$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/011a0d1b-79a4-4d14-9cd0-0743f29bf956/ff5499bf-8280-386d-a55a-c494181be5f5.roa File: ff5499bf-8280-386d-a55a-c494181be5f5.roa (raw, json) Hash identifier: 4Md+0rOLVgEGfgS+cZsWFagXqDiVs+KdyqC1DWqOoK0= Subject key identifier: 65:25:FC:EF:77:13:CB:6D:8B:A0:40:37:3F:4D:8D:38:8A:FA:ED:7C Certificate issuer: /CN=011a0d1b-79a4-4d14-9cd0-0743f29bf956 Certificate serial: 010D0C9F4328584F4973DB38948E06DE08CC5580 Authority key identifier: 51:0A:BC:F7:59:52:E2:26:06:D7:01:13:13:22:8C:58:03:E7:BF:1A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/011a0d1b-79a4-4d14-9cd0-0743f29bf956.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/011a0d1b-79a4-4d14-9cd0-0743f29bf956/ff5499bf-8280-386d-a55a-c494181be5f5.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 393909 IP address blocks: 172.86.24.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/011a0d1b-79a4-4d14-9cd0-0743f29bf956/011a0d1b-79a4-4d14-9cd0-0743f29bf956.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/011a0d1b-79a4-4d14-9cd0-0743f29bf956/011a0d1b-79a4-4d14-9cd0-0743f29bf956.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/011a0d1b-79a4-4d14-9cd0-0743f29bf956.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 Oct 2026 03:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:db:38:94:8e:06:de:08:cc:55:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=011a0d1b-79a4-4d14-9cd0-0743f29bf956 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=67ac4e75-da23-4022-a9b2-0ba28563e358 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:36:41:b4:cb:cd:d2:ff:04:fe:27:47:46:9f: cd:45:53:0b:6f:7f:2a:8f:91:4a:cc:96:77:18:cc: 73:89:d6:f9:8e:3a:c5:b0:35:b4:f5:01:25:4b:44: e6:9a:ba:01:f9:76:7f:aa:b5:5c:08:2e:63:56:7d: 8f:43:39:57:da:6a:b5:f1:29:7f:75:af:e8:5c:90: 57:50:12:8a:4e:c0:ef:c4:56:7a:76:b4:66:f0:33: 35:ff:5c:fe:2a:76:a0:d1:c2:21:f5:f1:e5:68:3a: 1d:88:28:c6:c3:4c:d1:c3:88:82:74:67:fa:a2:9e: cc:26:ac:af:fa:c2:96:62:06:7f:d3:43:17:af:93: ea:21:83:c6:63:45:8c:52:6a:0b:80:ff:12:c4:3e: e4:d6:f9:f5:64:db:fb:3c:89:f3:fa:6c:10:ca:40: 10:20:71:06:86:0a:e4:b6:0b:22:52:21:82:6e:81: 94:ff:4f:af:f5:0e:80:26:64:5b:12:48:57:f3:d0: 55:2a:0b:ad:d7:11:60:89:ec:84:83:b6:37:ab:6f: 05:f0:e6:db:c0:51:b3:e8:21:b7:06:ab:e6:84:02: fb:f0:09:a4:22:40:fc:a6:cb:71:0f:5d:d5:2e:62: 95:64:a1:bb:3b:ce:35:97:0b:29:e9:6a:da:74:0e: f2:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:25:FC:EF:77:13:CB:6D:8B:A0:40:37:3F:4D:8D:38:8A:FA:ED:7C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/011a0d1b-79a4-4d14-9cd0-0743f29bf956/ff5499bf-8280-386d-a55a-c494181be5f5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/011a0d1b-79a4-4d14-9cd0-0743f29bf956/011a0d1b-79a4-4d14-9cd0-0743f29bf956.crl X509v3 Authority Key Identifier: keyid:51:0A:BC:F7:59:52:E2:26:06:D7:01:13:13:22:8C:58:03:E7:BF:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/011a0d1b-79a4-4d14-9cd0-0743f29bf956.cer sbgp-ipAddrBlock: critical IPv4: 172.86.24.