$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b86a4ec3-a3b5-4d72-bee2-f58c3cde01a1/e821c7f2-031f-3fe4-867d-a095b5a7eb0d.roa File: e821c7f2-031f-3fe4-867d-a095b5a7eb0d.roa (raw, json) Hash identifier: U6Mvy2OERuYh0ABIcu12y4TiL03KyTV4tLHI89vhzVc= Subject key identifier: A9:7B:20:D8:3A:1F:26:DF:36:90:96:9E:67:EE:F1:D3:4C:44:28:84 Certificate issuer: /CN=b86a4ec3-a3b5-4d72-bee2-f58c3cde01a1 Certificate serial: 010D0C9F4328584D300A5A3AC3049D13A1A04A80 Authority key identifier: DD:F6:09:95:17:8B:B7:4A:6E:9C:AA:DF:B0:69:85:38:26:70:0B:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b86a4ec3-a3b5-4d72-bee2-f58c3cde01a1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b86a4ec3-a3b5-4d72-bee2-f58c3cde01a1/e821c7f2-031f-3fe4-867d-a095b5a7eb0d.roa Signing time: Mon 16 Mar 2026 13:00:40 +0000 ROA not before: Mon 16 Mar 2026 13:00:40 +0000 ROA not after: Sun 14 Jun 2026 13:00:40 +0000 asID: 398203 IP address blocks: 142.202.164.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b86a4ec3-a3b5-4d72-bee2-f58c3cde01a1/b86a4ec3-a3b5-4d72-bee2-f58c3cde01a1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b86a4ec3-a3b5-4d72-bee2-f58c3cde01a1/b86a4ec3-a3b5-4d72-bee2-f58c3cde01a1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b86a4ec3-a3b5-4d72-bee2-f58c3cde01a1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:30:0a:5a:3a:c3:04:9d:13:a1:a0:4a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b86a4ec3-a3b5-4d72-bee2-f58c3cde01a1 Validity Not Before: Mar 16 13:00:40 2026 GMT Not After : Jun 14 13:00:40 2026 GMT Subject: CN=91c4c66f-8163-48cd-ab5a-7b91028b5815 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:1f:43:35:3b:e1:92:f7:12:20:f8:30:b4:c9: eb:cf:d4:1c:ec:83:7c:cd:b2:f9:fc:29:54:7f:6f: 69:17:80:fa:e7:b5:03:71:9f:8b:ff:cc:74:f4:cf: ea:f2:e7:f0:c9:e1:5c:78:8e:6f:8e:de:78:b2:b7: d6:8e:15:de:ec:57:3c:4d:e3:c2:d4:2b:78:53:7c: 54:7d:ce:03:d6:4b:73:dc:78:7b:d2:b3:66:f2:53: 5c:de:93:56:fe:23:ef:00:54:99:4d:5e:69:10:e1: b6:71:67:c5:15:a4:83:2a:f8:1a:4f:e2:cb:1d:e5: 7a:20:c1:bc:b9:38:84:18:7e:8d:91:23:1b:cb:92: 94:c4:a3:ef:72:c0:e0:ba:1b:e5:9b:2f:ca:73:5b: cb:5e:db:ae:e3:73:6a:1c:43:d0:30:09:5c:f8:67: 70:99:d5:34:1c:8c:e6:db:dc:47:f7:84:18:eb:32: 92:96:a2:af:8f:e6:b7:8d:0c:6e:e4:8e:81:52:00: bf:b8:ec:c7:f9:f4:4e:08:f3:82:94:96:fd:fd:8b: 6c:3a:81:07:1d:86:d0:54:85:c1:4d:1a:00:60:3b: 5c:ae:cb:2c:20:4d:24:14:e1:b6:93:20:6a:cd:fc: af:47:95:ab:86:96:24:73:00:1c:ad:46:31:df:cc: c7:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:7B:20:D8:3A:1F:26:DF:36:90:96:9E:67:EE:F1:D3:4C:44:28:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b86a4ec3-a3b5-4d72-bee2-f58c3cde01a1/e821c7f2-031f-3fe4-867d-a095b5a7eb0d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b86a4ec3-a3b5-4d72-bee2-f58c3cde01a1/b86a4ec3-a3b5-4d72-bee2-f58c3cde01a1.crl X509v3 Authority Key Identifier: keyid:DD:F6:09:95:17:8B:B7:4A:6E:9C:AA:DF:B0:69:85:38:26:70:0B:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b86a4ec3-a3b5-4d72-bee2-f58c3cde01a1.cer sbgp-ipAddrBlock: critical IPv4: 142.202.164.