$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/86fece67-20b8-3986-8803-3d7ac8138185.roa File: 86fece67-20b8-3986-8803-3d7ac8138185.roa (raw, json) Hash identifier: g0TAgVx0zg9Jb3AVPdguNTUCX3oqNGtD+hA5Nyjjca4= Subject key identifier: AD:7A:F0:AE:F4:74:5F:BE:C9:55:FC:A8:37:D1:78:BD:01:3A:24:E7 Certificate issuer: /CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c Certificate serial: 010D0C9F4328584F3FAD409D469D5970EF0F4F80 Authority key identifier: EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/86fece67-20b8-3986-8803-3d7ac8138185.roa Signing time: Mon 21 Sep 2026 13:00:12 +0000 ROA not before: Mon 21 Sep 2026 13:00:12 +0000 ROA not after: Sun 20 Dec 2026 14:00:12 +0000 asID: 393249 IP address blocks: 142.231.24.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 09 Oct 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3f:ad:40:9d:46:9d:59:70:ef:0f:4f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c Validity Not Before: Sep 21 13:00:12 2026 GMT Not After : Dec 20 14:00:12 2026 GMT Subject: CN=00f8c8a1-6e60-400a-9d5a-08474299c388 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:c0:12:14:95:a0:d7:3e:70:ad:fc:a2:20:18: 6c:1e:b6:40:44:a1:dc:62:c6:bd:44:e4:32:f7:23: 72:90:41:4f:ad:94:f3:b5:e7:2e:84:2c:68:1c:97: 6f:da:8e:f7:47:f9:b8:c5:c1:9c:b7:74:b4:3a:8b: 23:63:e8:6e:ba:18:48:d4:91:d4:30:01:c9:1f:e8: 05:20:d0:b1:ae:c7:d8:6c:e1:6c:2a:f7:a0:56:c0: 96:e2:69:56:e5:07:fc:1c:4e:ae:06:95:8b:0d:0f: b3:9b:39:a7:db:cd:ff:f7:67:e0:15:b7:8b:45:da: 3e:9f:da:a4:86:d1:99:e2:d1:a6:a6:8d:a2:d0:18: 9b:63:5a:a8:b3:c7:e2:85:23:25:ca:01:77:eb:e9: 3e:46:93:97:09:ad:be:f7:02:26:81:99:c0:05:a5: c0:8b:55:a5:82:b2:49:b8:8c:4e:22:37:57:b7:58: f8:27:42:fe:1b:36:4b:51:95:16:a7:e9:ff:99:cb: 8f:cc:21:d5:47:1b:1c:fe:24:9e:f1:c2:53:a3:95: cb:bd:1b:fc:5c:8c:81:31:18:e1:9f:df:10:22:8e: 0c:91:99:73:cf:21:09:97:16:64:df:c0:08:3f:39: d2:f2:a5:27:6d:b5:68:c9:c9:14:f0:8b:59:6e:43: 49:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:7A:F0:AE:F4:74:5F:BE:C9:55:FC:A8:37:D1:78:BD:01:3A:24:E7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/86fece67-20b8-3986-8803-3d7ac8138185.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl X509v3 Authority Key Identifier: keyid:EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer sbgp-ipAddrBlock: critical IPv4: 142.231.24.