$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/86bcda68-15fd-4c7d-9887-d9d67f2ca969/ab483ad6-855e-34df-ae7b-22a6f10fdfb7.roa File: ab483ad6-855e-34df-ae7b-22a6f10fdfb7.roa (raw, json) Hash identifier: X/5KJ+N2LoqGic98bxNTnxrFM0L8okQi75JmHDGDCnY= Subject key identifier: E4:2A:62:E1:57:45:64:EA:77:95:06:49:C4:0A:0C:5D:0E:94:13:F5 Certificate issuer: /CN=86bcda68-15fd-4c7d-9887-d9d67f2ca969 Certificate serial: 010D0C9F4328584EEA874EA0B07423B117975380 Authority key identifier: DD:A3:C4:F9:8B:14:A0:E9:BE:AA:4F:47:A9:DD:16:AE:3A:F7:FE:31 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/86bcda68-15fd-4c7d-9887-d9d67f2ca969.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/86bcda68-15fd-4c7d-9887-d9d67f2ca969/ab483ad6-855e-34df-ae7b-22a6f10fdfb7.roa Signing time: Sat 22 Aug 2026 01:00:12 +0000 ROA not before: Sat 22 Aug 2026 01:00:12 +0000 ROA not after: Fri 20 Nov 2026 02:00:12 +0000 asID: 16509 IP address blocks: 199.47.128.0/24 maxlen: 24 199.47.129.0/24 maxlen: 24 199.47.130.0/24 maxlen: 24 199.47.131.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/86bcda68-15fd-4c7d-9887-d9d67f2ca969/86bcda68-15fd-4c7d-9887-d9d67f2ca969.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/86bcda68-15fd-4c7d-9887-d9d67f2ca969/86bcda68-15fd-4c7d-9887-d9d67f2ca969.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/86bcda68-15fd-4c7d-9887-d9d67f2ca969.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ea:87:4e:a0:b0:74:23:b1:17:97:53:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86bcda68-15fd-4c7d-9887-d9d67f2ca969 Validity Not Before: Aug 22 01:00:12 2026 GMT Not After : Nov 20 02:00:12 2026 GMT Subject: CN=e1b6ab85-0304-4c1e-856f-3782a29e2875 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:01:1a:0f:d3:e6:20:87:3c:b9:56:19:87:56: bc:6f:05:56:d6:c8:ba:01:eb:b5:d3:88:84:48:ca: b2:4c:ec:6e:1f:83:51:4e:f7:6b:4b:b8:3c:d1:ea: 87:2c:42:83:e5:f7:6e:0d:47:42:ed:81:6c:c7:b4: 1b:bd:0b:0f:46:57:9a:75:b3:4e:3b:ca:33:bf:14: 4f:f0:f8:96:14:bb:8a:d0:91:9c:8c:5b:a1:84:c7: 0f:57:cb:d8:39:e3:f4:6d:01:57:96:4e:76:21:bc: ea:7f:b5:1e:aa:2a:41:cd:47:8c:c4:49:25:7e:8b: 33:56:ed:a3:c7:82:5a:13:8a:0f:d9:e6:82:b7:b2: 04:df:be:53:d9:c8:23:16:b0:84:1d:5d:96:7d:86: 4c:f5:1a:bf:dd:1a:a1:bf:83:a9:6b:06:29:48:11: 84:cc:90:07:01:a8:1b:b0:80:72:f6:66:b5:0c:31: 77:2a:8d:18:1f:60:db:dd:18:54:da:30:53:50:80: 31:f3:2c:dd:66:53:af:0e:78:5f:32:31:b3:61:a7: 4f:58:3d:d1:9c:32:f0:51:e6:32:c7:4d:6e:5d:6f: 19:b6:9f:44:4a:83:6f:b4:44:90:12:b1:b1:0a:45: c3:b8:bd:18:a3:bc:1a:0e:9e:9f:83:31:d1:f6:96: aa:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:2A:62:E1:57:45:64:EA:77:95:06:49:C4:0A:0C:5D:0E:94:13:F5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/86bcda68-15fd-4c7d-9887-d9d67f2ca969/ab483ad6-855e-34df-ae7b-22a6f10fdfb7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/86bcda68-15fd-4c7d-9887-d9d67f2ca969/86bcda68-15fd-4c7d-9887-d9d67f2ca969.crl X509v3 Authority Key Identifier: keyid:DD:A3:C4:F9:8B:14:A0:E9:BE:AA:4F:47:A9:DD:16:AE:3A:F7:FE:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/86bcda68-15fd-4c7d-9887-d9d67f2ca969.cer sbgp-ipAddrBlock: critical IPv4: 199.47.128.