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:9e:11:5f:3c:87:de:d8:e5:bb:f7:c3:62:cf:9c:9d:83:3b: 7b:b8:99:84:5b:f6:3d:5d:e9:ec:a8:0d:c5:3e:43:e6:5e:f3: d0:ca:2e:37:dd:e1:17:8f:5e:9b:1b:a8:44:d9:41:1a:f9:17: 3c:ce:62:1f:d9:a9:52:26:c8:2a:e4:8a:95:68:e5:c0:ea:b7: 39:0b:b5:dc:85:09:a4:73:54:b8:b5:3e:80:4e:6c:41:b9:3b: a8:77:27:bd:23:78:fb:a1:87:fb:88:79:d7:fc:80:d5:90:96: f2:20:60:65:e9:bc:a0:49:91:83:0f:00:0f:7b:0f:54:ec:0a: fb:13:27:36:ce:3e:c7:2c:06:2c:7e:9a:58:05:ab:e7:e6:ed: 61:09:1e:df:58:14:e2:0b:19:42:67:9a:42:a3:e3:b5:63:a3: 92:eb:8e:b7:9e:d5:e0:2d:0b:58:41:8d:3d:1a:7e:3e:9f:17: d4:b9:49:0a:66:c1:0e:cf:5a:3f:c1:1c:12:5e:e2:af:2d:a0: d9:62:93:18:68:d2:1d:b7:9c:4f:47:bb:17:9a:6d:4d:e1:a0: 36:eb:ae:f8:8a:a0:13:40:d9:4e:e1:81:f4:8c:5c:a0:6a:2e: bc:e1:72:f3:26:2e:9b:aa:f5:84:69:24:1a:a6:97:b1:eb:24: af:c8:23:ba -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0wClo6wwSdE6GgSoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjg2YTRlYzMtYTNiNS00ZDcyLWJlZTItZjU4YzNjZGUw MWExMB4XDTI2MDMxNjEzMDA0MFoXDTI2MDYxNDEzMDA0MFowLzEtMCsGA1UEAxMk OTFjNGM2NmYtODE2My00OGNkLWFiNWEtN2I5MTAyOGI1ODE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqB9DNTvhkvcSIPgwtMnrz9Qc7IN8zbL5/ClU f29pF4D657UDcZ+L/8x09M/q8ufwyeFceI5vjt54srfWjhXe7Fc8TePC1Ct4U3xU fc4D1ktz3Hh70rNm8lNc3pNW/iPvAFSZTV5pEOG2cWfFFaSDKvgaT+LLHeV6IMG8 uTiEGH6NkSMby5KUxKPvcsDguhvlmy/Kc1vLXtuu43NqHEPQMAlc+GdwmdU0HIzm 29xH94QY6zKSlqKvj+a3jQxu5I6BUgC/uOzH+fROCPOClJb9/YtsOoEHHYbQVIXB TRoAYDtcrsssIE0kFOG2kyBqzfyvR5WrhpYkcwAcrUYx38zHlQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKl7INg6HybfNpCWnmfu8dNMRCiEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iODZh NGVjMy1hM2I1LTRkNzItYmVlMi1mNThjM2NkZTAxYTEvZTgyMWM3ZjItMDMxZi0z ZmU0LTg2N2QtYTA5NWI1YTdlYjBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjg2YTRlYzMtYTNiNS00ZDcyLWJl ZTItZjU4YzNjZGUwMWExL2I4NmE0ZWMzLWEzYjUtNGQ3Mi1iZWUyLWY1OGMzY2Rl MDFhMS5jcmwwHwYDVR0jBBgwFoAU3fYJlReLt0punKrfsGmFOCZwCxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iODZhNGVjMy1hM2I1LTRkNzItYmVlMi1mNThj M2NkZTAxYTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCjsqkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAOeEV88h97Y5bv3w2LPnJ2DO3u4mYRb9j1d6eyoDcU+Q+Ze89DKLjfd 4RePXpsbqETZQRr5FzzOYh/ZqVImyCrkipVo5cDqtzkLtdyFCaRzVLi1PoBObEG5 O6h3J70jePuhh/uIedf8gNWQlvIgYGXpvKBJkYMPAA97D1TsCvsTJzbOPscsBix+ mlgFq+fm7WEJHt9YFOILGUJnmkKj47Vjo5Lrjree1eAtC1hBjT0afj6fF9S5SQpm wQ7PWj/BHBJe4q8toNlikxho0h23nE9HuxeabU3hoDbrrviKoBNA2U7hgfSMXKBq LrzhcvMmLpuq9YRpJBqml7HrJK/II7o= -----END CERTIFICATE-----Generated at Thu Mar 26 15:01:42 2026 by rpki-client