$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/86bcda68-15fd-4c7d-9887-d9d67f2ca969/d1e734e2-ce89-3dd5-9697-dab100cd0408.roa File: d1e734e2-ce89-3dd5-9697-dab100cd0408.roa (raw, json) Hash identifier: cmoZst2Y5usQsT/fkCadVSGMOHBAMIyLZu2x8E+8fLk= Subject key identifier: B3:F5:D5:2A:BC:91:C8:D7:A6:DF:45:9C:AB:80:B3:80:D4:87:F0:5B Certificate issuer: /CN=86bcda68-15fd-4c7d-9887-d9d67f2ca969 Certificate serial: 010D0C9F4328584C8741688F28E788F46721EA80 Authority key identifier: DD:A3:C4:F9:8B:14:A0:E9:BE:AA:4F:47:A9:DD:16:AE:3A:F7:FE:31 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/86bcda68-15fd-4c7d-9887-d9d67f2ca969.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/86bcda68-15fd-4c7d-9887-d9d67f2ca969/d1e734e2-ce89-3dd5-9697-dab100cd0408.roa Signing time: Thu 15 Jan 2026 02:00:31 +0000 ROA not before: Thu 15 Jan 2026 02:00:31 +0000 ROA not after: Wed 15 Apr 2026 01:00:31 +0000 asID: 14618 IP address blocks: 199.47.128.0/24 maxlen: 24 199.47.129.0/24 maxlen: 24 199.47.130.0/24 maxlen: 24 199.47.131.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/86bcda68-15fd-4c7d-9887-d9d67f2ca969/86bcda68-15fd-4c7d-9887-d9d67f2ca969.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/86bcda68-15fd-4c7d-9887-d9d67f2ca969/86bcda68-15fd-4c7d-9887-d9d67f2ca969.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/86bcda68-15fd-4c7d-9887-d9d67f2ca969.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:87:41:68:8f:28:e7:88:f4:67:21:ea:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86bcda68-15fd-4c7d-9887-d9d67f2ca969 Validity Not Before: Jan 15 02:00:31 2026 GMT Not After : Apr 15 01:00:31 2026 GMT Subject: CN=28e7e3f1-6c50-4422-86c7-643223f41a01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:90:f7:51:df:aa:15:13:e9:98:89:52:2b:60: ee:b5:d8:26:ff:ec:c8:3d:85:53:ca:48:14:b5:4d: 8b:5b:bd:e9:df:2f:b6:ad:e1:5c:fc:47:ac:5a:eb: 33:bd:6e:c1:fd:60:9d:00:25:86:e8:19:b6:65:b5: 4d:53:4a:37:d4:38:d8:8f:d0:f6:14:13:a8:b3:16: ba:2b:e1:fa:98:1e:6f:a1:94:6a:b8:6c:f3:ec:45: 75:12:4d:34:be:92:75:30:4d:e3:90:6a:87:8f:47: c2:20:99:09:ce:c9:43:81:04:80:93:b1:a6:83:61: d5:9e:45:94:60:24:f4:06:ee:8a:12:54:01:6a:61: 20:15:a4:f4:6d:33:cd:67:8a:72:06:bd:23:ec:33: 35:a0:56:34:ad:41:d6:79:c9:1c:1a:cf:3b:f8:8c: 39:a6:98:d7:52:6e:48:cb:51:dd:7d:0e:a0:29:a8: 54:c0:91:44:3f:36:95:2b:87:86:23:15:0d:8a:15: ce:6b:42:d5:b6:93:ef:cc:36:57:45:4f:4a:8a:06: 87:5b:81:10:e9:d0:2c:ad:54:44:2c:f3:a5:07:96: 10:da:88:8e:e2:c0:32:15:d3:9c:91:aa:fa:92:a1: 58:1d:00:64:8e:e4:25:4a:55:a4:1b:42:5e:c9:97: 2e:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:F5:D5:2A:BC:91:C8:D7:A6:DF:45:9C:AB:80:B3:80:D4:87:F0:5B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/86bcda68-15fd-4c7d-9887-d9d67f2ca969/d1e734e2-ce89-3dd5-9697-dab100cd0408.