$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/389d2331-8e71-3814-88d9-5e889b3e6fcf.roa File: 389d2331-8e71-3814-88d9-5e889b3e6fcf.roa (raw, json) Hash identifier: TCCks53QeNhjex/1qce2zcYg6LZKtUIbPuz9VUr6VfE= Subject key identifier: 43:2D:ED:30:E1:3F:97:3A:1E:37:6D:5D:D6:68:5D:0D:4B:63:A6:11 Certificate issuer: /CN=86fea470-b380-45c0-9f6b-033b7d884388 Certificate serial: 010D0C9F4328584D9188F7FCF74DA01E6E20F620 Authority key identifier: 08:74:8A:31:09:3C:2C:49:44:A1:2E:8A:D6:5C:9E:92:04:01:CF:16 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/389d2331-8e71-3814-88d9-5e889b3e6fcf.roa Signing time: Mon 20 Apr 2026 11:09:46 +0000 ROA not before: Mon 20 Apr 2026 11:09:46 +0000 ROA not after: Sun 19 Jul 2026 11:09:46 +0000 asID: 198780 IP address blocks: 67.220.69.0/24 maxlen: 24 68.168.30.0/24 maxlen: 24 69.42.209.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/86fea470-b380-45c0-9f6b-033b7d884388.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/86fea470-b380-45c0-9f6b-033b7d884388.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 29 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:91:88:f7:fc:f7:4d:a0:1e:6e:20:f6:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86fea470-b380-45c0-9f6b-033b7d884388 Validity Not Before: Apr 20 11:09:46 2026 GMT Not After : Jul 19 11:09:46 2026 GMT Subject: CN=59f90baa-45de-424d-b92c-625d6af73b3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:3e:07:52:32:79:88:f9:0d:b7:7e:0d:b8:2e: 96:64:81:f4:05:c3:71:0a:9a:69:72:84:9e:58:03: 05:3a:4e:19:c0:88:2d:a6:07:f6:f5:71:d8:1b:d8: fa:56:71:c7:e0:af:95:f4:f6:78:af:85:30:14:a0: ca:e4:0a:b2:f5:78:f0:56:fd:20:1a:21:fe:60:47: 39:6f:48:4f:94:d8:a8:a9:ec:19:d1:34:cf:cf:9d: bd:ce:d4:8d:93:04:a0:6f:d3:3a:75:8d:b6:e2:f8: ad:9c:97:a3:bb:53:45:74:5a:5d:cb:cf:18:c2:63: b4:95:de:24:12:47:49:37:30:fe:e2:bd:1e:b0:ca: 15:7f:db:4e:2e:fa:9c:69:ce:35:6c:fe:30:5d:75: a2:fc:f0:59:4d:d0:31:ec:4e:75:5f:59:c7:bf:ff: ca:96:4c:5d:7f:4a:cd:d3:82:96:62:31:7d:5f:13: 82:95:31:d8:b3:ab:e9:37:9c:4f:b5:54:bf:9e:a2: 76:1a:26:97:47:09:60:d0:a9:54:d2:cf:5e:c3:a0: ee:49:a9:39:b8:9e:70:99:b5:0b:bc:8f:7f:37:02: 39:eb:9c:a6:15:84:c4:21:85:10:3c:91:f5:08:4d: 68:bd:85:20:b5:58:b9:5a:9f:ef:7c:fd:56:31:7b: 6f:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:2D:ED:30:E1:3F:97:3A:1E:37:6D:5D:D6:68:5D:0D:4B:63:A6:11 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/389d2331-8e71-3814-88d9-5e889b3e6fcf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/86fea470-b380-45c0-9f6b-033b7d884388.crl X509v3 Authority Key Identifier: keyid:08:74:8A:31:09:3C:2C:49:44:A1:2E:8A:D6:5C:9E:92:04:01:CF:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388.cer sbgp-ipAddrBlock: critical IPv4: 67.220.69.0/24 68.168.30.0/24 69.42.209.