$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/86ea891f-33c3-3e39-a739-97d864a3c250.roa File: 86ea891f-33c3-3e39-a739-97d864a3c250.roa (raw, json) Hash identifier: m3HDxkD8cXet8Eml3dCqTvy4WpkMKYbfKK3n2V4ckWM= Subject key identifier: 6B:C1:48:D5:39:20:A8:30:6C:8A:32:A3:6F:C9:30:C6:28:66:95:22 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584D773A84066BDD1F4F355CB280 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/86ea891f-33c3-3e39-a739-97d864a3c250.roa Signing time: Sat 11 Apr 2026 01:00:24 +0000 ROA not before: Sat 11 Apr 2026 01:00:24 +0000 ROA not after: Fri 10 Jul 2026 01:00:24 +0000 asID: 272299 IP address blocks: 209.61.32.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:77:3a:84:06:6b:dd:1f:4f:35:5c:b2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Apr 11 01:00:24 2026 GMT Not After : Jul 10 01:00:24 2026 GMT Subject: CN=1782ab35-39ba-4441-96fc-7952e7db54ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:32:3a:c9:c6:8d:73:b8:23:22:20:b3:de:15: 7d:df:91:08:90:54:fb:81:30:c9:04:9b:ff:b5:ed: 78:9d:17:00:83:15:14:af:2f:4b:a3:49:59:e4:8b: bf:a0:ec:d5:80:ed:32:c6:38:08:1b:42:26:1f:1c: b5:e5:e2:b2:f8:83:b0:c0:9a:6d:04:8c:52:85:54: 58:20:a0:ac:ec:3c:8d:d5:26:16:db:a4:2b:fb:da: 1a:61:4c:af:b7:53:7d:f3:c3:a0:6b:af:91:90:e2: c5:de:1d:19:e9:2d:34:9b:64:1c:87:89:f5:83:5f: 34:c5:6c:97:63:4d:17:7a:af:bc:f1:74:dc:1d:e1: 25:dc:ae:9d:ac:65:57:9e:59:d3:d4:1a:82:6c:ef: e2:e7:f4:31:50:40:ca:82:13:4d:62:dd:c1:a1:bd: 4f:3a:56:6f:52:45:66:2c:11:93:11:2b:e6:8c:81: 9c:a5:7f:ac:37:19:e3:41:8e:c1:f0:94:c6:2b:60: 27:3e:aa:c0:cc:6b:1b:41:2d:f6:79:71:28:3e:cb: ae:1c:01:2b:02:d3:a0:bf:43:15:10:ca:32:c8:a8: 94:ac:52:bc:6b:28:1c:11:4e:a3:79:c8:6e:d3:1c: eb:8c:e3:ad:f8:d6:cc:44:e6:6d:55:24:23:e2:a4: e9:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:C1:48:D5:39:20:A8:30:6C:8A:32:A3:6F:C9:30:C6:28:66:95:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/86ea891f-33c3-3e39-a739-97d864a3c250.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 209.61.32.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:bf:67:a6:3c:32:71:ae:ef:01:be:65:4a:3f:6e:64:be:f8: 13:b5:98:2e:94:09:3a:65:a4:bd:e2:33:35:41:e7:82:a7:c5: 6c:db:a0:b5:31:01:1f:f9:b5:8a:45:f3:4f:41:c3:59:ba:d8: c7:c2:fc:d9:be:83:b1:f6:6d:ff:f8:77:01:98:d1:52:1d:37: e4:fb:27:c2:2e:58:0d:09:20:c5:d1:29:eb:95:2b:02:3d:53: c0:5b:bd:9c:36:3a:b1:4f:e4:3b:04:a2:d0:a0:76:13:40:27: 4d:f5:27:d7:96:bd:a8:48:57:5f:83:d8:85:59:48:47:a0:4b: ee:40:23:66:1a:cc:d0:eb:fb:ea:1b:8b:86:95:64:c5:eb:ca: 6d:04:74:fd:89:3f:b5:59:58:4a:1f:1a:9f:e9:9e:46:1d:81: a8:34:8b:cb:3c:bc:57:89:b5:e7:b9:3d:7b:59:89:04:3d:d4: 26:b8:02:01:73:d9:00:a2:e2:16:34:e2:32:91:05:e7:f3:48: 45:68:76:77:99:26:7f:17:d3:25:df:59:23:63:71:84:30:19: 3e:72:1e:97:25:48:d4:1f:43:8f:cf:7e:cd:a8:43:2f:ad:68: 8d:a5:8a:6e:c1:59:35:c3:0a:3d:88:6f:b0:43:3f:69:48:7f: f6:79:99:a4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE13OoQGa90fTzVcsoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDQxMTAxMDAyNFoXDTI2MDcxMDAxMDAyNFowLzEtMCsGA1UEAxMk MTc4MmFiMzUtMzliYS00NDQxLTk2ZmMtNzk1MmU3ZGI1NGFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmTI6ycaNc7gjIiCz3hV935EIkFT7gTDJBJv/ te14nRcAgxUUry9Lo0lZ5Iu/oOzVgO0yxjgIG0ImHxy15eKy+IOwwJptBIxShVRY IKCs7DyN1SYW26Qr+9oaYUyvt1N988Oga6+RkOLF3h0Z6S00m2Qch4n1g180xWyX Y00Xeq+88XTcHeEl3K6drGVXnlnT1BqCbO/i5/QxUEDKghNNYt3Bob1POlZvUkVm LBGTESvmjIGcpX+sNxnjQY7B8JTGK2AnPqrAzGsbQS32eXEoPsuuHAErAtOgv0MV EMoyyKiUrFK8aygcEU6jechu0xzrjOOt+NbMROZtVSQj4qTpHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGvBSNU5IKgwbIoyo2/JMMYoZpUiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvODZlYTg5MWYtMzNjMy0z ZTM5LWE3MzktOTdkODY0YTNjMjUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0T0gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEK/Z6Y8MnGu7wG+ZUo/bmS++BO1mC6UCTplpL3iMzVB54KnxWzboLUx AR/5tYpF809Bw1m62MfC/Nm+g7H2bf/4dwGY0VIdN+T7J8IuWA0JIMXRKeuVKwI9 U8BbvZw2OrFP5DsEotCgdhNAJ031J9eWvahIV1+D2IVZSEegS+5AI2YazNDr++ob i4aVZMXrym0EdP2JP7VZWEofGp/pnkYdgag0i8s8vFeJtee5PXtZiQQ91Ca4AgFz 2QCi4hY04jKRBefzSEVodneZJn8X0yXfWSNjcYQwGT5yHpclSNQfQ4/Pfs2oQy+t aI2lim7BWTXDCj2Ib7BDP2lIf/Z5maQ= -----END CERTIFICATE-----Generated at Fri Apr 17 14:47:10 2026 by rpki-client