$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab85686b-bac3-40d2-b46e-f2593fb0bc6b/a86e256b-b4bb-3be0-aaf7-201e06e81a58.roa File: a86e256b-b4bb-3be0-aaf7-201e06e81a58.roa (raw, json) Hash identifier: JKRViIDttKPTBJ+Fw2rWuzJXveL/+JAabIxTfR9Np30= Subject key identifier: 9D:35:8F:7C:2C:5D:D4:F1:A0:41:20:BA:9E:0B:37:38:71:9D:67:93 Certificate issuer: /CN=ab85686b-bac3-40d2-b46e-f2593fb0bc6b Certificate serial: 010D0C9F4328584F189792A42DECF9A55A937280 Authority key identifier: 0E:5E:F6:3E:A7:FF:42:C0:84:5C:18:ED:96:19:B7:6D:8A:D9:86:BE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab85686b-bac3-40d2-b46e-f2593fb0bc6b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab85686b-bac3-40d2-b46e-f2593fb0bc6b/a86e256b-b4bb-3be0-aaf7-201e06e81a58.roa Signing time: Mon 07 Sep 2026 13:00:12 +0000 ROA not before: Mon 07 Sep 2026 13:00:12 +0000 ROA not after: Sun 06 Dec 2026 14:00:12 +0000 asID: 399668 IP address blocks: 198.206.157.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab85686b-bac3-40d2-b46e-f2593fb0bc6b/ab85686b-bac3-40d2-b46e-f2593fb0bc6b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab85686b-bac3-40d2-b46e-f2593fb0bc6b/ab85686b-bac3-40d2-b46e-f2593fb0bc6b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab85686b-bac3-40d2-b46e-f2593fb0bc6b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:18:97:92:a4:2d:ec:f9:a5:5a:93:72:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab85686b-bac3-40d2-b46e-f2593fb0bc6b Validity Not Before: Sep 7 13:00:12 2026 GMT Not After : Dec 6 14:00:12 2026 GMT Subject: CN=ef33d8c0-ca07-4c05-9649-08a324a09240 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:9a:f4:a8:f2:b7:b3:e8:21:2c:56:aa:7f:8c: 83:10:2e:45:3c:5b:0b:85:ed:7e:ef:24:d3:f7:50: 17:e4:a9:83:69:47:0c:6d:60:91:64:ea:0f:39:fe: 50:59:3e:ab:73:b0:01:9f:e3:71:d6:20:6b:25:c3: 7a:53:6e:ef:96:4a:d8:8e:6b:ac:df:78:aa:4e:64: 05:fd:92:54:09:ad:98:1d:bc:e2:b7:e2:1d:95:11: 7b:9c:7a:54:de:0c:85:86:91:c7:d4:ae:8e:e6:c2: 72:93:d1:c0:aa:16:ec:57:68:d0:8c:23:8c:ce:8c: c8:d1:24:c4:a2:48:45:8e:42:3a:d2:72:de:9f:2d: 56:4f:eb:ab:c1:81:c3:34:d8:a1:1a:bc:57:d4:bd: 03:30:09:c3:bd:50:c4:12:22:63:34:a2:8d:bc:3e: 0d:31:3e:e6:13:e0:fb:27:2e:69:3f:36:41:4d:b7: bf:0d:ac:22:eb:66:30:11:40:e2:86:3b:a1:c7:9c: d9:3f:42:d7:f7:a4:9e:d2:39:a0:03:8c:ad:e7:cf: 41:3b:b9:92:00:e0:61:75:46:46:4d:9a:ac:a4:1a: 7c:f4:63:60:b7:5f:63:ae:32:43:98:13:c5:26:8d: 8a:9a:af:0f:91:90:46:3a:64:09:f9:f6:b3:f4:f4: 36:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:35:8F:7C:2C:5D:D4:F1:A0:41:20:BA:9E:0B:37:38:71:9D:67:93 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab85686b-bac3-40d2-b46e-f2593fb0bc6b/a86e256b-b4bb-3be0-aaf7-201e06e81a58.