$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b86a4ec3-a3b5-4d72-bee2-f58c3cde01a1/e821c7f2-031f-3fe4-867d-a095b5a7eb0d.roa File: e821c7f2-031f-3fe4-867d-a095b5a7eb0d.roa (raw, json) Hash identifier: FfKDtlDQEOb5SA8C9yEOVyx+AN0psrbZWZh7kbp0o1Y= Subject key identifier: A2:F7:E4:D1:50:F3:C6:E5:75:2A:A3:87:08:26:F3:77:6A:4C:6F:2B Certificate issuer: /CN=b86a4ec3-a3b5-4d72-bee2-f58c3cde01a1 Certificate serial: 010D0C9F4328584F549D6775F8CC7B592EB80E80 Authority key identifier: DD:F6:09:95:17:8B:B7:4A:6E:9C:AA:DF:B0:69:85:38:26:70:0B:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b86a4ec3-a3b5-4d72-bee2-f58c3cde01a1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b86a4ec3-a3b5-4d72-bee2-f58c3cde01a1/e821c7f2-031f-3fe4-867d-a095b5a7eb0d.roa Signing time: Tue 29 Sep 2026 01:00:12 +0000 ROA not before: Tue 29 Sep 2026 01:00:12 +0000 ROA not after: Mon 28 Dec 2026 02:00:12 +0000 asID: 398203 IP address blocks: 142.202.164.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b86a4ec3-a3b5-4d72-bee2-f58c3cde01a1/b86a4ec3-a3b5-4d72-bee2-f58c3cde01a1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b86a4ec3-a3b5-4d72-bee2-f58c3cde01a1/b86a4ec3-a3b5-4d72-bee2-f58c3cde01a1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b86a4ec3-a3b5-4d72-bee2-f58c3cde01a1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:54:9d:67:75:f8:cc:7b:59:2e:b8:0e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b86a4ec3-a3b5-4d72-bee2-f58c3cde01a1 Validity Not Before: Sep 29 01:00:12 2026 GMT Not After : Dec 28 02:00:12 2026 GMT Subject: CN=252e4e47-8566-47cf-847f-b2043aa4bf0b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:76:fe:ef:18:6f:53:a4:65:da:e3:e8:6e:fc: 3c:d4:42:fb:e7:47:0b:7f:c0:9c:a3:b0:95:08:61: 5f:84:e4:cc:97:df:5f:95:ac:ad:1b:15:2c:18:c1: ce:f3:b0:b4:be:1c:a3:93:46:93:2f:4f:a0:d5:e7: 05:a2:f7:91:53:d7:c5:8b:4c:bd:0e:19:71:ea:66: eb:8d:61:35:0b:c3:1b:dc:b8:59:85:a5:5a:20:91: b3:0e:8d:90:ac:c5:02:7d:19:2c:15:20:7b:7c:4b: a3:22:52:65:e1:81:c9:55:f3:df:fc:1a:94:a6:1a: 15:5c:5c:e1:6f:4e:83:8c:42:2b:9b:20:02:a4:bb: 6e:ca:af:72:d2:df:61:35:66:ed:b4:b4:d2:47:b2: 15:cf:fb:0f:62:ac:cd:11:79:a0:34:59:0b:f5:91: 80:3e:10:fc:31:2a:61:14:71:4b:17:8d:7b:c8:13: 72:67:c5:9c:b1:c8:30:67:d7:8a:25:75:f4:21:c6: ff:ed:b3:8a:59:02:af:51:9e:bc:de:30:70:87:0e: fb:9b:49:29:80:4e:c1:d9:6b:62:a1:ff:f1:e8:d1: e2:33:61:50:78:53:65:eb:69:c1:c5:7c:34:a3:df: 2c:5f:80:48:5c:bd:78:66:60:07:9d:41:e5:f9:5b: f4:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:F7:E4:D1:50:F3:C6:E5:75:2A:A3:87:08:26:F3:77:6A:4C:6F:2B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b86a4ec3-a3b5-4d72-bee2-f58c3cde01a1/e821c7f2-031f-3fe4-867d-a095b5a7eb0d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b86a4ec3-a3b5-4d72-bee2-f58c3cde01a1/b86a4ec3-a3b5-4d72-bee2-f58c3cde01a1.crl X509v3 Authority Key Identifier: keyid:DD:F6:09:95:17:8B:B7:4A:6E:9C:AA:DF:B0:69:85:38:26:70:0B:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b86a4ec3-a3b5-4d72-bee2-f58c3cde01a1.cer sbgp-ipAddrBlock: critical IPv4: 142.202.164.