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/86bcda68-15fd-4c7d-9887-d9d67f2ca969/86bcda68-15fd-4c7d-9887-d9d67f2ca969.crl X509v3 Authority Key Identifier: keyid:DD:A3:C4:F9:8B:14:A0:E9:BE:AA:4F:47:A9:DD:16:AE:3A:F7:FE:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/86bcda68-15fd-4c7d-9887-d9d67f2ca969.cer sbgp-ipAddrBlock: critical IPv4: 199.47.128.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:e5:7c:a2:5b:88:60:be:2c:0b:9d:3b:51:f7:56:f1:52:69: b6:7a:0f:00:b5:3a:59:b4:74:98:34:2a:16:59:dd:86:ac:a8: e5:d2:44:3f:fc:57:f3:5c:e4:84:09:50:c3:91:9f:fe:7b:d7: e9:4b:a0:cb:4b:01:f1:3b:75:38:dd:82:25:46:e7:9f:9f:49: 7c:d9:91:59:ec:03:d2:b7:45:6f:c3:5d:7b:50:ed:36:1a:7a: 22:af:33:f5:d2:fe:45:7d:b4:9a:ad:81:3b:80:e5:48:d8:a5: 38:5a:94:29:ad:d1:0d:96:5a:f6:00:b8:19:e0:14:ec:a4:b8: 68:a0:01:de:40:18:65:5a:c6:18:91:1c:45:84:85:ac:e4:f9: 79:af:a7:b1:33:66:9f:76:83:a0:f5:b0:b3:c0:6e:65:fb:85: e2:cc:49:1b:42:d8:75:65:d3:7d:07:d7:e7:a8:bc:b3:04:a5: 97:14:d6:c5:93:72:2c:26:7a:19:eb:6f:fb:dc:2e:fe:8a:db: b0:b1:de:9e:69:0f:ad:ed:b1:e9:14:fc:da:a2:e5:8b:1b:80: d0:4e:4e:37:eb:0a:fd:62:fe:88:0e:6a:4f:10:89:19:e8:96: df:1a:27:f0:0b:ec:3d:92:09:bd:36:33:ef:71:b2:32:2f:77: 50:2e:bc:87 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyHQWiPKOeI9Gch6oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODZiY2RhNjgtMTVmZC00YzdkLTk4ODctZDlkNjdmMmNh OTY5MB4XDTI2MDExNTAyMDAzMVoXDTI2MDQxNTAxMDAzMVowLzEtMCsGA1UEAxMk MjhlN2UzZjEtNmM1MC00NDIyLTg2YzctNjQzMjIzZjQxYTAxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgZD3Ud+qFRPpmIlSK2Dutdgm/+zIPYVTykgU tU2LW73p3y+2reFc/EesWuszvW7B/WCdACWG6Bm2ZbVNU0o31DjYj9D2FBOosxa6 K+H6mB5voZRquGzz7EV1Ek00vpJ1ME3jkGqHj0fCIJkJzslDgQSAk7Gmg2HVnkWU YCT0Bu6KElQBamEgFaT0bTPNZ4pyBr0j7DM1oFY0rUHWeckcGs87+Iw5ppjXUm5I y1HdfQ6gKahUwJFEPzaVK4eGIxUNihXOa0LVtpPvzDZXRU9KigaHW4EQ6dAsrVRE LPOlB5YQ2oiO4sAyFdOckar6kqFYHQBkjuQlSlWkG0JeyZcu6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLP11Sq8kcjXpt9FnKuAs4DUh/BbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84NmJj ZGE2OC0xNWZkLTRjN2QtOTg4Ny1kOWQ2N2YyY2E5NjkvZDFlNzM0ZTItY2U4OS0z ZGQ1LTk2OTctZGFiMTAwY2QwNDA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvODZiY2RhNjgtMTVmZC00YzdkLTk4 ODctZDlkNjdmMmNhOTY5Lzg2YmNkYTY4LTE1ZmQtNGM3ZC05ODg3LWQ5ZDY3ZjJj YTk2OS5jcmwwHwYDVR0jBBgwFoAU3aPE+YsUoOm+qk9Hqd0Wrjr3/jEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84NmJjZGE2OC0xNWZkLTRjN2QtOTg4Ny1kOWQ2 N2YyY2E5NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCxy+AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACnlfKJbiGC+LAudO1H3VvFSabZ6DwC1Olm0dJg0KhZZ3YasqOXSRD/8 V/Nc5IQJUMORn/571+lLoMtLAfE7dTjdgiVG55+fSXzZkVnsA9K3RW/DXXtQ7TYa eiKvM/XS/kV9tJqtgTuA5UjYpThalCmt0Q2WWvYAuBngFOykuGigAd5AGGVaxhiR HEWEhazk+Xmvp7EzZp92g6D1sLPAbmX7heLMSRtC2HVl030H1+eovLMEpZcU1sWT ciwmehnrb/vcLv6K27Cx3p5pD63tsekU/Nqi5YsbgNBOTjfrCv1i/ogOak8QiRno lt8aJ/AL7D2SCb02M+9xsjIvd1AuvIc= -----END CERTIFICATE-----Generated at Mon Mar 2 07:51:04 2026 by rpki-client