$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/3944c106-8668-3c9c-aaca-223ecd28c1f8.roa File: 3944c106-8668-3c9c-aaca-223ecd28c1f8.roa (raw, json) Hash identifier: 4zcESeufkQr2h9kXylCBoIGEcUSygNOKSGcoSvmNcI8= Subject key identifier: 50:7E:19:F7:3D:2D:CE:97:0F:2C:97:45:BF:F1:1D:AE:D6:93:EC:A2 Certificate issuer: /CN=86fea470-b380-45c0-9f6b-033b7d884388 Certificate serial: 010D0C9F4328584E3CF9C9665F1196AC49CE8400 Authority key identifier: 08:74:8A:31:09:3C:2C:49:44:A1:2E:8A:D6:5C:9E:92:04:01:CF:16 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/3944c106-8668-3c9c-aaca-223ecd28c1f8.roa Signing time: Sat 20 Jun 2026 21:00:12 +0000 ROA not before: Sat 20 Jun 2026 21:00:12 +0000 ROA not after: Fri 18 Sep 2026 21:00:12 +0000 asID: 138195 IP address blocks: 68.168.30.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/86fea470-b380-45c0-9f6b-033b7d884388.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/86fea470-b380-45c0-9f6b-033b7d884388.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:3c:f9:c9:66:5f:11:96:ac:49:ce:84:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86fea470-b380-45c0-9f6b-033b7d884388 Validity Not Before: Jun 20 21:00:12 2026 GMT Not After : Sep 18 21:00:12 2026 GMT Subject: CN=5dc680b6-96ac-4975-a955-85d61ed9ef60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:4f:ab:a0:1a:89:c0:b8:08:11:33:20:06:0f: 7c:67:87:37:56:fb:cd:e0:57:30:cf:c3:9f:1f:f4: ac:1e:7b:d1:aa:b3:a7:fc:e4:e4:1c:3b:31:2d:ce: 57:3e:fb:20:5c:d2:0c:b6:d7:c7:1e:ef:6d:36:66: dd:8e:ce:91:1b:2d:52:44:65:2f:41:2c:23:63:46: e2:6f:fb:97:f2:a1:a9:1b:09:fa:95:f2:0b:d4:df: d5:19:e8:f6:65:8e:52:b5:46:d0:ad:63:4e:5b:42: 38:aa:dc:a0:af:c9:8b:ce:c8:3d:13:5f:b9:a6:2c: d0:d5:c2:87:72:59:4d:d7:7a:ba:55:65:6e:f5:b1: d7:27:d8:09:53:34:31:66:45:48:2d:23:79:2c:dd: 0f:8a:5b:37:b0:bc:a3:71:23:87:a0:eb:31:bd:e0: 49:a6:a1:db:4c:cf:b2:6d:4e:dc:c9:06:1d:4f:8b: 6a:da:96:57:e9:52:d0:f5:3c:04:c0:2f:e6:69:24: f2:f9:ab:cf:62:2a:1b:7e:59:28:75:c8:76:19:80: 32:ab:cf:3f:ea:1a:97:63:6d:16:1d:c0:8a:10:9f: 0c:35:9c:36:b7:5e:a4:48:97:58:5c:e2:e9:1b:ef: 4e:5d:f3:69:f0:a0:90:2b:a0:b4:72:30:71:ef:4e: e4:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:7E:19:F7:3D:2D:CE:97:0F:2C:97:45:BF:F1:1D:AE:D6:93:EC:A2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/3944c106-8668-3c9c-aaca-223ecd28c1f8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/86fea470-b380-45c0-9f6b-033b7d884388.crl X509v3 Authority Key Identifier: keyid:08:74:8A:31:09:3C:2C:49:44:A1:2E:8A:D6:5C:9E:92:04:01:CF:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388.cer sbgp-ipAddrBlock: critical IPv4: 68.168.30.