$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/df1d2790-04a3-3ed1-808b-1dab0cc2d47e.roa File: df1d2790-04a3-3ed1-808b-1dab0cc2d47e.roa (raw, json) Hash identifier: Joy1X0KHv3w5TUsrebTK1hkXE4DHTbREYCm/cjL3+Ms= Subject key identifier: E0:43:CE:9C:A8:96:84:8D:27:1B:34:E0:CC:56:A9:C3:1E:AC:6A:6B Certificate issuer: /CN=86b35f71-51ac-43ff-b604-cba3552c4c8c Certificate serial: 010D0C9F4328584EA7872E805F82767A8A407D00 Authority key identifier: 64:9C:3D:FE:D3:DF:3D:6B:67:BC:6D:BC:E9:05:BC:C0:6C:E6:1C:D7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/df1d2790-04a3-3ed1-808b-1dab0cc2d47e.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 46841 IP address blocks: 100.42.16.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/86b35f71-51ac-43ff-b604-cba3552c4c8c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/86b35f71-51ac-43ff-b604-cba3552c4c8c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Aug 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:87:2e:80:5f:82:76:7a:8a:40:7d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86b35f71-51ac-43ff-b604-cba3552c4c8c Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=993ddcc3-177f-4d8c-806f-fe4261212df1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:9a:47:8d:07:26:d6:3f:f2:dc:95:9b:28:e5: c7:fa:71:ec:74:79:30:6f:b5:73:3e:0c:8e:25:2e: 16:d4:89:fd:10:f9:1f:86:cd:53:c2:6c:49:12:48: ca:29:ad:e4:04:2d:c5:80:df:76:08:47:37:40:d7: 68:4f:86:5a:05:18:be:2f:43:54:88:f1:9b:c8:5a: 86:78:ca:5d:24:44:78:bd:85:dd:43:67:74:f1:b6: 1c:05:83:a7:a2:9e:b0:8f:09:36:cc:fc:26:58:d8: 44:0b:73:d2:5c:00:a3:cf:a3:0c:01:4e:7e:76:20: 72:25:48:65:70:82:76:be:f0:2a:81:04:56:88:a8: 1b:30:aa:62:a2:f2:c4:c0:3b:a9:fb:b7:92:e0:3d: 42:e2:f8:70:f4:c8:dd:8b:16:fe:c3:af:9c:d1:e4: 8e:2c:e9:55:09:3c:94:c3:ab:09:cc:67:91:72:03: 92:d9:e9:52:db:73:d2:86:7d:46:6b:74:da:af:1f: 13:01:e6:10:4d:59:78:eb:5d:83:60:7d:c8:33:aa: 22:2b:78:89:45:f6:c3:8b:32:44:d4:24:49:29:f4: 5c:a9:0e:31:d4:f8:5c:b5:8c:21:01:c7:9a:77:78: db:b1:ba:08:53:9b:38:14:1c:10:6e:42:ee:2d:07: a8:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:43:CE:9C:A8:96:84:8D:27:1B:34:E0:CC:56:A9:C3:1E:AC:6A:6B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/df1d2790-04a3-3ed1-808b-1dab0cc2d47e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/86b35f71-51ac-43ff-b604-cba3552c4c8c.crl X509v3 Authority Key Identifier: keyid:64:9C:3D:FE:D3:DF:3D:6B:67:BC:6D:BC:E9:05:BC:C0:6C:E6:1C:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c.cer sbgp-ipAddrBlock: critical IPv4: 100.42.