$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/2f26c87e-bddf-369a-864f-a4a38efd98d1.roa File: 2f26c87e-bddf-369a-864f-a4a38efd98d1.roa (raw, json) Hash identifier: izZoG4iuB7kESpRaTNQ+j81/bGAbfmecCGUpN4kl86k= Subject key identifier: 0D:C6:15:11:38:9E:E3:6C:7D:BB:D8:28:32:6C:2E:B4:48:0C:B5:4D Certificate issuer: /CN=86fea470-b380-45c0-9f6b-033b7d884388 Certificate serial: 010D0C9F4328584EBF736C963E9CC8A28341D580 Authority key identifier: 08:74:8A:31:09:3C:2C:49:44:A1:2E:8A:D6:5C:9E:92:04:01:CF:16 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/2f26c87e-bddf-369a-864f-a4a38efd98d1.roa Signing time: Thu 06 Aug 2026 14:40:28 +0000 ROA not before: Thu 06 Aug 2026 14:40:28 +0000 ROA not after: Wed 04 Nov 2026 15:40:28 +0000 asID: 4766 IP address blocks: 67.220.69.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/86fea470-b380-45c0-9f6b-033b7d884388.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/86fea470-b380-45c0-9f6b-033b7d884388.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:bf:73:6c:96:3e:9c:c8:a2:83:41:d5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86fea470-b380-45c0-9f6b-033b7d884388 Validity Not Before: Aug 6 14:40:28 2026 GMT Not After : Nov 4 15:40:28 2026 GMT Subject: CN=549989ae-0a8a-4b75-8686-e989e038aca7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:b2:1f:d0:9e:20:8f:3e:5c:7b:3c:49:47:3c: bb:8b:2b:c8:cf:ab:8b:54:c8:01:4d:14:f0:09:5b: a0:d8:0b:de:cb:7f:35:1b:37:62:28:77:4c:bb:d6: 56:60:fd:94:fa:27:d7:85:57:33:ee:09:b0:2d:0e: ca:a8:4f:63:1e:29:a5:5d:34:6c:93:35:b2:20:c5: 70:80:98:1e:bf:d1:62:00:7c:de:ea:c6:24:ad:a2: 92:02:32:3b:07:c9:dd:b2:d0:2a:b6:12:8d:ad:bf: 4c:23:3f:e5:8b:d5:89:6d:9c:e9:98:44:d0:8e:0d: 31:b2:52:89:73:78:75:7e:32:f1:88:3c:53:7e:ae: ca:22:d2:6e:05:25:68:66:bd:b5:00:5c:13:d8:e1: 87:cd:a7:f2:d9:ef:c1:25:7d:4c:c3:5d:c6:f9:d9: dd:ed:44:10:a4:99:b3:13:b8:e5:90:0d:cb:de:d5: d5:69:a8:1a:84:60:46:a5:67:16:15:b7:68:2e:6f: eb:42:72:e9:39:3f:f1:f2:d8:66:67:fd:d4:ef:54: 9f:61:54:a0:85:4c:e6:a4:bb:4c:bd:64:77:f2:e8: cd:50:c9:11:03:db:4e:3c:ca:06:f8:0f:48:b4:0f: 1b:35:56:a5:1d:15:8f:2c:8e:fe:bc:b9:f5:52:ff: 7b:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:C6:15:11:38:9E:E3:6C:7D:BB:D8:28:32:6C:2E:B4:48:0C:B5:4D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/2f26c87e-bddf-369a-864f-a4a38efd98d1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/86fea470-b380-45c0-9f6b-033b7d884388.crl X509v3 Authority Key Identifier: keyid:08:74:8A:31:09:3C:2C:49:44:A1:2E:8A:D6:5C:9E:92:04:01:CF:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388.cer sbgp-ipAddrBlock: critical IPv4: 67.220.69.