$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689/ca67c6ed-51d5-3568-801d-7fd9c913f8bf.roa File: ca67c6ed-51d5-3568-801d-7fd9c913f8bf.roa (raw, json) Hash identifier: 4LuUGrA7RbHrsQqQUjpyrpoReIqCLt4yZtDJjRbfrYc= Subject key identifier: 7B:0C:D2:24:68:14:87:4A:D5:85:69:1F:1D:7B:D0:02:0A:F1:96:2E Certificate issuer: /CN=213412d0-2e00-4f54-95bc-e72555790689 Certificate serial: 010D0C9F4328584DDE87F8E2C89437BBDFA86298 Authority key identifier: D1:AE:CA:03:6C:E1:D8:05:B4:04:FF:73:32:CD:40:80:F9:A4:E0:82 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689/ca67c6ed-51d5-3568-801d-7fd9c913f8bf.roa Signing time: Mon 18 May 2026 01:00:24 +0000 ROA not before: Mon 18 May 2026 01:00:24 +0000 ROA not after: Sun 16 Aug 2026 01:00:24 +0000 asID: 40509 IP address blocks: 172.86.144.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689/213412d0-2e00-4f54-95bc-e72555790689.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689/213412d0-2e00-4f54-95bc-e72555790689.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 May 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:de:87:f8:e2:c8:94:37:bb:df:a8:62:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=213412d0-2e00-4f54-95bc-e72555790689 Validity Not Before: May 18 01:00:24 2026 GMT Not After : Aug 16 01:00:24 2026 GMT Subject: CN=f7e4edfb-0bc2-4659-90a4-6449ce4cc279 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:fe:05:ce:5c:f4:15:13:d6:64:a0:0e:15:36: 9c:5b:c4:1c:7b:9c:c5:92:a5:4f:ad:c1:dd:69:ae: b0:4d:34:4f:a8:59:c8:80:96:17:23:4b:ae:d1:83: e1:a4:b0:1b:92:30:53:d0:d9:fd:0d:1f:67:36:f4: 9f:95:c7:8a:9a:c3:e4:da:a7:b0:44:39:f1:d0:88: a6:eb:2f:3f:98:c8:cd:6a:eb:f4:58:da:86:1e:0b: 72:6d:30:06:37:e0:bb:4b:e4:6b:9d:a6:ac:e8:e6: 84:07:4c:4c:20:8a:68:7b:79:f4:65:5d:08:70:61: b5:24:52:e8:59:a0:88:95:e3:f8:dd:40:96:15:81: 10:8f:fc:7e:a0:1e:a2:63:b8:67:6b:af:85:f9:39: 93:44:0d:67:ca:6a:5f:e2:9f:7c:2d:0b:72:96:bb: 05:34:8d:f7:68:6f:dd:14:33:95:fd:84:be:69:33: 9e:53:0b:4d:dd:d0:a3:e1:34:99:0b:57:f1:c0:c6: 14:d1:a1:51:9b:2c:0a:93:54:0d:c7:03:b9:4a:d2: 7a:aa:3a:0a:8a:94:9b:cd:b8:2a:a3:19:f5:85:3b: f4:60:94:14:28:a9:f0:9e:a8:62:4b:12:4d:b5:f1: a3:82:9c:9a:ff:e4:aa:ff:c7:aa:bc:02:e4:63:e8: 2a:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:0C:D2:24:68:14:87:4A:D5:85:69:1F:1D:7B:D0:02:0A:F1:96:2E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689/ca67c6ed-51d5-3568-801d-7fd9c913f8bf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689/213412d0-2e00-4f54-95bc-e72555790689.crl X509v3 Authority Key Identifier: keyid:D1:AE:CA:03:6C:E1:D8:05:B4:04:FF:73:32:CD:40:80:F9:A4:E0:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689.cer sbgp-ipAddrBlock: critical IPv4: 172.86.144.