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:ac:a6:5a:34:30:cf:cb:90:b4:70:f5:6b:ff:b9:c2:59:ad: cc:e7:67:cf:a9:1b:68:83:64:37:3f:93:0c:cc:eb:f6:be:d8: d1:96:7d:d2:1b:05:40:12:fb:1f:f6:04:e2:45:65:1c:22:f7: 9b:77:0c:d0:64:29:c2:83:52:f0:28:f6:0b:e8:c8:4e:45:9d: 5b:db:0c:9a:f9:8d:10:d1:78:49:87:a5:ce:03:08:b0:ce:0a: e9:e2:c4:2d:ac:4e:0a:58:b2:b3:60:79:97:44:00:48:3d:2d: 70:1c:78:1d:23:7b:29:ca:16:a5:96:a9:67:2b:51:65:96:d5: a8:b0:75:0e:12:20:6b:c8:a8:a5:7d:ed:12:7a:0c:06:f2:f5: 03:dd:76:4f:37:ff:b7:2a:a2:ec:77:3e:8e:e3:dc:5b:cf:2a: 9f:3e:b6:b6:5a:43:d2:a9:14:88:1b:15:bf:9b:3f:be:12:e6: 08:7f:3d:58:43:b2:1e:39:bf:66:87:da:16:8f:b4:08:44:c8: 9d:ef:29:51:3a:f5:90:26:4c:e6:d4:65:e5:c7:17:77:9c:0c: a5:8b:7f:74:2d:29:02:44:12:40:c1:c2:55:ca:af:f9:5d:5f: 1e:1f:2a:0b:53:84:4f:8e:c9:12:d7:d1:c2:f2:fd:e5:95:d9: 2b:36:57:63 -----BEGIN CERTIFICATE----- MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWE2RiPf8902gHm4g9iAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODZmZWE0NzAtYjM4MC00NWMwLTlmNmItMDMzYjdkODg0 Mzg4MB4XDTI2MDQyMDExMDk0NloXDTI2MDcxOTExMDk0NlowLzEtMCsGA1UEAxMk NTlmOTBiYWEtNDVkZS00MjRkLWI5MmMtNjI1ZDZhZjczYjNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApT4HUjJ5iPkNt34NuC6WZIH0BcNxCpppcoSe WAMFOk4ZwIgtpgf29XHYG9j6VnHH4K+V9PZ4r4UwFKDK5Aqy9XjwVv0gGiH+YEc5 b0hPlNioqewZ0TTPz529ztSNkwSgb9M6dY224vitnJeju1NFdFpdy88YwmO0ld4k EkdJNzD+4r0esMoVf9tOLvqcac41bP4wXXWi/PBZTdAx7E51X1nHv//Klkxdf0rN 04KWYjF9XxOClTHYs6vpN5xPtVS/nqJ2GiaXRwlg0KlU0s9ew6DuSak5uJ5wmbUL vI9/NwI565ymFYTEIYUQPJH1CE1ovYUgtVi5Wp/vfP1WMXtvYQIDAQABo4IDYTCC A10wHQYDVR0OBBYEFEMt7TDhP5c6HjdtXdZoXQ1LY6YRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS84NmZl YTQ3MC1iMzgwLTQ1YzAtOWY2Yi0wMzNiN2Q4ODQzODgvMzg5ZDIzMzEtOGU3MS0z ODE0LTg4ZDktNWU4ODliM2U2ZmNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvODZmZWE0NzAtYjM4MC00NWMwLTlm NmItMDMzYjdkODg0Mzg4Lzg2ZmVhNDcwLWIzODAtNDVjMC05ZjZiLTAzM2I3ZDg4 NDM4OC5jcmwwHwYDVR0jBBgwFoAUCHSKMQk8LElEoS6K1lyekgQBzxYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS84NmZlYTQ3MC1iMzgwLTQ1YzAtOWY2Yi0wMzNi N2Q4ODQzODguY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAQ9xFAwQA RKgeAwQARSrRMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBADmsplo0MM/LkLRw9Wv/ucJZrcznZ8+pG2iDZDc/ kwzM6/a+2NGWfdIbBUAS+x/2BOJFZRwi95t3DNBkKcKDUvAo9gvoyE5FnVvbDJr5 jRDReEmHpc4DCLDOCunixC2sTgpYsrNgeZdEAEg9LXAceB0jeynKFqWWqWcrUWWW 1aiwdQ4SIGvIqKV97RJ6DAby9QPddk83/7cqoux3Po7j3FvPKp8+trZaQ9KpFIgb Fb+bP74S5gh/PVhDsh45v2aH2haPtAhEyJ3vKVE69ZAmTObUZeXHF3ecDKWLf3Qt KQJEEkDBwlXKr/ldXx4fKgtThE+OyRLX0cLy/eWV2Ss2V2M= -----END CERTIFICATE-----Generated at Mon Apr 27 11:16:22 2026 by rpki-client