$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b86a4ec3-a3b5-4d72-bee2-f58c3cde01a1/7714f8b4-e08c-3ecd-b63d-aac5909ad71d.roa File: 7714f8b4-e08c-3ecd-b63d-aac5909ad71d.roa (raw, json) Hash identifier: qYADh66HcbQGaJl/C0IyvzvX0kcowcUUj4ETdYGoWOE= Subject key identifier: 3A:2C:0E:0B:EE:E9:E8:D9:B0:E3:56:AD:40:67:EC:AF:04:C8:9F:50 Certificate issuer: /CN=b86a4ec3-a3b5-4d72-bee2-f58c3cde01a1 Certificate serial: 010D0C9F4328584D300A6215661C512FEDE3277C Authority key identifier: DD:F6:09:95:17:8B:B7:4A:6E:9C:AA:DF:B0:69:85:38:26:70:0B:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b86a4ec3-a3b5-4d72-bee2-f58c3cde01a1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b86a4ec3-a3b5-4d72-bee2-f58c3cde01a1/7714f8b4-e08c-3ecd-b63d-aac5909ad71d.roa Signing time: Mon 16 Mar 2026 13:00:40 +0000 ROA not before: Mon 16 Mar 2026 13:00:40 +0000 ROA not after: Sun 14 Jun 2026 13:00:40 +0000 asID: 398203 IP address blocks: 170.117.176.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b86a4ec3-a3b5-4d72-bee2-f58c3cde01a1/b86a4ec3-a3b5-4d72-bee2-f58c3cde01a1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b86a4ec3-a3b5-4d72-bee2-f58c3cde01a1/b86a4ec3-a3b5-4d72-bee2-f58c3cde01a1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b86a4ec3-a3b5-4d72-bee2-f58c3cde01a1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:30:0a:62:15:66:1c:51:2f:ed:e3:27:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b86a4ec3-a3b5-4d72-bee2-f58c3cde01a1 Validity Not Before: Mar 16 13:00:40 2026 GMT Not After : Jun 14 13:00:40 2026 GMT Subject: CN=12efd700-6359-4069-9418-285e21eaa39e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:02:24:98:a3:95:70:f3:96:d3:83:6c:0e:c6: cd:86:a1:65:e7:ba:eb:81:5e:c4:ff:b7:3f:94:61: 98:53:f5:5e:07:12:af:61:2d:67:f2:89:f5:13:cb: 77:44:f6:a5:d0:58:8d:70:61:5e:11:6b:79:4e:c9: b1:ea:30:88:61:2c:5a:05:f2:f9:96:84:2e:47:55: b4:52:5d:2a:a4:42:e8:e4:04:aa:d4:a6:9f:73:27: 55:a9:a9:c3:8b:d7:e9:85:f8:65:b1:24:0d:55:80: 12:2c:a6:25:bf:4d:ee:bf:2e:20:e3:ac:e9:b1:8a: f9:9b:0b:e7:19:d9:b9:3d:a8:7d:56:ea:bb:47:62: 6d:6e:07:ee:f5:76:10:83:d5:2c:48:ae:5c:dd:aa: 3b:d1:c4:1a:06:84:e9:1a:76:11:21:54:53:56:ef: 7a:c9:cf:48:71:69:bf:a8:18:ba:69:aa:0c:2a:f2: a9:bd:97:3a:a4:46:61:ca:bd:d3:b9:9f:0f:0f:5e: cf:c8:7b:d4:96:f0:aa:d6:10:2b:af:57:d0:83:f1: 36:47:0b:cd:30:89:3a:ff:04:00:59:f3:ce:ef:63: de:ef:9f:fa:97:0e:c6:03:8f:ce:e9:af:89:86:09: 21:70:6e:05:c7:ae:98:7d:fb:d8:d9:64:17:75:65: 0a:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:2C:0E:0B:EE:E9:E8:D9:B0:E3:56:AD:40:67:EC:AF:04:C8:9F:50 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b86a4ec3-a3b5-4d72-bee2-f58c3cde01a1/7714f8b4-e08c-3ecd-b63d-aac5909ad71d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b86a4ec3-a3b5-4d72-bee2-f58c3cde01a1/b86a4ec3-a3b5-4d72-bee2-f58c3cde01a1.crl X509v3 Authority Key Identifier: keyid:DD:F6:09:95:17:8B:B7:4A:6E:9C:AA:DF:B0:69:85:38:26:70:0B:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b86a4ec3-a3b5-4d72-bee2-f58c3cde01a1.cer sbgp-ipAddrBlock: critical IPv4: 170.117.176.