$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/64f8a905-3cc8-3cbe-b454-99e4a0830822.roa File: 64f8a905-3cc8-3cbe-b454-99e4a0830822.roa (raw, json) Hash identifier: YFhH1s435GjXvWQNKSeiVNI9isThoutzgHrHWHVL+oE= Subject key identifier: ED:34:C8:AD:8F:1B:A5:5B:72:A5:E2:FE:40:81:D2:91:EC:64:87:2E Certificate issuer: /CN=86fea470-b380-45c0-9f6b-033b7d884388 Certificate serial: 010D0C9F4328584F1F9248DB373C96C0DBEF5E80 Authority key identifier: 08:74:8A:31:09:3C:2C:49:44:A1:2E:8A:D6:5C:9E:92:04:01:CF:16 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/64f8a905-3cc8-3cbe-b454-99e4a0830822.roa Signing time: Thu 10 Sep 2026 01:00:12 +0000 ROA not before: Thu 10 Sep 2026 01:00:12 +0000 ROA not after: Wed 09 Dec 2026 02:00:12 +0000 asID: 63025 IP address blocks: 67.220.87.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/86fea470-b380-45c0-9f6b-033b7d884388.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/86fea470-b380-45c0-9f6b-033b7d884388.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:1f:92:48:db:37:3c:96:c0:db:ef:5e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86fea470-b380-45c0-9f6b-033b7d884388 Validity Not Before: Sep 10 01:00:12 2026 GMT Not After : Dec 9 02:00:12 2026 GMT Subject: CN=a4fcd1f5-fc21-4a96-b80a-5d64e8cf3198 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:aa:25:34:41:d1:9e:65:43:69:29:86:d6:2e: 14:42:99:ee:9b:02:41:10:d5:fb:6b:a4:55:c1:70: 6d:63:9a:d8:cb:f0:dd:85:7f:3c:f7:c5:15:79:a1: 3d:9a:be:e0:38:da:2c:fb:04:f1:04:ee:45:36:30: 2b:c6:a1:a4:5e:e4:57:53:44:ab:8c:57:a1:89:44: ef:2b:ce:ea:a2:12:eb:28:e4:ff:fc:df:08:fa:28: 6c:c8:31:0a:4b:9b:93:74:15:81:3e:de:ab:77:f8: dd:fa:86:8a:78:d7:53:a0:08:66:38:b3:0c:b0:58: 89:1c:75:bc:6a:e8:9f:59:2f:4d:92:82:37:0a:ce: 4d:a1:2f:61:c7:15:22:c5:9b:59:a5:09:70:12:fc: a4:a8:d5:23:f4:29:6b:c3:75:5d:d8:c5:6a:29:62: ad:cb:ca:2c:c2:ff:f1:fa:27:a3:ac:7a:62:57:34: 3e:10:14:7c:6e:f9:79:70:28:9f:f1:f5:bb:b4:7d: 4b:fd:21:d5:5e:ab:1a:65:3e:28:f4:aa:63:6b:dd: d3:b5:09:21:f6:eb:84:93:8f:80:77:1d:6e:02:71: ad:61:05:f3:d5:a7:d5:23:2d:44:2a:c1:12:8a:06: 2d:18:dd:c6:82:fe:f1:8f:f7:fb:59:47:e0:3c:be: fc:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:34:C8:AD:8F:1B:A5:5B:72:A5:E2:FE:40:81:D2:91:EC:64:87:2E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/64f8a905-3cc8-3cbe-b454-99e4a0830822.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/86fea470-b380-45c0-9f6b-033b7d884388.crl X509v3 Authority Key Identifier: keyid:08:74:8A:31:09:3C:2C:49:44:A1:2E:8A:D6:5C:9E:92:04:01:CF:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388.cer sbgp-ipAddrBlock: critical IPv4: 67.220.87.