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:3d:62:a3:24:47:84:da:b4:b3:cd:de:e8:42:b6:9a:3d:0c: 95:d6:81:ee:6d:70:c1:2f:2a:70:e5:6b:98:9a:e7:31:a9:31: ed:db:ce:e4:c7:c1:6f:c6:49:4b:8d:5c:8d:b2:a7:e0:98:4a: fb:f0:95:97:29:06:69:21:24:90:e7:ca:56:12:de:fa:f5:27: 1a:9b:82:87:e9:22:f7:80:96:ee:95:54:41:c5:4b:57:73:c0: a4:32:2e:ec:ba:90:9d:5c:6b:bf:07:bf:11:ed:05:93:8b:1f: 45:4c:26:cf:7c:0a:ff:6e:a0:4f:87:87:54:33:5c:b9:55:33: 70:21:cc:dd:4f:9f:b0:d0:ff:35:89:43:28:69:74:48:f1:6c: ff:88:35:dc:ef:96:6a:1e:b8:6d:97:96:c9:90:e8:2c:e4:2c: ac:01:f1:0e:30:f4:d8:27:e6:53:3d:8e:87:e9:95:45:40:16: 40:c4:e6:ee:91:1b:56:9f:54:98:4e:a5:e0:19:d7:83:17:6d: b3:21:92:c5:8f:ff:ce:73:38:89:2e:f5:95:ff:5f:a9:97:db: 10:35:bf:ff:05:4a:66:20:24:49:05:6e:d4:83:67:b0:09:f9: 8b:51:fa:d8:bb:7d:3c:f5:64:36:93:bc:07:04:4e:55:23:73: ac:1c:4c:6f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6/c2yWPpzIooNB1YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODZmZWE0NzAtYjM4MC00NWMwLTlmNmItMDMzYjdkODg0 Mzg4MB4XDTI2MDgwNjE0NDAyOFoXDTI2MTEwNDE1NDAyOFowLzEtMCsGA1UEAxMk NTQ5OTg5YWUtMGE4YS00Yjc1LTg2ODYtZTk4OWUwMzhhY2E3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjLIf0J4gjz5cezxJRzy7iyvIz6uLVMgBTRTw CVug2Avey381GzdiKHdMu9ZWYP2U+ifXhVcz7gmwLQ7KqE9jHimlXTRskzWyIMVw gJgev9FiAHze6sYkraKSAjI7B8ndstAqthKNrb9MIz/li9WJbZzpmETQjg0xslKJ c3h1fjLxiDxTfq7KItJuBSVoZr21AFwT2OGHzafy2e/BJX1Mw13G+dnd7UQQpJmz E7jlkA3L3tXVaagahGBGpWcWFbdoLm/rQnLpOT/x8thmZ/3U71SfYVSghUzmpLtM vWR38ujNUMkRA9tOPMoG+A9ItA8bNValHRWPLI7+vLn1Uv97mQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA3GFRE4nuNsfbvYKDJsLrRIDLVNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS84NmZl YTQ3MC1iMzgwLTQ1YzAtOWY2Yi0wMzNiN2Q4ODQzODgvMmYyNmM4N2UtYmRkZi0z NjlhLTg2NGYtYTRhMzhlZmQ5OGQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvODZmZWE0NzAtYjM4MC00NWMwLTlm NmItMDMzYjdkODg0Mzg4Lzg2ZmVhNDcwLWIzODAtNDVjMC05ZjZiLTAzM2I3ZDg4 NDM4OC5jcmwwHwYDVR0jBBgwFoAUCHSKMQk8LElEoS6K1lyekgQBzxYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS84NmZlYTQ3MC1iMzgwLTQ1YzAtOWY2Yi0wMzNi N2Q4ODQzODguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQ9xFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGE9YqMkR4TatLPN3uhCtpo9DJXWge5tcMEvKnDla5ia5zGpMe3bzuTH wW/GSUuNXI2yp+CYSvvwlZcpBmkhJJDnylYS3vr1JxqbgofpIveAlu6VVEHFS1dz wKQyLuy6kJ1ca78HvxHtBZOLH0VMJs98Cv9uoE+Hh1QzXLlVM3AhzN1Pn7DQ/zWJ QyhpdEjxbP+INdzvlmoeuG2XlsmQ6CzkLKwB8Q4w9Ngn5lM9jofplUVAFkDE5u6R G1afVJhOpeAZ14MXbbMhksWP/85zOIku9ZX/X6mX2xA1v/8FSmYgJEkFbtSDZ7AJ +YtR+ti7fTz1ZDaTvAcETlUjc6wcTG8= -----END CERTIFICATE-----Generated at Fri Sep 4 21:25:57 2026 by rpki-client