$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689/ca67c6ed-51d5-3568-801d-7fd9c913f8bf.roa File: ca67c6ed-51d5-3568-801d-7fd9c913f8bf.roa (raw, json) Hash identifier: weWVgri8GLIjo7CdWvrR4vNAREPMwO2KyL5IMS9lMEo= Subject key identifier: AE:DD:23:60:42:34:6A:05:08:9B:5C:58:E5:1B:DB:8E:7E:B1:96:4D Certificate issuer: /CN=213412d0-2e00-4f54-95bc-e72555790689 Certificate serial: 010D0C9F4328584F49893F18ADDEF78EB01F2D80 Authority key identifier: D1:AE:CA:03:6C:E1:D8:05:B4:04:FF:73:32:CD:40:80:F9:A4:E0:82 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689/ca67c6ed-51d5-3568-801d-7fd9c913f8bf.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 40509 IP address blocks: 172.86.144.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689/213412d0-2e00-4f54-95bc-e72555790689.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689/213412d0-2e00-4f54-95bc-e72555790689.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:89:3f:18:ad:de:f7:8e:b0:1f:2d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=213412d0-2e00-4f54-95bc-e72555790689 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=27fff1de-a617-429f-907d-db309374a7b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:56:c2:14:70:64:a6:2a:a6:f7:4a:dd:85:fb: 09:97:4d:52:31:a0:de:c6:fc:a4:50:6c:98:6b:ba: 4a:f8:3e:09:cd:a3:f5:61:e1:ec:e1:bc:cd:e4:f4: 07:db:3b:fa:dc:a0:1a:12:71:5d:86:55:e3:ba:32: f3:0b:75:22:d6:8e:3c:91:da:a7:a7:16:8a:2f:be: 60:45:7d:15:ca:b7:13:cf:e3:21:a8:3a:86:71:a1: ee:d9:d3:eb:6c:17:4b:35:1f:bc:04:e5:bb:8c:f3: 35:0e:6a:72:4f:e6:01:bc:f0:ea:02:2d:f0:37:6f: 71:ab:02:7c:69:eb:69:9e:61:2e:6d:56:a0:78:46: bc:c9:ed:8a:fb:86:51:70:5d:ef:4e:0c:49:f3:1e: 95:87:c9:94:0c:77:ea:ca:74:ea:98:4a:fa:82:83: d4:b7:37:97:b1:b3:9a:2a:2a:7d:33:b3:bb:10:90: 48:c5:09:ce:96:11:8a:d1:75:0e:55:a1:55:c1:31: a7:32:f2:2b:ea:8e:15:2d:03:2f:f8:de:55:c2:6a: 64:d4:9d:78:b5:f8:04:cb:7b:de:79:c0:9d:ae:0d: c5:db:91:9a:f8:a8:ee:de:bb:d7:e4:d4:67:98:5a: 9b:aa:1b:21:cb:e2:52:38:3a:83:2e:0b:eb:3e:07: de:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:DD:23:60:42:34:6A:05:08:9B:5C:58:E5:1B:DB:8E:7E:B1:96:4D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689/ca67c6ed-51d5-3568-801d-7fd9c913f8bf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689/213412d0-2e00-4f54-95bc-e72555790689.crl X509v3 Authority Key Identifier: keyid:D1:AE:CA:03:6C:E1:D8:05:B4:04:FF:73:32:CD:40:80:F9:A4:E0:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689.cer sbgp-ipAddrBlock: critical IPv4: 172.86.144.