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption dc:ad:b3:03:6e:15:c1:b7:62:4d:e9:55:f0:ef:d8:49:7f:c6: 7f:07:7c:f9:40:09:20:59:79:3d:50:49:7e:98:b5:e6:61:ef: 0e:ed:6b:ef:72:1b:ee:9c:fd:a4:83:30:7c:f1:05:74:b0:15: 50:4d:03:19:73:52:78:f2:15:48:aa:4d:88:76:20:8e:df:70: 3b:42:0b:18:a1:1c:a1:20:2d:5b:b5:5a:fe:af:c9:e8:7a:5b: 24:96:c4:9b:6d:f1:ec:2b:e0:3d:00:68:0b:29:53:9c:2e:ab: a2:c0:fa:1d:e3:2e:cb:63:11:7f:bd:76:c4:de:d4:77:46:42: 7b:be:a7:e8:74:e7:ae:91:b8:73:21:64:d8:fa:1c:37:96:6a: f9:5d:1b:49:c6:f8:b1:8f:86:dd:4d:f5:66:5e:bf:7e:7e:08: 1d:0b:d6:f9:93:82:c2:5c:d4:49:3d:fd:3a:16:a2:a8:89:43: dc:3a:f1:6b:a2:5f:90:3c:cd:8d:9a:52:ee:51:77:0e:8f:87: af:9b:43:43:54:7a:01:30:84:4c:10:e1:20:b4:34:c6:d1:c8: d6:f9:55:04:5d:a4:9b:6f:0c:fa:cd:76:47:33:66:e6:9b:e3: 93:ec:5a:79:43:41:74:06:5a:71:00:fa:27:ba:cc:15:00:36: be:82:08:e3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8fkkjbNzyWwNvvXoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODZmZWE0NzAtYjM4MC00NWMwLTlmNmItMDMzYjdkODg0 Mzg4MB4XDTI2MDkxMDAxMDAxMloXDTI2MTIwOTAyMDAxMlowLzEtMCsGA1UEAxMk YTRmY2QxZjUtZmMyMS00YTk2LWI4MGEtNWQ2NGU4Y2YzMTk4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApaolNEHRnmVDaSmG1i4UQpnumwJBENX7a6RV wXBtY5rYy/DdhX8898UVeaE9mr7gONos+wTxBO5FNjArxqGkXuRXU0SrjFehiUTv K87qohLrKOT//N8I+ihsyDEKS5uTdBWBPt6rd/jd+oaKeNdToAhmOLMMsFiJHHW8 auifWS9NkoI3Cs5NoS9hxxUixZtZpQlwEvykqNUj9Clrw3Vd2MVqKWKty8oswv/x +iejrHpiVzQ+EBR8bvl5cCif8fW7tH1L/SHVXqsaZT4o9Kpja93TtQkh9uuEk4+A dx1uAnGtYQXz1afVIy1EKsESigYtGN3Ggv7xj/f7WUfgPL78WwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO00yK2PG6VbcqXi/kCB0pHsZIcuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS84NmZl YTQ3MC1iMzgwLTQ1YzAtOWY2Yi0wMzNiN2Q4ODQzODgvNjRmOGE5MDUtM2NjOC0z Y2JlLWI0NTQtOTllNGEwODMwODIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvODZmZWE0NzAtYjM4MC00NWMwLTlm NmItMDMzYjdkODg0Mzg4Lzg2ZmVhNDcwLWIzODAtNDVjMC05ZjZiLTAzM2I3ZDg4 NDM4OC5jcmwwHwYDVR0jBBgwFoAUCHSKMQk8LElEoS6K1lyekgQBzxYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS84NmZlYTQ3MC1iMzgwLTQ1YzAtOWY2Yi0wMzNi N2Q4ODQzODguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQ9xXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANytswNuFcG3Yk3pVfDv2El/xn8HfPlACSBZeT1QSX6YteZh7w7ta+9y G+6c/aSDMHzxBXSwFVBNAxlzUnjyFUiqTYh2II7fcDtCCxihHKEgLVu1Wv6vyeh6 WySWxJtt8ewr4D0AaAspU5wuq6LA+h3jLstjEX+9dsTe1HdGQnu+p+h0566RuHMh ZNj6HDeWavldG0nG+LGPht1N9WZev35+CB0L1vmTgsJc1Ek9/ToWoqiJQ9w68Wui X5A8zY2aUu5Rdw6Ph6+bQ0NUegEwhEwQ4SC0NMbRyNb5VQRdpJtvDPrNdkczZuab 45PsWnlDQXQGWnEA+ie6zBUANr6CCOM= -----END CERTIFICATE-----Generated at Thu Sep 10 18:45:20 2026 by rpki-client