$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/86cd88aa-b3dd-4226-a7ab-c41221343e0b/af66c47a-c5a5-3724-99eb-86cfba93b731.roa File: af66c47a-c5a5-3724-99eb-86cfba93b731.roa (raw, json) Hash identifier: T1u1LYMMcgWdiStQPBsDwlxkr9n1jjpJBO1970IVCuw= Subject key identifier: 6F:36:DC:E6:F6:48:D2:CF:E6:4A:C0:2D:E6:E8:45:20:60:14:94:B6 Certificate issuer: /CN=86cd88aa-b3dd-4226-a7ab-c41221343e0b Certificate serial: 010D0C9F4328584F6DBD699FE0E815D1F9D3AA80 Authority key identifier: 35:92:21:4D:14:54:D2:1F:CB:15:7D:07:31:D6:58:71:85:56:D5:85 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/86cd88aa-b3dd-4226-a7ab-c41221343e0b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/86cd88aa-b3dd-4226-a7ab-c41221343e0b/af66c47a-c5a5-3724-99eb-86cfba93b731.roa Signing time: Thu 08 Oct 2026 01:00:11 +0000 ROA not before: Thu 08 Oct 2026 01:00:11 +0000 ROA not after: Wed 06 Jan 2027 02:00:11 +0000 asID: 40111 IP address blocks: 208.71.232.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/86cd88aa-b3dd-4226-a7ab-c41221343e0b/86cd88aa-b3dd-4226-a7ab-c41221343e0b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/86cd88aa-b3dd-4226-a7ab-c41221343e0b/86cd88aa-b3dd-4226-a7ab-c41221343e0b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/86cd88aa-b3dd-4226-a7ab-c41221343e0b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:6d:bd:69:9f:e0:e8:15:d1:f9:d3:aa:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86cd88aa-b3dd-4226-a7ab-c41221343e0b Validity Not Before: Oct 8 01:00:11 2026 GMT Not After : Jan 6 02:00:11 2027 GMT Subject: CN=0a135201-3953-45c7-82c9-885d0ce2097f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:ba:3b:a5:b4:07:4f:39:e0:bb:6f:c0:cb:b0: 7f:e5:b7:79:bc:88:a1:f9:66:02:45:43:bf:57:fa: 3c:b1:84:cf:1c:01:94:96:37:b8:b4:8a:98:53:08: 9b:0d:ca:22:35:5d:8c:27:e8:6f:45:08:04:cb:f2: 3c:23:7c:63:93:d6:d7:23:c4:d6:65:0e:81:ab:30: ae:f6:4a:de:49:9f:ff:ab:37:48:2d:1c:8d:c7:56: 62:ce:8c:e7:32:bb:20:ec:61:32:88:52:9d:ba:02: da:33:15:9d:71:9a:e8:26:39:08:d3:da:31:2d:58: 5b:b7:be:66:e7:38:7d:4e:08:ff:71:77:2d:61:47: 16:73:11:92:a1:ba:e1:4d:27:4a:55:2e:f6:b5:60: c6:fd:33:c9:b0:ad:7d:57:2e:a2:92:34:e7:a2:b0: d1:c6:ed:ac:d6:e5:b7:e6:6b:0d:73:85:b4:9b:dd: cd:01:d5:d1:3f:53:86:cc:da:3a:3c:1e:5d:1e:16: 7c:a2:4f:f4:18:30:2f:51:e2:b1:91:5a:71:99:3c: c1:b5:3d:76:3e:ef:81:a7:e0:cf:6c:a7:f5:37:e4: 1e:6f:ac:d9:46:96:db:f8:34:24:95:8c:ca:70:ec: 91:aa:8a:3f:70:a0:b0:6d:54:67:e1:c3:a9:6e:09: 89:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:36:DC:E6:F6:48:D2:CF:E6:4A:C0:2D:E6:E8:45:20:60:14:94:B6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/86cd88aa-b3dd-4226-a7ab-c41221343e0b/af66c47a-c5a5-3724-99eb-86cfba93b731.