$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/86bcda68-15fd-4c7d-9887-d9d67f2ca969/e22cc87a-26d1-352c-a851-40ac9097a36b.roa File: e22cc87a-26d1-352c-a851-40ac9097a36b.roa (raw, json) Hash identifier: LX8rfrRAx6632UtIql6UgWb6ysIsIp+Sq+LH6LknGbc= Subject key identifier: CA:C4:7D:23:D0:83:CA:69:E6:A9:68:E3:88:8D:BC:29:B2:EC:45:B0 Certificate issuer: /CN=86bcda68-15fd-4c7d-9887-d9d67f2ca969 Certificate serial: 010D0C9F4328584D65151DFE770A336C7A97F380 Authority key identifier: DD:A3:C4:F9:8B:14:A0:E9:BE:AA:4F:47:A9:DD:16:AE:3A:F7:FE:31 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/86bcda68-15fd-4c7d-9887-d9d67f2ca969.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/86bcda68-15fd-4c7d-9887-d9d67f2ca969/e22cc87a-26d1-352c-a851-40ac9097a36b.roa Signing time: Sat 04 Apr 2026 13:00:29 +0000 ROA not before: Sat 04 Apr 2026 13:00:29 +0000 ROA not after: Fri 03 Jul 2026 13:00:29 +0000 asID: 14618 IP address blocks: 64.112.112.0/24 maxlen: 24 64.112.113.0/24 maxlen: 24 64.112.114.0/24 maxlen: 24 64.112.115.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/86bcda68-15fd-4c7d-9887-d9d67f2ca969/86bcda68-15fd-4c7d-9887-d9d67f2ca969.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/86bcda68-15fd-4c7d-9887-d9d67f2ca969/86bcda68-15fd-4c7d-9887-d9d67f2ca969.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/86bcda68-15fd-4c7d-9887-d9d67f2ca969.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:65:15:1d:fe:77:0a:33:6c:7a:97:f3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86bcda68-15fd-4c7d-9887-d9d67f2ca969 Validity Not Before: Apr 4 13:00:29 2026 GMT Not After : Jul 3 13:00:29 2026 GMT Subject: CN=a2ae1218-4a9a-44f0-93d5-2ad727576f82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:1e:12:54:38:a3:59:90:f4:a0:0c:eb:e1:2d: ea:72:72:8d:15:98:d8:0b:47:24:3b:c7:2f:6f:21: 2c:06:d6:30:5d:c1:10:e2:2f:0a:d0:36:fc:ca:64: dd:3b:68:f5:84:e4:b9:cb:10:9e:84:96:93:9b:c9: d4:d6:18:23:cf:63:24:bb:e9:03:aa:a7:1b:0d:fe: 4f:c2:80:6b:e0:3b:e6:43:9c:4c:92:1b:2a:d7:dd: 70:96:cc:69:f4:53:d0:4a:50:9b:86:f6:fd:f5:10: 97:68:cb:82:77:79:db:d4:41:8c:48:a8:8c:3e:e1: e3:51:e4:fa:af:69:e7:23:b4:90:7d:66:4d:ae:4f: c5:4d:f6:2a:93:86:85:60:9e:28:22:ec:6b:b0:a8: 02:6a:31:76:ba:b2:dc:fd:e4:d4:84:0c:02:bc:46: 3b:9a:8c:3a:68:46:3d:d8:db:49:c5:02:4a:a2:3b: 25:61:c9:a5:b7:82:31:b1:e3:f6:ad:21:ac:3b:28: b2:98:01:50:2d:ff:3d:e6:06:f9:f4:e5:e4:15:a2: a6:51:b9:43:78:82:cb:00:d9:f6:d6:43:56:ec:46: 1d:b1:eb:43:5b:d2:e7:8d:c9:ba:b6:63:fe:f4:f4: a2:62:b6:ed:3f:98:e9:b3:18:da:15:d7:f2:c1:62: 3f:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:C4:7D:23:D0:83:CA:69:E6:A9:68:E3:88:8D:BC:29:B2:EC:45:B0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/86bcda68-15fd-4c7d-9887-d9d67f2ca969/e22cc87a-26d1-352c-a851-40ac9097a36b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/86bcda68-15fd-4c7d-9887-d9d67f2ca969/86bcda68-15fd-4c7d-9887-d9d67f2ca969.crl X509v3 Authority Key Identifier: keyid:DD:A3:C4:F9:8B:14:A0:E9:BE:AA:4F:47:A9:DD:16:AE:3A:F7:FE:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/86bcda68-15fd-4c7d-9887-d9d67f2ca969.cer sbgp-ipAddrBlock: critical IPv4: 64.112.112.