$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/2ca77941-4e83-30ff-a8aa-4d2d33402a93.roa File: 2ca77941-4e83-30ff-a8aa-4d2d33402a93.roa (raw, json) Hash identifier: po5xKb2jZz5qv19DnOPYCjxVn1B5EOW5NhPyBWnDpgE= Subject key identifier: 12:FC:A3:4E:E4:48:C4:84:5B:C9:8D:C7:A9:6C:A4:54:F1:C0:AA:46 Certificate issuer: /CN=86fea470-b380-45c0-9f6b-033b7d884388 Certificate serial: 010D0C9F4328584EA788740A1F3AA236FA78DB80 Authority key identifier: 08:74:8A:31:09:3C:2C:49:44:A1:2E:8A:D6:5C:9E:92:04:01:CF:16 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/2ca77941-4e83-30ff-a8aa-4d2d33402a93.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 17048 IP address blocks: 67.220.64.0/19 maxlen: 24 68.168.16.0/20 maxlen: 24 69.42.208.0/20 maxlen: 24 186.190.208.0/20 maxlen: 24 2607:3b40::/32 maxlen: 48 2607:f5a0::/32 maxlen: 48 2607:ffd8::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/86fea470-b380-45c0-9f6b-033b7d884388.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/86fea470-b380-45c0-9f6b-033b7d884388.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:88:74:0a:1f:3a:a2:36:fa:78:db:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86fea470-b380-45c0-9f6b-033b7d884388 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=4c427542-6460-4f63-bae5-f3aaf0190d21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:7d:b1:9e:8f:3d:c7:1f:47:77:b8:7f:1c:ae: 66:3e:9c:a4:ce:9d:b0:4a:10:1c:d6:bf:ac:60:a4: a4:66:f2:7e:b4:92:c1:aa:ec:42:f3:cc:c9:2e:44: 53:38:49:0e:39:48:df:eb:39:56:8f:4b:d1:4d:b5: 02:92:80:41:99:b2:79:b3:1c:16:65:06:88:e4:84: 1c:25:bb:68:93:de:9a:40:0d:dc:d0:1e:96:db:b9: 87:81:78:da:72:4c:87:3f:83:71:23:df:c6:20:cb: 5e:c2:7f:c0:ed:72:cb:56:89:cd:68:32:f0:de:85: 3c:e7:83:4e:8e:81:e9:25:26:e6:3c:83:c6:99:47: df:4b:1b:3f:b3:d3:6d:0a:0f:01:54:32:13:4e:14: 78:15:58:95:0c:c7:7d:70:70:15:5a:88:17:c8:9b: b3:7d:46:87:f9:42:1b:b0:8d:a6:1b:e6:c9:da:9b: 22:36:72:9e:a7:61:ae:2e:b5:03:34:5e:2e:ea:66: e7:cf:aa:a3:b4:9a:fe:2b:e8:d8:c5:3f:1d:07:8a: b7:2a:f2:74:14:66:0c:64:ac:eb:03:01:16:b6:ed: 3d:f0:2e:a1:ee:51:d7:db:d4:63:0e:aa:e7:c1:7e: 50:08:41:ba:29:88:4a:38:72:4d:c8:f1:d4:aa:74: b5:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:FC:A3:4E:E4:48:C4:84:5B:C9:8D:C7:A9:6C:A4:54:F1:C0:AA:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/2ca77941-4e83-30ff-a8aa-4d2d33402a93.