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/86cd88aa-b3dd-4226-a7ab-c41221343e0b/86cd88aa-b3dd-4226-a7ab-c41221343e0b.crl X509v3 Authority Key Identifier: keyid:35:92:21:4D:14:54:D2:1F:CB:15:7D:07:31:D6:58:71:85:56:D5:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/86cd88aa-b3dd-4226-a7ab-c41221343e0b.cer sbgp-ipAddrBlock: critical IPv4: 208.71.232.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:9d:17:74:69:9b:d2:f4:64:18:15:59:2d:6f:92:f3:34:d8: 32:c1:3c:04:ea:f3:7e:60:d8:a2:c0:73:b4:0d:07:1b:fb:3e: 8f:df:95:94:2b:ab:69:27:02:a7:45:17:40:b9:ee:c7:e1:91: 2f:3e:23:f2:5c:e0:ee:7a:7a:7e:a8:25:c8:9c:dc:08:51:a4: 30:d3:3f:3f:a8:e7:80:61:15:9b:a4:7d:7d:34:c8:13:55:b1: ae:a8:42:55:f3:0c:8b:60:55:b9:49:fe:83:7e:99:26:b3:b3: 4f:00:0d:e3:ea:cf:c7:e8:48:35:39:e1:fb:d3:52:b5:c9:ce: 90:5c:1a:a4:ea:d9:b2:98:1b:d9:eb:06:07:eb:bc:70:fe:b4: 77:c0:cc:bc:9f:c2:64:81:d5:4f:a6:65:b2:c4:c0:b0:94:83: 98:01:10:d8:d8:1a:44:05:94:32:3f:64:0b:07:3a:a6:2e:81: e5:c6:34:e3:ce:47:3a:de:3b:4c:63:7e:00:0d:d0:8e:7a:e9: 86:f3:d2:10:f0:c8:13:80:48:94:97:1c:dc:f9:57:12:f7:e1: b2:fc:ba:ab:e9:05:57:e5:28:fd:6b:eb:40:27:80:70:a4:5f: 4c:55:0c:eb:66:66:06:8a:26:0b:97:2d:9a:5d:3e:a6:4f:3c: b7:06:da:99 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9tvWmf4OgV0fnTqoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODZjZDg4YWEtYjNkZC00MjI2LWE3YWItYzQxMjIxMzQz ZTBiMB4XDTI2MTAwODAxMDAxMVoXDTI3MDEwNjAyMDAxMVowLzEtMCsGA1UEAxMk MGExMzUyMDEtMzk1My00NWM3LTgyYzktODg1ZDBjZTIwOTdmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmLo7pbQHTzngu2/Ay7B/5bd5vIih+WYCRUO/ V/o8sYTPHAGUlje4tIqYUwibDcoiNV2MJ+hvRQgEy/I8I3xjk9bXI8TWZQ6BqzCu 9kreSZ//qzdILRyNx1ZizoznMrsg7GEyiFKdugLaMxWdcZroJjkI09oxLVhbt75m 5zh9Tgj/cXctYUcWcxGSobrhTSdKVS72tWDG/TPJsK19Vy6ikjTnorDRxu2s1uW3 5msNc4W0m93NAdXRP1OGzNo6PB5dHhZ8ok/0GDAvUeKxkVpxmTzBtT12Pu+Bp+DP bKf1N+Qeb6zZRpbb+DQklYzKcOyRqoo/cKCwbVRn4cOpbgmJIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG823Ob2SNLP5krALeboRSBgFJS2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS84NmNk ODhhYS1iM2RkLTQyMjYtYTdhYi1jNDEyMjEzNDNlMGIvYWY2NmM0N2EtYzVhNS0z NzI0LTk5ZWItODZjZmJhOTNiNzMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvODZjZDg4YWEtYjNkZC00MjI2LWE3 YWItYzQxMjIxMzQzZTBiLzg2Y2Q4OGFhLWIzZGQtNDIyNi1hN2FiLWM0MTIyMTM0 M2UwYi5jcmwwHwYDVR0jBBgwFoAUNZIhTRRU0h/LFX0HMdZYcYVW1YUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw ZS1hZTdkLWU2Y2IxMGFmYTEyNS84NmNkODhhYS1iM2RkLTQyMjYtYTdhYi1jNDEy MjEzNDNlMGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0EfoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACWdF3Rpm9L0ZBgVWS1vkvM02DLBPATq835g2KLAc7QNBxv7Po/flZQr q2knAqdFF0C57sfhkS8+I/Jc4O56en6oJcic3AhRpDDTPz+o54BhFZukfX00yBNV sa6oQlXzDItgVblJ/oN+mSazs08ADePqz8foSDU54fvTUrXJzpBcGqTq2bKYG9nr BgfrvHD+tHfAzLyfwmSB1U+mZbLEwLCUg5gBENjYGkQFlDI/ZAsHOqYugeXGNOPO RzreO0xjfgAN0I566Ybz0hDwyBOASJSXHNz5VxL34bL8uqvpBVflKP1r60AngHCk X0xVDOtmZgaKJguXLZpdPqZPPLcG2pk= -----END CERTIFICATE-----Generated at Tue Oct 13 04:30:49 2026 by rpki-client