$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/612eb31f-639a-39bf-8f6e-e27ee0b65b74.roa File: 612eb31f-639a-39bf-8f6e-e27ee0b65b74.roa (raw, json) Hash identifier: IT5bZl3kcTwUKV7OANB6QX3OcrvaMCkFsgedyt8XP6k= Subject key identifier: 92:53:C1:F4:D5:1B:D7:F6:83:DE:11:15:41:21:D5:FD:66:F6:12:CA Certificate issuer: /CN=86b35f71-51ac-43ff-b604-cba3552c4c8c Certificate serial: 010D0C9F4328584E5B6AEECDE898FB98E26F6AE0 Authority key identifier: 64:9C:3D:FE:D3:DF:3D:6B:67:BC:6D:BC:E9:05:BC:C0:6C:E6:1C:D7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/612eb31f-639a-39bf-8f6e-e27ee0b65b74.roa Signing time: Wed 01 Jul 2026 18:42:32 +0000 ROA not before: Wed 01 Jul 2026 18:42:32 +0000 ROA not after: Tue 29 Sep 2026 18:42:32 +0000 asID: 3561 IP address blocks: 100.42.20.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/86b35f71-51ac-43ff-b604-cba3552c4c8c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/86b35f71-51ac-43ff-b604-cba3552c4c8c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:5b:6a:ee:cd:e8:98:fb:98:e2:6f:6a:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86b35f71-51ac-43ff-b604-cba3552c4c8c Validity Not Before: Jul 1 18:42:32 2026 GMT Not After : Sep 29 18:42:32 2026 GMT Subject: CN=bd6eb600-3301-406b-96ee-672d7db5a008 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:a6:79:83:e5:52:9e:83:9b:59:11:d0:79:1f: 4c:f8:96:0f:39:f5:f0:e9:db:81:14:f0:c0:e0:a7: 3a:ef:9f:09:32:36:fb:71:bc:f3:51:a5:03:e1:69: ed:cc:70:a9:a8:6d:6b:bb:cb:57:83:91:8e:aa:17: 8c:06:ef:f3:4b:f2:26:f6:5d:46:e5:3a:bc:c1:f5: c5:97:a3:7c:73:b5:52:b1:25:4a:78:fd:30:e5:c5: 59:d8:b1:45:5f:3f:09:10:2b:ca:0a:d1:0d:b2:2e: 1f:75:99:4c:b0:9b:6e:94:27:b6:28:6c:9f:d9:26: ce:b4:4d:b5:35:48:15:4d:13:93:50:e4:09:5b:69: 49:47:16:44:ee:5b:a1:39:3c:a5:99:20:ca:94:ca: 6c:d9:e3:5c:fc:ee:b5:76:a1:80:21:e5:b9:48:44: 18:7d:0e:09:45:5f:48:0e:75:aa:d8:fe:d2:f9:a7: 8e:12:2b:64:0e:36:a4:8b:0c:37:f1:d5:a1:77:39: c3:17:3a:6a:ea:29:d4:97:0c:9c:19:18:fa:14:d6: d7:d4:79:9e:79:15:cc:ef:3b:4c:52:ea:f0:b0:4e: 11:c9:3d:73:2e:8b:22:82:7f:e3:14:0b:92:e3:cd: 46:b6:dc:a0:53:a7:5a:e2:3d:7b:bf:71:60:ad:91: 9a:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:53:C1:F4:D5:1B:D7:F6:83:DE:11:15:41:21:D5:FD:66:F6:12:CA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/612eb31f-639a-39bf-8f6e-e27ee0b65b74.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/86b35f71-51ac-43ff-b604-cba3552c4c8c.crl X509v3 Authority Key Identifier: keyid:64:9C:3D:FE:D3:DF:3D:6B:67:BC:6D:BC:E9:05:BC:C0:6C:E6:1C:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c.cer sbgp-ipAddrBlock: critical IPv4: 100.42.20.