$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/86ec9619-2868-36f8-b49d-03305645f65d.roa File: 86ec9619-2868-36f8-b49d-03305645f65d.roa (raw, json) Hash identifier: ww96rr8kH4Pecy/wm54pjo3f7UqBq1P9RLi7aUxU1vA= Subject key identifier: E2:81:81:DC:F8:7A:8D:96:3F:3F:96:4C:06:AA:C4:63:E9:06:99:C9 Certificate issuer: /CN=286639fc-94c4-4d6a-9de1-f1b3ebb5f758 Certificate serial: 010D0C9F4328584D4D5A42A21A8E4BAE109A3480 Authority key identifier: 63:C7:11:22:88:E9:0B:38:04:E5:58:20:EC:45:6D:8A:6F:96:C0:01 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/86ec9619-2868-36f8-b49d-03305645f65d.roa Signing time: Fri 27 Mar 2026 01:00:31 +0000 ROA not before: Fri 27 Mar 2026 01:00:31 +0000 ROA not after: Thu 25 Jun 2026 01:00:31 +0000 asID: 33164 IP address blocks: 209.58.101.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4d:5a:42:a2:1a:8e:4b:ae:10:9a:34:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=286639fc-94c4-4d6a-9de1-f1b3ebb5f758 Validity Not Before: Mar 27 01:00:31 2026 GMT Not After : Jun 25 01:00:31 2026 GMT Subject: CN=66671df5-4dff-4a49-a710-dd61f47ad10b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:e9:bd:71:44:24:b6:3a:ba:62:4c:7d:8b:e0: 71:d9:8a:8d:72:ed:80:ca:20:a9:11:de:97:9c:7a: 37:32:cc:29:2d:cf:37:ce:1e:21:9b:46:f6:c2:29: 0d:9d:4e:01:2c:dc:a7:bd:d8:43:c8:62:11:e8:07: de:b7:f0:a4:fe:51:cd:d7:8f:2b:a1:76:dc:0e:10: 8a:c2:b8:12:46:1d:08:79:96:c1:31:a6:b3:5f:10: ed:7c:33:da:d8:96:bc:d5:89:65:0b:40:26:df:3b: 6a:ad:84:65:aa:e2:81:80:64:49:39:aa:e2:34:cd: 1c:c7:bc:8c:34:b6:04:b7:1f:19:82:67:e8:df:b8: 7f:61:76:98:06:a0:43:68:11:a0:c3:1f:41:ac:b0: b7:48:17:75:bf:9f:d4:1d:ec:27:6d:a2:11:d1:6a: d0:0d:0c:d6:93:13:95:81:df:aa:7d:0b:46:4e:15: f5:73:39:4c:5b:22:0b:ee:aa:3b:05:f2:e8:76:75: da:9f:af:bb:2a:d5:d7:29:6a:b5:8b:29:3b:df:e8: 21:ff:3b:9c:c5:74:af:e2:8d:65:29:5a:e0:ce:a0: fe:8f:0a:82:32:01:e7:d1:bc:31:fe:f7:c0:bc:df: 7a:d6:e0:e2:13:6f:fd:50:e5:37:1b:c5:8b:ea:bd: c1:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:81:81:DC:F8:7A:8D:96:3F:3F:96:4C:06:AA:C4:63:E9:06:99:C9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/86ec9619-2868-36f8-b49d-03305645f65d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.crl X509v3 Authority Key Identifier: keyid:63:C7:11:22:88:E9:0B:38:04:E5:58:20:EC:45:6D:8A:6F:96:C0:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.cer sbgp-ipAddrBlock: critical IPv4: 209.58.101.