$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/d5b93497-26cd-3e82-b44a-0a0a81611617.roa File: d5b93497-26cd-3e82-b44a-0a0a81611617.roa (raw, json) Hash identifier: kraK3yNONHucXpCY4h3ZIBoL0VZXOEKyj5yHv5aNAO8= Subject key identifier: F8:CF:AC:27:49:ED:3B:3D:8E:8F:12:D5:4F:EC:91:7D:C6:80:6F:42 Certificate issuer: /CN=86b35f71-51ac-43ff-b604-cba3552c4c8c Certificate serial: 010D0C9F4328584D3F64CBA037BFB28582466540 Authority key identifier: 64:9C:3D:FE:D3:DF:3D:6B:67:BC:6D:BC:E9:05:BC:C0:6C:E6:1C:D7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/d5b93497-26cd-3e82-b44a-0a0a81611617.roa Signing time: Sun 22 Mar 2026 01:00:32 +0000 ROA not before: Sun 22 Mar 2026 01:00:32 +0000 ROA not after: Sat 20 Jun 2026 01:00:32 +0000 asID: 46841 IP address blocks: 199.87.230.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/86b35f71-51ac-43ff-b604-cba3552c4c8c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/86b35f71-51ac-43ff-b604-cba3552c4c8c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3f:64:cb:a0:37:bf:b2:85:82:46:65:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86b35f71-51ac-43ff-b604-cba3552c4c8c Validity Not Before: Mar 22 01:00:32 2026 GMT Not After : Jun 20 01:00:32 2026 GMT Subject: CN=653ed650-30c7-4870-9a57-8428f2dfa912 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:dc:fd:04:ae:1a:46:61:79:e0:06:41:9c:5e: a9:5a:bf:cf:07:04:ff:ea:a0:f6:2b:e4:f3:4a:63: 8a:39:e8:dc:1f:01:93:d7:02:82:9c:b0:8c:88:ab: b1:75:89:8a:5b:1f:0c:12:aa:ab:15:8e:22:13:0b: f2:48:3f:54:6d:21:97:b2:07:47:80:8b:2e:73:17: e5:be:c2:26:41:18:ac:6a:da:f2:0a:fb:af:ac:a2: 77:99:1c:8c:fa:14:91:02:3c:d1:ef:bf:e5:7a:93: 40:34:0c:4f:53:5b:38:59:cd:b3:72:9e:4a:91:43: d8:c1:7e:88:01:52:57:cb:fb:6b:63:9f:a0:14:43: 88:3b:1c:7d:3c:c2:e5:ca:5f:06:da:49:64:70:5a: ba:b1:ad:03:64:a5:a5:83:0d:d9:46:b3:2d:ca:23: 83:ec:5b:d8:d2:d6:a3:13:19:b8:24:9c:5f:56:32: 3c:7d:c7:f0:6f:53:a8:3a:f8:8f:ab:56:35:a3:5d: bb:d0:a5:47:ce:75:26:43:76:72:69:e8:7e:ac:80: 62:8f:12:90:e6:c0:ac:c9:ff:fb:fd:5c:79:30:72: aa:5a:d3:0b:12:da:44:fc:ed:5a:2f:a8:59:a1:f9: 95:50:27:b4:8e:33:a0:a3:46:ee:1e:6c:20:1e:e4: 05:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:CF:AC:27:49:ED:3B:3D:8E:8F:12:D5:4F:EC:91:7D:C6:80:6F:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/d5b93497-26cd-3e82-b44a-0a0a81611617.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/86b35f71-51ac-43ff-b604-cba3552c4c8c.crl X509v3 Authority Key Identifier: keyid:64:9C:3D:FE:D3:DF:3D:6B:67:BC:6D:BC:E9:05:BC:C0:6C:E6:1C:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c.cer sbgp-ipAddrBlock: critical IPv4: 199.87.230.