$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582/b86a6c18-5711-3657-9135-226408a922bc.roa File: b86a6c18-5711-3657-9135-226408a922bc.roa (raw, json) Hash identifier: 7tGdp7bk1zj9wk1XahcYCCDJxIb/+T28awjNR/3ITMw= Subject key identifier: EA:4C:56:47:48:78:3C:A1:66:4B:10:9C:E9:B4:63:A7:A9:11:43:21 Certificate issuer: /CN=ac2d3876-29e6-42f5-b76f-23bb48ba8582 Certificate serial: 010D0C9F4328584EE7BCA8471BEAD03512190010 Authority key identifier: 0C:49:24:45:E5:19:90:2C:B0:3F:1F:C1:63:BC:C1:B5:8E:D8:A4:9E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582/b86a6c18-5711-3657-9135-226408a922bc.roa Signing time: Fri 21 Aug 2026 01:00:12 +0000 ROA not before: Fri 21 Aug 2026 01:00:12 +0000 ROA not after: Thu 19 Nov 2026 02:00:12 +0000 asID: 1273 IP address blocks: 206.97.24.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582/ac2d3876-29e6-42f5-b76f-23bb48ba8582.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582/ac2d3876-29e6-42f5-b76f-23bb48ba8582.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e7:bc:a8:47:1b:ea:d0:35:12:19:00:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ac2d3876-29e6-42f5-b76f-23bb48ba8582 Validity Not Before: Aug 21 01:00:12 2026 GMT Not After : Nov 19 02:00:12 2026 GMT Subject: CN=3c6804f6-3186-4457-abf5-26714fadda94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:fe:17:12:44:72:c0:c0:db:95:2b:66:50:47: bf:a6:57:6b:4d:d3:ec:ac:da:3c:4a:7f:fc:d3:cd: bd:06:e0:cd:31:b0:e8:44:8f:09:3f:2f:23:df:13: aa:b9:fa:4f:fa:a4:dd:3b:a1:7b:6f:37:ad:0d:dd: e2:2c:29:d4:13:73:dd:51:18:12:10:c7:15:21:ce: ed:bc:a2:80:62:cc:a7:0e:c8:ac:f3:d6:26:0c:95: f4:62:09:4a:79:bb:05:4a:24:90:c7:40:a4:7a:0d: 24:a7:02:d8:d8:6b:56:24:6f:2b:ce:8c:36:2c:1e: ef:5f:88:6a:4e:cd:85:55:1f:e9:df:d4:f3:87:f2: bb:a5:ec:e4:62:66:9c:89:5e:fc:c3:6d:ad:36:b9: d5:80:a0:ba:f8:66:46:2b:40:d2:8a:60:99:45:42: a6:c5:ac:5a:15:db:5a:eb:12:07:29:53:a4:6c:4a: 84:94:1e:12:e4:9a:03:94:a6:64:d0:d8:6c:8e:d9: d8:af:b9:a0:a9:8c:88:d9:81:30:85:7a:6d:51:c7: 17:75:f2:8f:f0:1a:cf:ff:dc:73:72:c1:36:9a:38: 01:c7:6b:8b:1e:8b:61:72:4a:d3:dd:1a:96:2f:2e: ad:46:3a:6e:6b:1d:68:3d:77:18:06:47:cd:12:02: 49:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:4C:56:47:48:78:3C:A1:66:4B:10:9C:E9:B4:63:A7:A9:11:43:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582/b86a6c18-5711-3657-9135-226408a922bc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582/ac2d3876-29e6-42f5-b76f-23bb48ba8582.crl X509v3 Authority Key Identifier: keyid:0C:49:24:45:E5:19:90:2C:B0:3F:1F:C1:63:BC:C1:B5:8E:D8:A4:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582.cer sbgp-ipAddrBlock: critical IPv4: 206.97.24.