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption e2:c2:da:9d:d4:86:f5:59:23:99:a1:0f:bd:f5:42:93:69:15: da:60:9b:3b:85:14:af:84:6e:c3:50:df:26:78:f7:ce:e7:d9: b7:8f:f7:0a:c2:a6:fb:01:4f:6f:4b:61:c3:ac:7f:90:29:30: 88:d2:76:39:c1:31:15:7a:30:0a:e1:76:6a:a7:2c:64:59:67: 9c:19:b8:3d:b1:24:57:cb:cf:32:6f:47:10:a0:5b:25:03:34: 22:41:6d:56:58:07:81:f5:40:9a:75:24:ea:a7:18:99:b5:d1: 73:ae:75:a4:31:29:25:ab:a8:5b:98:31:34:07:ea:45:3c:ae: fa:fc:be:58:fb:69:c6:5d:f5:6e:15:57:c6:e0:2d:84:94:a5: f7:8a:7c:09:f9:f1:3f:90:f6:b5:b6:29:f2:6e:bc:d3:c9:37: b2:a6:7a:35:52:7c:97:c2:74:f2:c3:ce:b8:0d:5a:b8:ae:ff: 3f:23:c3:16:aa:e6:a9:80:b0:1b:46:0f:f9:c0:15:d7:92:6a: 53:bf:8d:a0:94:d8:65:26:80:9f:0c:71:df:e3:3e:67:28:17: 94:2f:45:06:29:72:60:1b:1a:b4:70:59:19:f2:92:47:d9:24: 23:04:ef:d7:10:9f:d4:bc:b0:b4:32:1f:ba:73:83:95:9e:bf: 5c:de:28:5c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nhy6AX4J2eopAfQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODZiMzVmNzEtNTFhYy00M2ZmLWI2MDQtY2JhMzU1MmM0 YzhjMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk OTkzZGRjYzMtMTc3Zi00ZDhjLTgwNmYtZmU0MjYxMjEyZGYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtppHjQcm1j/y3JWbKOXH+nHsdHkwb7VzPgyO JS4W1In9EPkfhs1TwmxJEkjKKa3kBC3FgN92CEc3QNdoT4ZaBRi+L0NUiPGbyFqG eMpdJER4vYXdQ2d08bYcBYOnop6wjwk2zPwmWNhEC3PSXACjz6MMAU5+diByJUhl cIJ2vvAqgQRWiKgbMKpiovLEwDup+7eS4D1C4vhw9Mjdixb+w6+c0eSOLOlVCTyU w6sJzGeRcgOS2elS23PShn1Ga3Tarx8TAeYQTVl4612DYH3IM6oiK3iJRfbDizJE 1CRJKfRcqQ4x1PhctYwhAcead3jbsboIU5s4FBwQbkLuLQeoEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOBDzpyoloSNJxs04MxWqcMerGprMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84NmIz NWY3MS01MWFjLTQzZmYtYjYwNC1jYmEzNTUyYzRjOGMvZGYxZDI3OTAtMDRhMy0z ZWQxLTgwOGItMWRhYjBjYzJkNDdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvODZiMzVmNzEtNTFhYy00M2ZmLWI2 MDQtY2JhMzU1MmM0YzhjLzg2YjM1ZjcxLTUxYWMtNDNmZi1iNjA0LWNiYTM1NTJj NGM4Yy5jcmwwHwYDVR0jBBgwFoAUZJw9/tPfPWtnvG286QW8wGzmHNcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS84NmIzNWY3MS01MWFjLTQzZmYtYjYwNC1jYmEz NTUyYzRjOGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEZCoQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAOLC2p3UhvVZI5mhD731QpNpFdpgmzuFFK+EbsNQ3yZ4987n2beP9wrC pvsBT29LYcOsf5ApMIjSdjnBMRV6MArhdmqnLGRZZ5wZuD2xJFfLzzJvRxCgWyUD NCJBbVZYB4H1QJp1JOqnGJm10XOudaQxKSWrqFuYMTQH6kU8rvr8vlj7acZd9W4V V8bgLYSUpfeKfAn58T+Q9rW2KfJuvNPJN7KmejVSfJfCdPLDzrgNWriu/z8jwxaq 5qmAsBtGD/nAFdeSalO/jaCU2GUmgJ8Mcd/jPmcoF5QvRQYpcmAbGrRwWRnykkfZ JCME79cQn9S8sLQyH7pzg5Wev1zeKFw= -----END CERTIFICATE-----Generated at Mon Aug 3 17:31:07 2026 by rpki-client