$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/86bcda68-15fd-4c7d-9887-d9d67f2ca969/879a586a-5dbd-3989-ac66-822d1f92f8f6.roa File: 879a586a-5dbd-3989-ac66-822d1f92f8f6.roa (raw, json) Hash identifier: b6lyhT2MMDuJt+kKxgN6FPbqWyzY4NXWL2VM2/05ZcA= Subject key identifier: D4:97:66:3D:A1:F0:8A:4B:5E:79:48:54:5B:5B:2F:AD:B6:78:40:18 Certificate issuer: /CN=86bcda68-15fd-4c7d-9887-d9d67f2ca969 Certificate serial: 010D0C9F4328584D4A8FA1FC6DAA144339F20F40 Authority key identifier: DD:A3:C4:F9:8B:14:A0:E9:BE:AA:4F:47:A9:DD:16:AE:3A:F7:FE:31 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/86bcda68-15fd-4c7d-9887-d9d67f2ca969.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/86bcda68-15fd-4c7d-9887-d9d67f2ca969/879a586a-5dbd-3989-ac66-822d1f92f8f6.roa Signing time: Thu 26 Mar 2026 01:00:32 +0000 ROA not before: Thu 26 Mar 2026 01:00:32 +0000 ROA not after: Wed 24 Jun 2026 01:00:32 +0000 asID: 16509 IP address blocks: 142.202.36.0/24 maxlen: 24 142.202.37.0/24 maxlen: 24 142.202.38.0/24 maxlen: 24 142.202.39.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/86bcda68-15fd-4c7d-9887-d9d67f2ca969/86bcda68-15fd-4c7d-9887-d9d67f2ca969.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/86bcda68-15fd-4c7d-9887-d9d67f2ca969/86bcda68-15fd-4c7d-9887-d9d67f2ca969.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/86bcda68-15fd-4c7d-9887-d9d67f2ca969.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4a:8f:a1:fc:6d:aa:14:43:39:f2:0f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86bcda68-15fd-4c7d-9887-d9d67f2ca969 Validity Not Before: Mar 26 01:00:32 2026 GMT Not After : Jun 24 01:00:32 2026 GMT Subject: CN=ce5e798e-301b-44f5-93ac-0220b3d11eb0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:21:d9:68:cd:49:3e:f5:5c:81:af:d5:cb:16: a4:fd:61:97:ea:a0:a1:c4:1f:28:f7:ae:25:78:1b: 9d:bc:32:55:a4:5a:88:a9:20:8b:5c:30:4d:25:20: 26:63:27:12:95:32:98:23:61:95:1f:9c:67:f2:a3: d9:35:ea:1e:b7:17:e1:63:4a:76:aa:e8:21:3b:1c: 45:72:38:3a:d4:4a:ce:e9:b8:b5:79:28:0d:43:91: d7:5d:27:17:b2:e9:7a:de:3f:8d:58:e8:e1:c6:f8: ef:d1:4f:40:f1:11:a7:b6:13:65:05:1e:54:8b:99: f6:8a:de:7f:8c:bb:b7:a4:68:b3:4c:57:46:0d:94: cc:1a:8e:dc:15:6d:67:1d:be:40:4a:31:08:88:9b: 9f:3f:10:ba:d0:56:e3:59:0a:f1:b0:61:0e:95:9f: c9:c9:1d:6f:d3:96:25:9b:86:64:e2:44:2b:3a:ca: 36:9a:fe:55:64:8b:6b:b4:19:63:78:43:7f:4a:46: 8d:88:ba:ea:83:2b:4d:a3:9c:b1:96:98:8b:ad:98: 72:92:d0:1f:ee:2c:a6:2b:cf:ed:c4:e4:51:9f:7a: e0:0d:f0:51:bf:1b:7e:66:93:c2:f2:8d:d7:2a:3e: b0:d5:6d:d1:db:e0:e0:6d:d9:18:cd:6e:1e:c9:5e: 1e:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:97:66:3D:A1:F0:8A:4B:5E:79:48:54:5B:5B:2F:AD:B6:78:40:18 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/86bcda68-15fd-4c7d-9887-d9d67f2ca969/879a586a-5dbd-3989-ac66-822d1f92f8f6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/86bcda68-15fd-4c7d-9887-d9d67f2ca969/86bcda68-15fd-4c7d-9887-d9d67f2ca969.crl X509v3 Authority Key Identifier: keyid:DD:A3:C4:F9:8B:14:A0:E9:BE:AA:4F:47:A9:DD:16:AE:3A:F7:FE:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/86bcda68-15fd-4c7d-9887-d9d67f2ca969.cer sbgp-ipAddrBlock: critical IPv4: 142.202.36.