$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/d7aea177-906f-3c5a-ae7e-8bd551fb07d2.roa File: d7aea177-906f-3c5a-ae7e-8bd551fb07d2.roa (raw, json) Hash identifier: CkTfgjZgtw8SPzRDws+w8v02V2tzdzGnkcjiGtOgM5E= Subject key identifier: 20:94:9B:80:4C:EC:AE:CE:A0:48:CD:ED:D6:3C:A9:59:3B:24:56:E5 Certificate issuer: /CN=86fea470-b380-45c0-9f6b-033b7d884388 Certificate serial: 010D0C9F4328584F5E62BB90DA0070F6C7F5D100 Authority key identifier: 08:74:8A:31:09:3C:2C:49:44:A1:2E:8A:D6:5C:9E:92:04:01:CF:16 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/d7aea177-906f-3c5a-ae7e-8bd551fb07d2.roa Signing time: Fri 02 Oct 2026 13:00:13 +0000 ROA not before: Fri 02 Oct 2026 13:00:13 +0000 ROA not after: Thu 31 Dec 2026 14:00:13 +0000 asID: 19318 IP address blocks: 69.42.222.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/86fea470-b380-45c0-9f6b-033b7d884388.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/86fea470-b380-45c0-9f6b-033b7d884388.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 28 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:5e:62:bb:90:da:00:70:f6:c7:f5:d1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86fea470-b380-45c0-9f6b-033b7d884388 Validity Not Before: Oct 2 13:00:13 2026 GMT Not After : Dec 31 14:00:13 2026 GMT Subject: CN=aae567a2-18c7-48f0-8442-7bab5f1dadfc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:99:9c:7b:b3:c7:24:41:11:2c:e4:19:2b:2f: 97:70:d1:e2:fe:f2:20:8f:44:f4:65:ed:d1:61:d6: 81:e4:30:68:71:3c:d1:c1:d8:06:9b:0e:f6:2a:e6: 59:5e:a6:54:36:04:a8:d0:8f:70:74:c9:1a:43:8a: 37:45:22:50:53:a1:b1:4b:c6:b6:0a:cd:7d:89:f5: 15:b3:57:b8:b4:d4:6a:92:70:b4:dc:6d:e0:f2:eb: ba:be:39:dc:57:4e:fb:56:2e:31:e9:14:0e:f7:a1: 66:13:68:f2:73:76:92:af:4b:30:1f:b5:93:de:02: 71:17:cd:00:bb:dd:b6:43:3a:b0:6a:b8:18:02:da: a5:17:c8:75:b1:88:36:d9:06:0f:21:db:bd:1f:66: e4:30:5b:97:7d:b7:17:db:45:5b:86:48:12:79:78: 06:be:7b:4b:29:45:a1:f1:57:11:dc:fa:48:7e:fd: 96:98:40:fd:d1:28:82:cc:1b:83:c5:20:60:ba:6e: 90:38:ed:7d:37:b9:bb:9f:37:90:dd:fd:19:dc:dc: 9a:39:bc:20:fa:79:95:00:e1:e0:55:ef:56:60:74: 21:b1:f0:be:b2:bb:56:95:b0:9d:1a:2f:a5:4d:85: 03:89:0c:cb:be:b2:c9:bc:8c:2a:a4:b3:d7:7f:0f: a0:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:94:9B:80:4C:EC:AE:CE:A0:48:CD:ED:D6:3C:A9:59:3B:24:56:E5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/d7aea177-906f-3c5a-ae7e-8bd551fb07d2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/86fea470-b380-45c0-9f6b-033b7d884388.crl X509v3 Authority Key Identifier: keyid:08:74:8A:31:09:3C:2C:49:44:A1:2E:8A:D6:5C:9E:92:04:01:CF:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388.cer sbgp-ipAddrBlock: critical IPv4: 69.42.222.