$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/cfceb236-8fe4-3606-ba08-df4723910ec2.roa File: cfceb236-8fe4-3606-ba08-df4723910ec2.roa (raw, json) Hash identifier: 1QTUZWYUmlawTXfSYUlnL+uR9siU3lxNlsxwwURJc4U= Subject key identifier: 69:2F:8E:16:93:F0:A3:79:C6:C9:B1:E3:D2:06:78:5F:AB:F8:B7:AE Certificate issuer: /CN=86fea470-b380-45c0-9f6b-033b7d884388 Certificate serial: 010D0C9F4328584C7D7C61BDD9E70F1676D1BAC0 Authority key identifier: 08:74:8A:31:09:3C:2C:49:44:A1:2E:8A:D6:5C:9E:92:04:01:CF:16 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/cfceb236-8fe4-3606-ba08-df4723910ec2.roa Signing time: Sun 11 Jan 2026 14:00:39 +0000 ROA not before: Sun 11 Jan 2026 14:00:39 +0000 ROA not after: Sat 11 Apr 2026 13:00:39 +0000 asID: 23470 IP address blocks: 68.168.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/86fea470-b380-45c0-9f6b-033b7d884388.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/86fea470-b380-45c0-9f6b-033b7d884388.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 24 Feb 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:7d:7c:61:bd:d9:e7:0f:16:76:d1:ba:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86fea470-b380-45c0-9f6b-033b7d884388 Validity Not Before: Jan 11 14:00:39 2026 GMT Not After : Apr 11 13:00:39 2026 GMT Subject: CN=33339a03-c5f5-498e-a85a-91f58c30a2e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:20:e8:60:57:5d:05:f9:60:ab:af:8d:24:22: d8:22:dc:19:cd:bd:63:57:01:5b:d8:2f:ba:7d:f1: 98:0c:b5:ec:05:9c:39:dd:b9:05:20:ad:da:c6:04: 7b:e1:a6:ad:6c:69:ce:2d:b2:5a:7b:af:1e:d5:71: 15:85:bc:4d:56:cc:f4:24:7d:8a:19:1a:b9:54:9b: ec:5f:da:c7:7c:41:e1:88:f0:51:d3:30:a6:52:a7: 92:b7:cb:1f:84:bf:fa:5d:2a:58:cf:50:45:1a:49: ca:2e:1e:4f:8b:9e:b2:8b:d8:fb:7f:fc:96:9d:e3: 87:64:2b:21:7b:1f:bf:58:92:f5:26:34:b9:92:0a: 55:d3:ae:9a:c4:43:96:77:30:65:7a:89:db:84:a7: 7c:e6:35:8d:3b:90:52:02:bb:df:f9:49:8c:f2:39: 5d:e6:6c:7d:0a:f6:2d:b0:43:44:93:ff:08:b0:b3: 99:5c:79:9a:30:0c:53:7c:c0:25:a3:4a:b9:4c:04: 43:bc:b6:c2:26:0a:e5:6e:0e:9e:94:89:7c:ef:21: 0e:04:63:df:53:ac:68:78:3d:ba:17:94:f3:f1:40: 9a:95:ee:52:fe:6e:af:39:b7:99:89:7e:b3:88:dd: 9f:37:b1:33:93:8d:a4:6e:63:24:a5:17:da:7b:9d: b7:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:2F:8E:16:93:F0:A3:79:C6:C9:B1:E3:D2:06:78:5F:AB:F8:B7:AE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/cfceb236-8fe4-3606-ba08-df4723910ec2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/86fea470-b380-45c0-9f6b-033b7d884388.crl X509v3 Authority Key Identifier: keyid:08:74:8A:31:09:3C:2C:49:44:A1:2E:8A:D6:5C:9E:92:04:01:CF:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388.cer sbgp-ipAddrBlock: critical IPv4: 68.168.20.