$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/8182d60d-3c7d-3792-a357-7322d40fd2b4.roa File: 8182d60d-3c7d-3792-a357-7322d40fd2b4.roa (raw, json) Hash identifier: CpmN7UwFvNcLJz1w6mQoY0Lx2b4RzigqvkwkLP015Ww= Subject key identifier: 93:87:D6:1C:31:99:08:A9:0C:92:19:A3:81:BA:9A:30:1B:0C:9B:7C Certificate issuer: /CN=86fea470-b380-45c0-9f6b-033b7d884388 Certificate serial: 010D0C9F4328584F2957A67114486B639DC3B960 Authority key identifier: 08:74:8A:31:09:3C:2C:49:44:A1:2E:8A:D6:5C:9E:92:04:01:CF:16 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/8182d60d-3c7d-3792-a357-7322d40fd2b4.roa Signing time: Sun 13 Sep 2026 13:00:11 +0000 ROA not before: Sun 13 Sep 2026 13:00:11 +0000 ROA not after: Sat 12 Dec 2026 14:00:11 +0000 asID: 62633 IP address blocks: 68.168.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/86fea470-b380-45c0-9f6b-033b7d884388.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/86fea470-b380-45c0-9f6b-033b7d884388.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:29:57:a6:71:14:48:6b:63:9d:c3:b9:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86fea470-b380-45c0-9f6b-033b7d884388 Validity Not Before: Sep 13 13:00:11 2026 GMT Not After : Dec 12 14:00:11 2026 GMT Subject: CN=c22c2265-0b0a-4e70-a95c-5ea715c88746 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:d9:9b:0d:f3:90:f4:fd:61:91:bf:e5:ed:f1: 0f:04:a9:bd:cb:b6:36:eb:f5:b1:7f:3d:8d:af:c7: 34:a8:e0:c4:65:13:e2:f5:52:f2:44:83:b7:7b:04: 4f:6c:a0:3b:72:9d:e4:95:b3:c7:51:be:dd:3f:37: 3f:c4:f5:1e:be:1b:de:e9:7c:f7:16:13:02:74:63: 43:54:97:68:9d:b3:40:f7:e3:44:7b:69:7e:3c:8e: 18:9f:e6:0a:a7:9c:e2:b4:1a:05:e7:c8:19:94:c9: cd:8d:aa:9d:a9:a6:95:6d:89:f9:ba:ef:bf:a8:19: 01:8a:a6:f0:36:fc:6d:d7:81:1b:28:7a:7f:73:16: 1c:a5:5c:0f:be:b6:81:08:1c:56:4f:d4:06:cd:fe: 29:db:54:f4:14:76:73:72:b8:a4:c7:80:6a:30:ce: 3b:a7:cf:a7:a8:0e:c2:06:9f:a6:f4:a7:6f:fe:82: 40:fe:1f:34:c0:fa:03:ef:42:4f:0f:e4:fe:ea:a6: c0:5e:de:d6:dd:a6:6d:dd:b3:51:c7:7a:5e:92:31: 47:da:8a:a9:79:54:5f:0e:c2:ab:f2:cc:98:df:22: 31:46:01:ab:a7:8b:40:fb:16:b7:20:e5:75:a4:78: 65:2d:eb:04:cc:54:1c:dd:78:d6:39:c7:c7:27:1a: 41:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:87:D6:1C:31:99:08:A9:0C:92:19:A3:81:BA:9A:30:1B:0C:9B:7C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/8182d60d-3c7d-3792-a357-7322d40fd2b4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/86fea470-b380-45c0-9f6b-033b7d884388.crl X509v3 Authority Key Identifier: keyid:08:74:8A:31:09:3C:2C:49:44:A1:2E:8A:D6:5C:9E:92:04:01:CF:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388.cer sbgp-ipAddrBlock: critical IPv4: 68.168.20.