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:00:84:61:9b:32:c4:9a:f8:57:7e:1f:57:00:4c:f4:d1:67: d3:fd:6b:bd:7d:c3:99:71:69:4f:58:db:4c:53:15:51:65:2c: 88:e2:3d:60:ff:fe:de:df:d0:f2:a1:57:39:8d:59:f1:86:a4: 18:22:57:ed:13:61:42:d0:2c:07:b5:4f:5a:03:87:38:56:21: 3b:c0:e7:b1:7f:dd:ac:da:65:5a:3e:85:d1:f4:d0:da:66:41: 0d:0b:c8:41:1b:bb:6a:c8:9e:82:7e:e7:0d:ac:0c:32:82:7d: f8:66:43:f8:b9:ed:7a:84:4c:97:3a:6f:7a:40:cd:79:42:c7: 00:78:92:cc:b0:89:13:e1:9e:72:f2:7c:f4:1a:c9:fd:5a:f3: 27:66:83:99:95:b3:66:e8:7c:de:cd:42:16:07:1b:e6:36:ff: 95:9f:90:b4:78:e7:ba:1c:d2:22:d6:c6:17:91:d6:42:c2:b8: 00:ae:1e:e5:3b:48:a2:a0:be:d7:20:bf:3b:6f:5a:ca:5a:28: e2:60:93:14:99:ce:ad:59:a5:14:6d:a3:33:2b:80:05:b2:ab: 51:97:ec:ea:4a:82:9a:a8:32:1a:a1:f0:27:e6:80:f0:59:fa: 19:4e:62:0f:92:d3:8c:8b:66:2d:36:2c:8b:c6:a2:31:62:f6: dd:08:57:43 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jc9s4lI4G3gjMVYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDExYTBkMWItNzlhNC00ZDE0LTljZDAtMDc0M2YyOWJm OTU2MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NjdhYzRlNzUtZGEyMy00MDIyLWE5YjItMGJhMjg1NjNlMzU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtjZBtMvN0v8E/idHRp/NRVMLb38qj5FKzJZ3 GMxzidb5jjrFsDW09QElS0TmmroB+XZ/qrVcCC5jVn2PQzlX2mq18Sl/da/oXJBX UBKKTsDvxFZ6drRm8DM1/1z+Knag0cIh9fHlaDodiCjGw0zRw4iCdGf6op7MJqyv +sKWYgZ/00MXr5PqIYPGY0WMUmoLgP8SxD7k1vn1ZNv7PInz+mwQykAQIHEGhgrk tgsiUiGCboGU/0+v9Q6AJmRbEkhX89BVKgut1xFgieyEg7Y3q28F8ObbwFGz6CG3 BqvmhAL78AmkIkD8pstxD13VLmKVZKG7O841lwsp6WradA7y7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGUl/O93E8tti6BANz9NjTiK+u18MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wMTFh MGQxYi03OWE0LTRkMTQtOWNkMC0wNzQzZjI5YmY5NTYvZmY1NDk5YmYtODI4MC0z ODZkLWE1NWEtYzQ5NDE4MWJlNWY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMDExYTBkMWItNzlhNC00ZDE0LTlj ZDAtMDc0M2YyOWJmOTU2LzAxMWEwZDFiLTc5YTQtNGQxNC05Y2QwLTA3NDNmMjli Zjk1Ni5jcmwwHwYDVR0jBBgwFoAUUQq891lS4iYG1wETEyKMWAPnvxowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8wMTFhMGQxYi03OWE0LTRkMTQtOWNkMC0wNzQz ZjI5YmY5NTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrFYYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAEAhGGbMsSa+Fd+H1cATPTRZ9P9a719w5lxaU9Y20xTFVFlLIjiPWD/ /t7f0PKhVzmNWfGGpBgiV+0TYULQLAe1T1oDhzhWITvA57F/3azaZVo+hdH00Npm QQ0LyEEbu2rInoJ+5w2sDDKCffhmQ/i57XqETJc6b3pAzXlCxwB4ksywiRPhnnLy fPQayf1a8ydmg5mVs2bofN7NQhYHG+Y2/5WfkLR457oc0iLWxheR1kLCuACuHuU7 SKKgvtcgvztvWspaKOJgkxSZzq1ZpRRtozMrgAWyq1GX7OpKgpqoMhqh8CfmgPBZ +hlOYg+S04yLZi02LIvGojFi9t0IV0M= -----END CERTIFICATE-----Generated at Sun Oct 4 00:28:31 2026 by rpki-client