$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/86cd88aa-b3dd-4226-a7ab-c41221343e0b/af66c47a-c5a5-3724-99eb-86cfba93b731.roa File: af66c47a-c5a5-3724-99eb-86cfba93b731.roa (raw, json) Hash identifier: A5HgL/9gOhj1OO1c106uvt6A++jWsC5gair2tIVR3lk= Subject key identifier: FD:69:D5:4A:C7:51:1E:9F:CF:28:C3:3A:F9:40:F9:3A:DA:27:5E:82 Certificate issuer: /CN=86cd88aa-b3dd-4226-a7ab-c41221343e0b Certificate serial: 010D0C9F4328584ECA8F3583C1572ADF5F095ED9 Authority key identifier: 35:92:21:4D:14:54:D2:1F:CB:15:7D:07:31:D6:58:71:85:56:D5:85 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/86cd88aa-b3dd-4226-a7ab-c41221343e0b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/86cd88aa-b3dd-4226-a7ab-c41221343e0b/af66c47a-c5a5-3724-99eb-86cfba93b731.roa Signing time: Mon 10 Aug 2026 14:10:21 +0000 ROA not before: Mon 10 Aug 2026 14:10:21 +0000 ROA not after: Sun 08 Nov 2026 15:10:21 +0000 asID: 40111 IP address blocks: 208.71.232.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/86cd88aa-b3dd-4226-a7ab-c41221343e0b/86cd88aa-b3dd-4226-a7ab-c41221343e0b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/86cd88aa-b3dd-4226-a7ab-c41221343e0b/86cd88aa-b3dd-4226-a7ab-c41221343e0b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/86cd88aa-b3dd-4226-a7ab-c41221343e0b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 23 Aug 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ca:8f:35:83:c1:57:2a:df:5f:09:5e:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86cd88aa-b3dd-4226-a7ab-c41221343e0b Validity Not Before: Aug 10 14:10:21 2026 GMT Not After : Nov 8 15:10:21 2026 GMT Subject: CN=1d286b2c-fa51-4d13-8c32-26189f773411 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:33:0b:bd:b5:1d:5e:32:be:b9:5b:80:16:83: 24:ff:3b:ed:f2:e3:e3:d0:ab:ed:2d:d8:0c:5b:3b: 10:2a:c3:e1:6f:8a:31:65:fe:d0:03:a5:71:b3:9a: ce:d6:ba:ce:7d:2c:5d:43:57:b5:73:8b:83:30:3e: 5a:1e:c5:ba:94:83:75:5d:3c:4a:2f:60:2c:b6:ad: f6:13:56:8a:d9:0a:6c:12:40:2c:8d:6a:ea:ca:50: dd:32:b7:0d:65:02:f1:6a:68:24:cc:a2:e3:73:4f: 44:f0:27:ea:9a:5f:f2:0f:10:04:c4:bf:4b:89:b4: a0:c3:2c:7a:d3:47:55:34:de:52:ff:2e:49:9f:fe: 22:54:fd:82:cc:28:99:f6:6d:05:ab:5a:0c:77:80: 8e:ab:f0:bc:ad:07:42:f1:05:94:f3:0d:09:0e:d6: 6b:5e:bf:ff:3a:9f:0c:f1:b9:f2:4c:1f:73:38:ee: 2c:c9:8c:d1:93:bd:c7:88:ff:89:e3:28:09:0f:cb: dc:c6:51:fb:f3:ee:39:be:ee:9f:15:da:59:65:94: 2b:db:13:65:26:fa:b4:d0:07:bf:27:b4:55:c9:40: 53:83:82:eb:c1:14:db:82:4c:1b:95:5e:19:78:bf: 9f:a3:bc:d5:51:7f:c2:b8:70:a2:7b:bb:b9:79:da: e3:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:69:D5:4A:C7:51:1E:9F:CF:28:C3:3A:F9:40:F9:3A:DA:27:5E:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/86cd88aa-b3dd-4226-a7ab-c41221343e0b/af66c47a-c5a5-3724-99eb-86cfba93b731.