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9b:3d:e1:a6:d7:1e:b5:88:dd:23:4c:ee:11:9a:c7:bc:01:d7: 1a:9a:08:cd:93:8e:72:3f:65:98:1c:1d:e8:22:84:ba:42:b3: 5a:7e:ed:99:5a:c2:06:a4:d2:08:fb:42:04:13:62:44:1c:0a: aa:14:26:5a:d1:7c:8d:48:52:03:e1:86:a7:a5:99:22:09:1b: cd:12:f2:94:28:00:ed:9a:62:ce:f4:60:be:ec:4d:46:9a:15: 2d:bf:0b:f0:66:84:6b:d8:af:95:72:09:2d:0c:21:a1:d5:01: 98:83:87:97:d7:50:95:84:b9:1e:ea:71:75:de:92:e9:e3:6f: 0c:64:1f:36:04:c9:f0:e5:9a:48:bb:07:fd:33:a3:fc:97:65: f2:ed:4e:9a:f9:e8:f5:be:d5:57:8c:50:1a:89:30:e5:4d:da: 32:59:cc:0e:0f:f0:e9:89:3c:a1:3a:fb:cd:60:6f:cf:d8:7a: 99:e2:b9:fa:10:74:d9:6e:dc:ba:27:7d:cc:ca:39:68:bf:83: 8a:35:e1:c2:31:e5:94:0f:85:aa:d8:cb:d9:71:9d:0a:a7:19: 24:5c:0d:22:e0:5b:cf:7a:00:ba:b9:11:80:fc:5a:ed:cd:1e: 19:e5:72:f7:48:95:8d:83:54:4b:41:4c:45:78:ed:59:6d:62: 44:75:66:28 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9UnWd1+Mx7WS64DoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjg2YTRlYzMtYTNiNS00ZDcyLWJlZTItZjU4YzNjZGUw MWExMB4XDTI2MDkyOTAxMDAxMloXDTI2MTIyODAyMDAxMlowLzEtMCsGA1UEAxMk MjUyZTRlNDctODU2Ni00N2NmLTg0N2YtYjIwNDNhYTRiZjBiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqnb+7xhvU6Rl2uPobvw81EL750cLf8Cco7CV CGFfhOTMl99flaytGxUsGMHO87C0vhyjk0aTL0+g1ecFoveRU9fFi0y9Dhlx6mbr jWE1C8Mb3LhZhaVaIJGzDo2QrMUCfRksFSB7fEujIlJl4YHJVfPf/BqUphoVXFzh b06DjEIrmyACpLtuyq9y0t9hNWbttLTSR7IVz/sPYqzNEXmgNFkL9ZGAPhD8MSph FHFLF417yBNyZ8WcscgwZ9eKJXX0Icb/7bOKWQKvUZ683jBwhw77m0kpgE7B2Wti of/x6NHiM2FQeFNl62nBxXw0o98sX4BIXL14ZmAHnUHl+Vv0TQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKL35NFQ88bldSqjhwgm83dqTG8rMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iODZh NGVjMy1hM2I1LTRkNzItYmVlMi1mNThjM2NkZTAxYTEvZTgyMWM3ZjItMDMxZi0z ZmU0LTg2N2QtYTA5NWI1YTdlYjBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjg2YTRlYzMtYTNiNS00ZDcyLWJl ZTItZjU4YzNjZGUwMWExL2I4NmE0ZWMzLWEzYjUtNGQ3Mi1iZWUyLWY1OGMzY2Rl MDFhMS5jcmwwHwYDVR0jBBgwFoAU3fYJlReLt0punKrfsGmFOCZwCxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iODZhNGVjMy1hM2I1LTRkNzItYmVlMi1mNThj M2NkZTAxYTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCjsqkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJs94abXHrWI3SNM7hGax7wB1xqaCM2TjnI/ZZgcHegihLpCs1p+7Zla wgak0gj7QgQTYkQcCqoUJlrRfI1IUgPhhqelmSIJG80S8pQoAO2aYs70YL7sTUaa FS2/C/BmhGvYr5VyCS0MIaHVAZiDh5fXUJWEuR7qcXXekunjbwxkHzYEyfDlmki7 B/0zo/yXZfLtTpr56PW+1VeMUBqJMOVN2jJZzA4P8OmJPKE6+81gb8/YepniufoQ dNlu3LonfczKOWi/g4o14cIx5ZQPharYy9lxnQqnGSRcDSLgW896ALq5EYD8Wu3N HhnlcvdIlY2DVEtBTEV47VltYkR1Zig= -----END CERTIFICATE-----Generated at Tue Sep 29 13:19:11 2026 by rpki-client