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:26:69:68:05:45:73:0f:02:cb:dd:03:c3:e2:96:df:4d:a6: 04:81:66:b5:b4:2a:91:c8:b2:34:83:cc:60:3b:c4:36:dd:e6: 94:6e:3a:0d:a3:3a:49:24:6d:b6:58:b9:cf:8b:57:45:f3:c1: bb:24:79:e9:b8:24:73:00:83:f8:e0:fe:40:df:61:ba:86:4f: fd:4a:fc:f8:61:4e:12:ab:2c:60:ab:30:74:8e:43:2f:88:fd: 45:b4:f0:57:25:8b:44:76:70:6a:42:e7:bc:aa:95:24:ac:d8: 9a:25:98:44:20:15:94:c6:66:16:b5:a9:21:13:e2:32:2d:37: 92:e7:c2:20:8d:8a:74:f6:33:37:a8:f8:54:1d:0f:c5:1a:e2: d7:c4:e9:4b:08:93:53:a6:0d:eb:59:15:88:6f:8c:16:20:cf: b9:2c:18:72:27:92:3c:82:65:d0:58:db:f3:28:33:06:55:9b: 7f:39:21:38:9d:12:33:6e:ac:55:a5:a5:55:91:a4:54:dd:a2: 58:67:f5:47:5f:2d:ad:fd:af:c9:ef:0e:52:20:9c:72:5e:f0: 36:10:5f:49:2f:34:07:a3:8e:03:30:59:96:85:dc:ff:b6:d1: 51:c4:b9:4c:22:b6:c4:8d:ef:d7:41:09:04:97:cf:e9:b7:c7: 33:9b:8f:ce -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEx9fGG92ecPFnbRusAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODZmZWE0NzAtYjM4MC00NWMwLTlmNmItMDMzYjdkODg0 Mzg4MB4XDTI2MDExMTE0MDAzOVoXDTI2MDQxMTEzMDAzOVowLzEtMCsGA1UEAxMk MzMzMzlhMDMtYzVmNS00OThlLWE4NWEtOTFmNThjMzBhMmU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiCDoYFddBflgq6+NJCLYItwZzb1jVwFb2C+6 ffGYDLXsBZw53bkFIK3axgR74aatbGnOLbJae68e1XEVhbxNVsz0JH2KGRq5VJvs X9rHfEHhiPBR0zCmUqeSt8sfhL/6XSpYz1BFGknKLh5Pi56yi9j7f/yWneOHZCsh ex+/WJL1JjS5kgpV066axEOWdzBleonbhKd85jWNO5BSArvf+UmM8jld5mx9CvYt sENEk/8IsLOZXHmaMAxTfMAlo0q5TARDvLbCJgrlbg6elIl87yEOBGPfU6xoeD26 F5Tz8UCale5S/m6vObeZiX6ziN2fN7Ezk42kbmMkpRfae5232QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGkvjhaT8KN5xsmx49IGeF+r+LeuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS84NmZl YTQ3MC1iMzgwLTQ1YzAtOWY2Yi0wMzNiN2Q4ODQzODgvY2ZjZWIyMzYtOGZlNC0z NjA2LWJhMDgtZGY0NzIzOTEwZWMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvODZmZWE0NzAtYjM4MC00NWMwLTlm NmItMDMzYjdkODg0Mzg4Lzg2ZmVhNDcwLWIzODAtNDVjMC05ZjZiLTAzM2I3ZDg4 NDM4OC5jcmwwHwYDVR0jBBgwFoAUCHSKMQk8LElEoS6K1lyekgQBzxYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS84NmZlYTQ3MC1iMzgwLTQ1YzAtOWY2Yi0wMzNi N2Q4ODQzODguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARKgUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGsmaWgFRXMPAsvdA8Pilt9NpgSBZrW0KpHIsjSDzGA7xDbd5pRuOg2j OkkkbbZYuc+LV0Xzwbskeem4JHMAg/jg/kDfYbqGT/1K/PhhThKrLGCrMHSOQy+I /UW08Fcli0R2cGpC57yqlSSs2JolmEQgFZTGZha1qSET4jItN5LnwiCNinT2Mzeo +FQdD8Ua4tfE6UsIk1OmDetZFYhvjBYgz7ksGHInkjyCZdBY2/MoMwZVm385ITid EjNurFWlpVWRpFTdolhn9UdfLa39r8nvDlIgnHJe8DYQX0kvNAejjgMwWZaF3P+2 0VHEuUwitsSN79dBCQSXz+m3xzObj84= -----END CERTIFICATE-----Generated at Sun Feb 22 21:45:30 2026 by rpki-client