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:46:bf:0d:a4:00:30:fc:6a:d9:51:46:24:d3:f8:25:37:f5: 22:07:62:8a:73:31:a2:9d:8a:47:7e:ba:fc:0c:cf:ab:74:f3: 12:03:3d:14:f6:c3:7a:6b:bf:a6:0c:25:99:4c:9f:0c:1f:ca: 8f:42:0b:5b:0e:a4:27:07:41:e8:04:07:e4:55:08:ec:54:8e: 68:ff:6d:7d:11:85:15:46:d4:f3:1d:59:74:c2:b9:bd:e7:11: 91:21:6c:66:be:59:04:5e:b8:a1:6b:37:94:11:e5:79:96:3f: 3a:04:ed:7e:63:d3:9e:b8:c2:5f:33:43:79:15:f4:3a:8e:9f: 47:3b:5e:5a:04:9b:c8:c7:f4:56:b2:42:03:a5:57:45:8e:a6: 5e:cb:4b:09:b0:0d:8e:13:aa:06:c4:ef:af:6e:33:14:5b:15: b8:b9:61:34:a2:1e:97:fb:29:e2:b2:af:da:9a:6f:90:ab:bc: 06:f9:65:b8:ee:21:34:7d:cd:cc:52:36:7f:2c:37:d7:61:80: a8:12:5c:bb:d2:9f:5a:94:46:fd:4a:97:9a:9c:c5:b9:1f:82: b0:76:b1:3f:e5:51:a8:16:7c:97:90:00:75:83:b9:ff:c4:7e: 3b:9e:41:05:e1:0c:1b:d0:b6:a1:31:56:8a:a6:42:f6:8d:34: 15:16:c7:cb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7nvKhHG+rQNRIZABAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWMyZDM4NzYtMjllNi00MmY1LWI3NmYtMjNiYjQ4YmE4 NTgyMB4XDTI2MDgyMTAxMDAxMloXDTI2MTExOTAyMDAxMlowLzEtMCsGA1UEAxMk M2M2ODA0ZjYtMzE4Ni00NDU3LWFiZjUtMjY3MTRmYWRkYTk0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr/4XEkRywMDblStmUEe/pldrTdPsrNo8Sn/8 0829BuDNMbDoRI8JPy8j3xOqufpP+qTdO6F7bzetDd3iLCnUE3PdURgSEMcVIc7t vKKAYsynDsis89YmDJX0YglKebsFSiSQx0Ckeg0kpwLY2GtWJG8rzow2LB7vX4hq Ts2FVR/p39Tzh/K7pezkYmaciV78w22tNrnVgKC6+GZGK0DSimCZRUKmxaxaFdta 6xIHKVOkbEqElB4S5JoDlKZk0NhsjtnYr7mgqYyI2YEwhXptUccXdfKP8BrP/9xz csE2mjgBx2uLHothckrT3RqWLy6tRjpuax1oPXcYBkfNEgJJcwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOpMVkdIeDyhZksQnOm0Y6epEUMhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hYzJk Mzg3Ni0yOWU2LTQyZjUtYjc2Zi0yM2JiNDhiYTg1ODIvYjg2YTZjMTgtNTcxMS0z NjU3LTkxMzUtMjI2NDA4YTkyMmJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYWMyZDM4NzYtMjllNi00MmY1LWI3 NmYtMjNiYjQ4YmE4NTgyL2FjMmQzODc2LTI5ZTYtNDJmNS1iNzZmLTIzYmI0OGJh ODU4Mi5jcmwwHwYDVR0jBBgwFoAUDEkkReUZkCywPx/BY7zBtY7YpJ4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hYzJkMzg3Ni0yOWU2LTQyZjUtYjc2Zi0yM2Ji NDhiYTg1ODIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDzmEYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIdGvw2kADD8atlRRiTT+CU39SIHYopzMaKdikd+uvwMz6t08xIDPRT2 w3prv6YMJZlMnwwfyo9CC1sOpCcHQegEB+RVCOxUjmj/bX0RhRVG1PMdWXTCub3n EZEhbGa+WQReuKFrN5QR5XmWPzoE7X5j0564wl8zQ3kV9DqOn0c7XloEm8jH9Fay QgOlV0WOpl7LSwmwDY4TqgbE769uMxRbFbi5YTSiHpf7KeKyr9qab5CrvAb5Zbju ITR9zcxSNn8sN9dhgKgSXLvSn1qURv1Kl5qcxbkfgrB2sT/lUagWfJeQAHWDuf/E fjueQQXhDBvQtqExVoqmQvaNNBUWx8s= -----END CERTIFICATE-----Generated at Thu Sep 10 19:29:11 2026 by rpki-client