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:8f:15:5d:f3:d3:0f:3f:2f:c3:63:12:83:2b:7f:1f:7b:38: a2:0d:49:69:04:bc:23:2c:8a:69:e5:76:28:fa:de:a9:b5:cc: 02:5e:03:d8:97:88:3d:b9:60:db:81:b6:5a:59:6e:0b:66:e7: 24:ee:bb:3f:66:e4:52:d5:ef:2c:58:7b:1b:86:95:d0:24:f7: 3a:83:e6:00:90:99:80:ec:4c:25:2a:f7:e7:b9:c5:8d:ff:0e: 9b:6c:ad:40:01:c1:9d:77:59:b6:86:00:4a:88:67:24:c6:6e: 29:91:43:21:7c:90:c5:ea:5b:24:3d:fd:84:3c:4c:95:54:21: 37:42:96:02:80:ce:6a:d2:27:f4:0c:8e:9e:a8:02:6c:7c:a9: 7e:43:4d:b5:99:8f:1e:1d:f9:1c:7d:df:61:8f:37:9a:28:ec: e7:1d:fa:f5:a3:b6:3c:a9:71:1c:06:f2:e8:e8:0b:cb:72:88: b4:d7:d6:02:92:d7:50:74:36:a5:c0:97:af:62:fd:29:5e:35: f9:19:d3:04:e0:4e:66:03:41:3f:da:70:86:4f:b5:9e:a9:7e: 27:f6:4b:85:b0:7b:99:a2:fe:0d:e1:10:65:e1:09:39:60:08: 4b:c0:f8:3f:cf:62:af:8a:e4:e7:ce:5f:f5:c6:10:76:f3:7d: fa:d6:93:f1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7qh06gsHQjsReXU4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODZiY2RhNjgtMTVmZC00YzdkLTk4ODctZDlkNjdmMmNh OTY5MB4XDTI2MDgyMjAxMDAxMloXDTI2MTEyMDAyMDAxMlowLzEtMCsGA1UEAxMk ZTFiNmFiODUtMDMwNC00YzFlLTg1NmYtMzc4MmEyOWUyODc1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArwEaD9PmIIc8uVYZh1a8bwVW1si6Aeu104iE SMqyTOxuH4NRTvdrS7g80eqHLEKD5fduDUdC7YFsx7QbvQsPRleadbNOO8ozvxRP 8PiWFLuK0JGcjFuhhMcPV8vYOeP0bQFXlk52Ibzqf7UeqipBzUeMxEklfoszVu2j x4JaE4oP2eaCt7IE375T2cgjFrCEHV2WfYZM9Rq/3Rqhv4OpawYpSBGEzJAHAagb sIBy9ma1DDF3Ko0YH2Db3RhU2jBTUIAx8yzdZlOvDnhfMjGzYadPWD3RnDLwUeYy x01uXW8Ztp9ESoNvtESQErGxCkXDuL0Yo7waDp6fgzHR9paqWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOQqYuFXRWTqd5UGScQKDF0OlBP1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84NmJj ZGE2OC0xNWZkLTRjN2QtOTg4Ny1kOWQ2N2YyY2E5NjkvYWI0ODNhZDYtODU1ZS0z NGRmLWFlN2ItMjJhNmYxMGZkZmI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvODZiY2RhNjgtMTVmZC00YzdkLTk4 ODctZDlkNjdmMmNhOTY5Lzg2YmNkYTY4LTE1ZmQtNGM3ZC05ODg3LWQ5ZDY3ZjJj YTk2OS5jcmwwHwYDVR0jBBgwFoAU3aPE+YsUoOm+qk9Hqd0Wrjr3/jEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84NmJjZGE2OC0xNWZkLTRjN2QtOTg4Ny1kOWQ2 N2YyY2E5NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCxy+AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFWPFV3z0w8/L8NjEoMrfx97OKINSWkEvCMsimnldij63qm1zAJeA9iX iD25YNuBtlpZbgtm5yTuuz9m5FLV7yxYexuGldAk9zqD5gCQmYDsTCUq9+e5xY3/ DptsrUABwZ13WbaGAEqIZyTGbimRQyF8kMXqWyQ9/YQ8TJVUITdClgKAzmrSJ/QM jp6oAmx8qX5DTbWZjx4d+Rx932GPN5oo7Ocd+vWjtjypcRwG8ujoC8tyiLTX1gKS 11B0NqXAl69i/SleNfkZ0wTgTmYDQT/acIZPtZ6pfif2S4Wwe5mi/g3hEGXhCTlg CEvA+D/PYq+K5OfOX/XGEHbzffrWk/E= -----END CERTIFICATE-----Generated at Wed Sep 23 10:25:34 2026 by rpki-client