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:7b:1f:e7:aa:86:99:ad:29:0f:dd:6c:ab:cd:cc:a1:7e:d9: 01:61:21:b5:ab:52:26:e2:16:d7:82:b5:37:2c:d9:c4:75:16: dc:2d:4b:9c:ca:36:96:b9:c1:bb:ce:ab:00:d6:ef:05:26:80: af:19:09:8c:3d:12:0d:a4:82:c5:e4:33:0e:39:b9:ed:ab:0e: eb:de:cc:4b:92:fb:96:ea:c3:13:5a:4b:79:bb:e3:4d:58:46: ea:a6:ef:66:7b:06:0c:92:8d:ed:09:2b:26:8c:de:42:c8:2d: 26:3d:d8:86:77:15:fa:54:76:41:c2:3a:dc:d1:d4:a4:47:77: e1:83:dd:0d:2d:ab:ae:39:b6:c5:f8:74:31:7f:db:34:a8:67: de:c7:7c:2a:2c:9d:17:05:dd:fc:20:70:4f:03:f5:71:c5:fa: 47:c6:7d:39:e4:d5:34:02:39:e4:bc:c4:f7:4f:32:7d:ea:88: 0b:14:d2:48:21:21:5a:5f:e7:09:d0:75:52:a0:a8:e2:fd:d2: c0:56:14:f3:a4:ea:6b:98:ee:ac:89:ed:be:5f:81:1a:5c:ef: 77:18:52:b0:c1:31:c6:e6:dd:2b:c2:fa:d5:19:1a:86:cc:a2: 80:ed:b4:ca:9c:1d:d1:c8:01:30:47:56:c5:a8:bd:09:fc:97: 71:d0:a7:cc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JiT8Yrd73jrAfLYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjEzNDEyZDAtMmUwMC00ZjU0LTk1YmMtZTcyNTU1Nzkw Njg5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MjdmZmYxZGUtYTYxNy00MjlmLTkwN2QtZGIzMDkzNzRhN2I5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg1bCFHBkpiqm90rdhfsJl01SMaDexvykUGyY a7pK+D4JzaP1YeHs4bzN5PQH2zv63KAaEnFdhlXjujLzC3Ui1o48kdqnpxaKL75g RX0VyrcTz+MhqDqGcaHu2dPrbBdLNR+8BOW7jPM1DmpyT+YBvPDqAi3wN29xqwJ8 aetpnmEubVageEa8ye2K+4ZRcF3vTgxJ8x6Vh8mUDHfqynTqmEr6goPUtzeXsbOa Kip9M7O7EJBIxQnOlhGK0XUOVaFVwTGnMvIr6o4VLQMv+N5Vwmpk1J14tfgEy3ve ecCdrg3F25Ga+Kju3rvX5NRnmFqbqhshy+JSODqDLgvrPgfefQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK7dI2BCNGoFCJtcWOUb245+sZZNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8yMTM0 MTJkMC0yZTAwLTRmNTQtOTViYy1lNzI1NTU3OTA2ODkvY2E2N2M2ZWQtNTFkNS0z NTY4LTgwMWQtN2ZkOWM5MTNmOGJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMjEzNDEyZDAtMmUwMC00ZjU0LTk1 YmMtZTcyNTU1NzkwNjg5LzIxMzQxMmQwLTJlMDAtNGY1NC05NWJjLWU3MjU1NTc5 MDY4OS5jcmwwHwYDVR0jBBgwFoAU0a7KA2zh2AW0BP9zMs1AgPmk4IIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8yMTM0MTJkMC0yZTAwLTRmNTQtOTViYy1lNzI1 NTU3OTA2ODkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrFaQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB57H+eqhpmtKQ/dbKvNzKF+2QFhIbWrUibiFteCtTcs2cR1FtwtS5zK Npa5wbvOqwDW7wUmgK8ZCYw9Eg2kgsXkMw45ue2rDuvezEuS+5bqwxNaS3m7401Y Ruqm72Z7BgySje0JKyaM3kLILSY92IZ3FfpUdkHCOtzR1KRHd+GD3Q0tq645tsX4 dDF/2zSoZ97HfCosnRcF3fwgcE8D9XHF+kfGfTnk1TQCOeS8xPdPMn3qiAsU0kgh IVpf5wnQdVKgqOL90sBWFPOk6muY7qyJ7b5fgRpc73cYUrDBMcbm3SvC+tUZGobM ooDttMqcHdHIATBHVsWovQn8l3HQp8w= -----END CERTIFICATE-----Generated at Sun Oct 11 14:35:06 2026 by rpki-client