$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/ea338235-81c7-343b-b797-594e288c4658.roa File: ea338235-81c7-343b-b797-594e288c4658.roa (raw, json) Hash identifier: 16QRDZZ4Mj+qjX6oySHgollhlwii3PufLT7gK2uKKoI= Subject key identifier: 60:FE:93:1F:02:F6:1A:5D:27:4B:CE:19:A0:20:21:65:A5:B6:C2:8C Certificate issuer: /CN=86fea470-b380-45c0-9f6b-033b7d884388 Certificate serial: 010D0C9F4328584EE4F1EC423C8732AE14D92F70 Authority key identifier: 08:74:8A:31:09:3C:2C:49:44:A1:2E:8A:D6:5C:9E:92:04:01:CF:16 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/ea338235-81c7-343b-b797-594e288c4658.roa Signing time: Thu 20 Aug 2026 01:00:12 +0000 ROA not before: Thu 20 Aug 2026 01:00:12 +0000 ROA not after: Wed 18 Nov 2026 02:00:12 +0000 asID: 26042 IP address blocks: 67.220.64.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/86fea470-b380-45c0-9f6b-033b7d884388.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/86fea470-b380-45c0-9f6b-033b7d884388.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e4:f1:ec:42:3c:87:32:ae:14:d9:2f:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86fea470-b380-45c0-9f6b-033b7d884388 Validity Not Before: Aug 20 01:00:12 2026 GMT Not After : Nov 18 02:00:12 2026 GMT Subject: CN=c99c6bd9-4ac7-42c5-bc02-08c07893e0c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:ef:22:17:64:f7:11:9f:23:91:e3:7e:aa:e5: a0:c2:42:81:fe:16:cb:71:e0:1c:82:97:df:61:f6: 76:20:be:e2:a1:bf:35:47:eb:c3:b9:d6:d8:11:b8: 1a:02:e9:9b:38:e1:24:c5:4a:1d:24:8a:18:16:03: a5:22:1e:51:11:bd:1c:b0:a4:3b:f5:3d:13:70:e7: e1:da:07:a9:33:ac:50:87:55:98:69:fb:78:63:0f: 48:02:eb:91:7c:d4:57:45:a5:2e:6a:a0:f1:54:fc: dc:cc:e1:bc:34:c1:6c:58:d6:4b:f8:d3:1f:8b:31: 65:49:57:4c:94:a4:dc:13:56:3b:96:0f:49:f6:02: e2:5e:c1:de:8a:47:35:ac:f7:cf:d6:66:39:64:75: a9:8b:3d:73:16:a6:d2:3c:72:91:2a:e6:aa:56:fe: 3f:42:80:77:74:67:da:3c:cb:44:61:72:4e:04:55: 86:28:97:69:66:20:28:ea:66:80:f3:f3:7d:26:b9: 91:55:66:8e:fb:16:d5:5b:cf:95:5a:4a:13:c5:a1: 7c:24:62:38:0c:81:52:60:47:aa:8f:88:b9:4a:83: 32:ff:b6:ea:b2:99:12:05:48:11:40:74:c8:fc:dd: 60:ab:25:51:7f:a8:63:51:ae:c3:f0:f3:bc:57:d1: a1:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:FE:93:1F:02:F6:1A:5D:27:4B:CE:19:A0:20:21:65:A5:B6:C2:8C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/ea338235-81c7-343b-b797-594e288c4658.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/86fea470-b380-45c0-9f6b-033b7d884388.crl X509v3 Authority Key Identifier: keyid:08:74:8A:31:09:3C:2C:49:44:A1:2E:8A:D6:5C:9E:92:04:01:CF:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388.cer sbgp-ipAddrBlock: critical IPv4: 67.220.64.