$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e633b4b1-c2b2-44d5-a1ec-3fe8e1f9773a/86736a96-ae61-34d5-afd4-91ce542c3947.roa File: 86736a96-ae61-34d5-afd4-91ce542c3947.roa (raw, json) Hash identifier: P1VcFL9APJtDFi5YGpKqOQPNudTaEgdFocZg271Q5yo= Subject key identifier: A0:63:C2:1A:89:51:18:8C:92:5F:D5:0F:A8:EB:03:AF:20:B9:30:C2 Certificate issuer: /CN=e633b4b1-c2b2-44d5-a1ec-3fe8e1f9773a Certificate serial: 010D0C9F4328584F374D2E7BAEB3D5AE0810FE80 Authority key identifier: 4E:6B:2C:DE:04:7A:9D:BE:6D:A4:92:3D:62:DD:65:18:18:1C:B8:AA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e633b4b1-c2b2-44d5-a1ec-3fe8e1f9773a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e633b4b1-c2b2-44d5-a1ec-3fe8e1f9773a/86736a96-ae61-34d5-afd4-91ce542c3947.roa Signing time: Fri 18 Sep 2026 13:00:12 +0000 ROA not before: Fri 18 Sep 2026 13:00:12 +0000 ROA not after: Thu 17 Dec 2026 14:00:12 +0000 asID: 394671 IP address blocks: 167.100.0.0/23 maxlen: 23 216.47.32.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e633b4b1-c2b2-44d5-a1ec-3fe8e1f9773a/e633b4b1-c2b2-44d5-a1ec-3fe8e1f9773a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e633b4b1-c2b2-44d5-a1ec-3fe8e1f9773a/e633b4b1-c2b2-44d5-a1ec-3fe8e1f9773a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e633b4b1-c2b2-44d5-a1ec-3fe8e1f9773a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:37:4d:2e:7b:ae:b3:d5:ae:08:10:fe:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e633b4b1-c2b2-44d5-a1ec-3fe8e1f9773a Validity Not Before: Sep 18 13:00:12 2026 GMT Not After : Dec 17 14:00:12 2026 GMT Subject: CN=62bbf839-d73d-4f61-80b9-c1f5529bd7fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:a5:ac:53:e0:32:d1:1a:7d:b3:f6:8c:d6:69: ff:1e:4f:27:af:c8:89:e9:18:41:d6:04:96:b2:3a: f8:37:da:42:c3:34:01:7f:20:95:97:e5:1f:af:43: 9b:5f:7f:dd:e4:47:a4:43:1c:d3:6a:39:0f:ed:8e: c8:2d:d2:3a:33:ee:b8:e4:6a:71:14:9d:d6:55:be: d9:d3:7b:43:c4:5c:fe:ac:9b:82:0f:5a:84:50:46: 07:13:7d:ec:54:b0:59:ac:11:01:92:ba:8c:87:3f: 20:6c:d3:19:00:eb:0c:cf:4f:ee:ec:7d:32:98:03: 36:b9:c9:4f:36:f6:74:bb:4f:26:37:f3:1f:1a:93: 0c:38:fd:3e:5c:43:24:ae:96:62:fc:79:dd:e4:17: 00:37:4d:c0:0b:ec:33:8e:ff:63:04:ac:c5:13:62: 52:ff:ab:c3:4d:bf:5c:8c:9e:9f:fd:c6:55:29:c5: b9:b7:ec:e5:18:31:73:1f:14:38:cd:7b:d5:17:2c: 41:5f:3e:2b:c7:10:7c:a3:aa:9d:88:b1:30:46:d6: 88:9c:2b:62:04:ac:42:fd:3a:cc:f7:b6:90:54:7a: 4a:10:5b:59:95:aa:f6:d6:9c:c4:c4:21:f6:ae:3b: 5e:ff:fc:00:da:dd:4d:c7:95:90:95:d7:1f:81:a0: 8d:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:63:C2:1A:89:51:18:8C:92:5F:D5:0F:A8:EB:03:AF:20:B9:30:C2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e633b4b1-c2b2-44d5-a1ec-3fe8e1f9773a/86736a96-ae61-34d5-afd4-91ce542c3947.