$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798/86d1aa82-ca30-364b-9964-c0fddb5b0af7.roa File: 86d1aa82-ca30-364b-9964-c0fddb5b0af7.roa (raw, json) Hash identifier: Vja4zaFkAM1vRkpWc8U963swoz0wDM6kG/d+TUCcvQs= Subject key identifier: 90:29:CD:EB:08:4B:3C:9D:13:17:60:84:54:9D:88:8B:C6:19:7E:0D Certificate issuer: /CN=b84ab52d-915e-4d8a-b37b-496ea49c6798 Certificate serial: 010D0C9F4328584D3F64E262332B674B212F6E80 Authority key identifier: DD:B5:32:EF:53:10:BB:59:DD:81:2B:55:E8:DB:F7:E6:10:03:24:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798/86d1aa82-ca30-364b-9964-c0fddb5b0af7.roa Signing time: Sun 22 Mar 2026 01:00:32 +0000 ROA not before: Sun 22 Mar 2026 01:00:32 +0000 ROA not after: Sat 20 Jun 2026 01:00:32 +0000 asID: 1403 IP address blocks: 104.163.128.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798/b84ab52d-915e-4d8a-b37b-496ea49c6798.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798/b84ab52d-915e-4d8a-b37b-496ea49c6798.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3f:64:e2:62:33:2b:67:4b:21:2f:6e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b84ab52d-915e-4d8a-b37b-496ea49c6798 Validity Not Before: Mar 22 01:00:32 2026 GMT Not After : Jun 20 01:00:32 2026 GMT Subject: CN=7608d5de-2252-4052-af61-12f55be64bac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:52:5c:4a:10:5e:dc:d3:7a:59:35:fd:de:14: 67:f8:8e:12:76:35:7c:ef:34:d1:4b:0a:36:b9:98: ac:66:b0:3e:8a:a3:99:9e:92:44:96:1f:03:90:f9: a4:d8:5d:70:e2:c3:b6:e9:39:bb:54:83:80:12:fb: b4:c0:56:e9:6a:d1:14:77:fc:a3:be:0d:7f:89:ad: 90:a2:48:5e:2b:88:f4:b1:ff:ae:7d:8f:f2:f2:04: 89:f7:ea:3a:60:c9:60:5a:3e:c8:63:f6:60:ee:71: ce:9f:fc:17:82:02:1e:6f:67:70:e5:6b:80:12:14: 98:ee:3a:90:bc:48:4d:6e:bd:69:10:c3:3e:e2:50: 5f:f6:1a:95:8d:52:f0:59:1b:b9:aa:d4:57:99:b9: 30:78:20:03:55:5a:9e:75:fb:ad:12:83:42:5f:b0: c1:ba:73:51:c7:25:c3:4b:78:07:a5:8a:fc:87:c1: 2c:68:34:a7:e2:02:21:66:ed:89:61:2e:e2:48:47: 7f:a2:25:cf:56:e9:e7:90:e1:ea:2a:90:66:f0:36: d6:ca:7e:88:f0:44:28:a1:b0:ae:83:00:d6:2e:ea: 0f:96:fc:30:3c:91:ea:59:e3:7f:e1:8b:f8:05:75: 6e:31:58:52:c6:1f:14:69:95:6d:28:7c:bc:9e:58: 53:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:29:CD:EB:08:4B:3C:9D:13:17:60:84:54:9D:88:8B:C6:19:7E:0D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798/86d1aa82-ca30-364b-9964-c0fddb5b0af7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798/b84ab52d-915e-4d8a-b37b-496ea49c6798.crl X509v3 Authority Key Identifier: keyid:DD:B5:32:EF:53:10:BB:59:DD:81:2B:55:E8:DB:F7:E6:10:03:24:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798.cer sbgp-ipAddrBlock: critical IPv4: 104.163.