$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b86a4ec3-a3b5-4d72-bee2-f58c3cde01a1/7714f8b4-e08c-3ecd-b63d-aac5909ad71d.roa File: 7714f8b4-e08c-3ecd-b63d-aac5909ad71d.roa (raw, json) Hash identifier: U95FVKnGvJRuJHKikUPzpvggEMom16bxcBbA3QHQzyk= Subject key identifier: 1F:77:68:20:21:C0:0E:6E:D5:5C:BA:6A:CF:67:AF:6C:CC:FC:52:BC Certificate issuer: /CN=b86a4ec3-a3b5-4d72-bee2-f58c3cde01a1 Certificate serial: 010D0C9F4328584E104EF00DBC6981D2F8A9C800 Authority key identifier: DD:F6:09:95:17:8B:B7:4A:6E:9C:AA:DF:B0:69:85:38:26:70:0B:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b86a4ec3-a3b5-4d72-bee2-f58c3cde01a1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b86a4ec3-a3b5-4d72-bee2-f58c3cde01a1/7714f8b4-e08c-3ecd-b63d-aac5909ad71d.roa Signing time: Thu 04 Jun 2026 21:00:12 +0000 ROA not before: Thu 04 Jun 2026 21:00:12 +0000 ROA not after: Wed 02 Sep 2026 21:00:12 +0000 asID: 398203 IP address blocks: 170.117.176.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b86a4ec3-a3b5-4d72-bee2-f58c3cde01a1/b86a4ec3-a3b5-4d72-bee2-f58c3cde01a1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b86a4ec3-a3b5-4d72-bee2-f58c3cde01a1/b86a4ec3-a3b5-4d72-bee2-f58c3cde01a1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b86a4ec3-a3b5-4d72-bee2-f58c3cde01a1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 15 Jun 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:10:4e:f0:0d:bc:69:81:d2:f8:a9:c8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b86a4ec3-a3b5-4d72-bee2-f58c3cde01a1 Validity Not Before: Jun 4 21:00:12 2026 GMT Not After : Sep 2 21:00:12 2026 GMT Subject: CN=c0852a9a-a204-42c5-9914-c30eecba3c0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:33:45:11:86:e5:09:88:61:3a:da:12:a9:6b: e8:f9:07:c2:2c:78:f3:a3:02:e5:f7:72:47:0f:28: c0:79:45:1d:d0:e3:42:8b:ea:2e:76:ab:f0:a8:66: 7b:3b:cf:83:8c:0a:93:30:44:bd:3d:72:b2:43:60: bc:27:26:d9:c8:23:49:5a:05:35:29:ed:32:6b:0c: 1b:e6:e6:78:47:1f:4d:f1:f2:9f:10:d4:d2:b2:13: f2:cb:15:fb:98:69:a0:1f:4f:95:bc:ef:8f:37:fe: 1b:64:2d:a8:11:58:5e:d5:9c:61:23:ea:2b:d7:58: cb:55:b6:3b:a3:79:fe:5d:0f:3f:f2:f4:f5:bf:08: fc:45:76:e1:d8:29:84:59:f4:50:61:ae:91:36:bc: c1:b0:c1:51:a3:ba:6b:29:d0:90:74:76:56:ed:4d: c6:d3:51:1c:77:6b:89:55:c6:a3:2c:06:93:4c:a3: 94:82:ca:b9:dd:b3:15:70:13:e1:7a:23:ea:af:27: e4:7c:49:24:30:6c:08:59:84:c7:9a:9a:45:67:53: 0a:5a:25:6e:3a:d5:8f:c4:80:74:5e:f4:36:88:ce: d8:91:13:31:42:e3:e5:c8:19:93:08:c6:af:91:5a: 05:bb:e0:dd:82:6f:18:d2:06:02:fb:6f:c1:ad:ff: a6:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:77:68:20:21:C0:0E:6E:D5:5C:BA:6A:CF:67:AF:6C:CC:FC:52:BC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b86a4ec3-a3b5-4d72-bee2-f58c3cde01a1/7714f8b4-e08c-3ecd-b63d-aac5909ad71d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b86a4ec3-a3b5-4d72-bee2-f58c3cde01a1/b86a4ec3-a3b5-4d72-bee2-f58c3cde01a1.crl X509v3 Authority Key Identifier: keyid:DD:F6:09:95:17:8B:B7:4A:6E:9C:AA:DF:B0:69:85:38:26:70:0B:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b86a4ec3-a3b5-4d72-bee2-f58c3cde01a1.cer sbgp-ipAddrBlock: critical IPv4: 170.117.176.