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e633b4b1-c2b2-44d5-a1ec-3fe8e1f9773a/e633b4b1-c2b2-44d5-a1ec-3fe8e1f9773a.crl X509v3 Authority Key Identifier: keyid:4E:6B:2C:DE:04:7A:9D:BE:6D:A4:92:3D:62:DD:65:18:18:1C:B8:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e633b4b1-c2b2-44d5-a1ec-3fe8e1f9773a.cer sbgp-ipAddrBlock: critical IPv4: 167.100.0.0/23 216.47.32.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:ff:5f:14:82:30:c9:33:66:7b:70:08:98:a2:f9:d9:22:7b: bc:a9:34:81:4c:b6:41:f3:63:d7:ce:22:6b:9e:4e:a7:64:0c: 50:ef:38:d5:2d:1b:91:de:d8:08:90:87:e0:11:1d:d0:1e:f2: 90:05:d2:c1:be:d5:27:60:08:eb:a2:e2:1a:3b:59:3e:e0:4f: cc:a8:22:32:e6:7a:e0:7c:74:c1:4e:ba:e5:b7:d6:06:a3:89: 3a:f2:68:a6:e4:50:54:7e:da:1f:41:29:4d:8a:02:97:7b:68: f5:5e:09:f6:92:88:4d:95:9f:40:d7:3a:36:25:3e:75:55:7c: 7d:08:7c:f5:f8:36:69:d9:e4:60:32:42:ce:02:e9:fb:13:f1: 77:0b:56:ec:e3:a0:99:46:83:5b:4b:bb:77:11:df:38:45:78: a3:a6:92:99:0e:cd:a0:9a:c1:df:2c:31:4f:32:61:f6:42:02: a1:3a:f8:bd:52:ec:0d:ba:ad:0c:2f:43:db:c9:51:a9:ca:fb: 67:9b:be:cf:48:e4:a0:47:e9:13:60:5d:92:2b:ff:88:ea:ef: c0:ac:de:24:1d:ff:3d:57:51:a4:b8:f5:c6:26:d1:87:5a:06: 67:8f:3c:2b:14:e8:fa:f8:b8:93:fd:f6:f4:28:32:56:c7:4a: 6f:c6:6a:06 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE83TS57rrPVrggQ/oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTYzM2I0YjEtYzJiMi00NGQ1LWExZWMtM2ZlOGUxZjk3 NzNhMB4XDTI2MDkxODEzMDAxMloXDTI2MTIxNzE0MDAxMlowLzEtMCsGA1UEAxMk NjJiYmY4MzktZDczZC00ZjYxLTgwYjktYzFmNTUyOWJkN2ZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiqWsU+Ay0Rp9s/aM1mn/Hk8nr8iJ6RhB1gSW sjr4N9pCwzQBfyCVl+Ufr0ObX3/d5EekQxzTajkP7Y7ILdI6M+645GpxFJ3WVb7Z 03tDxFz+rJuCD1qEUEYHE33sVLBZrBEBkrqMhz8gbNMZAOsMz0/u7H0ymAM2uclP NvZ0u08mN/MfGpMMOP0+XEMkrpZi/Hnd5BcAN03AC+wzjv9jBKzFE2JS/6vDTb9c jJ6f/cZVKcW5t+zlGDFzHxQ4zXvVFyxBXz4rxxB8o6qdiLEwRtaInCtiBKxC/TrM 97aQVHpKEFtZlar21pzExCH2rjte//wA2t1Nx5WQldcfgaCNVwIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFKBjwhqJURiMkl/VD6jrA68guTDCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9lNjMz YjRiMS1jMmIyLTQ0ZDUtYTFlYy0zZmU4ZTFmOTc3M2EvODY3MzZhOTYtYWU2MS0z NGQ1LWFmZDQtOTFjZTU0MmMzOTQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZTYzM2I0YjEtYzJiMi00NGQ1LWEx ZWMtM2ZlOGUxZjk3NzNhL2U2MzNiNGIxLWMyYjItNDRkNS1hMWVjLTNmZThlMWY5 NzczYS5jcmwwHwYDVR0jBBgwFoAUTmss3gR6nb5tpJI9Yt1lGBgcuKowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9lNjMzYjRiMS1jMmIyLTQ0ZDUtYTFlYy0zZmU4 ZTFmOTc3M2EuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBp2QAAwQC 2C8gMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBACD/XxSCMMkzZntwCJii+dkie7ypNIFMtkHzY9fOImueTqdk DFDvONUtG5He2AiQh+ARHdAe8pAF0sG+1SdgCOui4ho7WT7gT8yoIjLmeuB8dMFO uuW31gajiTryaKbkUFR+2h9BKU2KApd7aPVeCfaSiE2Vn0DXOjYlPnVVfH0IfPX4 NmnZ5GAyQs4C6fsT8XcLVuzjoJlGg1tLu3cR3zhFeKOmkpkOzaCawd8sMU8yYfZC AqE6+L1S7A26rQwvQ9vJUanK+2ebvs9I5KBH6RNgXZIr/4jq78Cs3iQd/z1XUaS4 9cYm0YdaBmePPCsU6Pr4uJP99vQoMlbHSm/GagY= -----END CERTIFICATE-----Generated at Tue Sep 22 21:16:12 2026 by rpki-client