$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec/b898b21d-9c3f-3841-a02a-e48a7ba02c88.roa File: b898b21d-9c3f-3841-a02a-e48a7ba02c88.roa (raw, json) Hash identifier: 4Ig3SAtbwYDYDNjnD86hkpkvATzvDXrJkSoFqu26amE= Subject key identifier: 86:D1:70:D6:84:8A:DD:33:A8:2D:57:8B:63:4E:C8:39:5A:B7:C9:A4 Certificate issuer: /CN=1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec Certificate serial: 010D0C9F4328584F03A78D965A78AC046E7F5480 Authority key identifier: E1:C2:A2:5D:D1:A4:70:14:D7:89:FE:29:90:E5:B9:2B:B6:BB:77:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec/b898b21d-9c3f-3841-a02a-e48a7ba02c88.roa Signing time: Mon 31 Aug 2026 01:00:12 +0000 ROA not before: Mon 31 Aug 2026 01:00:12 +0000 ROA not after: Sun 29 Nov 2026 02:00:12 +0000 asID: 400238 IP address blocks: 216.87.35.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:03:a7:8d:96:5a:78:ac:04:6e:7f:54:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec Validity Not Before: Aug 31 01:00:12 2026 GMT Not After : Nov 29 02:00:12 2026 GMT Subject: CN=81918b3d-3576-4c13-9db0-095c0860f338 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:d6:9b:af:94:62:ca:53:6d:fb:26:69:2c:01: 2f:ea:83:f0:1a:40:3e:ad:7d:04:aa:bf:79:3e:44: b8:ab:f2:68:c7:fc:18:11:f5:0f:52:3b:25:50:e0: 9e:f9:d6:da:63:c7:5a:06:44:c5:48:9b:23:d8:7f: 63:c6:b1:84:c7:bc:fa:f4:1e:90:f3:e2:72:81:21: 16:dc:c1:17:c8:65:73:03:ec:34:7d:0d:64:9a:c7: d1:9e:a6:3b:31:79:ef:8a:bb:55:a5:81:dc:fa:ac: f2:72:50:ef:02:bd:ae:1b:7b:89:89:4a:55:ed:48: 0d:83:b5:31:db:69:0e:e1:28:dc:1d:db:66:94:d9: 6d:8a:64:74:f5:ed:13:87:6a:76:fa:c4:56:a4:34: 84:f0:c9:ae:70:bc:39:6c:6f:58:92:b2:49:4c:49: 53:68:e7:99:12:29:e7:4c:1c:44:5c:7b:ce:9a:62: 8a:24:4c:60:1a:cc:b7:b2:41:0c:5b:de:2c:fe:e5: d6:5d:84:3f:8e:c3:e0:04:9c:9e:0f:0b:25:58:35: e0:0c:f8:e4:56:f1:eb:83:03:f8:63:6b:07:fb:11: a9:79:98:58:3d:9f:f5:cc:fe:df:f3:8b:65:6d:0f: 65:bc:ab:0a:5c:24:f3:61:55:e1:3f:39:33:9d:9e: 6c:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:D1:70:D6:84:8A:DD:33:A8:2D:57:8B:63:4E:C8:39:5A:B7:C9:A4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec/b898b21d-9c3f-3841-a02a-e48a7ba02c88.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec.crl X509v3 Authority Key Identifier: keyid:E1:C2:A2:5D:D1:A4:70:14:D7:89:FE:29:90:E5:B9:2B:B6:BB:77:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec.cer sbgp-ipAddrBlock: critical IPv4: 216.87.35.