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:6f:5e:33:50:6d:54:78:1c:9a:c9:37:49:90:41:58:d9:f7: 78:69:41:cd:f7:dd:9d:61:3a:cb:3e:bb:0c:98:0e:66:93:b9: 05:37:fe:24:79:6b:79:61:db:82:ef:7c:1a:8f:0e:37:db:f9: a2:63:6c:6a:99:82:ff:67:8f:83:c3:6d:c8:80:7d:e2:0d:04: c6:68:f2:10:83:e4:ce:84:be:bf:fc:e8:de:ac:8c:f1:6b:38: d7:8c:15:f2:77:97:18:19:c6:59:ff:3e:1d:13:51:0a:7b:c8: c8:c6:a7:9d:fe:b4:58:7f:7e:46:e7:e4:8e:96:34:c4:57:75: 4c:42:31:41:d7:78:00:c8:ae:04:d0:d8:32:21:69:6a:3b:85: b5:ad:af:a8:ea:20:2c:7f:55:ae:41:d5:71:03:78:b0:61:6e: b9:d3:4a:3f:c5:5e:fa:4e:81:2a:11:a7:44:64:8f:57:93:b7: d0:71:a7:83:ec:ea:71:9b:c2:bc:fa:31:57:5f:d0:ca:02:37: f5:0a:a6:4d:af:f0:4c:aa:1c:d7:dc:21:01:36:45:23:b6:05: 54:fa:4d:10:63:e7:6d:52:77:70:37:b1:c8:46:8a:fd:97:97: 71:82:a1:e0:2b:1c:9a:47:76:6c:01:52:67:be:24:72:ba:fa: 8b:9e:6e:27 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0/ZOJiMytnSyEvboAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjg0YWI1MmQtOTE1ZS00ZDhhLWIzN2ItNDk2ZWE0OWM2 Nzk4MB4XDTI2MDMyMjAxMDAzMloXDTI2MDYyMDAxMDAzMlowLzEtMCsGA1UEAxMk NzYwOGQ1ZGUtMjI1Mi00MDUyLWFmNjEtMTJmNTViZTY0YmFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApFJcShBe3NN6WTX93hRn+I4SdjV87zTRSwo2 uZisZrA+iqOZnpJElh8DkPmk2F1w4sO26Tm7VIOAEvu0wFbpatEUd/yjvg1/ia2Q okheK4j0sf+ufY/y8gSJ9+o6YMlgWj7IY/Zg7nHOn/wXggIeb2dw5WuAEhSY7jqQ vEhNbr1pEMM+4lBf9hqVjVLwWRu5qtRXmbkweCADVVqedfutEoNCX7DBunNRxyXD S3gHpYr8h8EsaDSn4gIhZu2JYS7iSEd/oiXPVunnkOHqKpBm8DbWyn6I8EQoobCu gwDWLuoPlvwwPJHqWeN/4Yv4BXVuMVhSxh8UaZVtKHy8nlhThQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJApzesISzydExdghFSdiIvGGX4NMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iODRh YjUyZC05MTVlLTRkOGEtYjM3Yi00OTZlYTQ5YzY3OTgvODZkMWFhODItY2EzMC0z NjRiLTk5NjQtYzBmZGRiNWIwYWY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjg0YWI1MmQtOTE1ZS00ZDhhLWIz N2ItNDk2ZWE0OWM2Nzk4L2I4NGFiNTJkLTkxNWUtNGQ4YS1iMzdiLTQ5NmVhNDlj Njc5OC5jcmwwHwYDVR0jBBgwFoAU3bUy71MQu1ndgStV6Nv35hADJHwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iODRhYjUyZC05MTVlLTRkOGEtYjM3Yi00OTZl YTQ5YzY3OTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHaKOAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACZvXjNQbVR4HJrJN0mQQVjZ93hpQc333Z1hOss+uwyYDmaTuQU3/iR5 a3lh24LvfBqPDjfb+aJjbGqZgv9nj4PDbciAfeINBMZo8hCD5M6Evr/86N6sjPFr ONeMFfJ3lxgZxln/Ph0TUQp7yMjGp53+tFh/fkbn5I6WNMRXdUxCMUHXeADIrgTQ 2DIhaWo7hbWtr6jqICx/Va5B1XEDeLBhbrnTSj/FXvpOgSoRp0Rkj1eTt9Bxp4Ps 6nGbwrz6MVdf0MoCN/UKpk2v8EyqHNfcIQE2RSO2BVT6TRBj521Sd3A3schGiv2X l3GCoeArHJpHdmwBUme+JHK6+ouebic= -----END CERTIFICATE-----Generated at Thu Mar 26 07:42:51 2026 by rpki-client