRrlAVQsHEFqTBZtc8Q7OZE29lk6fwUITJiBKaj6D6ObLH zLcWWM3mrPg/bI4oPI/NCdKF16TMSGHssRCy8A3a/HYLWSw92GMVButYYqLEbNJK wos7Y97FfJ6TdYtZ21YCvYYZ98aVcCo3552GsSHr42CFUrmf9nnk/pIDkOT9hcCp KAo8jPs2fvDhlA5bJEX4qpT8YYhZftXgxqQhMEA= -----END CERTIFICATE-----Generated at Wed Nov 4 05:50:19 2026 by rpki-client