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:5c:9a:fd:58:df:21:bd:24:3f:ed:44:16:4d:58:7b:ed:62: 68:70:93:95:a9:f4:54:cb:15:40:ef:03:ee:91:d3:3b:5d:4c: 30:6f:bc:31:09:5a:8e:3c:74:13:0b:a7:d9:75:8f:0c:73:26: 4c:ce:9e:20:e7:78:c6:2d:a3:9a:47:c2:41:c2:79:86:06:e7: c2:b9:2c:55:97:42:83:e0:6e:4a:75:73:47:a2:b3:52:a5:fc: ed:0e:3d:4b:28:d2:6e:7c:2e:f1:05:99:38:f8:3c:67:64:45: dd:99:5c:01:85:e6:47:33:18:05:50:f4:8c:93:67:82:3d:b1: 30:03:ed:8a:a2:ae:f5:fe:b7:60:cd:30:c4:4e:6d:63:89:97: 7c:ae:c9:c3:c0:07:1e:6d:9a:40:95:7c:2f:f7:d3:c5:3a:c1: 48:85:ee:d2:6c:7b:50:3a:bd:87:35:0f:e6:48:65:6f:37:6c: 04:76:9b:ea:ef:e4:83:44:0a:0c:08:f0:9d:e2:01:23:2e:c8: aa:4b:eb:f5:85:43:10:63:65:48:c8:94:b4:14:5f:b7:7b:ce: 54:95:75:dd:85:ab:fe:b2:3b:7b:95:b3:7e:af:e6:c4:08:80: 78:54:1b:e9:a2:9a:c8:39:67:3a:89:ac:93:f4:65:3c:0e:12: 95:12:d2:37 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8pV6ZxFEhrY53DuWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODZmZWE0NzAtYjM4MC00NWMwLTlmNmItMDMzYjdkODg0 Mzg4MB4XDTI2MDkxMzEzMDAxMVoXDTI2MTIxMjE0MDAxMVowLzEtMCsGA1UEAxMk YzIyYzIyNjUtMGIwYS00ZTcwLWE5NWMtNWVhNzE1Yzg4NzQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvdmbDfOQ9P1hkb/l7fEPBKm9y7Y26/Wxfz2N r8c0qODEZRPi9VLyRIO3ewRPbKA7cp3klbPHUb7dPzc/xPUevhve6Xz3FhMCdGND VJdonbNA9+NEe2l+PI4Yn+YKp5zitBoF58gZlMnNjaqdqaaVbYn5uu+/qBkBiqbw Nvxt14EbKHp/cxYcpVwPvraBCBxWT9QGzf4p21T0FHZzcrikx4BqMM47p8+nqA7C Bp+m9Kdv/oJA/h80wPoD70JPD+T+6qbAXt7W3aZt3bNRx3pekjFH2oqpeVRfDsKr 8syY3yIxRgGrp4tA+xa3IOV1pHhlLesEzFQc3XjWOcfHJxpB/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJOH1hwxmQipDJIZo4G6mjAbDJt8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS84NmZl YTQ3MC1iMzgwLTQ1YzAtOWY2Yi0wMzNiN2Q4ODQzODgvODE4MmQ2MGQtM2M3ZC0z NzkyLWEzNTctNzMyMmQ0MGZkMmI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvODZmZWE0NzAtYjM4MC00NWMwLTlm NmItMDMzYjdkODg0Mzg4Lzg2ZmVhNDcwLWIzODAtNDVjMC05ZjZiLTAzM2I3ZDg4 NDM4OC5jcmwwHwYDVR0jBBgwFoAUCHSKMQk8LElEoS6K1lyekgQBzxYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS84NmZlYTQ3MC1iMzgwLTQ1YzAtOWY2Yi0wMzNi N2Q4ODQzODguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARKgUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB5cmv1Y3yG9JD/tRBZNWHvtYmhwk5Wp9FTLFUDvA+6R0ztdTDBvvDEJ Wo48dBMLp9l1jwxzJkzOniDneMYto5pHwkHCeYYG58K5LFWXQoPgbkp1c0eis1Kl /O0OPUso0m58LvEFmTj4PGdkRd2ZXAGF5kczGAVQ9IyTZ4I9sTAD7YqirvX+t2DN MMRObWOJl3yuycPABx5tmkCVfC/308U6wUiF7tJse1A6vYc1D+ZIZW83bAR2m+rv 5INECgwI8J3iASMuyKpL6/WFQxBjZUjIlLQUX7d7zlSVdd2Fq/6yO3uVs36v5sQI gHhUG+mimsg5ZzqJrJP0ZTwOEpUS0jc= -----END CERTIFICATE-----Generated at Sun Sep 20 16:01:44 2026 by rpki-client