$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/86bcda68-15fd-4c7d-9887-d9d67f2ca969/d1e734e2-ce89-3dd5-9697-dab100cd0408.roa File: d1e734e2-ce89-3dd5-9697-dab100cd0408.roa (raw, json) Hash identifier: zgk0xIl3Ku6HLgt4ketnS6mPn7F2NuQPOo4AvobDu7Y= Subject key identifier: 58:3A:E0:FD:64:09:CB:D7:4D:29:DA:27:CC:26:4F:62:A8:F1:9F:E1 Certificate issuer: /CN=86bcda68-15fd-4c7d-9887-d9d67f2ca969 Certificate serial: 010D0C9F4328584D67DFB92ACFD5BC0E72433580 Authority key identifier: DD:A3:C4:F9:8B:14:A0:E9:BE:AA:4F:47:A9:DD:16:AE:3A:F7:FE:31 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/86bcda68-15fd-4c7d-9887-d9d67f2ca969.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/86bcda68-15fd-4c7d-9887-d9d67f2ca969/d1e734e2-ce89-3dd5-9697-dab100cd0408.roa Signing time: Sun 05 Apr 2026 13:00:31 +0000 ROA not before: Sun 05 Apr 2026 13:00:31 +0000 ROA not after: Sat 04 Jul 2026 13:00:31 +0000 asID: 14618 IP address blocks: 199.47.128.0/24 maxlen: 24 199.47.129.0/24 maxlen: 24 199.47.130.0/24 maxlen: 24 199.47.131.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/86bcda68-15fd-4c7d-9887-d9d67f2ca969/86bcda68-15fd-4c7d-9887-d9d67f2ca969.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/86bcda68-15fd-4c7d-9887-d9d67f2ca969/86bcda68-15fd-4c7d-9887-d9d67f2ca969.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/86bcda68-15fd-4c7d-9887-d9d67f2ca969.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:67:df:b9:2a:cf:d5:bc:0e:72:43:35:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86bcda68-15fd-4c7d-9887-d9d67f2ca969 Validity Not Before: Apr 5 13:00:31 2026 GMT Not After : Jul 4 13:00:31 2026 GMT Subject: CN=a7903536-85d4-4ce8-9236-af025a66e473 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:c1:79:c3:ae:af:e1:b6:9e:1d:d0:8a:e0:92: df:a0:1f:58:ae:d5:c4:7a:26:91:9f:8d:28:f5:78: af:28:f9:95:c0:11:a3:7c:99:43:ed:b7:b2:26:18: 48:7c:63:1c:49:d2:b8:3a:1b:da:81:b5:bc:a7:98: 21:15:8c:1d:7f:fc:88:b2:3e:4e:b0:68:d9:24:52: 02:0c:4c:f8:92:03:47:e5:cf:3e:89:b3:e4:7c:6d: 46:a4:63:fb:e2:89:ed:e9:56:a9:59:6e:41:0b:5a: 50:ff:5a:83:ef:5e:6e:94:6c:73:71:93:84:71:5c: 91:e1:91:56:93:23:4a:7b:38:69:f0:81:fe:25:94: 74:dd:52:bf:0f:c6:84:b6:a3:11:aa:58:04:15:83: 8b:1c:99:e3:77:af:02:87:e0:c0:68:8f:39:3b:90: dc:9e:cd:60:da:a5:22:f8:bf:d9:5e:5a:be:17:10: 7a:fd:c2:4e:59:51:c9:af:5d:1a:74:7e:06:f0:68: d0:d0:c7:f9:7d:70:48:76:bc:78:52:65:1e:dc:e2: 8c:75:a2:9c:e4:1a:cd:43:3c:d6:e9:d5:ad:8b:08: a3:c6:fd:c3:ed:9b:bf:01:b0:af:fa:2b:e9:cc:9f: eb:cf:dd:04:8d:e9:ef:2b:eb:df:f2:87:bd:9e:88: 08:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:3A:E0:FD:64:09:CB:D7:4D:29:DA:27:CC:26:4F:62:A8:F1:9F:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/86bcda68-15fd-4c7d-9887-d9d67f2ca969/d1e734e2-ce89-3dd5-9697-dab100cd0408.