$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/86cd88aa-b3dd-4226-a7ab-c41221343e0b/8913fb72-4b70-362e-b2bc-5b03af1cc39e.roa File: 8913fb72-4b70-362e-b2bc-5b03af1cc39e.roa (raw, json) Hash identifier: SGvYE9sdVWlLbC+3gBpYqb9zA980/kgXMx7OYU6XDo4= Subject key identifier: 6D:75:DB:15:05:80:35:68:20:EA:06:4D:4A:10:91:90:EF:DF:6A:83 Certificate issuer: /CN=86cd88aa-b3dd-4226-a7ab-c41221343e0b Certificate serial: 010D0C9F4328584DDE8809FC4A528EE9F51E3E80 Authority key identifier: 35:92:21:4D:14:54:D2:1F:CB:15:7D:07:31:D6:58:71:85:56:D5:85 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/86cd88aa-b3dd-4226-a7ab-c41221343e0b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/86cd88aa-b3dd-4226-a7ab-c41221343e0b/8913fb72-4b70-362e-b2bc-5b03af1cc39e.roa Signing time: Mon 18 May 2026 01:00:24 +0000 ROA not before: Mon 18 May 2026 01:00:24 +0000 ROA not after: Sun 16 Aug 2026 01:00:24 +0000 asID: 40111 IP address blocks: 170.118.248.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/86cd88aa-b3dd-4226-a7ab-c41221343e0b/86cd88aa-b3dd-4226-a7ab-c41221343e0b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/86cd88aa-b3dd-4226-a7ab-c41221343e0b/86cd88aa-b3dd-4226-a7ab-c41221343e0b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/86cd88aa-b3dd-4226-a7ab-c41221343e0b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 04 Jun 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:de:88:09:fc:4a:52:8e:e9:f5:1e:3e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86cd88aa-b3dd-4226-a7ab-c41221343e0b Validity Not Before: May 18 01:00:24 2026 GMT Not After : Aug 16 01:00:24 2026 GMT Subject: CN=c503ddf6-b76f-423b-87b2-5145b77219fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:60:a5:ed:d5:10:a6:71:e3:7c:64:2b:34:7c: 80:81:08:c8:94:5e:6b:90:0b:0d:10:34:c6:a5:30: 60:62:d7:d1:58:d1:54:32:65:5d:75:2b:cf:67:48: 24:77:81:55:6e:27:09:02:0a:11:86:c5:0d:23:4c: 7a:54:92:cd:64:c2:31:95:60:b2:37:9d:48:b0:55: f4:6f:ae:a1:e8:70:46:3e:15:2e:19:a1:60:06:21: 37:76:8b:fb:15:b3:c7:81:ca:a9:3b:d3:25:78:ad: 24:f4:fc:92:04:04:11:cd:24:f7:87:0f:4c:13:f3: fa:79:3e:63:7c:93:80:98:59:15:e5:b7:6c:91:26: 07:6e:ba:6a:4f:38:09:73:7d:90:14:4b:bf:b6:27: 67:05:c4:41:92:83:82:32:bc:23:c0:2e:14:b1:10: b3:6b:fe:24:1a:e7:5a:ba:6f:cb:d0:08:f4:7a:ea: 74:39:55:40:0e:7e:0b:22:9b:f5:2f:08:69:73:aa: d6:e1:fa:1d:01:13:53:8b:dd:35:5d:8e:01:4f:6d: aa:49:67:91:c5:f8:06:7c:16:fe:05:41:63:6b:82: 2f:40:f9:e6:d6:07:ee:6d:69:6e:57:c8:85:12:85: 08:17:ae:f0:e7:98:bd:b5:4f:12:13:82:44:28:8d: 90:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:75:DB:15:05:80:35:68:20:EA:06:4D:4A:10:91:90:EF:DF:6A:83 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/86cd88aa-b3dd-4226-a7ab-c41221343e0b/8913fb72-4b70-362e-b2bc-5b03af1cc39e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/86cd88aa-b3dd-4226-a7ab-c41221343e0b/86cd88aa-b3dd-4226-a7ab-c41221343e0b.crl X509v3 Authority Key Identifier: keyid:35:92:21:4D:14:54:D2:1F:CB:15:7D:07:31:D6:58:71:85:56:D5:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/86cd88aa-b3dd-4226-a7ab-c41221343e0b.cer sbgp-ipAddrBlock: critical IPv4: 170.118.248.