$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/69552b47-13a2-397a-b4b1-1e5f9973ffb0.roa File: 69552b47-13a2-397a-b4b1-1e5f9973ffb0.roa (raw, json) Hash identifier: 9StlAtCOo14Rnce19IoOx2M04cQk9ftXC0MlKnA2YAA= Subject key identifier: 1A:79:ED:38:62:59:CA:54:8B:19:7E:F6:B7:4C:39:BA:E5:81:50:76 Certificate issuer: /CN=86fea470-b380-45c0-9f6b-033b7d884388 Certificate serial: 010D0C9F4328584EA79C167F82C9C2C18A0F7160 Authority key identifier: 08:74:8A:31:09:3C:2C:49:44:A1:2E:8A:D6:5C:9E:92:04:01:CF:16 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/69552b47-13a2-397a-b4b1-1e5f9973ffb0.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 8100 IP address blocks: 186.190.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/86fea470-b380-45c0-9f6b-033b7d884388.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/86fea470-b380-45c0-9f6b-033b7d884388.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:9c:16:7f:82:c9:c2:c1:8a:0f:71:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86fea470-b380-45c0-9f6b-033b7d884388 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=64f36a9e-f4d6-4678-b7bc-7c0c02c3cc6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:93:fe:0b:f5:3c:6a:31:91:3f:ad:15:27:86: 5e:18:db:b7:2f:f9:6d:2b:83:2d:2c:33:c6:9b:81: 35:3d:05:3d:3f:04:b3:7a:f1:e0:f3:14:68:08:3b: b5:7f:42:01:2f:13:7f:50:dd:66:b7:6d:8b:99:c2: 75:c1:1f:40:49:40:18:ba:0f:ec:d8:8b:23:f9:0c: 8c:3e:4a:af:57:d3:ec:4a:c5:d2:c6:6b:82:77:ba: e1:99:13:a5:88:e7:4e:7d:12:94:ca:48:8a:29:9a: 5a:b0:c2:0d:34:2e:d7:51:f7:85:54:16:81:98:b0: 94:93:cf:13:f5:4d:c5:1d:6d:64:8b:66:04:e2:e0: 61:ae:e1:fb:11:ec:7c:e5:b1:55:3c:f1:54:7a:c9: e7:3b:8e:2e:4e:64:d8:42:dc:99:8d:6a:13:eb:09: d2:af:60:4b:28:ff:64:70:18:97:bf:8c:44:e3:d2: fb:05:a1:d1:1d:5d:78:b5:e6:23:1c:59:cb:92:6d: d8:26:ca:e0:1b:0d:94:4a:f7:6d:f2:64:72:ef:22: 57:26:40:7f:6b:d0:0c:01:38:d8:d2:da:3d:23:45: 00:fa:e9:59:85:df:4a:6f:7f:36:fa:75:33:70:bf: 2a:84:94:b3:de:75:00:d1:6a:04:63:60:7e:75:96: de:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:79:ED:38:62:59:CA:54:8B:19:7E:F6:B7:4C:39:BA:E5:81:50:76 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/69552b47-13a2-397a-b4b1-1e5f9973ffb0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/86fea470-b380-45c0-9f6b-033b7d884388.crl X509v3 Authority Key Identifier: keyid:08:74:8A:31:09:3C:2C:49:44:A1:2E:8A:D6:5C:9E:92:04:01:CF:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388.cer sbgp-ipAddrBlock: critical IPv4: 186.190.220.