$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/cfceb236-8fe4-3606-ba08-df4723910ec2.roa File: cfceb236-8fe4-3606-ba08-df4723910ec2.roa (raw, json) Hash identifier: R0SGVjHHuzZ8wW9UYnqM086tddryH6z28SWjfdW/l8o= Subject key identifier: 5C:73:80:E2:9B:55:9E:18:B0:2B:41:2D:DA:D8:FE:1A:7D:1F:82:36 Certificate issuer: /CN=86fea470-b380-45c0-9f6b-033b7d884388 Certificate serial: 010D0C9F4328584D5E1A6A4689267A75D7755A80 Authority key identifier: 08:74:8A:31:09:3C:2C:49:44:A1:2E:8A:D6:5C:9E:92:04:01:CF:16 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/cfceb236-8fe4-3606-ba08-df4723910ec2.roa Signing time: Thu 02 Apr 2026 01:00:23 +0000 ROA not before: Thu 02 Apr 2026 01:00:23 +0000 ROA not after: Wed 01 Jul 2026 01:00:23 +0000 asID: 23470 IP address blocks: 68.168.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/86fea470-b380-45c0-9f6b-033b7d884388.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/86fea470-b380-45c0-9f6b-033b7d884388.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Apr 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:5e:1a:6a:46:89:26:7a:75:d7:75:5a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86fea470-b380-45c0-9f6b-033b7d884388 Validity Not Before: Apr 2 01:00:23 2026 GMT Not After : Jul 1 01:00:23 2026 GMT Subject: CN=0d10aec5-e027-4015-8a44-af0c56d877b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:31:55:9e:04:6f:1e:52:9b:03:b0:82:a5:0e: 59:65:61:49:75:e2:76:f7:76:a6:dd:62:99:59:8e: f2:84:7b:5f:e1:26:da:c0:f8:f7:b8:c8:89:ec:4b: d9:56:cf:73:ef:f5:c6:a6:10:34:51:dc:cc:b9:15: bc:be:5a:db:2a:99:d4:a5:24:72:a4:10:3b:cf:1b: 17:bd:06:f8:ca:d2:bb:6b:95:a2:10:0a:25:f9:79: a7:9f:85:c9:b8:5e:24:f0:80:a1:b8:84:e4:4f:08: cb:9a:07:df:7c:47:66:a9:db:d3:97:54:2e:e1:fa: f9:3c:5c:a4:7e:75:c4:99:1d:84:63:67:fd:a0:bd: 4f:ec:17:fd:f4:31:ad:a8:0a:a0:a9:2a:cd:a4:89: 23:c7:29:1b:05:7f:4a:b1:47:4a:bb:60:cc:e4:58: 48:8a:e5:3a:69:a4:e3:db:1d:ae:7b:7f:fd:96:45: c8:8e:40:3e:d9:df:57:75:15:2d:3c:fc:63:98:b1: 95:8d:25:95:ba:84:c5:58:2a:00:8f:4f:87:70:90: 50:a5:a9:1b:1d:44:7f:4b:86:f4:24:66:7d:59:37: 3b:53:8d:58:09:60:4b:ae:4c:ac:51:4a:21:5a:fe: e2:a7:11:fa:f9:8a:7f:fa:d2:97:09:79:5c:8a:e7: 34:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:73:80:E2:9B:55:9E:18:B0:2B:41:2D:DA:D8:FE:1A:7D:1F:82:36 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/cfceb236-8fe4-3606-ba08-df4723910ec2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/86fea470-b380-45c0-9f6b-033b7d884388.crl X509v3 Authority Key Identifier: keyid:08:74:8A:31:09:3C:2C:49:44:A1:2E:8A:D6:5C:9E:92:04:01:CF:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388.cer sbgp-ipAddrBlock: critical IPv4: 68.168.20.