$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c178d21b-9bf0-4172-9ece-4a4d84fc66e7/86e34e6c-0e06-342b-9c88-f3f080f46e40.roa File: 86e34e6c-0e06-342b-9c88-f3f080f46e40.roa (raw, json) Hash identifier: 1x8SrRfcFxgDFFZP9fnu73Wexr7eug9SdO+bWLSjhiY= Subject key identifier: C0:41:77:03:4B:57:C9:62:E2:72:BC:11:D9:2F:20:D5:4C:08:AC:19 Certificate issuer: /CN=c178d21b-9bf0-4172-9ece-4a4d84fc66e7 Certificate serial: 010D0C9F4328584D3F64D6B7C6B0AB7716234D80 Authority key identifier: 98:1B:22:24:7B:4C:CC:8D:BA:0F:59:A9:01:99:8A:D9:CF:BE:CF:83 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c178d21b-9bf0-4172-9ece-4a4d84fc66e7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c178d21b-9bf0-4172-9ece-4a4d84fc66e7/86e34e6c-0e06-342b-9c88-f3f080f46e40.roa Signing time: Sun 22 Mar 2026 01:00:32 +0000 ROA not before: Sun 22 Mar 2026 01:00:32 +0000 ROA not after: Sat 20 Jun 2026 01:00:32 +0000 asID: 399507 IP address blocks: 91.106.220.0/22 maxlen: 24 204.52.16.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c178d21b-9bf0-4172-9ece-4a4d84fc66e7/c178d21b-9bf0-4172-9ece-4a4d84fc66e7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c178d21b-9bf0-4172-9ece-4a4d84fc66e7/c178d21b-9bf0-4172-9ece-4a4d84fc66e7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c178d21b-9bf0-4172-9ece-4a4d84fc66e7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3f:64:d6:b7:c6:b0:ab:77:16:23:4d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c178d21b-9bf0-4172-9ece-4a4d84fc66e7 Validity Not Before: Mar 22 01:00:32 2026 GMT Not After : Jun 20 01:00:32 2026 GMT Subject: CN=98b75db4-c916-4074-8933-e8bc9c860a27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:ca:91:7c:00:d8:de:f0:8f:3d:51:bc:33:17: 3f:bd:f7:01:b3:33:4f:21:32:ad:46:1b:fb:d5:87: 28:75:1a:20:a4:22:6a:e5:04:c0:cc:24:20:70:a5: 95:0d:2f:0e:40:f0:81:ae:e1:05:59:32:eb:75:5b: 22:42:aa:cc:6f:83:ef:0e:ec:da:b7:2e:a6:db:cc: 63:69:2d:e6:e2:0e:4a:aa:c1:05:fe:04:29:e1:60: a0:0a:fd:c4:86:f0:6d:e3:06:20:e6:93:31:59:95: 60:2d:85:4c:50:57:f3:08:36:8a:af:86:ca:e7:a5: e2:aa:d4:f9:9c:69:0c:0f:77:c5:64:c6:31:8d:72: ec:1c:3d:fe:47:fa:22:20:fe:e2:ab:72:7d:b8:e7: 9e:b5:e0:45:92:19:ce:3d:78:47:db:07:ec:50:90: c6:54:96:56:e2:f6:6e:5c:f6:0a:e5:da:e3:31:14: 56:df:fa:c4:53:cb:f8:2d:2b:42:60:c2:af:4b:eb: c4:e4:fc:dc:8d:3e:7c:be:0b:41:fd:2e:03:91:ec: 46:1b:43:e0:ee:19:0e:8d:14:db:3b:e1:65:a2:c0: 52:d4:9f:5f:7e:7d:10:2c:7f:d0:41:67:a8:53:37: 35:93:37:93:cc:8e:4c:94:50:6b:58:76:76:3d:43: bf:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:41:77:03:4B:57:C9:62:E2:72:BC:11:D9:2F:20:D5:4C:08:AC:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c178d21b-9bf0-4172-9ece-4a4d84fc66e7/86e34e6c-0e06-342b-9c88-f3f080f46e40.