$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/3944c106-8668-3c9c-aaca-223ecd28c1f8.roa File: 3944c106-8668-3c9c-aaca-223ecd28c1f8.roa (raw, json) Hash identifier: kjhiX9zr5+fM/OWaJVdcbpfZukM/7tW0OsllBnCP4Vc= Subject key identifier: FE:59:46:28:02:0D:BC:6C:61:7F:94:B7:62:15:2C:7D:23:5B:F4:22 Certificate issuer: /CN=86fea470-b380-45c0-9f6b-033b7d884388 Certificate serial: 010D0C9F4328584D5D6013E9A1823B774FC8CFC0 Authority key identifier: 08:74:8A:31:09:3C:2C:49:44:A1:2E:8A:D6:5C:9E:92:04:01:CF:16 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/3944c106-8668-3c9c-aaca-223ecd28c1f8.roa Signing time: Wed 01 Apr 2026 18:45:20 +0000 ROA not before: Wed 01 Apr 2026 18:45:20 +0000 ROA not after: Tue 30 Jun 2026 18:45:20 +0000 asID: 138195 IP address blocks: 68.168.30.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/86fea470-b380-45c0-9f6b-033b7d884388.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/86fea470-b380-45c0-9f6b-033b7d884388.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:5d:60:13:e9:a1:82:3b:77:4f:c8:cf:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86fea470-b380-45c0-9f6b-033b7d884388 Validity Not Before: Apr 1 18:45:20 2026 GMT Not After : Jun 30 18:45:20 2026 GMT Subject: CN=28682089-9d08-490e-b3f4-312e125e61e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:29:90:44:13:98:d1:34:9e:c1:bb:ab:1b:8c: ca:ba:f3:ad:1b:95:cb:34:6e:18:d7:18:7f:2d:01: 19:64:38:40:34:8f:43:80:76:07:44:2b:25:0c:8b: ad:7a:1a:68:4f:e8:dd:50:c1:3b:e4:ee:4f:f3:cf: 0a:69:73:a6:be:b3:65:e2:cc:a5:e6:69:8c:df:14: 59:20:11:55:5f:8f:c9:b9:f3:8d:1b:aa:c9:b4:ca: 60:4b:16:6f:27:32:40:62:da:f5:9b:e8:3d:3b:e3: 52:81:d7:21:45:56:85:74:50:dd:06:21:80:4f:27: ee:2d:7c:d8:ed:98:f1:0f:73:74:07:fa:94:b8:b9: 6d:ed:04:3a:a8:ac:31:2b:5b:c5:aa:0c:c3:54:a7: 9d:fa:9c:e8:31:22:5c:1d:71:3c:e8:9d:58:ba:c8: 57:ed:1e:1e:74:9f:7a:a5:69:ca:13:7b:9d:f6:5c: e8:08:38:41:63:8f:1f:25:0b:fc:c3:e6:33:5b:c0: 64:ed:e1:a4:28:a2:fe:28:4e:54:f3:74:58:fd:5a: 47:68:33:1d:ca:78:de:17:9d:b7:8b:44:d0:59:36: aa:51:1b:93:ff:fd:f8:91:cf:c9:1c:dc:6e:53:d0: b3:05:6a:ad:09:4a:90:7e:f9:67:a1:00:dd:72:b0: 65:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:59:46:28:02:0D:BC:6C:61:7F:94:B7:62:15:2C:7D:23:5B:F4:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/3944c106-8668-3c9c-aaca-223ecd28c1f8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/86fea470-b380-45c0-9f6b-033b7d884388.crl X509v3 Authority Key Identifier: keyid:08:74:8A:31:09:3C:2C:49:44:A1:2E:8A:D6:5C:9E:92:04:01:CF:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388.cer sbgp-ipAddrBlock: critical IPv4: 68.168.30.