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/86bcda68-15fd-4c7d-9887-d9d67f2ca969/86bcda68-15fd-4c7d-9887-d9d67f2ca969.crl X509v3 Authority Key Identifier: keyid:DD:A3:C4:F9:8B:14:A0:E9:BE:AA:4F:47:A9:DD:16:AE:3A:F7:FE:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/86bcda68-15fd-4c7d-9887-d9d67f2ca969.cer sbgp-ipAddrBlock: critical IPv4: 199.47.128.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:89:07:0e:fc:17:72:65:44:68:b0:37:ce:22:fe:cd:0c:20: ec:b6:a8:a6:80:b8:9e:31:c1:05:49:9f:ea:7d:9e:36:0d:77: f7:d4:d5:25:99:95:30:bf:cb:b1:af:45:e0:6c:ef:d7:4d:5b: 7b:5d:12:c1:4a:ab:7e:b4:ec:36:92:68:4b:6d:ec:64:d0:fe: aa:92:09:c9:58:06:3e:4c:b8:0a:ae:7a:d9:1e:f9:51:fb:9e: 8f:2e:2a:df:21:ce:3d:fa:53:28:dc:6e:43:b6:14:10:0b:c5: aa:ad:27:38:8a:0f:b7:da:6c:00:d2:f5:3a:ae:a8:9e:02:75: 4b:b4:72:01:2a:f8:70:6f:4b:f7:97:2a:c5:46:66:c8:35:9b: 4f:78:ec:a4:9d:e1:52:cd:2e:52:15:52:53:f7:11:2c:a9:fb: 89:4e:45:aa:c2:3e:ce:d0:b5:48:f9:fc:43:78:48:27:3b:8d: 12:26:97:cd:70:ad:8b:a4:2c:3b:6c:28:72:49:bd:a0:2e:6b: 0a:ce:68:92:9f:0e:a0:bf:04:b8:47:d2:dd:a3:10:2b:86:3d: ae:f2:10:38:f2:99:3d:e4:db:a6:c9:8b:fc:3f:7e:30:a7:d9: 73:0a:22:58:1f:b7:c4:b4:af:ef:3c:7f:f4:3c:b8:7e:94:61: e1:d9:13:d0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1n37kqz9W8DnJDNYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODZiY2RhNjgtMTVmZC00YzdkLTk4ODctZDlkNjdmMmNh OTY5MB4XDTI2MDQwNTEzMDAzMVoXDTI2MDcwNDEzMDAzMVowLzEtMCsGA1UEAxMk YTc5MDM1MzYtODVkNC00Y2U4LTkyMzYtYWYwMjVhNjZlNDczMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAksF5w66v4baeHdCK4JLfoB9YrtXEeiaRn40o 9XivKPmVwBGjfJlD7beyJhhIfGMcSdK4OhvagbW8p5ghFYwdf/yIsj5OsGjZJFIC DEz4kgNH5c8+ibPkfG1GpGP74ont6VapWW5BC1pQ/1qD715ulGxzcZOEcVyR4ZFW kyNKezhp8IH+JZR03VK/D8aEtqMRqlgEFYOLHJnjd68Ch+DAaI85O5Dcns1g2qUi +L/ZXlq+FxB6/cJOWVHJr10adH4G8GjQ0Mf5fXBIdrx4UmUe3OKMdaKc5BrNQzzW 6dWtiwijxv3D7Zu/AbCv+ivpzJ/rz90EjenvK+vf8oe9nogIRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFg64P1kCcvXTSnaJ8wmT2Ko8Z/hMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84NmJj ZGE2OC0xNWZkLTRjN2QtOTg4Ny1kOWQ2N2YyY2E5NjkvZDFlNzM0ZTItY2U4OS0z ZGQ1LTk2OTctZGFiMTAwY2QwNDA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvODZiY2RhNjgtMTVmZC00YzdkLTk4 ODctZDlkNjdmMmNhOTY5Lzg2YmNkYTY4LTE1ZmQtNGM3ZC05ODg3LWQ5ZDY3ZjJj YTk2OS5jcmwwHwYDVR0jBBgwFoAU3aPE+YsUoOm+qk9Hqd0Wrjr3/jEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84NmJjZGE2OC0xNWZkLTRjN2QtOTg4Ny1kOWQ2 N2YyY2E5NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCxy+AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHCJBw78F3JlRGiwN84i/s0MIOy2qKaAuJ4xwQVJn+p9njYNd/fU1SWZ lTC/y7GvReBs79dNW3tdEsFKq3607DaSaEtt7GTQ/qqSCclYBj5MuAquetke+VH7 no8uKt8hzj36UyjcbkO2FBALxaqtJziKD7fabADS9TquqJ4CdUu0cgEq+HBvS/eX KsVGZsg1m0947KSd4VLNLlIVUlP3ESyp+4lORarCPs7QtUj5/EN4SCc7jRIml81w rYukLDtsKHJJvaAuawrOaJKfDqC/BLhH0t2jECuGPa7yEDjymT3k26bJi/w/fjCn 2XMKIlgft8S0r+88f/Q8uH6UYeHZE9A= -----END CERTIFICATE-----Generated at Fri Apr 17 13:06:47 2026 by rpki-client