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c178d21b-9bf0-4172-9ece-4a4d84fc66e7/c178d21b-9bf0-4172-9ece-4a4d84fc66e7.crl X509v3 Authority Key Identifier: keyid:98:1B:22:24:7B:4C:CC:8D:BA:0F:59:A9:01:99:8A:D9:CF:BE:CF:83 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c178d21b-9bf0-4172-9ece-4a4d84fc66e7.cer sbgp-ipAddrBlock: critical IPv4: 91.106.220.0/22 204.52.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:f1:03:70:af:54:77:18:e3:5f:2d:b2:b5:9e:51:e5:6c:a6: df:3f:43:0a:58:64:55:ab:ac:dc:8f:13:a7:4c:20:7e:2b:db: 1b:79:15:6a:ed:12:b8:7e:85:d2:81:48:ce:02:b9:ab:36:67: 11:99:1f:c9:12:19:5d:85:22:5c:22:08:ae:92:4a:a9:c5:50: 88:79:51:c1:0b:6d:58:51:f2:19:54:c5:2d:fb:29:9f:a3:a1: ef:ac:6f:82:b4:5e:41:89:76:78:2f:36:d9:98:49:0a:f3:01: be:96:a6:2c:ab:7f:78:29:45:37:58:05:c2:27:73:f8:60:01: b0:9e:71:cf:d0:7b:58:75:1c:f5:99:2e:39:ba:3e:e0:bc:c4: a4:ce:b8:bb:7c:5c:86:c2:d6:79:eb:f9:60:5a:86:b0:83:5a: 3f:44:5c:45:da:3f:09:ff:72:7a:df:f0:9b:77:03:00:26:39: b5:02:1b:84:6f:a6:0d:94:3a:b0:d4:73:26:0f:aa:de:3d:37: 50:78:d3:ce:63:59:8c:92:a8:21:0d:f7:62:75:0b:ff:16:ba: ad:07:43:1a:d6:2c:2d:3b:9c:b1:ff:31:a6:75:79:3d:cd:f4: 91:eb:aa:03:bb:10:14:69:b9:06:8c:ab:a6:f2:89:b4:22:31: 7e:a3:2a:a5 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE0/ZNa3xrCrdxYjTYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzE3OGQyMWItOWJmMC00MTcyLTllY2UtNGE0ZDg0ZmM2 NmU3MB4XDTI2MDMyMjAxMDAzMloXDTI2MDYyMDAxMDAzMlowLzEtMCsGA1UEAxMk OThiNzVkYjQtYzkxNi00MDc0LTg5MzMtZThiYzljODYwYTI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr8qRfADY3vCPPVG8Mxc/vfcBszNPITKtRhv7 1YcodRogpCJq5QTAzCQgcKWVDS8OQPCBruEFWTLrdVsiQqrMb4PvDuzaty6m28xj aS3m4g5KqsEF/gQp4WCgCv3EhvBt4wYg5pMxWZVgLYVMUFfzCDaKr4bK56XiqtT5 nGkMD3fFZMYxjXLsHD3+R/oiIP7iq3J9uOeeteBFkhnOPXhH2wfsUJDGVJZW4vZu XPYK5drjMRRW3/rEU8v4LStCYMKvS+vE5PzcjT58vgtB/S4DkexGG0Pg7hkOjRTb O+FlosBS1J9ffn0QLH/QQWeoUzc1kzeTzI5MlFBrWHZ2PUO/pQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFMBBdwNLV8li4nK8EdkvINVMCKwZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jMTc4 ZDIxYi05YmYwLTQxNzItOWVjZS00YTRkODRmYzY2ZTcvODZlMzRlNmMtMGUwNi0z NDJiLTljODgtZjNmMDgwZjQ2ZTQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYzE3OGQyMWItOWJmMC00MTcyLTll Y2UtNGE0ZDg0ZmM2NmU3L2MxNzhkMjFiLTliZjAtNDE3Mi05ZWNlLTRhNGQ4NGZj NjZlNy5jcmwwHwYDVR0jBBgwFoAUmBsiJHtMzI26D1mpAZmK2c++z4MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jMTc4ZDIxYi05YmYwLTQxNzItOWVjZS00YTRk ODRmYzY2ZTcuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCW2rcAwQE zDQQMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAFbxA3CvVHcY418tsrWeUeVspt8/QwpYZFWrrNyPE6dMIH4r 2xt5FWrtErh+hdKBSM4Cuas2ZxGZH8kSGV2FIlwiCK6SSqnFUIh5UcELbVhR8hlU xS37KZ+joe+sb4K0XkGJdngvNtmYSQrzAb6Wpiyrf3gpRTdYBcInc/hgAbCecc/Q e1h1HPWZLjm6PuC8xKTOuLt8XIbC1nnr+WBahrCDWj9EXEXaPwn/cnrf8Jt3AwAm ObUCG4Rvpg2UOrDUcyYPqt49N1B4085jWYySqCEN92J1C/8Wuq0HQxrWLC07nLH/ MaZ1eT3N9JHrqgO7EBRpuQaMq6byibQiMX6jKqU= -----END CERTIFICATE-----Generated at Thu Mar 26 19:30:00 2026 by rpki-client