$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/86c0befc-6e9d-343e-800e-39ec04f1ce71.roa File: 86c0befc-6e9d-343e-800e-39ec04f1ce71.roa (raw, json) Hash identifier: cYPOOz4MFWLDeoKgJ4vD9CqHDCc1WrtAL7j7P6xLxrU= Subject key identifier: 6A:25:13:C3:7F:65:7B:47:A9:BE:B8:3D:E4:AE:5F:37:BA:F0:5E:9B Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584D7F9AA17DDFE1CAB09E231800 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/86c0befc-6e9d-343e-800e-39ec04f1ce71.roa Signing time: Tue 14 Apr 2026 01:00:24 +0000 ROA not before: Tue 14 Apr 2026 01:00:24 +0000 ROA not after: Mon 13 Jul 2026 01:00:24 +0000 asID: 31898 IP address blocks: 130.162.192.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:7f:9a:a1:7d:df:e1:ca:b0:9e:23:18:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Apr 14 01:00:24 2026 GMT Not After : Jul 13 01:00:24 2026 GMT Subject: CN=7295ba70-70d8-4b50-b179-01ab770bdda1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:f4:25:55:e4:fe:41:df:36:76:17:f3:b6:c3: 26:61:b6:15:76:b3:05:92:1f:1d:04:60:fc:5a:87: 19:d3:69:67:a4:dc:c8:a5:d0:9c:ae:46:77:55:66: 00:29:4a:18:af:9d:3f:e6:5a:64:da:e8:74:3f:fd: 8b:37:3f:d1:b5:25:a7:ec:f0:58:a2:d5:da:0f:43: 84:7a:b5:4a:04:f8:dc:e9:4b:43:5a:9c:72:9c:2f: 63:c5:a7:9f:f7:52:4e:fa:64:d2:bc:9e:86:4f:2d: 94:2e:46:01:f5:79:a6:90:b2:f6:23:05:7d:60:0a: d0:9f:e0:59:0a:28:65:fb:79:34:bb:e7:23:bc:a2: 7d:97:53:bd:56:cf:b3:63:9a:5d:2e:5e:fb:dc:57: a0:6e:f2:2e:23:37:49:e1:ea:93:db:cb:47:9c:d2: 94:22:9b:01:8c:53:82:5f:37:d3:81:c2:60:13:d6: 1a:03:9f:95:bd:30:b9:15:10:65:f8:5b:85:b3:8b: 9a:f6:52:97:88:4a:87:bc:68:a0:75:9e:70:9f:b8: ec:ab:de:90:4d:08:97:6e:2f:c2:0d:73:81:d9:9a: 42:1a:7f:28:b3:a5:23:ac:1a:dd:f6:38:3d:bc:04: 16:82:4c:ec:6a:d3:ba:6e:14:b6:31:64:ba:f8:bf: 0f:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:25:13:C3:7F:65:7B:47:A9:BE:B8:3D:E4:AE:5F:37:BA:F0:5E:9B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/86c0befc-6e9d-343e-800e-39ec04f1ce71.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 130.162.192.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:18:95:da:df:9f:7e:6e:85:d0:41:93:23:24:3e:3d:88:ca: 65:1f:b3:b4:27:be:24:d3:2f:a1:8c:0c:94:86:50:8e:56:33: 8e:2e:18:01:df:4b:d1:38:76:42:9c:06:42:0c:75:b9:a1:5f: 85:3f:b5:e8:a8:61:6d:9f:a9:e0:f2:ed:a9:4b:c3:17:e4:01: b6:0f:16:4b:50:fd:e5:07:1c:a9:45:40:00:15:9d:fa:43:21: 1e:a3:a4:d6:1a:fc:9a:fe:75:06:cf:dd:a3:89:54:fe:11:2d: 6b:d3:72:33:a5:ff:35:79:bf:a3:5c:67:13:aa:5a:45:6d:74: 14:7b:62:60:85:2b:47:8c:9c:69:a2:ae:19:17:f1:4c:bf:28: 83:8a:48:d9:64:53:d0:c1:6a:aa:2a:af:55:b9:36:82:bf:54: 1d:5d:d9:18:70:8b:fd:16:2b:bb:c7:96:46:6d:86:36:5b:e5: 72:b5:fa:c7:7e:db:ae:dd:94:b6:b4:37:ac:56:7c:ff:e5:dc: cd:a9:42:4a:0b:f8:02:6f:7e:c0:9e:50:a9:01:87:cb:f5:be: 78:f5:e5:df:5f:2c:93:59:a6:a2:57:a1:0b:00:38:58:d3:cd: f6:b3:04:b8:f2:be:4e:a5:25:4a:fe:c1:3b:84:45:5c:5b:46: 5d:38:1d:34 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1/mqF93+HKsJ4jGAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDQxNDAxMDAyNFoXDTI2MDcxMzAxMDAyNFowLzEtMCsGA1UEAxMk NzI5NWJhNzAtNzBkOC00YjUwLWIxNzktMDFhYjc3MGJkZGExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiPQlVeT+Qd82dhfztsMmYbYVdrMFkh8dBGD8 WocZ02lnpNzIpdCcrkZ3VWYAKUoYr50/5lpk2uh0P/2LNz/RtSWn7PBYotXaD0OE erVKBPjc6UtDWpxynC9jxaef91JO+mTSvJ6GTy2ULkYB9XmmkLL2IwV9YArQn+BZ Cihl+3k0u+cjvKJ9l1O9Vs+zY5pdLl773FegbvIuIzdJ4eqT28tHnNKUIpsBjFOC XzfTgcJgE9YaA5+VvTC5FRBl+FuFs4ua9lKXiEqHvGigdZ5wn7jsq96QTQiXbi/C DXOB2ZpCGn8os6UjrBrd9jg9vAQWgkzsatO6bhS2MWS6+L8PEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGolE8N/ZXtHqb64PeSuXze68F6bMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvODZjMGJlZmMtNmU5ZC0z NDNlLTgwMGUtMzllYzA0ZjFjZTcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDgqLAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH4Yldrfn35uhdBBkyMkPj2IymUfs7QnviTTL6GMDJSGUI5WM44uGAHf S9E4dkKcBkIMdbmhX4U/teioYW2fqeDy7alLwxfkAbYPFktQ/eUHHKlFQAAVnfpD IR6jpNYa/Jr+dQbP3aOJVP4RLWvTcjOl/zV5v6NcZxOqWkVtdBR7YmCFK0eMnGmi rhkX8Uy/KIOKSNlkU9DBaqoqr1W5NoK/VB1d2Rhwi/0WK7vHlkZthjZb5XK1+sd+ 267dlLa0N6xWfP/l3M2pQkoL+AJvfsCeUKkBh8v1vnj15d9fLJNZpqJXoQsAOFjT zfazBLjyvk6lJUr+wTuERVxbRl04HTQ= -----END CERTIFICATE-----Generated at Fri Apr 17 15:18:21 2026 by rpki-client