$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/9be14c5b-c50c-3f6f-98fc-006fd0380624.roa File: 9be14c5b-c50c-3f6f-98fc-006fd0380624.roa (raw, json) Hash identifier: /5fmV7etAPN9moZWBhHini5m/XScFk8T4GCGE3LVmmE= Subject key identifier: 48:EE:C0:A7:0A:F0:0E:35:BE:46:05:A0:85:C3:3B:31:82:D4:84:85 Certificate issuer: /CN=86b35f71-51ac-43ff-b604-cba3552c4c8c Certificate serial: 010D0C9F4328584F0DF46D5908B4F9D124BC3520 Authority key identifier: 64:9C:3D:FE:D3:DF:3D:6B:67:BC:6D:BC:E9:05:BC:C0:6C:E6:1C:D7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/9be14c5b-c50c-3f6f-98fc-006fd0380624.roa Signing time: Thu 03 Sep 2026 17:33:27 +0000 ROA not before: Thu 03 Sep 2026 17:33:27 +0000 ROA not after: Wed 02 Dec 2026 18:33:27 +0000 asID: 33651 IP address blocks: 199.87.231.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/86b35f71-51ac-43ff-b604-cba3552c4c8c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/86b35f71-51ac-43ff-b604-cba3552c4c8c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:0d:f4:6d:59:08:b4:f9:d1:24:bc:35:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86b35f71-51ac-43ff-b604-cba3552c4c8c Validity Not Before: Sep 3 17:33:27 2026 GMT Not After : Dec 2 18:33:27 2026 GMT Subject: CN=69bd8958-c93b-4b88-adb3-6b639f3e667a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:05:09:97:ad:f6:56:94:8d:41:bc:63:37:19: 3c:7e:a0:96:a9:76:48:b5:ab:87:70:63:c2:0d:2d: e0:e1:b7:7e:0b:b9:c5:1f:3e:43:6e:f8:44:d9:34: d3:6c:14:b6:ec:49:a6:b0:25:b2:6e:5c:e0:f6:6a: 2d:9b:31:c0:71:15:64:fc:88:9a:ae:3b:70:1b:44: f1:91:55:f4:be:80:82:51:64:cc:18:fb:d7:50:1b: 70:12:9f:a1:8b:3f:e9:e1:d5:22:4a:58:8b:25:72: de:53:01:d9:24:3e:3c:66:98:9d:4d:4c:71:4b:c3: dd:56:19:c8:db:8d:3a:72:c0:1f:63:54:17:83:5c: cd:fd:fa:25:c9:2a:49:d0:52:a5:14:cc:70:06:53: ec:ae:f4:94:aa:df:81:41:ed:b3:f9:62:1e:7e:47: c2:0b:5a:46:90:0c:51:b2:c0:5e:c5:27:77:c8:09: 55:5e:7e:26:6c:2c:2a:33:74:a7:b6:fe:52:60:b3: 96:17:f7:5f:a8:2c:ce:97:ff:6f:84:68:3a:1e:a2: 03:9a:74:cb:68:22:4a:c2:9e:51:b3:7d:95:6e:c6: 42:19:fb:d5:ec:48:2a:3e:e6:55:ff:3f:79:7c:9e: 59:b6:49:00:ea:f4:e7:35:eb:5e:07:44:65:57:c8: 03:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:EE:C0:A7:0A:F0:0E:35:BE:46:05:A0:85:C3:3B:31:82:D4:84:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/9be14c5b-c50c-3f6f-98fc-006fd0380624.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/86b35f71-51ac-43ff-b604-cba3552c4c8c.crl X509v3 Authority Key Identifier: keyid:64:9C:3D:FE:D3:DF:3D:6B:67:BC:6D:BC:E9:05:BC:C0:6C:E6:1C:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c.cer sbgp-ipAddrBlock: critical IPv4: 199.87.231.