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:ab:30:d0:92:f7:5f:56:c3:85:35:35:05:97:5f:3e:89:47: af:50:d4:1f:97:f4:23:f6:e3:ac:6f:d4:13:a0:35:f3:44:1d: 1b:b5:40:38:84:c7:08:2c:46:b7:f0:3e:1b:1d:1b:ec:e4:39: 2f:2a:b3:95:55:ce:c8:f1:99:37:e6:ff:61:6d:0c:fb:52:8f: a5:7c:5e:86:c4:ab:bf:59:61:fd:e8:97:ec:a0:07:70:0c:e8: 21:eb:0f:1f:99:ed:5f:2a:5c:42:52:5d:21:fa:fe:de:88:11: e3:1d:d9:2f:67:80:6a:8d:4f:fb:9e:a4:b7:a6:8a:26:5e:48: 0e:9e:c2:68:6b:7c:19:d1:f8:cb:4b:55:14:ed:36:17:2d:b1: 95:e9:fd:11:9b:5e:5e:86:ca:6a:9e:6d:ba:04:a9:3d:eb:c9: ac:88:21:85:5c:67:6e:36:d6:dd:d2:fa:06:06:d1:ce:99:95: eb:e4:b7:5b:37:07:a5:0c:4e:6c:93:44:a6:2b:85:70:7e:d5: 21:5c:61:16:a6:dd:4f:a6:c7:e7:01:0a:73:cb:5d:5b:07:75: 2c:80:53:6c:1e:b1:e2:c1:1c:84:89:52:36:8e:01:8e:47:68: 15:23:27:04:28:9e:13:e8:07:8f:c9:14:69:13:c1:cd:74:49: af:07:a2:d8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0/ZMugN7+yhYJGZUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODZiMzVmNzEtNTFhYy00M2ZmLWI2MDQtY2JhMzU1MmM0 YzhjMB4XDTI2MDMyMjAxMDAzMloXDTI2MDYyMDAxMDAzMlowLzEtMCsGA1UEAxMk NjUzZWQ2NTAtMzBjNy00ODcwLTlhNTctODQyOGYyZGZhOTEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAntz9BK4aRmF54AZBnF6pWr/PBwT/6qD2K+Tz SmOKOejcHwGT1wKCnLCMiKuxdYmKWx8MEqqrFY4iEwvySD9UbSGXsgdHgIsucxfl vsImQRisatryCvuvrKJ3mRyM+hSRAjzR77/lepNANAxPU1s4Wc2zcp5KkUPYwX6I AVJXy/trY5+gFEOIOxx9PMLlyl8G2klkcFq6sa0DZKWlgw3ZRrMtyiOD7FvY0taj Exm4JJxfVjI8fcfwb1OoOviPq1Y1o1270KVHznUmQ3Zyaeh+rIBijxKQ5sCsyf/7 /Vx5MHKqWtMLEtpE/O1aL6hZofmVUCe0jjOgo0buHmwgHuQF5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPjPrCdJ7Ts9jo8S1U/skX3GgG9CMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84NmIz NWY3MS01MWFjLTQzZmYtYjYwNC1jYmEzNTUyYzRjOGMvZDViOTM0OTctMjZjZC0z ZTgyLWI0NGEtMGEwYTgxNjExNjE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvODZiMzVmNzEtNTFhYy00M2ZmLWI2 MDQtY2JhMzU1MmM0YzhjLzg2YjM1ZjcxLTUxYWMtNDNmZi1iNjA0LWNiYTM1NTJj NGM4Yy5jcmwwHwYDVR0jBBgwFoAUZJw9/tPfPWtnvG286QW8wGzmHNcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS84NmIzNWY3MS01MWFjLTQzZmYtYjYwNC1jYmEz NTUyYzRjOGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx1fmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJGrMNCS919Ww4U1NQWXXz6JR69Q1B+X9CP246xv1BOgNfNEHRu1QDiE xwgsRrfwPhsdG+zkOS8qs5VVzsjxmTfm/2FtDPtSj6V8XobEq79ZYf3ol+ygB3AM 6CHrDx+Z7V8qXEJSXSH6/t6IEeMd2S9ngGqNT/uepLemiiZeSA6ewmhrfBnR+MtL VRTtNhctsZXp/RGbXl6GymqebboEqT3ryayIIYVcZ2421t3S+gYG0c6Zlevkt1s3 B6UMTmyTRKYrhXB+1SFcYRam3U+mx+cBCnPLXVsHdSyAU2weseLBHISJUjaOAY5H aBUjJwQonhPoB4/JFGkTwc10Sa8Hotg= -----END CERTIFICATE-----Generated at Thu Mar 26 14:30:14 2026 by rpki-client