$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/672c8f3c-0186-3c9e-9a81-1d79b86ac60c.roa File: 672c8f3c-0186-3c9e-9a81-1d79b86ac60c.roa (raw, json) Hash identifier: Iaz4dFtAtm6fZWQqEyPKsqX42xmniFhlpHfPM4v2dHU= Subject key identifier: 1A:F1:32:77:8C:AC:90:1C:40:14:D9:9B:8F:17:2A:5E:0B:56:82:82 Certificate issuer: /CN=86fea470-b380-45c0-9f6b-033b7d884388 Certificate serial: 010D0C9F4328584F66DEAA3317F56C702C633280 Authority key identifier: 08:74:8A:31:09:3C:2C:49:44:A1:2E:8A:D6:5C:9E:92:04:01:CF:16 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/672c8f3c-0186-3c9e-9a81-1d79b86ac60c.roa Signing time: Mon 05 Oct 2026 13:56:33 +0000 ROA not before: Mon 05 Oct 2026 13:56:33 +0000 ROA not after: Wed 02 Dec 2026 21:58:18 +0000 asID: 63025 IP address blocks: 186.190.222.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/86fea470-b380-45c0-9f6b-033b7d884388.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/86fea470-b380-45c0-9f6b-033b7d884388.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:66:de:aa:33:17:f5:6c:70:2c:63:32:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86fea470-b380-45c0-9f6b-033b7d884388 Validity Not Before: Oct 5 13:56:33 2026 GMT Not After : Dec 2 21:58:18 2026 GMT Subject: CN=21bfa81c-fcc1-4a5e-ad3a-be2d66b35f6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:98:64:01:7b:e8:75:14:65:8f:9c:46:64:17: 11:77:e3:74:d7:87:dc:57:ee:fc:4f:7a:f2:f0:9f: 55:8d:68:35:ae:19:00:ce:2a:f4:cd:58:b5:7f:9b: de:ef:8d:c5:f5:4d:1f:cf:36:07:7c:07:55:8b:7c: c6:49:ca:73:be:86:06:6e:3a:51:cb:da:9f:83:fd: 7e:c2:5f:3b:9e:66:a1:5b:4e:15:5d:9e:4c:71:e2: 23:7a:96:7a:8e:13:1b:e1:75:8a:9b:86:66:a5:47: d3:22:1d:2f:be:31:50:10:ae:a1:10:a9:7e:30:57: a4:f5:ba:54:38:af:eb:c0:a6:f8:7d:52:a2:6c:eb: e7:6f:a9:8e:49:cb:80:a6:55:bf:77:9a:9e:f7:a2: 88:d1:40:fb:c0:54:ed:8f:ae:64:4d:27:9b:76:37: 5e:96:77:79:d8:8d:18:5a:49:ec:16:40:fd:01:1b: 5e:a0:97:e1:07:7e:c1:be:34:ae:c3:a3:71:dd:ff: 2b:d3:c3:34:e4:a3:78:6f:1e:5f:5a:ea:d6:83:5e: d8:a6:9a:07:35:e7:2a:31:45:da:8a:75:dd:b1:42: 84:01:87:bb:44:7e:9f:a7:92:83:f1:58:33:c4:ca: c3:4d:5f:8b:d0:f7:54:86:8b:a2:cb:4a:ea:8b:3f: 8e:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:F1:32:77:8C:AC:90:1C:40:14:D9:9B:8F:17:2A:5E:0B:56:82:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/672c8f3c-0186-3c9e-9a81-1d79b86ac60c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/86fea470-b380-45c0-9f6b-033b7d884388.crl X509v3 Authority Key Identifier: keyid:08:74:8A:31:09:3C:2C:49:44:A1:2E:8A:D6:5C:9E:92:04:01:CF:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388.cer sbgp-ipAddrBlock: critical IPv4: 186.190.222.