$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/b86e1712-c465-324d-b026-de233c4ea59c.roa File: b86e1712-c465-324d-b026-de233c4ea59c.roa (raw, json) Hash identifier: N/upUdPT4aTGsqXVR+6cyb/SCyEdWp8O3Dz3hUYghTo= Subject key identifier: 46:6C:BE:DE:B2:B2:96:F4:DB:44:AA:0B:45:41:BD:72:46:5D:09:96 Certificate issuer: /CN=69f7b69a-b519-4b2d-a7be-03aa505b2576 Certificate serial: 010D0C9F4328584F03A77B35FB2A6A8907E73440 Authority key identifier: F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/b86e1712-c465-324d-b026-de233c4ea59c.roa Signing time: Mon 31 Aug 2026 01:00:12 +0000 ROA not before: Mon 31 Aug 2026 01:00:12 +0000 ROA not after: Sun 29 Nov 2026 02:00:12 +0000 asID: 13414 IP address blocks: 199.16.157.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:03:a7:7b:35:fb:2a:6a:89:07:e7:34:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69f7b69a-b519-4b2d-a7be-03aa505b2576 Validity Not Before: Aug 31 01:00:12 2026 GMT Not After : Nov 29 02:00:12 2026 GMT Subject: CN=08760f5a-3989-475f-aa49-6cd2f7a954c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:cc:ec:74:90:72:72:c4:49:d0:70:8a:e2:13: 02:8c:77:d1:bd:db:73:e8:2b:1c:7f:91:1f:cf:c8: bf:0f:72:83:ef:ce:67:e7:bb:96:79:3a:d6:6d:f4: 3b:a2:34:4b:8d:1f:41:41:00:38:ac:4e:1c:4c:fc: 9c:f5:d4:bb:c9:8f:bd:59:f9:27:ab:19:a9:40:9a: 3a:33:ab:13:66:95:81:9c:8e:ec:92:69:5c:64:02: d1:30:74:6c:22:da:5b:5d:8b:63:4e:0b:56:7c:8c: 68:3d:b1:02:bc:a0:93:8f:34:dd:97:e7:62:7e:03: 0a:1d:05:3e:27:c6:33:86:c4:3a:db:2f:a4:ce:c5: 70:bb:f3:2a:e8:c5:02:82:f7:a7:fa:58:79:87:82: bc:38:2d:46:48:c5:08:75:5a:49:94:58:28:33:6b: 8d:4b:61:eb:0b:82:9b:9f:26:ec:4f:cb:f3:c9:db: 16:a3:d1:6a:a8:a5:ca:0c:86:ad:b2:ad:f8:7a:06: 20:6f:ab:a5:e9:61:f5:c3:c1:70:27:c5:ab:00:99: 66:83:ed:6b:a5:b7:ac:1b:3b:a1:3f:c1:ce:56:39: 0f:f6:be:31:63:cb:b1:1d:03:ec:88:d4:bf:60:6d: 16:9c:78:b9:d4:96:38:20:57:7f:e3:48:91:16:cd: 75:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:6C:BE:DE:B2:B2:96:F4:DB:44:AA:0B:45:41:BD:72:46:5D:09:96 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/b86e1712-c465-324d-b026-de233c4ea59c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl X509v3 Authority Key Identifier: keyid:F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer sbgp-ipAddrBlock: critical IPv4: 199.16.157.