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/86cd88aa-b3dd-4226-a7ab-c41221343e0b/86cd88aa-b3dd-4226-a7ab-c41221343e0b.crl X509v3 Authority Key Identifier: keyid:35:92:21:4D:14:54:D2:1F:CB:15:7D:07:31:D6:58:71:85:56:D5:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/86cd88aa-b3dd-4226-a7ab-c41221343e0b.cer sbgp-ipAddrBlock: critical IPv4: 208.71.232.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:5c:df:5f:ad:98:d4:ce:ef:df:df:76:6c:7c:8f:89:11:27: 16:0c:44:4c:d1:1f:6a:a4:14:80:f1:3f:57:d9:8c:e8:ee:15: 30:6b:23:c8:7e:5d:32:11:74:88:6f:bb:3b:b7:f2:18:23:92: 63:95:40:ac:89:08:a7:85:ab:f2:5d:ed:33:7f:1e:43:df:52: 83:0e:a2:32:7e:3e:e2:32:b2:f5:3d:99:6e:24:97:78:57:74: db:74:33:96:dc:38:d4:f4:76:de:0c:51:62:6f:4b:f7:27:54: a7:f5:af:fb:37:ad:0d:4a:2a:80:99:f0:86:ed:61:4e:db:e5: 84:40:c0:a2:d0:e4:00:00:b1:9e:b1:29:13:05:f0:7e:cc:ed: 17:ad:62:69:76:20:d5:41:9f:86:78:da:88:13:60:96:72:b2: 0e:0e:2a:53:55:63:85:e0:0e:ca:fd:d3:e0:d0:85:65:8a:32: f4:91:e5:d5:6b:e8:69:49:ce:17:d5:8b:23:e6:27:2b:11:8a: d2:86:d2:c6:84:57:2a:7a:56:9a:4d:47:88:a7:09:cd:b6:06: 92:35:89:9f:97:90:78:7d:9e:3a:20:9a:fd:7e:4d:65:17:e2: f2:ca:9a:c4:aa:e3:1a:5e:fa:b6:3f:f9:0b:b6:6d:f9:a7:29: e4:60:a8:67 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7KjzWDwVcq318JXtkwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODZjZDg4YWEtYjNkZC00MjI2LWE3YWItYzQxMjIxMzQz ZTBiMB4XDTI2MDgxMDE0MTAyMVoXDTI2MTEwODE1MTAyMVowLzEtMCsGA1UEAxMk MWQyODZiMmMtZmE1MS00ZDEzLThjMzItMjYxODlmNzczNDExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArTMLvbUdXjK+uVuAFoMk/zvt8uPj0KvtLdgM WzsQKsPhb4oxZf7QA6Vxs5rO1rrOfSxdQ1e1c4uDMD5aHsW6lIN1XTxKL2Astq32 E1aK2QpsEkAsjWrqylDdMrcNZQLxamgkzKLjc09E8Cfqml/yDxAExL9LibSgwyx6 00dVNN5S/y5Jn/4iVP2CzCiZ9m0Fq1oMd4COq/C8rQdC8QWU8w0JDtZrXr//Op8M 8bnyTB9zOO4syYzRk73HiP+J4ygJD8vcxlH78+45vu6fFdpZZZQr2xNlJvq00Ae/ J7RVyUBTg4LrwRTbgkwblV4ZeL+fo7zVUX/CuHCie7u5edrjywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP1p1UrHUR6fzyjDOvlA+TraJ16CMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS84NmNk ODhhYS1iM2RkLTQyMjYtYTdhYi1jNDEyMjEzNDNlMGIvYWY2NmM0N2EtYzVhNS0z NzI0LTk5ZWItODZjZmJhOTNiNzMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvODZjZDg4YWEtYjNkZC00MjI2LWE3 YWItYzQxMjIxMzQzZTBiLzg2Y2Q4OGFhLWIzZGQtNDIyNi1hN2FiLWM0MTIyMTM0 M2UwYi5jcmwwHwYDVR0jBBgwFoAUNZIhTRRU0h/LFX0HMdZYcYVW1YUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw ZS1hZTdkLWU2Y2IxMGFmYTEyNS84NmNkODhhYS1iM2RkLTQyMjYtYTdhYi1jNDEy MjEzNDNlMGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0EfoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEBc31+tmNTO79/fdmx8j4kRJxYMREzRH2qkFIDxP1fZjOjuFTBrI8h+ XTIRdIhvuzu38hgjkmOVQKyJCKeFq/Jd7TN/HkPfUoMOojJ+PuIysvU9mW4kl3hX dNt0M5bcONT0dt4MUWJvS/cnVKf1r/s3rQ1KKoCZ8IbtYU7b5YRAwKLQ5AAAsZ6x KRMF8H7M7RetYml2INVBn4Z42ogTYJZysg4OKlNVY4XgDsr90+DQhWWKMvSR5dVr 6GlJzhfViyPmJysRitKG0saEVyp6VppNR4inCc22BpI1iZ+XkHh9njogmv1+TWUX 4vLKmsSq4xpe+rY/+Qu2bfmnKeRgqGc= -----END CERTIFICATE-----Generated at Fri Aug 21 00:59:56 2026 by rpki-client