$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/1d7d2dba-3fd2-3690-a960-a6433fa200fd.roa File: 1d7d2dba-3fd2-3690-a960-a6433fa200fd.roa (raw, json) Hash identifier: fNuM4dh9AwtUD/QG+TPl/3K8cuHaxxe+MEhZsV9b6E4= Subject key identifier: FA:1D:62:C4:6C:7C:52:78:FE:DE:91:51:BB:0E:D1:43:74:99:8D:AE Certificate issuer: /CN=86fea470-b380-45c0-9f6b-033b7d884388 Certificate serial: 010D0C9F4328584F94D3353052A5D7A231087400 Authority key identifier: 08:74:8A:31:09:3C:2C:49:44:A1:2E:8A:D6:5C:9E:92:04:01:CF:16 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/1d7d2dba-3fd2-3690-a960-a6433fa200fd.roa Signing time: Thu 22 Oct 2026 01:00:12 +0000 ROA not before: Thu 22 Oct 2026 01:00:12 +0000 ROA not after: Wed 20 Jan 2027 02:00:12 +0000 asID: 215224 IP address blocks: 69.42.209.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/86fea470-b380-45c0-9f6b-033b7d884388.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/86fea470-b380-45c0-9f6b-033b7d884388.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 26 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:94:d3:35:30:52:a5:d7:a2:31:08:74:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86fea470-b380-45c0-9f6b-033b7d884388 Validity Not Before: Oct 22 01:00:12 2026 GMT Not After : Jan 20 02:00:12 2027 GMT Subject: CN=a608cfaf-b99f-4a07-acf5-560a45310908 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:cd:a0:cb:af:2a:7e:9a:75:9f:26:4e:28:d3: a6:15:8d:e8:e0:4b:64:42:0d:66:a0:de:12:bb:25: 55:10:6c:56:28:b0:2d:d5:79:39:e7:76:2a:b8:3e: eb:93:c3:fe:d4:97:60:82:7a:c2:21:63:ee:aa:93: e2:76:04:bd:3c:e6:ea:41:e6:7f:3f:4f:7c:2f:58: 5d:06:d8:61:69:e9:85:f2:71:ac:97:5b:d0:01:3b: 0c:17:79:e0:9a:0e:32:fb:e7:44:32:2d:bc:5f:9e: 9c:ff:a2:94:78:58:8c:cf:64:0c:d0:46:f4:97:ab: 18:99:82:2c:4b:e0:84:11:70:2c:a5:63:1c:e0:0d: 4b:6d:05:f0:d2:de:f4:d8:5b:18:9c:da:eb:f2:4f: de:3e:c7:fc:28:7e:9d:e3:3e:a0:52:50:9d:eb:f3: 2d:7d:9b:c2:57:ca:24:28:a1:48:c3:a8:ac:97:66: 78:bc:51:98:b8:61:25:40:63:32:5b:37:75:ae:ab: cc:42:85:a6:8b:78:9d:35:86:b8:8e:a9:85:a2:da: a0:cc:c5:5a:9c:6d:9e:86:80:61:1c:26:2e:60:97: f9:b5:35:31:1a:52:ab:33:70:90:50:70:a3:42:5e: 20:cb:95:e7:b3:b8:f4:55:10:ce:a0:ec:b8:67:aa: c8:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:1D:62:C4:6C:7C:52:78:FE:DE:91:51:BB:0E:D1:43:74:99:8D:AE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/1d7d2dba-3fd2-3690-a960-a6433fa200fd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/86fea470-b380-45c0-9f6b-033b7d884388.crl X509v3 Authority Key Identifier: keyid:08:74:8A:31:09:3C:2C:49:44:A1:2E:8A:D6:5C:9E:92:04:01:CF:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388.cer sbgp-ipAddrBlock: critical IPv4: 69.42.209.