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:af:7e:ea:79:8c:9a:5b:3c:78:43:0d:c3:3c:ee:0a:f8:38: 2a:c8:28:18:ef:a8:cb:a8:f0:d4:ba:10:7b:f4:d2:cb:16:51: cf:c4:4e:ca:8a:5d:cd:b6:34:c8:02:78:bf:e0:e0:e7:d1:0d: fa:54:78:68:79:ff:1c:84:8d:5f:eb:9a:a0:fe:f2:57:2b:2d: 2b:16:25:ba:ba:5e:a9:75:7f:30:8c:82:35:8b:42:cc:03:6d: 68:02:54:16:aa:cc:f4:9a:92:be:1f:ea:37:21:92:07:9b:a1: 02:e9:e0:46:46:ef:fa:dd:d7:6f:5e:38:0c:da:f2:a3:13:ad: 9b:e2:46:e8:e4:f7:b3:41:93:97:f4:d9:59:7c:f0:c4:28:1c: dd:83:12:ce:58:cf:b1:29:1b:1a:83:f5:ca:68:f1:dd:c9:79: 2c:47:c8:ab:cd:08:76:ae:44:85:4b:be:2f:8d:ca:fe:e0:42: b5:49:c2:e0:99:7a:6b:64:ab:5f:cd:c8:9b:2c:37:29:d1:6c: e5:5a:5e:02:40:84:30:db:b5:0a:fa:98:43:61:54:08:4e:10: d6:61:bf:d0:9f:72:f2:0e:32:0e:48:ad:26:2a:09:90:af:29: 87:25:14:3d:55:6d:89:18:42:63:b7:b9:f2:b4:6b:3a:12:5f: b5:85:69:1b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1lFR3+dwozbHqX84AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODZiY2RhNjgtMTVmZC00YzdkLTk4ODctZDlkNjdmMmNh OTY5MB4XDTI2MDQwNDEzMDAyOVoXDTI2MDcwMzEzMDAyOVowLzEtMCsGA1UEAxMk YTJhZTEyMTgtNGE5YS00NGYwLTkzZDUtMmFkNzI3NTc2ZjgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhR4SVDijWZD0oAzr4S3qcnKNFZjYC0ckO8cv byEsBtYwXcEQ4i8K0Db8ymTdO2j1hOS5yxCehJaTm8nU1hgjz2Mku+kDqqcbDf5P woBr4DvmQ5xMkhsq191wlsxp9FPQSlCbhvb99RCXaMuCd3nb1EGMSKiMPuHjUeT6 r2nnI7SQfWZNrk/FTfYqk4aFYJ4oIuxrsKgCajF2urLc/eTUhAwCvEY7mow6aEY9 2NtJxQJKojslYcmlt4IxseP2rSGsOyiymAFQLf895gb59OXkFaKmUblDeILLANn2 1kNW7EYdsetDW9Lnjcm6tmP+9PSiYrbtP5jpsxjaFdfywWI/OQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMrEfSPQg8pp5qlo44iNvCmy7EWwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84NmJj ZGE2OC0xNWZkLTRjN2QtOTg4Ny1kOWQ2N2YyY2E5NjkvZTIyY2M4N2EtMjZkMS0z NTJjLWE4NTEtNDBhYzkwOTdhMzZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvODZiY2RhNjgtMTVmZC00YzdkLTk4 ODctZDlkNjdmMmNhOTY5Lzg2YmNkYTY4LTE1ZmQtNGM3ZC05ODg3LWQ5ZDY3ZjJj YTk2OS5jcmwwHwYDVR0jBBgwFoAU3aPE+YsUoOm+qk9Hqd0Wrjr3/jEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84NmJjZGE2OC0xNWZkLTRjN2QtOTg4Ny1kOWQ2 N2YyY2E5NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQHBwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACqvfup5jJpbPHhDDcM87gr4OCrIKBjvqMuo8NS6EHv00ssWUc/ETsqK Xc22NMgCeL/g4OfRDfpUeGh5/xyEjV/rmqD+8lcrLSsWJbq6Xql1fzCMgjWLQswD bWgCVBaqzPSakr4f6jchkgeboQLp4EZG7/rd129eOAza8qMTrZviRujk97NBk5f0 2Vl88MQoHN2DEs5Yz7EpGxqD9cpo8d3JeSxHyKvNCHauRIVLvi+Nyv7gQrVJwuCZ emtkq1/NyJssNynRbOVaXgJAhDDbtQr6mENhVAhOENZhv9CfcvIOMg5IrSYqCZCv KYclFD1VbYkYQmO3ufK0azoSX7WFaRs= -----END CERTIFICATE-----Generated at Fri Apr 17 13:42:56 2026 by rpki-client