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:45:e2:dc:97:29:79:76:4d:1a:84:4c:ce:23:84:b8:bb:36: 8b:a8:d7:cc:5f:f6:35:aa:84:dc:97:ae:cd:c7:71:e0:25:94: 7d:8f:8c:06:9f:a2:c1:7b:20:5a:b3:32:1e:53:60:3f:b4:64: 64:3e:32:c9:22:63:e5:d9:2e:70:4f:33:ce:ff:cf:47:8e:55: 24:6d:0a:d7:8e:85:9c:56:41:f0:56:d1:29:9a:f9:1d:a1:b6: c8:11:f6:4e:c0:af:ef:b3:c6:c9:3a:63:19:09:7a:d5:95:fc: 52:a0:4e:53:c5:95:e0:8a:a9:95:53:77:9c:77:d3:41:b5:f4: e1:ea:51:30:04:5a:f4:c0:ba:3f:4a:ba:54:61:13:38:f9:0f: 12:99:41:22:33:bd:1c:fc:d8:2a:23:bd:3b:be:a7:77:09:dc: 39:75:23:f7:6c:89:d7:cc:55:7f:d9:4f:77:2f:ef:96:cf:1a: 24:79:88:9e:61:0f:18:d4:51:ec:69:78:f5:86:a8:e2:fd:24: 7e:30:fe:b8:62:e0:a8:84:9f:9c:fb:87:d4:ea:1e:d1:0d:44: e1:c3:51:4a:50:f2:1e:18:b8:5a:8d:f9:86:53:f9:e3:35:a1: 76:ca:c4:c7:bd:c3:61:e3:7d:6c:dd:c6:7f:a2:b2:9d:fc:f6: 64:dc:d6:c8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1NWkKiGo5LrhCaNIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjg2NjM5ZmMtOTRjNC00ZDZhLTlkZTEtZjFiM2ViYjVm NzU4MB4XDTI2MDMyNzAxMDAzMVoXDTI2MDYyNTAxMDAzMVowLzEtMCsGA1UEAxMk NjY2NzFkZjUtNGRmZi00YTQ5LWE3MTAtZGQ2MWY0N2FkMTBiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsem9cUQktjq6Ykx9i+Bx2YqNcu2AyiCpEd6X nHo3MswpLc83zh4hm0b2wikNnU4BLNynvdhDyGIR6Afet/Ck/lHN148roXbcDhCK wrgSRh0IeZbBMaazXxDtfDPa2Ja81YllC0Am3ztqrYRlquKBgGRJOariNM0cx7yM NLYEtx8Zgmfo37h/YXaYBqBDaBGgwx9BrLC3SBd1v5/UHewnbaIR0WrQDQzWkxOV gd+qfQtGThX1czlMWyIL7qo7BfLodnXan6+7KtXXKWq1iyk73+gh/zucxXSv4o1l KVrgzqD+jwqCMgHn0bwx/vfAvN961uDiE2/9UOU3G8WL6r3BTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOKBgdz4eo2WPz+WTAaqxGPpBpnJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODY2 MzlmYy05NGM0LTRkNmEtOWRlMS1mMWIzZWJiNWY3NTgvODZlYzk2MTktMjg2OC0z NmY4LWI0OWQtMDMzMDU2NDVmNjVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjg2NjM5ZmMtOTRjNC00ZDZhLTlk ZTEtZjFiM2ViYjVmNzU4LzI4NjYzOWZjLTk0YzQtNGQ2YS05ZGUxLWYxYjNlYmI1 Zjc1OC5jcmwwHwYDVR0jBBgwFoAUY8cRIojpCzgE5Vgg7EVtim+WwAEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODY2MzlmYy05NGM0LTRkNmEtOWRlMS1mMWIz ZWJiNWY3NTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0TplMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFlF4tyXKXl2TRqETM4jhLi7Nouo18xf9jWqhNyXrs3HceAllH2PjAaf osF7IFqzMh5TYD+0ZGQ+MskiY+XZLnBPM87/z0eOVSRtCteOhZxWQfBW0Sma+R2h tsgR9k7Ar++zxsk6YxkJetWV/FKgTlPFleCKqZVTd5x300G19OHqUTAEWvTAuj9K ulRhEzj5DxKZQSIzvRz82CojvTu+p3cJ3Dl1I/dsidfMVX/ZT3cv75bPGiR5iJ5h DxjUUexpePWGqOL9JH4w/rhi4KiEn5z7h9TqHtENROHDUUpQ8h4YuFqN+YZT+eM1 oXbKxMe9w2HjfWzdxn+isp389mTc1sg= -----END CERTIFICATE-----Generated at Fri Apr 17 20:42:59 2026 by rpki-client