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab85686b-bac3-40d2-b46e-f2593fb0bc6b/ab85686b-bac3-40d2-b46e-f2593fb0bc6b.crl X509v3 Authority Key Identifier: keyid:0E:5E:F6:3E:A7:FF:42:C0:84:5C:18:ED:96:19:B7:6D:8A:D9:86:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab85686b-bac3-40d2-b46e-f2593fb0bc6b.cer sbgp-ipAddrBlock: critical IPv4: 198.206.157.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:e3:64:fc:b3:0a:57:7b:73:95:0d:c9:5e:c4:af:e1:4e:ac: f4:90:06:0f:e6:79:ea:04:94:8f:b4:f8:77:fb:fd:00:b0:85: 79:73:b3:5b:1b:86:9e:ef:35:c6:83:47:29:27:97:8a:00:2d: 88:9f:3c:e4:fa:26:44:3c:66:90:c7:61:d1:db:77:b6:2a:4f: 59:3c:23:06:99:8f:70:7f:a0:15:33:3d:f2:ba:5b:d6:83:ca: e9:ec:7e:aa:07:8a:1b:3c:4f:53:8f:8c:4f:ac:ab:05:05:82: 9a:0c:08:b2:d8:80:43:74:74:7d:cb:63:64:ad:e4:84:79:9c: 17:c4:16:54:29:ff:75:b3:25:23:6b:68:97:cc:17:5b:e2:0e: 03:60:5f:c2:cb:71:1a:e3:cb:1e:7b:dc:16:f3:fb:90:0b:a4: dd:82:db:1b:40:8b:1a:13:52:4d:7e:91:d2:a0:a3:10:8d:75: 6b:7e:7a:37:96:9b:bf:34:b0:a6:ad:09:2e:15:0d:75:72:d1: e3:8a:77:73:c2:bb:65:f0:51:2c:12:a1:12:9f:66:3f:ae:a7: 43:9d:8f:d0:88:96:a2:5a:ec:88:16:f7:9c:26:b3:e6:89:92: 94:9e:ac:53:a4:e3:ed:29:b7:69:34:b2:8e:9a:14:8f:fe:00: 17:6c:2d:ce -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8Yl5KkLez5pVqTcoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWI4NTY4NmItYmFjMy00MGQyLWI0NmUtZjI1OTNmYjBi YzZiMB4XDTI2MDkwNzEzMDAxMloXDTI2MTIwNjE0MDAxMlowLzEtMCsGA1UEAxMk ZWYzM2Q4YzAtY2EwNy00YzA1LTk2NDktMDhhMzI0YTA5MjQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjZr0qPK3s+ghLFaqf4yDEC5FPFsLhe1+7yTT 91AX5KmDaUcMbWCRZOoPOf5QWT6rc7ABn+Nx1iBrJcN6U27vlkrYjmus33iqTmQF /ZJUCa2YHbzit+IdlRF7nHpU3gyFhpHH1K6O5sJyk9HAqhbsV2jQjCOMzozI0STE okhFjkI60nLeny1WT+urwYHDNNihGrxX1L0DMAnDvVDEEiJjNKKNvD4NMT7mE+D7 Jy5pPzZBTbe/Dawi62YwEUDihjuhx5zZP0LX96Se0jmgA4yt589BO7mSAOBhdUZG TZqspBp89GNgt19jrjJDmBPFJo2Kmq8PkZBGOmQJ+faz9PQ2zwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ01j3wsXdTxoEEgup4LNzhxnWeTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9hYjg1 Njg2Yi1iYWMzLTQwZDItYjQ2ZS1mMjU5M2ZiMGJjNmIvYTg2ZTI1NmItYjRiYi0z YmUwLWFhZjctMjAxZTA2ZTgxYTU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYWI4NTY4NmItYmFjMy00MGQyLWI0 NmUtZjI1OTNmYjBiYzZiL2FiODU2ODZiLWJhYzMtNDBkMi1iNDZlLWYyNTkzZmIw YmM2Yi5jcmwwHwYDVR0jBBgwFoAUDl72Pqf/QsCEXBjtlhm3bYrZhr4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9hYjg1Njg2Yi1iYWMzLTQwZDItYjQ2ZS1mMjU5 M2ZiMGJjNmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxs6dMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH/jZPyzCld7c5UNyV7Er+FOrPSQBg/meeoElI+0+Hf7/QCwhXlzs1sb hp7vNcaDRyknl4oALYifPOT6JkQ8ZpDHYdHbd7YqT1k8IwaZj3B/oBUzPfK6W9aD yunsfqoHihs8T1OPjE+sqwUFgpoMCLLYgEN0dH3LY2St5IR5nBfEFlQp/3WzJSNr aJfMF1viDgNgX8LLcRrjyx573Bbz+5ALpN2C2xtAixoTUk1+kdKgoxCNdWt+ejeW m780sKatCS4VDXVy0eOKd3PCu2XwUSwSoRKfZj+up0Odj9CIlqJa7IgW95wms+aJ kpSerFOk4+0pt2k0so6aFI/+ABdsLc4= -----END CERTIFICATE-----Generated at Tue Sep 22 10:02:13 2026 by rpki-client