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:92:61:e8:20:8c:c9:de:8b:59:67:bc:6f:eb:cf:d5:fc:c1: a9:54:b6:23:ad:15:d8:97:d8:2e:2b:8d:d8:93:b4:36:24:d0: c4:56:7b:e1:26:43:d1:85:4e:00:21:5f:03:7e:0b:31:1d:25: f2:66:d6:5c:85:e5:5e:1a:63:bf:b5:2c:56:11:4f:c0:a8:6e: a1:3f:25:80:53:62:f7:eb:f9:a0:54:3a:a9:ba:c9:eb:82:a0: f4:ae:bc:95:2f:b9:d5:b8:ec:28:58:99:f1:00:ee:f0:e2:61: 09:f6:3a:68:64:26:29:10:06:34:86:0e:90:82:02:e1:f5:e2: 50:8c:41:34:10:dd:77:c7:fb:9b:6a:6a:2c:e5:7d:dd:23:5b: a0:81:0d:bf:0e:cd:bf:45:2c:7a:2e:fd:72:63:25:dc:fd:ea: 49:07:ab:4f:a9:db:81:9a:7d:0d:ca:99:40:80:07:c8:c3:39: af:42:f1:4a:b0:bb:e2:96:90:fd:68:02:99:5c:44:43:26:c2: 20:0a:c6:62:7e:2c:c1:83:f6:4d:d5:0d:b8:e7:af:77:44:e4: fd:9c:ce:19:8c:da:fe:fd:45:05:81:59:97:7e:5b:c0:d7:79: bf:01:99:1d:77:90:f8:85:91:49:d2:95:c0:0f:bf:c7:23:db: 3e:26:89:33 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5bau7N6Jj7mOJvauAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODZiMzVmNzEtNTFhYy00M2ZmLWI2MDQtY2JhMzU1MmM0 YzhjMB4XDTI2MDcwMTE4NDIzMloXDTI2MDkyOTE4NDIzMlowLzEtMCsGA1UEAxMk YmQ2ZWI2MDAtMzMwMS00MDZiLTk2ZWUtNjcyZDdkYjVhMDA4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgaZ5g+VSnoObWRHQeR9M+JYPOfXw6duBFPDA 4Kc6758JMjb7cbzzUaUD4WntzHCpqG1ru8tXg5GOqheMBu/zS/Im9l1G5Tq8wfXF l6N8c7VSsSVKeP0w5cVZ2LFFXz8JECvKCtENsi4fdZlMsJtulCe2KGyf2SbOtE21 NUgVTROTUOQJW2lJRxZE7luhOTylmSDKlMps2eNc/O61dqGAIeW5SEQYfQ4JRV9I DnWq2P7S+aeOEitkDjakiww38dWhdznDFzpq6inUlwycGRj6FNbX1HmeeRXM7ztM UurwsE4RyT1zLosign/jFAuS481GttygU6da4j17v3FgrZGasQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJJTwfTVG9f2g94RFUEh1f1m9hLKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84NmIz NWY3MS01MWFjLTQzZmYtYjYwNC1jYmEzNTUyYzRjOGMvNjEyZWIzMWYtNjM5YS0z OWJmLThmNmUtZTI3ZWUwYjY1Yjc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvODZiMzVmNzEtNTFhYy00M2ZmLWI2 MDQtY2JhMzU1MmM0YzhjLzg2YjM1ZjcxLTUxYWMtNDNmZi1iNjA0LWNiYTM1NTJj NGM4Yy5jcmwwHwYDVR0jBBgwFoAUZJw9/tPfPWtnvG286QW8wGzmHNcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS84NmIzNWY3MS01MWFjLTQzZmYtYjYwNC1jYmEz NTUyYzRjOGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZCoUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABaSYeggjMnei1lnvG/rz9X8walUtiOtFdiX2C4rjdiTtDYk0MRWe+Em Q9GFTgAhXwN+CzEdJfJm1lyF5V4aY7+1LFYRT8CobqE/JYBTYvfr+aBUOqm6yeuC oPSuvJUvudW47ChYmfEA7vDiYQn2OmhkJikQBjSGDpCCAuH14lCMQTQQ3XfH+5tq aizlfd0jW6CBDb8Ozb9FLHou/XJjJdz96kkHq0+p24GafQ3KmUCAB8jDOa9C8Uqw u+KWkP1oAplcREMmwiAKxmJ+LMGD9k3VDbjnr3dE5P2czhmM2v79RQWBWZd+W8DX eb8BmR13kPiFkUnSlcAPv8cj2z4miTM= -----END CERTIFICATE-----Generated at Fri Jul 24 08:13:42 2026 by rpki-client