$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/df1d2790-04a3-3ed1-808b-1dab0cc2d47e.roa File: df1d2790-04a3-3ed1-808b-1dab0cc2d47e.roa (raw, json) Hash identifier: 3iHj51IiPOhaPhcA/v/49kBkcnrHA+KG7TkrBRLRxWw= Subject key identifier: 4C:31:7C:CA:AF:2F:93:FB:EA:C2:AC:F5:17:D2:FD:FB:26:1A:8D:5D Certificate issuer: /CN=86b35f71-51ac-43ff-b604-cba3552c4c8c Certificate serial: 010D0C9F4328584F4973D95255A69CA5EBFDBE80 Authority key identifier: 64:9C:3D:FE:D3:DF:3D:6B:67:BC:6D:BC:E9:05:BC:C0:6C:E6:1C:D7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/df1d2790-04a3-3ed1-808b-1dab0cc2d47e.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 46841 IP address blocks: 100.42.16.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/86b35f71-51ac-43ff-b604-cba3552c4c8c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/86b35f71-51ac-43ff-b604-cba3552c4c8c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Sep 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:d9:52:55:a6:9c:a5:eb:fd:be:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86b35f71-51ac-43ff-b604-cba3552c4c8c Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=d4fe2a59-9a55-402f-8b9f-04559e784245 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:70:60:50:c9:81:9d:01:c5:bf:c1:7a:65:52: 64:27:15:ff:ee:98:98:35:37:83:01:25:d8:da:e7: dd:6e:fd:61:44:bd:7f:38:f6:13:ec:9e:97:0f:82: 73:1a:90:6b:c6:56:81:e5:c1:9c:2f:04:51:db:76: 11:a6:a4:87:d0:de:e5:6f:16:b0:5a:f7:88:49:00: 04:0a:6d:35:77:a4:6a:cb:21:69:0b:e0:ad:a9:2f: e3:64:a2:a9:91:e6:12:ff:96:f3:77:8a:99:da:46: 53:be:0e:2a:02:53:70:d9:ad:fe:88:22:ca:01:aa: d0:78:aa:73:ee:28:82:41:18:39:e8:7e:81:b1:34: 6f:a7:4a:34:3d:38:c8:33:55:ac:9b:06:46:f9:d7: 14:84:b2:ea:77:cb:39:39:39:9a:90:e0:17:2e:8f: 34:7c:f5:c2:09:1e:9d:9e:c6:6f:73:ff:bc:dc:89: 1f:7b:34:39:85:55:e5:24:d5:32:f8:52:7b:97:3e: 00:02:27:a9:9d:3a:5a:21:3c:e0:5d:6f:ca:56:26: 6d:a5:20:e0:9a:3d:de:47:6e:29:c3:68:6b:b1:49: 5b:80:da:01:e0:14:d9:b9:f5:14:7d:59:b2:cd:df: b0:2a:63:50:1a:a7:ec:4f:c3:8d:2d:0d:20:0f:74: fb:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:31:7C:CA:AF:2F:93:FB:EA:C2:AC:F5:17:D2:FD:FB:26:1A:8D:5D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/df1d2790-04a3-3ed1-808b-1dab0cc2d47e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/86b35f71-51ac-43ff-b604-cba3552c4c8c.crl X509v3 Authority Key Identifier: keyid:64:9C:3D:FE:D3:DF:3D:6B:67:BC:6D:BC:E9:05:BC:C0:6C:E6:1C:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c.cer sbgp-ipAddrBlock: critical IPv4: 100.42.