$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/86ea891f-33c3-3e39-a739-97d864a3c250.roa File: 86ea891f-33c3-3e39-a739-97d864a3c250.roa (raw, json) Hash identifier: BEhqqlm9YE9RH8xkkmT7etz2WdcVDJVJ9zp0NKDYUyc= Subject key identifier: 18:E4:1F:46:B4:21:38:30:46:B5:72:7F:84:0F:4C:69:C1:AF:4E:90 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584F9BCE04583C417EFD753A9D00 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/86ea891f-33c3-3e39-a739-97d864a3c250.roa Signing time: Sat 24 Oct 2026 13:00:12 +0000 ROA not before: Sat 24 Oct 2026 13:00:12 +0000 ROA not after: Fri 22 Jan 2027 14:00:12 +0000 asID: 272299 IP address blocks: 209.61.32.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 28 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:9b:ce:04:58:3c:41:7e:fd:75:3a:9d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Oct 24 13:00:12 2026 GMT Not After : Jan 22 14:00:12 2027 GMT Subject: CN=a834b981-c85a-47be-966a-4bb5cecbcfd9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:16:7b:66:05:72:9a:f5:08:d5:a3:e2:1c:22: d8:66:26:95:a8:df:73:11:39:ba:6d:19:20:9a:a3: ca:b7:c2:fc:4c:d0:72:29:ac:a7:71:6d:25:37:23: 9d:f8:68:15:af:00:95:c9:75:3d:4e:aa:0b:6c:33: 57:13:e9:50:c0:cf:e4:58:96:e9:d2:08:36:f4:c6: 02:fb:05:56:3e:8e:22:d1:91:8a:e8:40:20:f5:97: 18:3c:68:f7:41:d5:a3:0c:65:c6:da:bd:49:ed:77: 01:a5:64:a8:f9:f2:50:27:ea:27:9a:f2:e7:c1:73: 0a:2d:b0:85:92:b7:d9:9f:e7:7a:61:80:7d:31:10: b8:c6:9b:89:d3:44:2e:a0:5c:95:fe:7a:98:0f:18: 7d:28:cb:b5:ff:f2:82:47:29:da:2b:02:0a:ea:5c: 91:01:6e:9b:0b:5e:6c:68:e6:37:49:1e:c8:81:84: 43:ac:df:da:5e:a3:b0:e1:72:53:04:76:14:87:f1: f3:7a:e9:ed:aa:59:c1:ac:34:4e:08:63:e3:73:72: c3:c1:e6:d0:3e:49:a7:b8:da:97:58:a2:43:8e:b6: 4c:c6:55:00:46:c3:28:fd:03:3f:ad:cc:61:73:5b: 19:09:8b:91:22:38:f3:9b:38:88:c3:15:83:f0:98: c0:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:E4:1F:46:B4:21:38:30:46:B5:72:7F:84:0F:4C:69:C1:AF:4E:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/86ea891f-33c3-3e39-a739-97d864a3c250.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 209.61.32.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:d8:22:db:dd:1e:b8:8d:81:09:de:7c:e8:52:4e:78:72:1c: 3a:69:5e:e8:81:9f:6b:a8:df:fa:cd:90:b4:1a:ab:cc:35:cb: 18:c3:f1:11:7b:07:d3:17:99:89:77:e6:e3:61:c1:65:31:85: fe:ce:d1:72:6d:6c:cb:a7:0f:e3:ce:03:72:2d:1e:f4:20:79: 1a:c3:c6:07:39:1a:09:a4:f4:0c:0a:6c:90:e9:fe:62:70:23: 4c:ec:5b:e4:57:ad:d4:6b:4d:10:71:6d:5c:4d:b7:3e:af:83: 72:10:38:c4:ed:41:1d:27:57:b3:e1:64:5b:ee:5c:ce:a8:28: ad:8a:04:4c:6a:8f:1a:45:df:63:d6:94:de:ce:5d:5b:c1:b5: 8c:ff:b6:5a:cc:68:a5:f3:21:ef:22:64:0f:21:60:4e:af:aa: 43:d6:62:65:56:d1:f9:96:5e:46:19:72:fe:28:41:90:fb:91: df:d7:be:ad:11:bf:32:a9:39:6f:4b:01:7a:a9:e7:3f:13:4f: 59:d9:9b:c4:62:c6:7a:33:4f:85:29:20:06:54:a9:5c:72:1a: ba:0e:eb:c0:82:aa:6c:bc:36:17:e9:a7:03:45:c5:f5:3a:04: d1:1a:d0:2f:a8:78:0f:00:bc:b0:80:0d:6e:9e:d4:5b:36:c1: 92:ec:a7:be -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+bzgRYPEF+/XU6nQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MTAyNDEzMDAxMloXDTI3MDEyMjE0MDAxMlowLzEtMCsGA1UEAxMk YTgzNGI5ODEtYzg1YS00N2JlLTk2NmEtNGJiNWNlY2JjZmQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjxZ7ZgVymvUI1aPiHCLYZiaVqN9zETm6bRkg mqPKt8L8TNByKayncW0lNyOd+GgVrwCVyXU9TqoLbDNXE+lQwM/kWJbp0gg29MYC +wVWPo4i0ZGK6EAg9ZcYPGj3QdWjDGXG2r1J7XcBpWSo+fJQJ+onmvLnwXMKLbCF krfZn+d6YYB9MRC4xpuJ00QuoFyV/nqYDxh9KMu1//KCRynaKwIK6lyRAW6bC15s aOY3SR7IgYRDrN/aXqOw4XJTBHYUh/HzeuntqlnBrDROCGPjc3LDwebQPkmnuNqX WKJDjrZMxlUARsMo/QM/rcxhc1sZCYuRIjjzmziIwxWD8JjAWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBjkH0a0ITgwRrVyf4QPTGnBr06QMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvODZlYTg5MWYtMzNjMy0z ZTM5LWE3MzktOTdkODY0YTNjMjUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0T0gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHLYItvdHriNgQnefOhSTnhyHDppXuiBn2uo3/rNkLQaq8w1yxjD8RF7 B9MXmYl35uNhwWUxhf7O0XJtbMunD+POA3ItHvQgeRrDxgc5Ggmk9AwKbJDp/mJw I0zsW+RXrdRrTRBxbVxNtz6vg3IQOMTtQR0nV7PhZFvuXM6oKK2KBExqjxpF32PW lN7OXVvBtYz/tlrMaKXzIe8iZA8hYE6vqkPWYmVW0fmWXkYZcv4oQZD7kd/Xvq0R vzKpOW9LAXqp5z8TT1nZm8RixnozT4UpIAZUqVxyGroO68CCqmy8NhfppwNFxfU6 BNEa0C+oeA8AvLCADW6e1Fs2wZLsp74= -----END CERTIFICATE-----Generated at Tue Oct 27 15:17:38 2026 by rpki-client