$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/1954f466-2f93-3a89-b865-828d3f141036.roa File: 1954f466-2f93-3a89-b865-828d3f141036.roa (raw, json) Hash identifier: tbdzzAH4WQITN8+Dlj5iDMT2i+IlqQE4BZ2SgKS+uX8= Subject key identifier: 23:8E:FE:8E:32:47:65:5A:19:B3:93:F1:2A:7C:F6:F8:A0:AF:D0:72 Certificate issuer: /CN=86b35f71-51ac-43ff-b604-cba3552c4c8c Certificate serial: 010D0C9F4328584DCAFAF746ABC2C44BB2391B00 Authority key identifier: 64:9C:3D:FE:D3:DF:3D:6B:67:BC:6D:BC:E9:05:BC:C0:6C:E6:1C:D7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/1954f466-2f93-3a89-b865-828d3f141036.roa Signing time: Mon 11 May 2026 01:00:24 +0000 ROA not before: Mon 11 May 2026 01:00:24 +0000 ROA not after: Sun 09 Aug 2026 01:00:24 +0000 asID: 46841 IP address blocks: 199.30.64.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/86b35f71-51ac-43ff-b604-cba3552c4c8c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/86b35f71-51ac-43ff-b604-cba3552c4c8c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:ca:fa:f7:46:ab:c2:c4:4b:b2:39:1b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86b35f71-51ac-43ff-b604-cba3552c4c8c Validity Not Before: May 11 01:00:24 2026 GMT Not After : Aug 9 01:00:24 2026 GMT Subject: CN=ae591a50-eced-4990-9010-5ae34fd29bed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:16:0e:08:9e:50:61:b4:95:99:91:f3:0a:8b: fc:c6:b0:3f:ff:5a:ad:99:63:0d:d2:54:fd:6d:70: fd:98:c0:f8:05:31:f9:8f:bb:43:81:c5:61:18:3b: 40:ed:64:1c:fe:ba:44:c2:ae:eb:9c:e6:2e:8f:0d: f5:35:31:8f:1e:c2:f6:20:74:81:a6:75:2f:0e:12: dc:ab:86:85:6f:9a:ca:f5:86:d2:2d:9b:82:2f:dd: 98:8e:6d:4a:ed:f8:39:e8:c6:41:3b:af:c4:e3:b2: d8:5e:fe:57:8f:dd:17:b2:5e:de:98:92:13:65:5d: 34:6b:d1:66:92:66:d6:4e:a2:4c:45:12:e9:1a:1c: aa:63:bb:c2:08:51:c1:a9:9b:9c:88:98:6c:ed:eb: a1:ae:da:da:99:29:c2:fe:c0:e6:de:2c:d7:26:3a: 05:fa:8e:b9:2f:78:78:47:35:a1:4a:5e:55:7e:87: 3b:d4:ae:e8:a2:87:c4:3e:ad:38:4c:6e:35:ea:67: c7:03:35:73:7e:1d:3a:a9:88:23:1f:fc:ed:48:db: 53:f5:21:b5:bd:88:15:f6:46:b7:e9:57:e0:bf:66: 86:9e:98:6f:fb:f3:04:2e:ea:cd:44:f3:99:92:85: 00:33:55:e2:fc:e8:63:88:a0:5e:a7:31:7e:3d:b1: 8c:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:8E:FE:8E:32:47:65:5A:19:B3:93:F1:2A:7C:F6:F8:A0:AF:D0:72 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/1954f466-2f93-3a89-b865-828d3f141036.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/86b35f71-51ac-43ff-b604-cba3552c4c8c.crl X509v3 Authority Key Identifier: keyid:64:9C:3D:FE:D3:DF:3D:6B:67:BC:6D:BC:E9:05:BC:C0:6C:E6:1C:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c.cer sbgp-ipAddrBlock: critical IPv4: 199.30.64.