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:3c:74:ad:47:e2:3b:66:59:86:47:34:b6:21:a4:ff:2f:7e: 41:dc:da:46:dc:d9:c2:fd:41:49:24:3e:ca:ae:4e:67:02:39: 60:dc:75:93:56:04:65:62:9d:5e:5e:a0:46:cf:b3:18:c3:55: fa:a3:73:34:fe:48:24:0e:27:85:1a:ef:d6:06:b7:76:e6:02: e9:d8:57:a0:e3:1f:a8:89:0f:84:0f:09:b1:00:dd:aa:77:8f: ef:cf:94:ed:c6:55:59:3c:55:66:ea:6d:df:1d:f3:49:73:61: f2:bc:c5:ee:71:06:d6:19:76:e6:9d:b3:9d:86:b5:8f:76:d8: 8d:cd:ad:f4:e0:9f:75:cb:f3:9a:b6:1a:95:61:e1:6b:ab:fd: 7c:dd:99:6e:29:57:a5:cc:c1:14:6d:1b:91:cc:45:95:a2:32: ec:78:4d:fd:26:5b:18:52:1f:c9:c8:48:c8:c1:b0:6c:7c:fc: 9e:47:bd:fa:12:2c:bf:9f:7f:8f:24:bd:33:87:91:eb:b0:08: f7:3e:2a:82:3c:4c:b8:01:24:a3:1f:66:35:d1:cf:a9:88:53: b5:9d:fb:db:0c:6e:6a:ac:83:85:94:4d:51:5e:47:d4:49:a7: 20:07:92:1d:36:fc:6b:d3:bd:cb:2b:5d:f5:a3:c5:cf:42:a2: e8:67:2d:da -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8Dp3s1+ypqiQfnNEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjlmN2I2OWEtYjUxOS00YjJkLWE3YmUtMDNhYTUwNWIy NTc2MB4XDTI2MDgzMTAxMDAxMloXDTI2MTEyOTAyMDAxMlowLzEtMCsGA1UEAxMk MDg3NjBmNWEtMzk4OS00NzVmLWFhNDktNmNkMmY3YTk1NGM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqczsdJBycsRJ0HCK4hMCjHfRvdtz6Cscf5Ef z8i/D3KD785n57uWeTrWbfQ7ojRLjR9BQQA4rE4cTPyc9dS7yY+9WfknqxmpQJo6 M6sTZpWBnI7skmlcZALRMHRsItpbXYtjTgtWfIxoPbECvKCTjzTdl+difgMKHQU+ J8YzhsQ62y+kzsVwu/Mq6MUCgven+lh5h4K8OC1GSMUIdVpJlFgoM2uNS2HrC4Kb nybsT8vzydsWo9FqqKXKDIatsq34egYgb6ul6WH1w8FwJ8WrAJlmg+1rpbesGzuh P8HOVjkP9r4xY8uxHQPsiNS/YG0WnHi51JY4IFd/40iRFs11VQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEZsvt6yspb020SqC0VBvXJGXQmWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82OWY3 YjY5YS1iNTE5LTRiMmQtYTdiZS0wM2FhNTA1YjI1NzYvYjg2ZTE3MTItYzQ2NS0z MjRkLWIwMjYtZGUyMzNjNGVhNTljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNjlmN2I2OWEtYjUxOS00YjJkLWE3 YmUtMDNhYTUwNWIyNTc2LzY5ZjdiNjlhLWI1MTktNGIyZC1hN2JlLTAzYWE1MDVi MjU3Ni5jcmwwHwYDVR0jBBgwFoAU+BZ/J/My28k/b6+VdgSdk12bGXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy82OWY3YjY5YS1iNTE5LTRiMmQtYTdiZS0wM2Fh NTA1YjI1NzYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxxCdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD08dK1H4jtmWYZHNLYhpP8vfkHc2kbc2cL9QUkkPsquTmcCOWDcdZNW BGVinV5eoEbPsxjDVfqjczT+SCQOJ4Ua79YGt3bmAunYV6DjH6iJD4QPCbEA3ap3 j+/PlO3GVVk8VWbqbd8d80lzYfK8xe5xBtYZduads52GtY922I3NrfTgn3XL85q2 GpVh4Wur/XzdmW4pV6XMwRRtG5HMRZWiMux4Tf0mWxhSH8nISMjBsGx8/J5HvfoS LL+ff48kvTOHkeuwCPc+KoI8TLgBJKMfZjXRz6mIU7Wd+9sMbmqsg4WUTVFeR9RJ pyAHkh02/GvTvcsrXfWjxc9CouhnLdo= -----END CERTIFICATE-----Generated at Sun Sep 27 10:07:04 2026 by rpki-client