$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/38f92206-1023-3a37-b259-801ea6dc14ca.roa File: 38f92206-1023-3a37-b259-801ea6dc14ca.roa (raw, json) Hash identifier: zB7ZNfwA+2Kawz22UOVYZFdIufGBoWvPOsqgF5wrROU= Subject key identifier: 8C:7C:5B:F4:00:D9:B4:30:8C:67:EC:67:2C:03:7C:C2:18:69:05:EB Certificate issuer: /CN=86b35f71-51ac-43ff-b604-cba3552c4c8c Certificate serial: 010D0C9F4328584F0DF45031EF9BE9C9CFDEE600 Authority key identifier: 64:9C:3D:FE:D3:DF:3D:6B:67:BC:6D:BC:E9:05:BC:C0:6C:E6:1C:D7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/38f92206-1023-3a37-b259-801ea6dc14ca.roa Signing time: Thu 03 Sep 2026 17:33:13 +0000 ROA not before: Thu 03 Sep 2026 17:33:13 +0000 ROA not after: Wed 02 Dec 2026 18:33:13 +0000 asID: 33667 IP address blocks: 199.87.231.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/86b35f71-51ac-43ff-b604-cba3552c4c8c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/86b35f71-51ac-43ff-b604-cba3552c4c8c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 19 Sep 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:0d:f4:50:31:ef:9b:e9:c9:cf:de:e6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86b35f71-51ac-43ff-b604-cba3552c4c8c Validity Not Before: Sep 3 17:33:13 2026 GMT Not After : Dec 2 18:33:13 2026 GMT Subject: CN=91c59df5-40d5-402f-92bf-59558b696625 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:7b:8c:35:9d:07:18:79:b8:51:18:69:e8:85: 18:c9:43:63:16:85:a4:f9:3c:55:a8:5d:08:94:f1: 43:f5:f5:ed:fc:2b:1c:05:73:72:38:ff:fc:78:13: 13:66:da:47:a2:b6:64:8b:c8:d3:50:11:30:6e:2e: 47:6e:d5:f1:d9:66:9b:10:e2:a6:b5:ae:d6:98:60: 34:1e:dc:d9:fd:17:cc:e2:2b:dd:8e:4c:78:6e:a1: af:c8:f8:24:50:59:d7:91:e4:57:d9:7d:2b:04:39: ed:48:f5:58:d9:46:b9:3d:b5:38:45:f9:3c:be:9b: b9:09:05:0c:b1:29:3d:da:d8:dc:25:3d:f5:8e:42: 73:c4:25:92:1c:85:9b:75:b6:bd:f0:ea:56:5d:17: 5a:06:30:d3:1e:e2:0f:e5:7b:f7:27:3a:92:d0:40: 07:fe:4f:e3:1a:74:46:55:8c:bb:f7:62:17:bd:bc: ca:bb:34:d7:3f:01:14:e5:f1:44:bb:e9:f8:98:5e: 6f:84:de:82:5d:fa:16:0c:0a:31:d6:a3:81:3e:22: 9e:ea:4e:de:05:54:04:61:07:26:53:f1:68:c5:5b: 8c:2a:7a:5b:c9:61:25:50:6b:48:46:c5:93:20:53: d6:b0:f6:43:91:ac:35:0c:04:4f:3f:6d:0a:98:f6: e5:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:7C:5B:F4:00:D9:B4:30:8C:67:EC:67:2C:03:7C:C2:18:69:05:EB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/38f92206-1023-3a37-b259-801ea6dc14ca.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/86b35f71-51ac-43ff-b604-cba3552c4c8c.crl X509v3 Authority Key Identifier: keyid:64:9C:3D:FE:D3:DF:3D:6B:67:BC:6D:BC:E9:05:BC:C0:6C:E6:1C:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c.cer sbgp-ipAddrBlock: critical IPv4: 199.87.231.