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:71:d8:6c:10:5b:9a:da:ab:bf:97:39:3f:5b:b9:05:b6:4b: 25:99:d9:67:b3:64:3d:68:c1:f3:8a:56:fd:67:d3:6b:3c:02: 9a:bf:bd:62:24:38:92:94:42:f8:03:3c:9f:c8:50:1f:a6:d9: 78:e8:26:90:b5:d4:83:8d:0d:95:de:24:10:50:72:35:be:60: 66:c0:f2:5b:b2:3e:40:80:0f:62:8e:a6:3c:1f:b6:7d:02:ab: 32:eb:ab:64:a8:9d:d9:8c:f7:3f:7a:93:ad:e6:7b:3c:d2:ce: fe:86:b2:e4:4a:32:f8:e9:c7:8c:dd:6e:83:fc:4d:e5:79:d6: 3b:14:38:9b:cb:9e:38:2f:8b:cf:e6:0e:25:70:2c:44:7d:01: d3:17:c7:0a:d0:14:b3:4e:46:a2:0e:5e:2e:e5:3d:c6:a0:f9: 5b:69:53:71:4f:4f:cd:df:ef:ba:be:03:b8:9a:2f:50:2d:ae: 4c:09:9d:9e:92:eb:e4:50:06:d5:91:d8:0c:71:c8:da:ac:1c: 38:1b:ec:52:7a:2c:19:0d:d9:0e:fd:08:78:b6:4a:65:06:04: 9a:cf:f1:50:dc:0c:b7:b5:75:17:71:9f:d4:fb:94:de:a5:c9: 4c:52:00:e5:aa:ed:14:50:15:20:14:5b:d2:11:aa:66:4f:6a: ef:f3:a2:d8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3eh/jiyJQ3u9+oYpgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjEzNDEyZDAtMmUwMC00ZjU0LTk1YmMtZTcyNTU1Nzkw Njg5MB4XDTI2MDUxODAxMDAyNFoXDTI2MDgxNjAxMDAyNFowLzEtMCsGA1UEAxMk ZjdlNGVkZmItMGJjMi00NjU5LTkwYTQtNjQ0OWNlNGNjMjc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw/4Fzlz0FRPWZKAOFTacW8Qce5zFkqVPrcHd aa6wTTRPqFnIgJYXI0uu0YPhpLAbkjBT0Nn9DR9nNvSflceKmsPk2qewRDnx0Iim 6y8/mMjNauv0WNqGHgtybTAGN+C7S+Rrnaas6OaEB0xMIIpoe3n0ZV0IcGG1JFLo WaCIleP43UCWFYEQj/x+oB6iY7hna6+F+TmTRA1nympf4p98LQtylrsFNI33aG/d FDOV/YS+aTOeUwtN3dCj4TSZC1fxwMYU0aFRmywKk1QNxwO5StJ6qjoKipSbzbgq oxn1hTv0YJQUKKnwnqhiSxJNtfGjgpya/+Sq/8eqvALkY+gqBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHsM0iRoFIdK1YVpHx170AIK8ZYuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8yMTM0 MTJkMC0yZTAwLTRmNTQtOTViYy1lNzI1NTU3OTA2ODkvY2E2N2M2ZWQtNTFkNS0z NTY4LTgwMWQtN2ZkOWM5MTNmOGJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMjEzNDEyZDAtMmUwMC00ZjU0LTk1 YmMtZTcyNTU1NzkwNjg5LzIxMzQxMmQwLTJlMDAtNGY1NC05NWJjLWU3MjU1NTc5 MDY4OS5jcmwwHwYDVR0jBBgwFoAU0a7KA2zh2AW0BP9zMs1AgPmk4IIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8yMTM0MTJkMC0yZTAwLTRmNTQtOTViYy1lNzI1 NTU3OTA2ODkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrFaQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFNx2GwQW5raq7+XOT9buQW2SyWZ2WezZD1owfOKVv1n02s8Apq/vWIk OJKUQvgDPJ/IUB+m2XjoJpC11IONDZXeJBBQcjW+YGbA8luyPkCAD2KOpjwftn0C qzLrq2SondmM9z96k63mezzSzv6GsuRKMvjpx4zdboP8TeV51jsUOJvLnjgvi8/m DiVwLER9AdMXxwrQFLNORqIOXi7lPcag+VtpU3FPT83f77q+A7iaL1AtrkwJnZ6S 6+RQBtWR2AxxyNqsHDgb7FJ6LBkN2Q79CHi2SmUGBJrP8VDcDLe1dRdxn9T7lN6l yUxSAOWq7RRQFSAUW9IRqmZPau/zotg= -----END CERTIFICATE-----Generated at Mon May 25 05:50:00 2026 by rpki-client