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:ac:ba:be:f7:4f:dc:15:04:c3:a1:e4:80:71:21:0b:72:4d: 4f:a0:48:af:f7:a4:37:71:b8:9b:a1:42:a6:85:53:c3:a8:9b: b5:e9:83:e2:e4:2c:71:8f:c2:f2:05:41:38:c9:4a:58:a6:ab: a6:58:4b:67:2e:08:15:0b:7c:3f:2b:62:8c:38:3f:76:7b:3e: f1:f8:ea:f8:d3:78:24:5d:f8:74:80:a5:eb:4e:c0:d2:4e:b4: 06:c7:1f:c6:4c:cb:d3:ff:9f:e2:0b:bd:ff:0b:79:7c:e2:6f: 5f:a1:78:07:bf:bf:40:3c:db:e9:26:7b:fb:53:d0:8e:78:f5: ce:39:0b:c4:e2:7b:c8:90:74:dc:8f:70:b6:be:56:87:60:3a: b6:f7:32:8c:85:aa:64:3c:54:24:7c:2f:84:06:16:e4:fb:cb: 45:32:c9:63:b3:19:f7:f9:e3:36:13:97:45:79:bb:eb:08:e6: a8:c6:04:b9:33:ee:aa:26:d4:15:7c:18:0f:35:6a:99:72:a7: 1c:03:71:4f:7a:b9:9f:e7:69:39:e7:41:8b:64:b8:00:aa:25: ca:cc:a9:4a:fe:f7:a2:2e:9b:83:a0:ee:8a:73:44:cf:19:0e: 9d:52:81:6d:98:24:67:16:f3:1c:bc:3f:b4:6e:16:18:6e:d7: 1b:5a:f3:83 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0wCmIVZhxRL+3jJ3wwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjg2YTRlYzMtYTNiNS00ZDcyLWJlZTItZjU4YzNjZGUw MWExMB4XDTI2MDMxNjEzMDA0MFoXDTI2MDYxNDEzMDA0MFowLzEtMCsGA1UEAxMk MTJlZmQ3MDAtNjM1OS00MDY5LTk0MTgtMjg1ZTIxZWFhMzllMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjQIkmKOVcPOW04NsDsbNhqFl57rrgV7E/7c/ lGGYU/VeBxKvYS1n8on1E8t3RPal0FiNcGFeEWt5Tsmx6jCIYSxaBfL5loQuR1W0 Ul0qpELo5ASq1KafcydVqanDi9fphfhlsSQNVYASLKYlv03uvy4g46zpsYr5mwvn Gdm5Pah9Vuq7R2Jtbgfu9XYQg9UsSK5c3ao70cQaBoTpGnYRIVRTVu96yc9IcWm/ qBi6aaoMKvKpvZc6pEZhyr3TuZ8PD17PyHvUlvCq1hArr1fQg/E2RwvNMIk6/wQA WfPO72Pe75/6lw7GA4/O6a+JhgkhcG4Fx66YffvY2WQXdWUKNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDosDgvu6ejZsONWrUBn7K8EyJ9QMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iODZh NGVjMy1hM2I1LTRkNzItYmVlMi1mNThjM2NkZTAxYTEvNzcxNGY4YjQtZTA4Yy0z ZWNkLWI2M2QtYWFjNTkwOWFkNzFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjg2YTRlYzMtYTNiNS00ZDcyLWJl ZTItZjU4YzNjZGUwMWExL2I4NmE0ZWMzLWEzYjUtNGQ3Mi1iZWUyLWY1OGMzY2Rl MDFhMS5jcmwwHwYDVR0jBBgwFoAU3fYJlReLt0punKrfsGmFOCZwCxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iODZhNGVjMy1hM2I1LTRkNzItYmVlMi1mNThj M2NkZTAxYTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEqnWwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAusur73T9wVBMOh5IBxIQtyTU+gSK/3pDdxuJuhQqaFU8Oom7Xpg+Lk LHGPwvIFQTjJSlimq6ZYS2cuCBULfD8rYow4P3Z7PvH46vjTeCRd+HSApetOwNJO tAbHH8ZMy9P/n+ILvf8LeXzib1+heAe/v0A82+kme/tT0I549c45C8Tie8iQdNyP cLa+VodgOrb3MoyFqmQ8VCR8L4QGFuT7y0UyyWOzGff54zYTl0V5u+sI5qjGBLkz 7qom1BV8GA81aplypxwDcU96uZ/naTnnQYtkuACqJcrMqUr+96Ium4Og7opzRM8Z Dp1SgW2YJGcW8xy8P7RuFhhu1xta84M= -----END CERTIFICATE-----Generated at Thu Mar 26 09:57:47 2026 by rpki-client