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b0:4d:47:38:b7:98:27:a0:46:df:7a:95:67:59:8d:da:6c:54: c4:71:3b:9c:a8:d9:5a:62:dc:42:ce:9e:97:d2:ad:ca:44:9c: 54:c4:87:c0:56:05:7c:d5:33:0b:6a:5e:59:ab:5e:52:9e:8a: 90:32:57:5e:f8:ec:46:95:68:03:de:d8:65:aa:f9:3f:77:af: 76:2e:62:4f:55:98:fc:59:48:08:39:47:92:69:85:0c:9a:42: 44:62:d3:d0:28:95:c1:3e:f0:fa:50:0b:ad:38:ad:34:d1:aa: 40:e1:85:fe:b9:1f:c1:bc:23:8e:de:c8:29:3d:db:4f:18:bd: e1:6e:2a:c6:99:b1:6c:12:b1:fb:2c:57:8c:89:01:3e:0d:eb: 96:7e:06:da:87:30:95:b5:c5:ac:9d:59:9a:fe:d3:13:e0:8d: c5:48:c4:18:7c:1e:10:1b:77:45:6e:29:48:bd:98:a0:81:8a: 14:c3:49:dc:74:0c:07:5f:f9:39:f2:6a:c3:41:14:dd:95:9f: 61:79:e8:39:94:96:0e:35:6a:30:43:f9:59:08:1a:fa:5c:43: 6d:bc:bb:88:31:e5:ec:20:f0:a1:9a:df:03:f1:f6:d0:80:47: f9:b5:93:49:28:b7:3e:7c:d4:ab:6a:eb:02:2f:41:6c:33:96: 64:a7:5c:0d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1dYBPpoYI7d0/Iz8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODZmZWE0NzAtYjM4MC00NWMwLTlmNmItMDMzYjdkODg0 Mzg4MB4XDTI2MDQwMTE4NDUyMFoXDTI2MDYzMDE4NDUyMFowLzEtMCsGA1UEAxMk Mjg2ODIwODktOWQwOC00OTBlLWIzZjQtMzEyZTEyNWU2MWU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiSmQRBOY0TSewburG4zKuvOtG5XLNG4Y1xh/ LQEZZDhANI9DgHYHRCslDIutehpoT+jdUME75O5P888KaXOmvrNl4syl5mmM3xRZ IBFVX4/JufONG6rJtMpgSxZvJzJAYtr1m+g9O+NSgdchRVaFdFDdBiGATyfuLXzY 7ZjxD3N0B/qUuLlt7QQ6qKwxK1vFqgzDVKed+pzoMSJcHXE86J1YushX7R4edJ96 pWnKE3ud9lzoCDhBY48fJQv8w+YzW8Bk7eGkKKL+KE5U83RY/VpHaDMdynjeF523 i0TQWTaqURuT//34kc/JHNxuU9CzBWqtCUqQfvlnoQDdcrBlewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP5ZRigCDbxsYX+Ut2IVLH0jW/QiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS84NmZl YTQ3MC1iMzgwLTQ1YzAtOWY2Yi0wMzNiN2Q4ODQzODgvMzk0NGMxMDYtODY2OC0z YzljLWFhY2EtMjIzZWNkMjhjMWY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvODZmZWE0NzAtYjM4MC00NWMwLTlm NmItMDMzYjdkODg0Mzg4Lzg2ZmVhNDcwLWIzODAtNDVjMC05ZjZiLTAzM2I3ZDg4 NDM4OC5jcmwwHwYDVR0jBBgwFoAUCHSKMQk8LElEoS6K1lyekgQBzxYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS84NmZlYTQ3MC1iMzgwLTQ1YzAtOWY2Yi0wMzNi N2Q4ODQzODguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARKgeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALBNRzi3mCegRt96lWdZjdpsVMRxO5yo2Vpi3ELOnpfSrcpEnFTEh8BW BXzVMwtqXlmrXlKeipAyV1747EaVaAPe2GWq+T93r3YuYk9VmPxZSAg5R5JphQya QkRi09AolcE+8PpQC604rTTRqkDhhf65H8G8I47eyCk9208YveFuKsaZsWwSsfss V4yJAT4N65Z+BtqHMJW1xaydWZr+0xPgjcVIxBh8HhAbd0VuKUi9mKCBihTDSdx0 DAdf+TnyasNBFN2Vn2F56DmUlg41ajBD+VkIGvpcQ228u4gx5ewg8KGa3wPx9tCA R/m1k0kotz581Ktq6wIvQWwzlmSnXA0= -----END CERTIFICATE-----Generated at Fri Apr 17 18:23:11 2026 by rpki-client