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b6:a0:00:bd:cf:9f:49:98:ad:4d:cb:b8:0d:8e:f9:bc:38:fe: b5:ec:73:d2:b8:25:2b:8a:1c:1c:1c:b1:45:a1:23:00:6c:6a: 5c:aa:d0:b3:2e:53:eb:67:4d:50:12:e5:aa:a7:c2:a1:9a:f7: 5f:82:ad:2f:df:84:f0:72:75:a6:78:43:aa:43:b6:34:ba:01: aa:60:c8:95:ff:8e:ab:a7:1b:0b:1b:92:d8:f9:3a:c0:60:8f: 96:17:2a:26:63:1d:8a:83:bb:17:71:9e:6b:b7:44:63:19:f2: 6e:24:c8:c6:12:4b:ae:21:ae:02:08:8c:02:52:47:c6:5e:99: 24:6e:d2:00:56:c3:b8:9f:93:c1:d2:3f:5a:84:c5:59:2f:99: 68:b5:d6:c7:cc:bf:7c:3d:10:2e:f4:8d:2a:29:be:97:10:82: ea:6b:f3:e8:b5:1f:7b:86:6e:98:34:21:b8:a9:22:fb:0d:b2: b5:64:9e:4a:69:1a:d4:4b:ca:a0:49:34:4d:41:ce:a7:c3:fe: a8:bf:5d:8a:0b:34:05:cd:9a:2c:70:0e:62:64:77:72:cc:51: 13:dc:f5:2c:94:dc:4f:48:33:a1:3a:de:25:b5:a2:c7:48:e7: 3f:f5:1c:0d:a6:b4:dc:34:93:0f:d1:45:b8:5e:e4:75:f4:fc: 2e:86:71:c8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE48+clmXxGWrEnOhAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODZmZWE0NzAtYjM4MC00NWMwLTlmNmItMDMzYjdkODg0 Mzg4MB4XDTI2MDYyMDIxMDAxMloXDTI2MDkxODIxMDAxMlowLzEtMCsGA1UEAxMk NWRjNjgwYjYtOTZhYy00OTc1LWE5NTUtODVkNjFlZDllZjYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjU+roBqJwLgIETMgBg98Z4c3VvvN4Fcwz8Of H/SsHnvRqrOn/OTkHDsxLc5XPvsgXNIMttfHHu9tNmbdjs6RGy1SRGUvQSwjY0bi b/uX8qGpGwn6lfIL1N/VGej2ZY5StUbQrWNOW0I4qtygr8mLzsg9E1+5pizQ1cKH cllN13q6VWVu9bHXJ9gJUzQxZkVILSN5LN0Pils3sLyjcSOHoOsxveBJpqHbTM+y bU7cyQYdT4tq2pZX6VLQ9TwEwC/maSTy+avPYiobflkodch2GYAyq88/6hqXY20W HcCKEJ8MNZw2t16kSJdYXOLpG+9OXfNp8KCQK6C0cjBx707k9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFB+Gfc9Lc6XDyyXRb/xHa7Wk+yiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS84NmZl YTQ3MC1iMzgwLTQ1YzAtOWY2Yi0wMzNiN2Q4ODQzODgvMzk0NGMxMDYtODY2OC0z YzljLWFhY2EtMjIzZWNkMjhjMWY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvODZmZWE0NzAtYjM4MC00NWMwLTlm NmItMDMzYjdkODg0Mzg4Lzg2ZmVhNDcwLWIzODAtNDVjMC05ZjZiLTAzM2I3ZDg4 NDM4OC5jcmwwHwYDVR0jBBgwFoAUCHSKMQk8LElEoS6K1lyekgQBzxYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS84NmZlYTQ3MC1iMzgwLTQ1YzAtOWY2Yi0wMzNi N2Q4ODQzODguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARKgeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALagAL3Pn0mYrU3LuA2O+bw4/rXsc9K4JSuKHBwcsUWhIwBsalyq0LMu U+tnTVAS5aqnwqGa91+CrS/fhPBydaZ4Q6pDtjS6AapgyJX/jqunGwsbktj5OsBg j5YXKiZjHYqDuxdxnmu3RGMZ8m4kyMYSS64hrgIIjAJSR8ZemSRu0gBWw7ifk8HS P1qExVkvmWi11sfMv3w9EC70jSopvpcQgupr8+i1H3uGbpg0IbipIvsNsrVknkpp GtRLyqBJNE1BzqfD/qi/XYoLNAXNmixwDmJkd3LMURPc9SyU3E9IM6E63iW1osdI 5z/1HA2mtNw0kw/RRbhe5HX0/C6Gccg= -----END CERTIFICATE-----Generated at Tue Jul 21 12:45:12 2026 by rpki-client