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:6d:c0:bf:c2:c0:78:d2:d9:9e:e1:96:20:e7:22:a5:b3:7d: 8f:3a:23:c8:0d:c1:53:0b:84:58:ec:12:76:8f:05:a1:be:96: fc:09:d1:3f:62:5e:d6:a6:b0:97:23:22:fa:6f:d9:ff:b6:a7: 72:33:a7:de:2b:fb:f2:f5:cf:e6:1d:6b:d3:76:e5:72:d2:2b: 77:b5:6d:c7:54:70:32:89:05:41:08:b7:a8:3d:f3:8f:75:6d: a5:81:ed:5a:5f:02:e8:ad:96:7b:b5:bb:79:39:9c:20:65:4e: ed:a2:24:9b:ac:91:70:c2:47:85:95:d1:c0:0b:ac:44:f1:09: d9:ea:9a:36:bc:a4:50:c5:b7:02:4e:10:c6:73:97:56:f9:ee: 20:7c:68:b4:88:9d:5a:d3:a7:4c:a9:ec:55:41:b1:6d:76:a3: 05:a2:eb:02:70:9f:06:33:37:47:cc:fe:fe:04:df:39:ae:69: 76:a3:bb:e8:eb:3c:bd:cc:e4:f8:71:28:f6:3f:32:10:76:1d: 47:11:20:db:f1:02:b3:b8:2d:ec:02:00:fe:31:00:ca:6b:89: c3:5c:97:6a:ff:72:71:7e:2f:73:ca:bf:18:61:99:2c:04:51: 5d:fb:cb:33:f8:5b:92:89:80:d1:3d:28:24:3c:e0:b6:c3:9e: be:63:31:21 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Kj6H8baoUQznyD0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODZiY2RhNjgtMTVmZC00YzdkLTk4ODctZDlkNjdmMmNh OTY5MB4XDTI2MDMyNjAxMDAzMloXDTI2MDYyNDAxMDAzMlowLzEtMCsGA1UEAxMk Y2U1ZTc5OGUtMzAxYi00NGY1LTkzYWMtMDIyMGIzZDExZWIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhCHZaM1JPvVcga/Vyxak/WGX6qChxB8o964l eBudvDJVpFqIqSCLXDBNJSAmYycSlTKYI2GVH5xn8qPZNeoetxfhY0p2qughOxxF cjg61ErO6bi1eSgNQ5HXXScXsul63j+NWOjhxvjv0U9A8RGnthNlBR5Ui5n2it5/ jLu3pGizTFdGDZTMGo7cFW1nHb5ASjEIiJufPxC60FbjWQrxsGEOlZ/JyR1v05Yl m4Zk4kQrOso2mv5VZItrtBljeEN/SkaNiLrqgytNo5yxlpiLrZhyktAf7iymK8/t xORRn3rgDfBRvxt+ZpPC8o3XKj6w1W3R2+DgbdkYzW4eyV4eSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNSXZj2h8IpLXnlIVFtbL622eEAYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84NmJj ZGE2OC0xNWZkLTRjN2QtOTg4Ny1kOWQ2N2YyY2E5NjkvODc5YTU4NmEtNWRiZC0z OTg5LWFjNjYtODIyZDFmOTJmOGY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvODZiY2RhNjgtMTVmZC00YzdkLTk4 ODctZDlkNjdmMmNhOTY5Lzg2YmNkYTY4LTE1ZmQtNGM3ZC05ODg3LWQ5ZDY3ZjJj YTk2OS5jcmwwHwYDVR0jBBgwFoAU3aPE+YsUoOm+qk9Hqd0Wrjr3/jEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84NmJjZGE2OC0xNWZkLTRjN2QtOTg4Ny1kOWQ2 N2YyY2E5NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCjsokMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA5twL/CwHjS2Z7hliDnIqWzfY86I8gNwVMLhFjsEnaPBaG+lvwJ0T9i XtamsJcjIvpv2f+2p3Izp94r+/L1z+Yda9N25XLSK3e1bcdUcDKJBUEIt6g98491 baWB7VpfAuitlnu1u3k5nCBlTu2iJJuskXDCR4WV0cALrETxCdnqmja8pFDFtwJO EMZzl1b57iB8aLSInVrTp0yp7FVBsW12owWi6wJwnwYzN0fM/v4E3zmuaXaju+jr PL3M5PhxKPY/MhB2HUcRINvxArO4LewCAP4xAMpricNcl2r/cnF+L3PKvxhhmSwE UV37yzP4W5KJgNE9KCQ84LbDnr5jMSE= -----END CERTIFICATE-----Generated at Thu Mar 26 08:03:58 2026 by rpki-client