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:45:cf:3f:f5:60:09:78:c1:5a:e9:2d:49:d1:7a:a2:2a:51: a4:ec:54:45:6c:06:c1:5a:15:e5:4f:d2:66:f1:07:a9:b6:b5: cd:aa:f4:7c:53:35:f2:d9:05:ad:fb:e5:d8:30:c8:35:63:70: 27:e1:3a:5d:17:14:1d:12:65:60:14:b1:c7:20:e7:a1:25:89: cd:92:ce:c4:e8:85:c3:5e:c6:9d:ab:24:ee:c9:17:fa:02:4e: b5:a4:8d:b7:77:48:95:71:22:a9:88:4d:e1:9b:79:0d:15:f9: 4f:a1:23:1a:6e:fd:33:4b:2b:7b:f4:da:d2:b0:a2:24:60:02: b2:c5:65:bf:44:e9:e3:f3:cf:92:ac:1f:96:41:3e:55:9e:1f: dc:7b:71:51:f8:b5:3f:d2:4b:fb:10:34:c6:9d:96:4a:bc:5c: c6:bc:2d:3b:7e:68:2e:e9:e5:bb:a8:e4:6e:cc:74:f1:7e:03: 5a:52:96:fa:57:40:f0:fe:0b:06:69:bd:ea:96:a6:e9:49:ab: 6c:f9:5b:e7:81:a2:87:e2:02:19:0e:6d:99:46:ae:a1:8d:ac: 20:ad:c5:a9:1e:48:f0:d4:d9:a0:25:e3:a6:cc:09:ac:05:c5: 1f:ec:7f:7a:fb:13:6f:78:c5:d3:96:12:c2:7e:d9:0b:09:fb: 65:15:62:30 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3K+vdGq8LES7I5GwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODZiMzVmNzEtNTFhYy00M2ZmLWI2MDQtY2JhMzU1MmM0 YzhjMB4XDTI2MDUxMTAxMDAyNFoXDTI2MDgwOTAxMDAyNFowLzEtMCsGA1UEAxMk YWU1OTFhNTAtZWNlZC00OTkwLTkwMTAtNWFlMzRmZDI5YmVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjxYOCJ5QYbSVmZHzCov8xrA//1qtmWMN0lT9 bXD9mMD4BTH5j7tDgcVhGDtA7WQc/rpEwq7rnOYujw31NTGPHsL2IHSBpnUvDhLc q4aFb5rK9YbSLZuCL92Yjm1K7fg56MZBO6/E47LYXv5Xj90Xsl7emJITZV00a9Fm kmbWTqJMRRLpGhyqY7vCCFHBqZuciJhs7euhrtramSnC/sDm3izXJjoF+o65L3h4 RzWhSl5Vfoc71K7ooofEPq04TG416mfHAzVzfh06qYgjH/ztSNtT9SG1vYgV9ka3 6Vfgv2aGnphv+/MELurNRPOZkoUAM1Xi/OhjiKBepzF+PbGM/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCOO/o4yR2VaGbOT8Sp89vigr9ByMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84NmIz NWY3MS01MWFjLTQzZmYtYjYwNC1jYmEzNTUyYzRjOGMvMTk1NGY0NjYtMmY5My0z YTg5LWI4NjUtODI4ZDNmMTQxMDM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvODZiMzVmNzEtNTFhYy00M2ZmLWI2 MDQtY2JhMzU1MmM0YzhjLzg2YjM1ZjcxLTUxYWMtNDNmZi1iNjA0LWNiYTM1NTJj NGM4Yy5jcmwwHwYDVR0jBBgwFoAUZJw9/tPfPWtnvG286QW8wGzmHNcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS84NmIzNWY3MS01MWFjLTQzZmYtYjYwNC1jYmEz NTUyYzRjOGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCxx5AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEZFzz/1YAl4wVrpLUnReqIqUaTsVEVsBsFaFeVP0mbxB6m2tc2q9HxT NfLZBa375dgwyDVjcCfhOl0XFB0SZWAUsccg56Elic2SzsTohcNexp2rJO7JF/oC TrWkjbd3SJVxIqmITeGbeQ0V+U+hIxpu/TNLK3v02tKwoiRgArLFZb9E6ePzz5Ks H5ZBPlWeH9x7cVH4tT/SS/sQNMadlkq8XMa8LTt+aC7p5buo5G7MdPF+A1pSlvpX QPD+CwZpveqWpulJq2z5W+eBoofiAhkObZlGrqGNrCCtxakeSPDU2aAl46bMCawF xR/sf3r7E294xdOWEsJ+2QsJ+2UVYjA= -----END CERTIFICATE-----Generated at Wed May 13 12:56:02 2026 by rpki-client