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:0c:2e:98:55:f3:7c:c6:6d:08:d9:63:36:aa:c7:0d:a9:86: bb:d8:aa:1c:c5:2a:b6:dd:b6:43:23:94:70:45:29:47:db:53: d1:19:53:63:75:8d:9c:5e:40:67:9d:53:53:5a:7c:92:a8:9e: 8a:3e:38:9c:d8:50:77:c7:50:4e:c5:f4:24:97:3f:71:99:9d: 03:a7:0c:ec:29:b6:dc:ef:6a:86:e6:4b:42:a1:2b:83:28:75: a7:f7:e7:de:b0:38:2d:20:6c:4a:13:ac:4f:f8:6b:a8:49:35: d5:53:09:aa:e7:b0:88:39:ea:f1:8a:1b:ad:82:4f:1e:22:28: ba:95:f4:89:01:02:3e:40:cb:e1:0d:4b:2a:eb:93:2f:7a:a6: 4b:7c:57:60:5c:6f:13:fe:7e:64:f3:44:1d:a7:14:17:99:0e: f5:fa:1e:02:58:57:f4:41:28:b9:a6:70:93:fb:6a:27:98:e8: f9:d8:f1:b1:ed:f1:9e:39:e7:b7:20:17:7c:3d:53:3f:a3:ed: a5:9a:a9:ba:1f:ae:8c:8b:ba:f7:f5:3c:1d:a3:d5:b7:06:48: 66:ac:e0:ad:66:32:5e:cd:2b:01:79:d6:e6:f4:16:d7:25:dc: 00:1a:94:c7:fe:74:0d:15:bb:ff:be:6e:75:f7:e6:65:9e:6d: e1:af:2b:1f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1eGmpGiSZ6ddd1WoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODZmZWE0NzAtYjM4MC00NWMwLTlmNmItMDMzYjdkODg0 Mzg4MB4XDTI2MDQwMjAxMDAyM1oXDTI2MDcwMTAxMDAyM1owLzEtMCsGA1UEAxMk MGQxMGFlYzUtZTAyNy00MDE1LThhNDQtYWYwYzU2ZDg3N2IxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmjFVngRvHlKbA7CCpQ5ZZWFJdeJ293am3WKZ WY7yhHtf4SbawPj3uMiJ7EvZVs9z7/XGphA0UdzMuRW8vlrbKpnUpSRypBA7zxsX vQb4ytK7a5WiEAol+Xmnn4XJuF4k8IChuITkTwjLmgfffEdmqdvTl1Qu4fr5PFyk fnXEmR2EY2f9oL1P7Bf99DGtqAqgqSrNpIkjxykbBX9KsUdKu2DM5FhIiuU6aaTj 2x2ue3/9lkXIjkA+2d9XdRUtPPxjmLGVjSWVuoTFWCoAj0+HcJBQpakbHUR/S4b0 JGZ9WTc7U41YCWBLrkysUUohWv7ipxH6+Yp/+tKXCXlciuc0nwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFxzgOKbVZ4YsCtBLdrY/hp9H4I2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS84NmZl YTQ3MC1iMzgwLTQ1YzAtOWY2Yi0wMzNiN2Q4ODQzODgvY2ZjZWIyMzYtOGZlNC0z NjA2LWJhMDgtZGY0NzIzOTEwZWMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvODZmZWE0NzAtYjM4MC00NWMwLTlm NmItMDMzYjdkODg0Mzg4Lzg2ZmVhNDcwLWIzODAtNDVjMC05ZjZiLTAzM2I3ZDg4 NDM4OC5jcmwwHwYDVR0jBBgwFoAUCHSKMQk8LElEoS6K1lyekgQBzxYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS84NmZlYTQ3MC1iMzgwLTQ1YzAtOWY2Yi0wMzNi N2Q4ODQzODguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARKgUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJAMLphV83zGbQjZYzaqxw2phrvYqhzFKrbdtkMjlHBFKUfbU9EZU2N1 jZxeQGedU1NafJKonoo+OJzYUHfHUE7F9CSXP3GZnQOnDOwpttzvaobmS0KhK4Mo daf3596wOC0gbEoTrE/4a6hJNdVTCarnsIg56vGKG62CTx4iKLqV9IkBAj5Ay+EN Syrrky96pkt8V2BcbxP+fmTzRB2nFBeZDvX6HgJYV/RBKLmmcJP7aieY6PnY8bHt 8Z4557cgF3w9Uz+j7aWaqbofroyLuvf1PB2j1bcGSGas4K1mMl7NKwF51ub0Ftcl 3AAalMf+dA0Vu/++bnX35mWebeGvKx8= -----END CERTIFICATE-----Generated at Wed Apr 8 23:41:30 2026 by rpki-client