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:5c:99:65:54:5b:61:33:e8:a0:98:ed:ba:70:aa:40:7d:82: bf:4b:20:d1:cc:22:23:15:7d:a9:fd:38:76:39:dd:df:2b:6d: b4:73:49:6d:50:8f:c3:25:dd:a0:73:14:1c:1f:58:23:68:ec: 8d:7b:f2:9c:c2:2a:e2:d7:f4:c3:86:1f:77:e1:79:41:60:b5: b7:fa:50:b5:4c:5f:34:68:42:58:7f:fe:a8:a2:01:8d:37:91: df:37:29:bb:6d:b3:57:8c:eb:4a:4b:4f:5a:98:fc:41:ae:21: 68:05:8e:57:d0:da:bf:4e:40:0e:0b:f2:bd:ab:04:b6:a0:d0: 7c:06:70:c2:67:62:f0:86:9b:f0:65:d1:a6:40:a1:04:98:3b: 1f:2b:56:13:31:42:04:25:6b:4b:07:46:2a:14:5c:b2:37:3c: c8:0a:c7:36:ea:9d:0f:7c:0f:0c:63:7d:f4:31:af:6d:36:d4: 1f:87:5f:c9:a0:76:13:e2:2b:42:fe:bf:38:6b:0b:ac:49:be: ee:f8:97:64:67:16:08:a5:f6:92:64:4a:5a:3d:65:40:60:0b: f6:e8:53:33:35:37:00:e3:59:d8:47:60:19:72:bb:95:29:ce: 2e:df:30:5c:ac:30:47:5e:be:bc:b3:67:5c:0b:ce:b4:7c:ed: 01:59:37:56 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jc9lSVaacpev9voAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODZiMzVmNzEtNTFhYy00M2ZmLWI2MDQtY2JhMzU1MmM0 YzhjMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZDRmZTJhNTktOWE1NS00MDJmLThiOWYtMDQ1NTllNzg0MjQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnXBgUMmBnQHFv8F6ZVJkJxX/7piYNTeDASXY 2ufdbv1hRL1/OPYT7J6XD4JzGpBrxlaB5cGcLwRR23YRpqSH0N7lbxawWveISQAE Cm01d6RqyyFpC+CtqS/jZKKpkeYS/5bzd4qZ2kZTvg4qAlNw2a3+iCLKAarQeKpz 7iiCQRg56H6BsTRvp0o0PTjIM1WsmwZG+dcUhLLqd8s5OTmakOAXLo80fPXCCR6d nsZvc/+83IkfezQ5hVXlJNUy+FJ7lz4AAiepnTpaITzgXW/KViZtpSDgmj3eR24p w2hrsUlbgNoB4BTZufUUfVmyzd+wKmNQGqfsT8ONLQ0gD3T7LwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEwxfMqvL5P76sKs9RfS/fsmGo1dMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84NmIz NWY3MS01MWFjLTQzZmYtYjYwNC1jYmEzNTUyYzRjOGMvZGYxZDI3OTAtMDRhMy0z ZWQxLTgwOGItMWRhYjBjYzJkNDdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvODZiMzVmNzEtNTFhYy00M2ZmLWI2 MDQtY2JhMzU1MmM0YzhjLzg2YjM1ZjcxLTUxYWMtNDNmZi1iNjA0LWNiYTM1NTJj NGM4Yy5jcmwwHwYDVR0jBBgwFoAUZJw9/tPfPWtnvG286QW8wGzmHNcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS84NmIzNWY3MS01MWFjLTQzZmYtYjYwNC1jYmEz NTUyYzRjOGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEZCoQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAANcmWVUW2Ez6KCY7bpwqkB9gr9LINHMIiMVfan9OHY53d8rbbRzSW1Q j8Ml3aBzFBwfWCNo7I178pzCKuLX9MOGH3fheUFgtbf6ULVMXzRoQlh//qiiAY03 kd83Kbtts1eM60pLT1qY/EGuIWgFjlfQ2r9OQA4L8r2rBLag0HwGcMJnYvCGm/Bl 0aZAoQSYOx8rVhMxQgQla0sHRioUXLI3PMgKxzbqnQ98DwxjffQxr2021B+HX8mg dhPiK0L+vzhrC6xJvu74l2RnFgil9pJkSlo9ZUBgC/boUzM1NwDjWdhHYBlyu5Up zi7fMFysMEdevryzZ1wLzrR87QFZN1Y= -----END CERTIFICATE-----Generated at Sun Sep 27 18:43:47 2026 by rpki-client