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:96:ee:d9:27:45:ac:42:13:3a:a6:43:73:ea:07:51:b6:a1: a7:d0:b0:45:3f:57:9e:36:0f:b8:86:c5:32:c4:da:10:85:70: c4:0f:9b:30:2e:67:c1:d2:37:43:46:41:e7:71:c1:2c:55:20: 33:51:03:a4:e2:5e:67:83:a5:1b:97:b4:24:fe:a6:67:58:b3: b2:fd:6d:f2:7b:f5:8b:95:29:cc:e1:7c:03:5f:c8:75:ac:b8: 50:d9:0a:1b:0f:1e:23:4e:42:99:00:23:9d:a7:2c:8e:9e:d5: 31:bf:92:86:0c:d5:ec:ca:c1:49:b0:60:e4:6a:29:c4:95:28: cd:75:c6:6f:2f:b7:41:59:2e:86:c6:31:e9:5b:75:3c:15:97: 5c:5d:3a:c6:e1:bb:c1:e7:68:13:0d:a1:dd:83:22:e2:3c:40: a8:eb:eb:08:4f:0c:77:d9:b4:0b:96:93:d4:3a:e6:1d:8e:86: da:a2:8f:82:13:12:c4:25:4f:b5:46:95:1c:4a:36:d6:e0:e5: 34:9f:74:b4:9c:72:74:c7:35:67:b4:7a:fe:94:2e:88:0b:b2: 60:3a:67:d2:b5:36:09:d2:b4:21:e3:88:7c:8a:6f:58:da:b5: c4:46:99:11:61:0f:94:d0:09:29:8b:b7:93:ca:b6:60:0b:8f: 33:00:aa:e0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7k8exCPIcyrhTZL3AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODZmZWE0NzAtYjM4MC00NWMwLTlmNmItMDMzYjdkODg0 Mzg4MB4XDTI2MDgyMDAxMDAxMloXDTI2MTExODAyMDAxMlowLzEtMCsGA1UEAxMk Yzk5YzZiZDktNGFjNy00MmM1LWJjMDItMDhjMDc4OTNlMGM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu+8iF2T3EZ8jkeN+quWgwkKB/hbLceAcgpff YfZ2IL7iob81R+vDudbYEbgaAumbOOEkxUodJIoYFgOlIh5REb0csKQ79T0TcOfh 2gepM6xQh1WYaft4Yw9IAuuRfNRXRaUuaqDxVPzczOG8NMFsWNZL+NMfizFlSVdM lKTcE1Y7lg9J9gLiXsHeikc1rPfP1mY5ZHWpiz1zFqbSPHKRKuaqVv4/QoB3dGfa PMtEYXJOBFWGKJdpZiAo6maA8/N9JrmRVWaO+xbVW8+VWkoTxaF8JGI4DIFSYEeq j4i5SoMy/7bqspkSBUgRQHTI/N1gqyVRf6hjUa7D8PO8V9GhEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGD+kx8C9hpdJ0vOGaAgIWWltsKMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS84NmZl YTQ3MC1iMzgwLTQ1YzAtOWY2Yi0wMzNiN2Q4ODQzODgvZWEzMzgyMzUtODFjNy0z NDNiLWI3OTctNTk0ZTI4OGM0NjU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvODZmZWE0NzAtYjM4MC00NWMwLTlm NmItMDMzYjdkODg0Mzg4Lzg2ZmVhNDcwLWIzODAtNDVjMC05ZjZiLTAzM2I3ZDg4 NDM4OC5jcmwwHwYDVR0jBBgwFoAUCHSKMQk8LElEoS6K1lyekgQBzxYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS84NmZlYTQ3MC1iMzgwLTQ1YzAtOWY2Yi0wMzNi N2Q4ODQzODguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQ9xAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAKW7tknRaxCEzqmQ3PqB1G2oafQsEU/V542D7iGxTLE2hCFcMQPmzAu Z8HSN0NGQedxwSxVIDNRA6TiXmeDpRuXtCT+pmdYs7L9bfJ79YuVKczhfANfyHWs uFDZChsPHiNOQpkAI52nLI6e1TG/koYM1ezKwUmwYORqKcSVKM11xm8vt0FZLobG MelbdTwVl1xdOsbhu8HnaBMNod2DIuI8QKjr6whPDHfZtAuWk9Q65h2Ohtqij4IT EsQlT7VGlRxKNtbg5TSfdLSccnTHNWe0ev6ULogLsmA6Z9K1NgnStCHjiHyKb1ja tcRGmRFhD5TQCSmLt5PKtmALjzMAquA= -----END CERTIFICATE-----Generated at Thu Sep 10 18:48:30 2026 by rpki-client