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption da:59:3d:fb:44:d4:c7:8d:6f:43:03:1e:29:f9:e9:68:9f:c7: 42:cc:08:28:0a:c0:d0:27:d5:0f:4f:00:a4:f9:69:0e:93:4b: e2:a4:73:1a:8b:39:e1:6f:86:a3:a3:31:13:96:f4:48:36:7b: 7c:87:10:7e:55:3b:6a:b7:06:26:c3:f4:86:0b:73:94:88:aa: 7b:88:af:d7:57:04:b3:2f:cc:01:47:a6:35:b2:bd:ba:04:30: 53:77:5b:51:c7:91:3b:a5:0e:95:f3:15:e0:41:68:90:20:8c: 42:7c:12:c7:32:b6:da:5a:40:96:72:92:a1:08:1b:18:4c:54: 87:bb:fa:f9:dc:98:28:ec:61:10:68:0c:36:6b:e6:bd:0b:0c: 17:c8:c3:cc:71:f4:57:09:40:0e:06:0f:5d:62:7f:e5:27:74: 89:b3:b1:10:63:c1:5f:f3:d9:80:33:e5:81:c4:c0:c1:89:86: 27:59:08:41:cf:71:b3:7d:5c:77:56:23:96:10:17:69:3e:d9: 8b:8d:20:5e:eb:e6:ee:9c:68:34:61:02:2d:a6:68:bd:b4:f0: 63:73:2c:a8:5b:d1:5b:59:1b:6e:de:4b:3d:45:2a:2d:3a:aa: 3f:92:90:12:39:22:03:c7:ce:11:3c:21:c0:b4:97:e6:8f:f5: fe:69:4d:cd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+U0zUwUqXXojEIdAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODZmZWE0NzAtYjM4MC00NWMwLTlmNmItMDMzYjdkODg0 Mzg4MB4XDTI2MTAyMjAxMDAxMloXDTI3MDEyMDAyMDAxMlowLzEtMCsGA1UEAxMk YTYwOGNmYWYtYjk5Zi00YTA3LWFjZjUtNTYwYTQ1MzEwOTA4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlc2gy68qfpp1nyZOKNOmFY3o4EtkQg1moN4S uyVVEGxWKLAt1Xk553YquD7rk8P+1JdggnrCIWPuqpPidgS9PObqQeZ/P098L1hd BthhaemF8nGsl1vQATsMF3ngmg4y++dEMi28X56c/6KUeFiMz2QM0Eb0l6sYmYIs S+CEEXAspWMc4A1LbQXw0t702FsYnNrr8k/ePsf8KH6d4z6gUlCd6/MtfZvCV8ok KKFIw6isl2Z4vFGYuGElQGMyWzd1rqvMQoWmi3idNYa4jqmFotqgzMVanG2ehoBh HCYuYJf5tTUxGlKrM3CQUHCjQl4gy5Xns7j0VRDOoOy4Z6rIGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPodYsRsfFJ4/t6RUbsO0UN0mY2uMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS84NmZl YTQ3MC1iMzgwLTQ1YzAtOWY2Yi0wMzNiN2Q4ODQzODgvMWQ3ZDJkYmEtM2ZkMi0z NjkwLWE5NjAtYTY0MzNmYTIwMGZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvODZmZWE0NzAtYjM4MC00NWMwLTlm NmItMDMzYjdkODg0Mzg4Lzg2ZmVhNDcwLWIzODAtNDVjMC05ZjZiLTAzM2I3ZDg4 NDM4OC5jcmwwHwYDVR0jBBgwFoAUCHSKMQk8LElEoS6K1lyekgQBzxYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS84NmZlYTQ3MC1iMzgwLTQ1YzAtOWY2Yi0wMzNi N2Q4ODQzODguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARSrRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANpZPftE1MeNb0MDHin56Wifx0LMCCgKwNAn1Q9PAKT5aQ6TS+KkcxqL OeFvhqOjMROW9Eg2e3yHEH5VO2q3BibD9IYLc5SIqnuIr9dXBLMvzAFHpjWyvboE MFN3W1HHkTulDpXzFeBBaJAgjEJ8EscyttpaQJZykqEIGxhMVIe7+vncmCjsYRBo DDZr5r0LDBfIw8xx9FcJQA4GD11if+UndImzsRBjwV/z2YAz5YHEwMGJhidZCEHP cbN9XHdWI5YQF2k+2YuNIF7r5u6caDRhAi2maL208GNzLKhb0VtZG27eSz1FKi06 qj+SkBI5IgPHzhE8IcC0l+aP9f5pTc0= -----END CERTIFICATE-----Generated at Sun Oct 25 14:56:22 2026 by rpki-client