$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/86cd88aa-b3dd-4226-a7ab-c41221343e0b/8913fb72-4b70-362e-b2bc-5b03af1cc39e.roa File: 8913fb72-4b70-362e-b2bc-5b03af1cc39e.roa (raw, json) Hash identifier: K7vf3Cw7N10iKgoTKMm/FyxW4J4wNwuK1h1i5nib0Uo= Subject key identifier: AB:C8:28:AB:18:42:DF:40:6C:E2:80:3C:11:52:06:1B:0C:88:C5:C6 Certificate issuer: /CN=86cd88aa-b3dd-4226-a7ab-c41221343e0b Certificate serial: 010D0C9F4328584CFF4B4BE2BE1B929D84D4DA40 Authority key identifier: 35:92:21:4D:14:54:D2:1F:CB:15:7D:07:31:D6:58:71:85:56:D5:85 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/86cd88aa-b3dd-4226-a7ab-c41221343e0b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/86cd88aa-b3dd-4226-a7ab-c41221343e0b/8913fb72-4b70-362e-b2bc-5b03af1cc39e.roa Signing time: Fri 27 Feb 2026 01:57:29 +0000 ROA not before: Fri 27 Feb 2026 01:57:29 +0000 ROA not after: Thu 28 May 2026 00:57:29 +0000 asID: 40111 IP address blocks: 170.118.248.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/86cd88aa-b3dd-4226-a7ab-c41221343e0b/86cd88aa-b3dd-4226-a7ab-c41221343e0b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/86cd88aa-b3dd-4226-a7ab-c41221343e0b/86cd88aa-b3dd-4226-a7ab-c41221343e0b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/86cd88aa-b3dd-4226-a7ab-c41221343e0b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ff:4b:4b:e2:be:1b:92:9d:84:d4:da:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86cd88aa-b3dd-4226-a7ab-c41221343e0b Validity Not Before: Feb 27 01:57:29 2026 GMT Not After : May 28 00:57:29 2026 GMT Subject: CN=3ea8e4b1-0494-43dc-a297-7e180ad31ba6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:64:58:fd:28:04:69:35:e5:f2:d3:51:5a:5b: 03:76:09:b0:6c:ec:e5:80:55:7b:34:d0:c9:57:64: ca:85:db:f5:d4:b0:81:7d:26:42:b9:38:59:18:ad: 62:84:5e:ab:e1:60:cd:2c:2b:24:69:42:e0:ef:81: 57:78:72:63:97:ee:56:31:dc:92:de:86:98:58:b8: c2:24:a0:c2:90:4a:89:dc:9a:27:97:0c:86:43:71: a3:14:68:38:2b:81:a5:c0:c2:86:79:bf:2d:1e:a1: fe:a3:22:bd:d8:58:28:4b:45:45:75:0f:9e:f1:65: 23:10:fc:06:30:1c:c3:5c:e9:91:4b:53:dd:c1:e7: 37:8d:12:b3:5f:4b:18:b9:70:f8:4c:f8:51:19:74: 3c:03:4e:6c:8b:a2:f4:9f:6f:81:04:a9:f2:5b:d7: 43:3e:98:3e:9c:4e:5b:98:83:8b:db:43:21:16:5d: ba:6f:90:43:4b:24:db:d3:c9:63:0c:50:0e:3f:4e: 33:06:e3:84:8e:f1:63:91:70:19:94:a1:47:60:61: 4e:78:6d:df:81:08:a2:2a:aa:b8:50:6d:e3:19:66: 84:7e:ae:e8:f4:d5:0e:ac:d1:29:37:45:e0:ce:cc: 73:31:ba:ec:fe:0e:00:c1:00:83:07:1b:06:0b:9f: 5b:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:C8:28:AB:18:42:DF:40:6C:E2:80:3C:11:52:06:1B:0C:88:C5:C6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/86cd88aa-b3dd-4226-a7ab-c41221343e0b/8913fb72-4b70-362e-b2bc-5b03af1cc39e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/86cd88aa-b3dd-4226-a7ab-c41221343e0b/86cd88aa-b3dd-4226-a7ab-c41221343e0b.crl X509v3 Authority Key Identifier: keyid:35:92:21:4D:14:54:D2:1F:CB:15:7D:07:31:D6:58:71:85:56:D5:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/86cd88aa-b3dd-4226-a7ab-c41221343e0b.cer sbgp-ipAddrBlock: critical IPv4: 170.118.248.