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:2c:d5:8f:55:9a:6b:66:53:8c:1f:86:66:1d:de:80:64:42: e7:de:51:e7:f7:25:16:fd:74:f5:50:97:b9:ec:4a:74:38:dc: 36:4d:7c:e8:53:6c:02:ba:06:5d:4d:a8:d4:e2:58:4d:af:94: ca:c0:c6:59:cb:72:5d:00:4d:26:3e:c2:5a:a7:d1:04:e6:61: ce:da:94:f6:45:f6:75:6c:c8:8c:7b:bc:30:61:4a:2b:18:72: ae:90:41:6b:27:55:92:43:9e:fd:0c:d7:c1:6a:82:23:08:53: 04:73:04:48:25:54:d7:3a:73:e2:94:5b:1f:8f:4f:c9:90:6f: 91:52:b8:cd:bb:1b:47:25:63:92:53:8d:04:97:23:4e:5c:96: ae:7d:d2:eb:3b:0a:09:57:be:d4:81:26:07:a6:e5:22:be:fd: 52:6a:ce:d4:d7:db:54:00:0c:b4:f2:9b:58:c4:db:fe:f7:71: e3:35:7e:31:49:58:c4:eb:5b:cb:e2:4e:ed:25:82:af:a3:32: 60:65:0c:d6:11:19:0b:c2:42:6e:41:b4:a9:59:18:76:b7:b8: 5b:23:03:55:d3:8c:67:dc:ef:fa:bf:29:05:5b:3c:91:7c:aa: 39:2d:38:71:cc:5c:c8:d5:5c:99:d1:a8:70:ec:71:b2:09:6d: d1:10:0e:43 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8N9FAx75vpyc/e5gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODZiMzVmNzEtNTFhYy00M2ZmLWI2MDQtY2JhMzU1MmM0 YzhjMB4XDTI2MDkwMzE3MzMxM1oXDTI2MTIwMjE4MzMxM1owLzEtMCsGA1UEAxMk OTFjNTlkZjUtNDBkNS00MDJmLTkyYmYtNTk1NThiNjk2NjI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoXuMNZ0HGHm4URhp6IUYyUNjFoWk+TxVqF0I lPFD9fXt/CscBXNyOP/8eBMTZtpHorZki8jTUBEwbi5HbtXx2WabEOKmta7WmGA0 HtzZ/RfM4ivdjkx4bqGvyPgkUFnXkeRX2X0rBDntSPVY2Ua5PbU4Rfk8vpu5CQUM sSk92tjcJT31jkJzxCWSHIWbdba98OpWXRdaBjDTHuIP5Xv3JzqS0EAH/k/jGnRG VYy792IXvbzKuzTXPwEU5fFEu+n4mF5vhN6CXfoWDAox1qOBPiKe6k7eBVQEYQcm U/FoxVuMKnpbyWElUGtIRsWTIFPWsPZDkaw1DARPP20KmPblawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIx8W/QA2bQwjGfsZywDfMIYaQXrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84NmIz NWY3MS01MWFjLTQzZmYtYjYwNC1jYmEzNTUyYzRjOGMvMzhmOTIyMDYtMTAyMy0z YTM3LWIyNTktODAxZWE2ZGMxNGNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvODZiMzVmNzEtNTFhYy00M2ZmLWI2 MDQtY2JhMzU1MmM0YzhjLzg2YjM1ZjcxLTUxYWMtNDNmZi1iNjA0LWNiYTM1NTJj NGM4Yy5jcmwwHwYDVR0jBBgwFoAUZJw9/tPfPWtnvG286QW8wGzmHNcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS84NmIzNWY3MS01MWFjLTQzZmYtYjYwNC1jYmEz NTUyYzRjOGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx1fnMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAks1Y9VmmtmU4wfhmYd3oBkQufeUef3JRb9dPVQl7nsSnQ43DZNfOhT bAK6Bl1NqNTiWE2vlMrAxlnLcl0ATSY+wlqn0QTmYc7alPZF9nVsyIx7vDBhSisY cq6QQWsnVZJDnv0M18FqgiMIUwRzBEglVNc6c+KUWx+PT8mQb5FSuM27G0clY5JT jQSXI05clq590us7CglXvtSBJgem5SK+/VJqztTX21QADLTym1jE2/73ceM1fjFJ WMTrW8viTu0lgq+jMmBlDNYRGQvCQm5BtKlZGHa3uFsjA1XTjGfc7/q/KQVbPJF8 qjktOHHMXMjVXJnRqHDscbIJbdEQDkM= -----END CERTIFICATE-----Generated at Fri Sep 18 01:30:02 2026 by rpki-client