$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/d2574c98-e339-3b46-be59-9b02ca2db21d.roa File: d2574c98-e339-3b46-be59-9b02ca2db21d.roa (raw, json) Hash identifier: vlolavnHSUwOKChZh0djrEOXRyhH/5bt2q+5jpyclI8= Subject key identifier: FA:F6:7A:F3:1C:5E:E4:77:16:A9:6C:5F:E9:07:BF:E4:BD:62:7A:92 Certificate issuer: /CN=86fea470-b380-45c0-9f6b-033b7d884388 Certificate serial: 010D0C9F4328584F6DBD6E3C9760D65BC55B7900 Authority key identifier: 08:74:8A:31:09:3C:2C:49:44:A1:2E:8A:D6:5C:9E:92:04:01:CF:16 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/d2574c98-e339-3b46-be59-9b02ca2db21d.roa Signing time: Thu 08 Oct 2026 01:00:11 +0000 ROA not before: Thu 08 Oct 2026 01:00:11 +0000 ROA not after: Wed 06 Jan 2027 02:00:11 +0000 asID: 203380 IP address blocks: 67.220.86.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/86fea470-b380-45c0-9f6b-033b7d884388.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/86fea470-b380-45c0-9f6b-033b7d884388.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:6d:bd:6e:3c:97:60:d6:5b:c5:5b:79:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86fea470-b380-45c0-9f6b-033b7d884388 Validity Not Before: Oct 8 01:00:11 2026 GMT Not After : Jan 6 02:00:11 2027 GMT Subject: CN=fa7da02f-5176-499f-bbc0-9fd6d76beb2c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:d3:de:f6:ae:57:31:f9:bf:7b:69:9a:a2:f2: 15:60:37:e5:18:af:64:0a:69:d5:ba:8a:d6:72:c3: b9:3a:09:2d:39:f4:b0:54:e3:21:2e:a8:f4:ee:4c: a7:b7:7d:a0:5f:bf:1f:24:87:5f:9d:44:67:fb:ec: 1b:91:d0:11:48:41:3b:14:1a:bd:c1:e9:e8:1c:a6: f7:15:1c:04:e0:df:af:4d:4e:b3:9b:1e:72:f8:09: ad:0f:23:54:5a:44:de:92:f4:13:76:ee:db:69:7c: d6:0b:f2:70:ef:58:a4:2a:c1:d1:cb:b5:80:6f:3e: 37:f6:61:d1:eb:57:a0:47:a0:5e:28:7f:7f:3d:c7: 15:ad:43:a3:ee:ff:71:ae:f3:af:e1:69:80:88:49: 30:88:d9:0d:85:9b:c7:71:b4:3e:23:f4:ee:95:37: 22:d7:1e:72:1f:5f:e3:3a:1a:fc:2e:19:73:05:2c: 6b:24:a2:dd:d2:23:a0:04:9d:11:3a:c4:14:4e:fa: 7c:55:03:9a:aa:d3:72:df:cf:0b:fd:25:d4:96:49: 26:bb:1d:57:f3:f2:c9:74:f1:4d:ca:9c:f3:50:9a: 7b:4a:91:a1:86:9f:9a:98:64:f4:50:1e:18:af:7a: 23:59:f0:e1:18:93:49:59:2e:ed:84:9d:84:2a:e5: df:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:F6:7A:F3:1C:5E:E4:77:16:A9:6C:5F:E9:07:BF:E4:BD:62:7A:92 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/d2574c98-e339-3b46-be59-9b02ca2db21d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/86fea470-b380-45c0-9f6b-033b7d884388.crl X509v3 Authority Key Identifier: keyid:08:74:8A:31:09:3C:2C:49:44:A1:2E:8A:D6:5C:9E:92:04:01:CF:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388.cer sbgp-ipAddrBlock: critical IPv4: 67.220.86.