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:b8:9b:e0:ad:3b:2b:18:d8:c8:22:44:f5:5e:c9:ac:3e:30: bd:95:f7:f9:1e:82:50:d7:3f:15:65:65:23:44:b4:de:16:9b: 5f:63:b5:c9:a2:f3:28:d0:ec:00:73:20:a6:f7:a6:aa:6c:e5: 4e:19:6a:53:bd:6e:8c:77:23:c7:c3:e8:30:b2:89:30:2d:7d: 67:0e:f8:bf:7f:8b:cc:a7:83:ae:91:d1:54:9a:26:3f:4d:7f: 08:36:db:28:d1:56:0a:59:b5:3c:46:d8:75:c4:1a:b7:4c:f9: ee:31:d0:88:54:c4:78:7f:2c:1d:a7:f8:55:e0:4c:cd:25:45: 2f:42:38:14:65:90:f3:c8:54:b0:45:92:2c:64:e2:95:ff:34: 77:da:81:c2:bf:22:0c:62:e9:f3:d2:ed:4f:99:2b:66:52:ad: ac:37:6c:6d:11:2b:19:8d:06:1a:6b:38:ff:54:8c:91:c1:eb: 27:e7:22:e8:a7:db:5f:2a:5b:19:9b:32:c0:f7:0a:81:cf:f0: 1e:6b:34:85:9c:4b:16:95:75:24:d2:d4:21:74:bc:c3:56:87: 27:15:5a:5b:a9:85:98:ff:83:f0:b5:43:52:50:0e:61:d2:9e: 63:81:55:63:af:75:f3:9d:88:4f:a7:bc:25:ad:f8:b3:ff:c6: 3e:e0:bd:79 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEz/S0vivhuSnYTU2kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODZjZDg4YWEtYjNkZC00MjI2LWE3YWItYzQxMjIxMzQz ZTBiMB4XDTI2MDIyNzAxNTcyOVoXDTI2MDUyODAwNTcyOVowLzEtMCsGA1UEAxMk M2VhOGU0YjEtMDQ5NC00M2RjLWEyOTctN2UxODBhZDMxYmE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlGRY/SgEaTXl8tNRWlsDdgmwbOzlgFV7NNDJ V2TKhdv11LCBfSZCuThZGK1ihF6r4WDNLCskaULg74FXeHJjl+5WMdyS3oaYWLjC JKDCkEqJ3JonlwyGQ3GjFGg4K4GlwMKGeb8tHqH+oyK92FgoS0VFdQ+e8WUjEPwG MBzDXOmRS1Pdwec3jRKzX0sYuXD4TPhRGXQ8A05si6L0n2+BBKnyW9dDPpg+nE5b mIOL20MhFl26b5BDSyTb08ljDFAOP04zBuOEjvFjkXAZlKFHYGFOeG3fgQiiKqq4 UG3jGWaEfq7o9NUOrNEpN0XgzsxzMbrs/g4AwQCDBxsGC59b1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKvIKKsYQt9AbOKAPBFSBhsMiMXGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS84NmNk ODhhYS1iM2RkLTQyMjYtYTdhYi1jNDEyMjEzNDNlMGIvODkxM2ZiNzItNGI3MC0z NjJlLWIyYmMtNWIwM2FmMWNjMzllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvODZjZDg4YWEtYjNkZC00MjI2LWE3 YWItYzQxMjIxMzQzZTBiLzg2Y2Q4OGFhLWIzZGQtNDIyNi1hN2FiLWM0MTIyMTM0 M2UwYi5jcmwwHwYDVR0jBBgwFoAUNZIhTRRU0h/LFX0HMdZYcYVW1YUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw ZS1hZTdkLWU2Y2IxMGFmYTEyNS84NmNkODhhYS1iM2RkLTQyMjYtYTdhYi1jNDEy MjEzNDNlMGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDqnb4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABO4m+CtOysY2MgiRPVeyaw+ML2V9/keglDXPxVlZSNEtN4Wm19jtcmi 8yjQ7ABzIKb3pqps5U4ZalO9box3I8fD6DCyiTAtfWcO+L9/i8yng66R0VSaJj9N fwg22yjRVgpZtTxG2HXEGrdM+e4x0IhUxHh/LB2n+FXgTM0lRS9COBRlkPPIVLBF kixk4pX/NHfagcK/Igxi6fPS7U+ZK2ZSraw3bG0RKxmNBhprOP9UjJHB6yfnIuin 218qWxmbMsD3CoHP8B5rNIWcSxaVdSTS1CF0vMNWhycVWluphZj/g/C1Q1JQDmHS nmOBVWOvdfOdiE+nvCWt+LP/xj7gvXk= -----END CERTIFICATE-----Generated at Mon Mar 2 03:54:45 2026 by rpki-client