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:d0:e8:48:82:9b:ed:11:f9:f5:8a:ed:a9:00:68:1c:b2:3e: b0:25:bc:7e:8f:d0:8b:84:48:3e:7d:b8:91:f6:b8:8a:90:99: ff:d5:f2:5d:94:30:c8:a5:93:1b:b2:f7:7c:61:bc:4c:53:88: 28:33:c5:c6:19:7c:42:fa:06:1d:74:34:44:6d:9d:e1:8a:eb: c4:c9:fb:97:d2:a3:6a:e8:e3:5f:3d:17:6b:35:86:82:23:2f: 3b:40:fe:56:62:37:d7:13:1d:85:65:be:65:6f:6c:7f:02:9b: c4:ea:40:ba:b0:81:57:cd:b4:28:af:fb:48:02:92:fb:51:d8: 42:98:1e:e5:29:3e:9b:eb:27:06:dc:26:66:54:20:a7:f0:dd: 41:bd:be:1a:11:52:83:0d:26:a9:cd:9a:25:3d:1b:6c:15:b0: 1f:48:c1:df:3a:d8:5f:71:42:b6:a4:95:d6:06:e1:ba:c0:fe: fe:e2:e3:45:cc:7a:e2:6f:2b:a4:e7:8b:68:3e:d2:06:b6:d4: b9:8a:cb:6f:1b:50:1f:2e:6c:9b:fd:7f:49:ec:6a:e6:c1:59: e1:bb:26:20:06:9a:06:cb:de:04:03:6d:bb:0e:2a:91:95:57: 77:c3:69:08:fc:4f:0a:b0:db:b8:7a:91:ad:c4:69:4b:c1:7b: 67:8d:db:f6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3eiAn8SlKO6fUePoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODZjZDg4YWEtYjNkZC00MjI2LWE3YWItYzQxMjIxMzQz ZTBiMB4XDTI2MDUxODAxMDAyNFoXDTI2MDgxNjAxMDAyNFowLzEtMCsGA1UEAxMk YzUwM2RkZjYtYjc2Zi00MjNiLTg3YjItNTE0NWI3NzIxOWZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8WCl7dUQpnHjfGQrNHyAgQjIlF5rkAsNEDTG pTBgYtfRWNFUMmVddSvPZ0gkd4FVbicJAgoRhsUNI0x6VJLNZMIxlWCyN51IsFX0 b66h6HBGPhUuGaFgBiE3dov7FbPHgcqpO9MleK0k9PySBAQRzST3hw9ME/P6eT5j fJOAmFkV5bdskSYHbrpqTzgJc32QFEu/tidnBcRBkoOCMrwjwC4UsRCza/4kGuda um/L0Aj0eup0OVVADn4LIpv1Lwhpc6rW4fodARNTi901XY4BT22qSWeRxfgGfBb+ BUFja4IvQPnm1gfubWluV8iFEoUIF67w55i9tU8SE4JEKI2Q+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG112xUFgDVoIOoGTUoQkZDv32qDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS84NmNk ODhhYS1iM2RkLTQyMjYtYTdhYi1jNDEyMjEzNDNlMGIvODkxM2ZiNzItNGI3MC0z NjJlLWIyYmMtNWIwM2FmMWNjMzllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvODZjZDg4YWEtYjNkZC00MjI2LWE3 YWItYzQxMjIxMzQzZTBiLzg2Y2Q4OGFhLWIzZGQtNDIyNi1hN2FiLWM0MTIyMTM0 M2UwYi5jcmwwHwYDVR0jBBgwFoAUNZIhTRRU0h/LFX0HMdZYcYVW1YUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw ZS1hZTdkLWU2Y2IxMGFmYTEyNS84NmNkODhhYS1iM2RkLTQyMjYtYTdhYi1jNDEy MjEzNDNlMGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDqnb4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGDQ6EiCm+0R+fWK7akAaByyPrAlvH6P0IuESD59uJH2uIqQmf/V8l2U MMilkxuy93xhvExTiCgzxcYZfEL6Bh10NERtneGK68TJ+5fSo2ro4189F2s1hoIj LztA/lZiN9cTHYVlvmVvbH8Cm8TqQLqwgVfNtCiv+0gCkvtR2EKYHuUpPpvrJwbc JmZUIKfw3UG9vhoRUoMNJqnNmiU9G2wVsB9Iwd862F9xQrakldYG4brA/v7i40XM euJvK6Tni2g+0ga21LmKy28bUB8ubJv9f0nsaubBWeG7JiAGmgbL3gQDbbsOKpGV V3fDaQj8Twqw27h6ka3EaUvBe2eN2/Y= -----END CERTIFICATE-----Generated at Mon Jun 1 22:01:03 2026 by rpki-client