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:15:77:b0:0c:c2:c3:5a:81:4d:82:2c:7d:58:ed:20:cd:e3: 44:bb:fb:f5:e0:07:45:99:59:fa:2f:5e:94:07:52:1d:76:72: b5:ae:f5:30:a1:07:a5:ef:3a:2a:3a:d9:29:d4:ad:ed:f1:9e: 93:13:61:3a:fb:dd:7b:2a:36:ab:07:96:6d:0f:f3:c4:5a:58: 40:c9:b7:b4:0f:8c:43:b2:13:2e:43:74:33:b6:a3:1d:6f:88: 0f:93:b8:4c:b2:fc:f0:95:01:f3:cf:78:a5:f5:d9:86:1f:29: ae:48:9d:90:93:ec:f9:a1:37:db:6e:ba:46:f3:b4:e1:e0:1b: 86:b1:16:bb:6c:5f:f6:82:f8:d4:d6:e9:ee:72:65:a7:10:70: a8:0e:1b:18:78:04:8a:96:8d:cf:a8:a2:d6:a3:6c:b2:79:70: 24:b5:7d:d0:f2:bc:14:57:24:91:59:97:a3:db:71:d0:68:36: da:49:3d:5b:4e:11:b4:48:05:2c:d9:8b:ac:81:ca:3e:8c:54: ab:d1:33:84:83:a9:36:58:32:9f:f1:8c:27:bc:ac:9c:bd:43: da:86:43:75:6d:46:1e:e3:25:ac:2a:23:f0:a4:1e:1c:71:01: c8:7b:be:b8:2c:59:31:40:8a:bb:c9:eb:1a:36:00:85:c6:9a: 61:f9:b1:92 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8/rUCdRp1ZcO8PT4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDlhMmZmZGQtZjFiNy00MzY5LTlhNGItY2Y5YzE0OWI2 OTZjMB4XDTI2MDkyMTEzMDAxMloXDTI2MTIyMDE0MDAxMlowLzEtMCsGA1UEAxMk MDBmOGM4YTEtNmU2MC00MDBhLTlkNWEtMDg0NzQyOTljMzg4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA08ASFJWg1z5wrfyiIBhsHrZARKHcYsa9ROQy 9yNykEFPrZTztecuhCxoHJdv2o73R/m4xcGct3S0OosjY+huuhhI1JHUMAHJH+gF INCxrsfYbOFsKvegVsCW4mlW5Qf8HE6uBpWLDQ+zmzmn283/92fgFbeLRdo+n9qk htGZ4tGmpo2i0BibY1qos8fihSMlygF36+k+RpOXCa2+9wImgZnABaXAi1WlgrJJ uIxOIjdXt1j4J0L+GzZLUZUWp+n/mcuPzCHVRxsc/iSe8cJTo5XLvRv8XIyBMRjh n98QIo4MkZlzzyEJlxZk38AIPznS8qUnbbVoyckU8ItZbkNJYwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK168K70dF++yVX8qDfReL0BOiTnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8wOWEy ZmZkZC1mMWI3LTQzNjktOWE0Yi1jZjljMTQ5YjY5NmMvODZmZWNlNjctMjBiOC0z OTg2LTg4MDMtM2Q3YWM4MTM4MTg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMDlhMmZmZGQtZjFiNy00MzY5LTlh NGItY2Y5YzE0OWI2OTZjLzA5YTJmZmRkLWYxYjctNDM2OS05YTRiLWNmOWMxNDli Njk2Yy5jcmwwHwYDVR0jBBgwFoAU7wP1k8M/HWcQBv5mpjAn0wIi8Y4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8wOWEyZmZkZC1mMWI3LTQzNjktOWE0Yi1jZjlj MTQ5YjY5NmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDjucYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABgVd7AMwsNagU2CLH1Y7SDN40S7+/XgB0WZWfovXpQHUh12crWu9TCh B6XvOio62SnUre3xnpMTYTr73XsqNqsHlm0P88RaWEDJt7QPjEOyEy5DdDO2ox1v iA+TuEyy/PCVAfPPeKX12YYfKa5InZCT7PmhN9tuukbztOHgG4axFrtsX/aC+NTW 6e5yZacQcKgOGxh4BIqWjc+ootajbLJ5cCS1fdDyvBRXJJFZl6PbcdBoNtpJPVtO EbRIBSzZi6yByj6MVKvRM4SDqTZYMp/xjCe8rJy9Q9qGQ3VtRh7jJawqI/CkHhxx Ach7vrgsWTFAirvJ6xo2AIXGmmH5sZI= -----END CERTIFICATE-----Generated at Thu Oct 8 12:27:16 2026 by rpki-client