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:68:8a:93:db:77:10:3c:72:0b:f3:c4:59:89:6b:7b:28:ad: 41:bc:5c:4a:62:83:83:e6:69:e2:f6:c8:ce:77:98:4e:49:94: 2e:59:91:83:8e:da:96:d4:4d:cd:4d:80:a9:1a:aa:3e:ad:62: a7:55:58:74:9a:59:11:87:e7:83:c4:c7:ef:fa:68:32:ef:90: 42:d5:9d:28:c5:af:91:77:b4:4a:34:de:ed:9c:41:47:11:4b: 44:3d:57:d0:a0:3e:c4:7a:1f:d6:3e:09:7a:91:3c:3e:3b:18: e3:bc:66:2b:83:be:0f:41:95:b7:12:4a:fa:d2:10:4e:b9:9e: 4a:2c:c0:e2:de:e8:e4:5f:0a:b0:6a:66:1b:2c:03:e4:42:12: 81:fd:9a:97:79:58:c7:f3:74:a4:33:26:13:57:30:25:df:f7: b5:5f:12:50:dc:91:d5:39:ac:1e:00:23:63:c9:05:30:e1:e1: f2:92:ad:af:22:e6:fb:b3:64:bc:5b:e2:61:0e:bb:d3:85:44: 46:c9:16:b7:20:ae:32:2d:30:97:7e:dc:57:76:0e:ea:ad:02: c9:d7:99:38:4c:e6:4f:01:5d:b8:f9:5a:4e:0c:15:e9:18:d8: d5:ef:da:cf:00:ba:3c:e2:5e:c7:4a:8b:a6:67:07:99:8c:3e: 79:c1:08:be -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9eYruQ2gBw9sf10QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODZmZWE0NzAtYjM4MC00NWMwLTlmNmItMDMzYjdkODg0 Mzg4MB4XDTI2MTAwMjEzMDAxM1oXDTI2MTIzMTE0MDAxM1owLzEtMCsGA1UEAxMk YWFlNTY3YTItMThjNy00OGYwLTg0NDItN2JhYjVmMWRhZGZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw5mce7PHJEERLOQZKy+XcNHi/vIgj0T0Ze3R YdaB5DBocTzRwdgGmw72KuZZXqZUNgSo0I9wdMkaQ4o3RSJQU6GxS8a2Cs19ifUV s1e4tNRqknC03G3g8uu6vjncV077Vi4x6RQO96FmE2jyc3aSr0swH7WT3gJxF80A u922QzqwargYAtqlF8h1sYg22QYPIdu9H2bkMFuXfbcX20VbhkgSeXgGvntLKUWh 8VcR3PpIfv2WmED90SiCzBuDxSBgum6QOO19N7m7nzeQ3f0Z3NyaObwg+nmVAOHg Ve9WYHQhsfC+srtWlbCdGi+lTYUDiQzLvrLJvIwqpLPXfw+gzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCCUm4BM7K7OoEjN7dY8qVk7JFblMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS84NmZl YTQ3MC1iMzgwLTQ1YzAtOWY2Yi0wMzNiN2Q4ODQzODgvZDdhZWExNzctOTA2Zi0z YzVhLWFlN2UtOGJkNTUxZmIwN2QyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvODZmZWE0NzAtYjM4MC00NWMwLTlm NmItMDMzYjdkODg0Mzg4Lzg2ZmVhNDcwLWIzODAtNDVjMC05ZjZiLTAzM2I3ZDg4 NDM4OC5jcmwwHwYDVR0jBBgwFoAUCHSKMQk8LElEoS6K1lyekgQBzxYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS84NmZlYTQ3MC1iMzgwLTQ1YzAtOWY2Yi0wMzNi N2Q4ODQzODguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARSreMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACNoipPbdxA8cgvzxFmJa3sorUG8XEpig4PmaeL2yM53mE5JlC5ZkYOO 2pbUTc1NgKkaqj6tYqdVWHSaWRGH54PEx+/6aDLvkELVnSjFr5F3tEo03u2cQUcR S0Q9V9CgPsR6H9Y+CXqRPD47GOO8ZiuDvg9BlbcSSvrSEE65nkoswOLe6ORfCrBq ZhssA+RCEoH9mpd5WMfzdKQzJhNXMCXf97VfElDckdU5rB4AI2PJBTDh4fKSra8i 5vuzZLxb4mEOu9OFREbJFrcgrjItMJd+3Fd2DuqtAsnXmThM5k8BXbj5Wk4MFekY 2NXv2s8AujziXsdKi6ZnB5mMPnnBCL4= -----END CERTIFICATE-----Generated at Tue Oct 27 20:49:08 2026 by rpki-client