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:68:71:0b:c2:95:a0:44:f0:a1:3c:84:7f:e3:06:fc:f1:e7: dd:2f:3f:b7:6a:cd:05:59:88:df:af:57:5d:ed:56:2c:58:84: ea:c6:c5:5b:f9:69:b3:e1:f9:38:b6:e1:03:f6:48:71:64:a3: 22:19:7f:56:2f:6f:57:d2:b4:e3:9f:5d:83:20:42:b3:79:08: 18:8b:31:a7:8e:e2:68:01:c1:f7:e3:a7:5e:5e:a9:12:64:41: 0f:e6:b2:df:bb:62:b7:4c:c4:1d:f3:d0:85:ff:22:91:0f:27: cd:2e:a4:72:e7:0d:f7:f1:62:d6:09:92:6c:97:99:97:4b:95: 99:f1:ea:cc:35:6f:27:00:15:e3:46:c2:9b:65:16:d5:cc:63: 5d:5d:05:9c:28:51:86:f8:ed:d1:c1:37:74:f3:42:ab:c8:90: ab:bd:6b:e3:2f:fe:cb:0b:62:a7:d2:f4:79:2d:a3:85:4e:fe: 85:f2:ef:8e:dc:b1:a6:50:15:42:59:2e:c3:61:7f:c3:f1:23: 63:d4:40:72:cc:6a:f2:2c:4c:05:bf:86:63:77:a7:20:2c:9e: 0d:c1:74:23:87:19:f0:7f:04:86:e0:28:e3:30:d0:7f:7d:7a: df:2e:3c:e6:ef:0c:0d:6e:f3:47:5b:ac:05:a4:28:f6:e9:ef: 9c:7f:9b:e0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nnBZ/gsnCwYoPcWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODZmZWE0NzAtYjM4MC00NWMwLTlmNmItMDMzYjdkODg0 Mzg4MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk NjRmMzZhOWUtZjRkNi00Njc4LWI3YmMtN2MwYzAyYzNjYzZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoZP+C/U8ajGRP60VJ4ZeGNu3L/ltK4MtLDPG m4E1PQU9PwSzevHg8xRoCDu1f0IBLxN/UN1mt22LmcJ1wR9ASUAYug/s2Isj+QyM PkqvV9PsSsXSxmuCd7rhmROliOdOfRKUykiKKZpasMINNC7XUfeFVBaBmLCUk88T 9U3FHW1ki2YE4uBhruH7Eex85bFVPPFUesnnO44uTmTYQtyZjWoT6wnSr2BLKP9k cBiXv4xE49L7BaHRHV14teYjHFnLkm3YJsrgGw2USvdt8mRy7yJXJkB/a9AMATjY 0to9I0UA+ulZhd9Kb382+nUzcL8qhJSz3nUA0WoEY2B+dZbe4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBp57ThiWcpUixl+9rdMObrlgVB2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS84NmZl YTQ3MC1iMzgwLTQ1YzAtOWY2Yi0wMzNiN2Q4ODQzODgvNjk1NTJiNDctMTNhMi0z OTdhLWI0YjEtMWU1Zjk5NzNmZmIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvODZmZWE0NzAtYjM4MC00NWMwLTlm NmItMDMzYjdkODg0Mzg4Lzg2ZmVhNDcwLWIzODAtNDVjMC05ZjZiLTAzM2I3ZDg4 NDM4OC5jcmwwHwYDVR0jBBgwFoAUCHSKMQk8LElEoS6K1lyekgQBzxYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS84NmZlYTQ3MC1iMzgwLTQ1YzAtOWY2Yi0wMzNi N2Q4ODQzODguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAur7cMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABVocQvClaBE8KE8hH/jBvzx590vP7dqzQVZiN+vV13tVixYhOrGxVv5 abPh+Ti24QP2SHFkoyIZf1Yvb1fStOOfXYMgQrN5CBiLMaeO4mgBwffjp15eqRJk QQ/mst+7YrdMxB3z0IX/IpEPJ80upHLnDffxYtYJkmyXmZdLlZnx6sw1bycAFeNG wptlFtXMY11dBZwoUYb47dHBN3TzQqvIkKu9a+Mv/ssLYqfS9Hkto4VO/oXy747c saZQFUJZLsNhf8PxI2PUQHLMavIsTAW/hmN3pyAsng3BdCOHGfB/BIbgKOMw0H99 et8uPObvDA1u80dbrAWkKPbp75x/m+A= -----END CERTIFICATE-----Generated at Thu Sep 10 18:45:57 2026 by rpki-client