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:e4:85:0b:0e:a1:e0:22:6a:70:26:80:ac:93:aa:cd:42:9a: 4a:e0:4a:b5:8f:07:2c:93:f1:06:50:4b:57:31:2e:fa:18:b8: 6a:61:fe:7f:f8:3c:b4:ab:28:8a:07:b8:34:74:84:91:0c:5d: 11:54:8f:18:3a:eb:d0:59:00:21:cb:25:9e:cc:39:2e:7d:a5: 1f:a5:60:f2:26:ce:d6:fa:4f:e8:6c:e7:55:e5:f3:64:4a:59: 07:87:57:f9:95:4f:6a:80:1e:09:d6:1f:65:74:95:01:e7:46: e4:49:89:72:b1:39:6e:ee:2a:d0:c8:2a:d5:5e:8b:88:9f:1d: cd:09:31:66:c4:3e:6a:48:5e:a3:d0:37:34:f9:95:fa:b3:35: 6c:23:83:a9:95:34:e8:01:4d:d0:6f:0c:0a:97:26:8b:b0:6d: 8a:56:57:f8:a3:ef:5a:3f:34:c8:40:b9:d7:80:be:25:7a:e6: 7e:99:1a:5c:08:b7:db:bc:46:0a:3b:48:61:ec:d9:bb:7d:ae: de:c6:40:5b:d7:ce:72:e1:1d:51:51:c2:3a:fc:2a:07:6d:df: 33:43:e2:dc:b5:77:7e:8b:4c:bf:49:fb:4c:a8:3b:82:81:b0: d8:0b:c8:03:5b:a1:f6:ca:0f:0e:04:06:8d:64:51:7e:a8:3c: c7:27:00:82 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8N9G1ZCLT50SS8NSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODZiMzVmNzEtNTFhYy00M2ZmLWI2MDQtY2JhMzU1MmM0 YzhjMB4XDTI2MDkwMzE3MzMyN1oXDTI2MTIwMjE4MzMyN1owLzEtMCsGA1UEAxMk NjliZDg5NTgtYzkzYi00Yjg4LWFkYjMtNmI2MzlmM2U2NjdhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoQUJl632VpSNQbxjNxk8fqCWqXZItauHcGPC DS3g4bd+C7nFHz5DbvhE2TTTbBS27EmmsCWyblzg9motmzHAcRVk/IiarjtwG0Tx kVX0voCCUWTMGPvXUBtwEp+hiz/p4dUiSliLJXLeUwHZJD48ZpidTUxxS8PdVhnI 2406csAfY1QXg1zN/folySpJ0FKlFMxwBlPsrvSUqt+BQe2z+WIefkfCC1pGkAxR ssBexSd3yAlVXn4mbCwqM3Sntv5SYLOWF/dfqCzOl/9vhGg6HqIDmnTLaCJKwp5R s32VbsZCGfvV7EgqPuZV/z95fJ5ZtkkA6vTnNeteB0RlV8gDhQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEjuwKcK8A41vkYFoIXDOzGC1ISFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84NmIz NWY3MS01MWFjLTQzZmYtYjYwNC1jYmEzNTUyYzRjOGMvOWJlMTRjNWItYzUwYy0z ZjZmLTk4ZmMtMDA2ZmQwMzgwNjI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvODZiMzVmNzEtNTFhYy00M2ZmLWI2 MDQtY2JhMzU1MmM0YzhjLzg2YjM1ZjcxLTUxYWMtNDNmZi1iNjA0LWNiYTM1NTJj NGM4Yy5jcmwwHwYDVR0jBBgwFoAUZJw9/tPfPWtnvG286QW8wGzmHNcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS84NmIzNWY3MS01MWFjLTQzZmYtYjYwNC1jYmEz NTUyYzRjOGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx1fnMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAErkhQsOoeAianAmgKyTqs1CmkrgSrWPByyT8QZQS1cxLvoYuGph/n/4 PLSrKIoHuDR0hJEMXRFUjxg669BZACHLJZ7MOS59pR+lYPImztb6T+hs51Xl82RK WQeHV/mVT2qAHgnWH2V0lQHnRuRJiXKxOW7uKtDIKtVei4ifHc0JMWbEPmpIXqPQ NzT5lfqzNWwjg6mVNOgBTdBvDAqXJouwbYpWV/ij71o/NMhAudeAviV65n6ZGlwI t9u8Rgo7SGHs2bt9rt7GQFvXznLhHVFRwjr8Kgdt3zND4ty1d36LTL9J+0yoO4KB sNgLyANbofbKDw4EBo1kUX6oPMcnAII= -----END CERTIFICATE-----Generated at Fri Sep 4 22:49:08 2026 by rpki-client