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:0a:64:f6:1f:d1:0d:84:63:85:cb:43:fc:d2:50:74:21:2e: 71:e1:77:ac:c6:4f:da:78:cf:8a:95:bb:32:d2:fc:39:e7:2c: 78:81:ab:b3:a7:9f:69:87:c2:2f:47:7a:23:f4:3b:9e:75:c1: a9:ff:67:b5:1b:80:c3:1c:08:db:53:dc:15:dc:e2:1f:56:af: ca:9f:ef:20:43:2b:e8:20:47:fa:3a:f5:72:7c:0f:da:d6:39: 68:4d:17:d3:fc:60:22:0c:ca:24:fb:f2:55:fb:a7:5b:c0:69: d8:96:a9:42:49:7b:7b:2e:53:b9:14:46:cf:11:61:d5:51:51: eb:1a:4c:15:8a:f6:04:ea:26:cc:ea:47:23:e7:1a:30:d0:2c: 29:98:99:37:cf:23:29:15:5d:01:ca:dc:55:0a:b3:4a:72:f9: 4f:98:ac:4a:e5:e7:a0:62:ee:77:00:46:4c:bc:6c:59:81:fb: 68:75:88:2f:82:3b:41:bd:89:2d:92:61:24:03:46:3e:dd:49: 5e:e0:4b:fa:e7:ab:55:05:48:d5:70:0c:e5:ac:86:26:03:ff: fd:a2:18:11:00:0e:c1:3e:04:4d:d9:25:37:49:01:2f:3e:b9: d7:67:64:36:ff:91:cd:af:d4:9e:a1:62:5d:57:97:ed:5a:23: 13:8a:c9:85 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9tvW48l2DWW8VbeQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODZmZWE0NzAtYjM4MC00NWMwLTlmNmItMDMzYjdkODg0 Mzg4MB4XDTI2MTAwODAxMDAxMVoXDTI3MDEwNjAyMDAxMVowLzEtMCsGA1UEAxMk ZmE3ZGEwMmYtNTE3Ni00OTlmLWJiYzAtOWZkNmQ3NmJlYjJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgdPe9q5XMfm/e2maovIVYDflGK9kCmnVuorW csO5OgktOfSwVOMhLqj07kynt32gX78fJIdfnURn++wbkdARSEE7FBq9wenoHKb3 FRwE4N+vTU6zmx5y+AmtDyNUWkTekvQTdu7baXzWC/Jw71ikKsHRy7WAbz439mHR 61egR6BeKH9/PccVrUOj7v9xrvOv4WmAiEkwiNkNhZvHcbQ+I/TulTci1x5yH1/j Ohr8LhlzBSxrJKLd0iOgBJ0ROsQUTvp8VQOaqtNy388L/SXUlkkmux1X8/LJdPFN ypzzUJp7SpGhhp+amGT0UB4Yr3ojWfDhGJNJWS7thJ2EKuXfNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPr2evMcXuR3FqlsX+kHv+S9YnqSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS84NmZl YTQ3MC1iMzgwLTQ1YzAtOWY2Yi0wMzNiN2Q4ODQzODgvZDI1NzRjOTgtZTMzOS0z YjQ2LWJlNTktOWIwMmNhMmRiMjFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvODZmZWE0NzAtYjM4MC00NWMwLTlm NmItMDMzYjdkODg0Mzg4Lzg2ZmVhNDcwLWIzODAtNDVjMC05ZjZiLTAzM2I3ZDg4 NDM4OC5jcmwwHwYDVR0jBBgwFoAUCHSKMQk8LElEoS6K1lyekgQBzxYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS84NmZlYTQ3MC1iMzgwLTQ1YzAtOWY2Yi0wMzNi N2Q4ODQzODguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQ9xWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADcKZPYf0Q2EY4XLQ/zSUHQhLnHhd6zGT9p4z4qVuzLS/DnnLHiBq7On n2mHwi9HeiP0O551wan/Z7UbgMMcCNtT3BXc4h9Wr8qf7yBDK+ggR/o69XJ8D9rW OWhNF9P8YCIMyiT78lX7p1vAadiWqUJJe3suU7kURs8RYdVRUesaTBWK9gTqJszq RyPnGjDQLCmYmTfPIykVXQHK3FUKs0py+U+YrErl56Bi7ncARky8bFmB+2h1iC+C O0G9iS2SYSQDRj7dSV7gS/rnq1UFSNVwDOWshiYD//2iGBEADsE+BE3ZJTdJAS8+ uddnZDb/kc2v1J6hYl1Xl+1aIxOKyYU= -----END CERTIFICATE-----Generated at Tue Oct 13 22:50:35 2026 by rpki-client