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:43:0c:9c:f0:85:82:62:4c:4d:32:36:1e:0d:2d:84:bb:13: 78:b4:b7:0f:f1:1a:00:25:03:e9:18:4a:96:cb:38:88:37:9c: 7f:a5:3d:a6:48:62:cc:ad:f3:4b:8b:27:95:f4:92:c5:df:f4: 1e:00:b1:5b:d9:06:7d:ce:87:5d:3a:7d:80:9f:55:d2:79:be: 89:cf:9d:05:93:97:4b:8a:37:44:96:af:7a:a3:12:b5:08:94: f2:47:42:f7:f6:e8:29:dc:b6:e7:12:78:d3:ca:3f:14:8b:ca: c8:23:8c:ee:4a:8f:f9:f8:ef:3e:e8:7f:62:49:63:05:58:21: 42:91:c6:24:68:71:21:95:c4:0a:ce:ba:89:76:ed:09:df:57: 2c:0b:38:e5:c7:ca:9a:94:65:9a:5a:44:e5:01:c8:e6:26:b8: a8:dd:31:91:d4:c6:83:c1:dd:65:74:95:0e:6a:c4:8b:da:eb: 4d:11:c3:0b:5a:f5:cd:86:90:67:9e:98:83:74:79:95:e4:07: 22:c2:ff:78:b2:b0:6a:7d:0d:6f:61:4e:db:6e:64:17:15:f0: bd:23:0b:99:f4:60:52:c6:97:83:cb:64:b4:60:70:16:21:f6: 1f:9c:4c:c0:72:7d:2b:bd:8b:e3:18:a0:05:c8:25:b3:79:79: 11:cf:af:07 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8Dp42WWnisBG5/VIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWY2YTZjOGUtYWE3My00ZDgyLWEyYjEtZTYxOWViM2Yy YWVjMB4XDTI2MDgzMTAxMDAxMloXDTI2MTEyOTAyMDAxMlowLzEtMCsGA1UEAxMk ODE5MThiM2QtMzU3Ni00YzEzLTlkYjAtMDk1YzA4NjBmMzM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw9abr5RiylNt+yZpLAEv6oPwGkA+rX0Eqr95 PkS4q/Jox/wYEfUPUjslUOCe+dbaY8daBkTFSJsj2H9jxrGEx7z69B6Q8+JygSEW 3MEXyGVzA+w0fQ1kmsfRnqY7MXnvirtVpYHc+qzyclDvAr2uG3uJiUpV7UgNg7Ux 22kO4SjcHdtmlNltimR09e0Th2p2+sRWpDSE8MmucLw5bG9YkrJJTElTaOeZEinn TBxEXHvOmmKKJExgGsy3skEMW94s/uXWXYQ/jsPgBJyeDwslWDXgDPjkVvHrgwP4 Y2sH+xGpeZhYPZ/1zP7f84tlbQ9lvKsKXCTzYVXhPzkznZ5s3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIbRcNaEit0zqC1Xi2NOyDlat8mkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8xZjZh NmM4ZS1hYTczLTRkODItYTJiMS1lNjE5ZWIzZjJhZWMvYjg5OGIyMWQtOWMzZi0z ODQxLWEwMmEtZTQ4YTdiYTAyYzg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMWY2YTZjOGUtYWE3My00ZDgyLWEy YjEtZTYxOWViM2YyYWVjLzFmNmE2YzhlLWFhNzMtNGQ4Mi1hMmIxLWU2MTllYjNm MmFlYy5jcmwwHwYDVR0jBBgwFoAU4cKiXdGkcBTXif4pkOW5K7a7dxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8xZjZhNmM4ZS1hYTczLTRkODItYTJiMS1lNjE5 ZWIzZjJhZWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2FcjMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACtDDJzwhYJiTE0yNh4NLYS7E3i0tw/xGgAlA+kYSpbLOIg3nH+lPaZI Ysyt80uLJ5X0ksXf9B4AsVvZBn3Oh106fYCfVdJ5vonPnQWTl0uKN0SWr3qjErUI lPJHQvf26CnctucSeNPKPxSLysgjjO5Kj/n47z7of2JJYwVYIUKRxiRocSGVxArO uol27QnfVywLOOXHypqUZZpaROUByOYmuKjdMZHUxoPB3WV0lQ5qxIva600Rwwta 9c2GkGeemIN0eZXkByLC/3iysGp9DW9hTttuZBcV8L0jC5n0YFLGl4PLZLRgcBYh 9h+cTMByfSu9i+MYoAXIJbN5eRHPrwc= -----END CERTIFICATE-----Generated at Mon Sep 21 11:42:07 2026 by rpki-client