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:ab:6f:51:72:b5:7c:9e:ef:c5:11:a9:27:23:9a:cd:29:bd: 71:b6:d0:4e:e5:db:b1:00:4a:15:f2:3f:a2:f2:7d:80:e5:1e: 45:f9:29:de:88:1a:82:a2:1a:b3:63:04:83:04:64:38:b2:2a: 87:cd:52:71:62:da:3d:23:17:ea:0f:65:c5:20:4d:6f:67:a6: 84:d1:df:b2:1f:10:0d:3e:e2:34:eb:32:49:e9:79:8f:fb:fe: 60:b4:ed:84:a6:6e:9a:97:4d:34:ef:60:d1:d2:c3:3e:2e:5e: f0:e5:73:35:6f:18:ba:b4:46:6b:f6:09:74:02:ef:f2:8c:57: 69:23:23:fb:ea:73:c7:87:76:aa:c9:62:cc:83:95:9c:48:45: ed:d2:37:f9:9a:9c:45:68:1c:5d:0c:99:46:22:98:ec:8a:b3: 74:bb:c3:6d:5f:57:bf:0a:00:e0:d3:47:07:76:a9:91:b3:b8: 6a:c2:70:4a:4e:ab:0e:4a:93:6c:80:b4:71:cd:0a:09:fa:0a: 3a:09:fb:31:4b:a3:35:e0:1c:ad:63:cc:81:cd:57:8a:6e:44: 94:1f:6c:30:4d:5b:2b:b2:f4:08:6e:5d:ec:e1:f0:79:ee:3c: 37:1e:db:3a:69:d6:73:6a:26:be:66:f5:f1:0b:b5:d2:0d:55: 79:d1:cf:23 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9m3qozF/VscCxjMoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODZmZWE0NzAtYjM4MC00NWMwLTlmNmItMDMzYjdkODg0 Mzg4MB4XDTI2MTAwNTEzNTYzM1oXDTI2MTIwMjIxNTgxOFowLzEtMCsGA1UEAxMk MjFiZmE4MWMtZmNjMS00YTVlLWFkM2EtYmUyZDY2YjM1ZjZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwphkAXvodRRlj5xGZBcRd+N014fcV+78T3ry 8J9VjWg1rhkAzir0zVi1f5ve743F9U0fzzYHfAdVi3zGScpzvoYGbjpRy9qfg/1+ wl87nmahW04VXZ5MceIjepZ6jhMb4XWKm4ZmpUfTIh0vvjFQEK6hEKl+MFek9bpU OK/rwKb4fVKibOvnb6mOScuAplW/d5qe96KI0UD7wFTtj65kTSebdjdelnd52I0Y WknsFkD9ARteoJfhB37BvjSuw6Nx3f8r08M05KN4bx5fWurWg17YppoHNecqMUXa inXdsUKEAYe7RH6fp5KD8VgzxMrDTV+L0PdUhouiy0rqiz+OgwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBrxMneMrJAcQBTZm48XKl4LVoKCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS84NmZl YTQ3MC1iMzgwLTQ1YzAtOWY2Yi0wMzNiN2Q4ODQzODgvNjcyYzhmM2MtMDE4Ni0z YzllLTlhODEtMWQ3OWI4NmFjNjBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvODZmZWE0NzAtYjM4MC00NWMwLTlm NmItMDMzYjdkODg0Mzg4Lzg2ZmVhNDcwLWIzODAtNDVjMC05ZjZiLTAzM2I3ZDg4 NDM4OC5jcmwwHwYDVR0jBBgwFoAUCHSKMQk8LElEoS6K1lyekgQBzxYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS84NmZlYTQ3MC1iMzgwLTQ1YzAtOWY2Yi0wMzNi N2Q4ODQzODguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAur7eMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAByrb1FytXye78URqScjms0pvXG20E7l27EAShXyP6LyfYDlHkX5Kd6I GoKiGrNjBIMEZDiyKofNUnFi2j0jF+oPZcUgTW9npoTR37IfEA0+4jTrMknpeY/7 /mC07YSmbpqXTTTvYNHSwz4uXvDlczVvGLq0Rmv2CXQC7/KMV2kjI/vqc8eHdqrJ YsyDlZxIRe3SN/manEVoHF0MmUYimOyKs3S7w21fV78KAODTRwd2qZGzuGrCcEpO qw5Kk2yAtHHNCgn6CjoJ+zFLozXgHK1jzIHNV4puRJQfbDBNWyuy9AhuXezh8Hnu PDce2zpp1nNqJr5m9fELtdINVXnRzyM= -----END CERTIFICATE-----Generated at Sat Oct 10 23:03:55 2026 by rpki-client