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/86fea470-b380-45c0-9f6b-033b7d884388.crl X509v3 Authority Key Identifier: keyid:08:74:8A:31:09:3C:2C:49:44:A1:2E:8A:D6:5C:9E:92:04:01:CF:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388.cer sbgp-ipAddrBlock: critical IPv4: 67.220.64.0/19 68.168.16.0/20 69.42.208.0/20 186.190.208.0/20 IPv6: 2607:3b40::/32 2607:f5a0::/32 2607:ffd8::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:d1:e4:8b:2b:fa:68:9a:c6:39:ae:41:60:39:9a:9c:76:a8: 4b:02:e3:b4:19:3e:7b:fc:1b:98:18:0f:bd:27:56:0c:34:c8: 48:5f:eb:64:da:95:f4:19:e6:b5:e4:67:68:57:8a:52:34:e9: 33:f2:32:f1:f3:df:51:79:b2:52:3c:62:84:e5:b4:0b:a1:6c: 80:d9:7b:28:e5:77:32:1b:92:15:76:13:a2:f5:3f:cb:6d:ac: 3a:5f:b7:38:73:6c:a0:0e:5a:61:d8:68:94:95:7e:8b:5e:64: ab:55:89:8e:1c:f9:7e:28:1e:81:12:47:9e:d1:dc:5b:e4:0c: 16:fe:ac:22:5e:1e:b9:8c:12:d1:14:26:ec:42:c2:f6:e0:7e: f3:91:d2:b7:36:3d:f4:62:02:bf:7e:24:45:cd:aa:69:fb:e0: 03:ae:75:90:14:55:dd:af:cd:f7:a2:62:ea:95:90:47:b8:6e: 1f:cf:de:63:05:80:a9:97:db:2e:07:11:fc:ab:48:74:f1:a1: 8e:30:9e:97:a5:69:6a:9e:12:dc:63:01:86:3d:a9:60:6d:63: 62:ce:37:61:6f:b4:78:6c:2e:0c:68:cc:2c:1b:c4:07:72:ca: 3c:07:c0:26:3b:db:fa:5b:c4:7c:3e:50:3c:60:b6:17:ce:e1: d0:3e:84:e0 -----BEGIN CERTIFICATE----- MIIGcjCCBVqgAwIBAgIUAQ0Mn0MoWE6niHQKHzqiNvp424AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODZmZWE0NzAtYjM4MC00NWMwLTlmNmItMDMzYjdkODg0 Mzg4MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk NGM0Mjc1NDItNjQ2MC00ZjYzLWJhZTUtZjNhYWYwMTkwZDIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlH2xno89xx9Hd7h/HK5mPpykzp2wShAc1r+s YKSkZvJ+tJLBquxC88zJLkRTOEkOOUjf6zlWj0vRTbUCkoBBmbJ5sxwWZQaI5IQc Jbtok96aQA3c0B6W27mHgXjackyHP4NxI9/GIMtewn/A7XLLVonNaDLw3oU854NO joHpJSbmPIPGmUffSxs/s9NtCg8BVDITThR4FViVDMd9cHAVWogXyJuzfUaH+UIb sI2mG+bJ2psiNnKep2GuLrUDNF4u6mbnz6qjtJr+K+jYxT8dB4q3KvJ0FGYMZKzr AwEWtu098C6h7lHX29RjDqrnwX5QCEG6KYhKOHJNyPHUqnS1xwIDAQABo4IDhDCC A4AwHQYDVR0OBBYEFBL8o07kSMSEW8mNx6lspFTxwKpGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS84NmZl YTQ3MC1iMzgwLTQ1YzAtOWY2Yi0wMzNiN2Q4ODQzODgvMmNhNzc5NDEtNGU4My0z MGZmLWE4YWEtNGQyZDMzNDAyYTkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvODZmZWE0NzAtYjM4MC00NWMwLTlm NmItMDMzYjdkODg0Mzg4Lzg2ZmVhNDcwLWIzODAtNDVjMC05ZjZiLTAzM2I3ZDg4 NDM4OC5jcmwwHwYDVR0jBBgwFoAUCHSKMQk8LElEoS6K1lyekgQBzxYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS84NmZlYTQ3MC1iMzgwLTQ1YzAtOWY2Yi0wMzNi N2Q4ODQzODguY2VyME4GCCsGAQUFBwEHAQH/BD8wPTAeBAIAATAYAwQFQ9xAAwQE RKgQAwQERSrQAwQEur7QMBsEAgACMBUDBQAmBztAAwUAJgf1oAMFACYH/9gwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAD9Hkiyv6aJrGOa5BYDmanHaoSwLjtBk+e/wbmBgPvSdWDDTISF/rZNqV 9BnmteRnaFeKUjTpM/Iy8fPfUXmyUjxihOW0C6FsgNl7KOV3MhuSFXYTovU/y22s Ol+3OHNsoA5aYdholJV+i15kq1WJjhz5figegRJHntHcW+QMFv6sIl4euYwS0RQm 7ELC9uB+85HStzY99GICv34kRc2qafvgA651kBRV3a/N96Ji6pWQR7huH8/eYwWA qZfbLgcR/KtIdPGhjjCel6Vpap4S3GMBhj2pYG1jYs43YW+0eGwuDGjMLBvEB3LK PAfAJjvb+lvEfD5QPGC2F87h0D6E4A== -----END CERTIFICATE-----Generated at Fri Sep 11 05:08:46 2026 by rpki-client