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 98:78:4e:5d:c4:8d:1e:07:20:f3:dd:08:9f:26:f9:2a:74:18: a0:7c:59:42:5d:c4:91:c1:b4:9d:86:50:97:8d:c0:ad:1f:04: 73:1f:3d:e6:8a:4b:66:2d:35:58:f1:29:3d:9d:1b:d8:b4:a3: d4:71:c1:d8:c5:92:ba:a1:89:0f:53:40:dc:1a:c2:f4:68:26: f6:a5:ae:9f:35:5d:17:11:5f:51:e3:9f:6f:eb:bd:6d:28:67: be:92:22:9c:50:37:48:9f:3b:0e:6a:1e:3c:83:c8:bd:08:96: bc:e6:a5:dc:d9:a0:f6:0b:38:e0:a8:6e:12:d8:67:76:c5:3f: 5c:f8:aa:aa:96:96:ad:3c:05:78:0a:9c:5c:d2:b2:dd:41:1b: e7:62:e0:e8:e5:7c:5b:45:64:67:c9:7f:b7:56:c4:97:76:a5: ee:ff:cf:18:b9:3e:9d:e1:72:3f:83:eb:f3:89:2a:1d:f1:58: c1:4d:11:b5:6a:d5:43:df:32:5a:88:bd:0b:b6:4f:b5:23:25: 00:37:a0:5e:f4:f6:1a:a0:27:79:b2:d1:de:52:d0:ef:94:be: 95:fd:ef:6a:eb:1c:cc:be:ae:b6:56:2b:65:f8:e9:05:02:b6: 48:49:55:e4:1e:55:cb:ea:69:a0:21:53:1e:e5:fb:e6:7d:1c: fe:5d:57:25 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4QTvANvGmB0vipyAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjg2YTRlYzMtYTNiNS00ZDcyLWJlZTItZjU4YzNjZGUw MWExMB4XDTI2MDYwNDIxMDAxMloXDTI2MDkwMjIxMDAxMlowLzEtMCsGA1UEAxMk YzA4NTJhOWEtYTIwNC00MmM1LTk5MTQtYzMwZWVjYmEzYzBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtDNFEYblCYhhOtoSqWvo+QfCLHjzowLl93JH DyjAeUUd0ONCi+oudqvwqGZ7O8+DjAqTMES9PXKyQ2C8JybZyCNJWgU1Ke0yawwb 5uZ4Rx9N8fKfENTSshPyyxX7mGmgH0+VvO+PN/4bZC2oEVhe1ZxhI+or11jLVbY7 o3n+XQ8/8vT1vwj8RXbh2CmEWfRQYa6RNrzBsMFRo7prKdCQdHZW7U3G01Ecd2uJ VcajLAaTTKOUgsq53bMVcBPheiPqryfkfEkkMGwIWYTHmppFZ1MKWiVuOtWPxIB0 XvQ2iM7YkRMxQuPlyBmTCMavkVoFu+Ddgm8Y0gYC+2/Brf+mwwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB93aCAhwA5u1Vy6as9nr2zM/FK8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iODZh NGVjMy1hM2I1LTRkNzItYmVlMi1mNThjM2NkZTAxYTEvNzcxNGY4YjQtZTA4Yy0z ZWNkLWI2M2QtYWFjNTkwOWFkNzFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjg2YTRlYzMtYTNiNS00ZDcyLWJl ZTItZjU4YzNjZGUwMWExL2I4NmE0ZWMzLWEzYjUtNGQ3Mi1iZWUyLWY1OGMzY2Rl MDFhMS5jcmwwHwYDVR0jBBgwFoAU3fYJlReLt0punKrfsGmFOCZwCxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iODZhNGVjMy1hM2I1LTRkNzItYmVlMi1mNThj M2NkZTAxYTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEqnWwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJh4Tl3EjR4HIPPdCJ8m+Sp0GKB8WUJdxJHBtJ2GUJeNwK0fBHMfPeaK S2YtNVjxKT2dG9i0o9RxwdjFkrqhiQ9TQNwawvRoJvalrp81XRcRX1Hjn2/rvW0o Z76SIpxQN0ifOw5qHjyDyL0IlrzmpdzZoPYLOOCobhLYZ3bFP1z4qqqWlq08BXgK nFzSst1BG+di4OjlfFtFZGfJf7dWxJd2pe7/zxi5Pp3hcj+D6/OJKh3xWMFNEbVq 1UPfMlqIvQu2T7UjJQA3oF709hqgJ3my0d5S0O+UvpX972rrHMy+rrZWK2X46QUC tkhJVeQeVcvqaaAhUx7l++Z9HP5dVyU= -----END CERTIFICATE-----Generated at Sat Jun 13 17:30:14 2026 by rpki-client