$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/a12abfa0-4549-3bf0-816e-c00fbe746ad8.roa File: a12abfa0-4549-3bf0-816e-c00fbe746ad8.roa (raw, json) Hash identifier: XLQhe7ZwE/Hhd1ckSvsodYSEkL/Rvv6e23R8zSMDgQY= Subject key identifier: 20:A6:CE:5A:BA:91:96:FB:72:CB:96:F1:FA:F7:21:B3:A3:2B:12:8B Certificate issuer: /CN=86fea470-b380-45c0-9f6b-033b7d884388 Certificate serial: 010D0C9F4328584F27F25CF7AD1B3B8DE77D0080 Authority key identifier: 08:74:8A:31:09:3C:2C:49:44:A1:2E:8A:D6:5C:9E:92:04:01:CF:16 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/a12abfa0-4549-3bf0-816e-c00fbe746ad8.roa Signing time: Sun 13 Sep 2026 01:00:12 +0000 ROA not before: Sun 13 Sep 2026 01:00:12 +0000 ROA not after: Sat 12 Dec 2026 02:00:12 +0000 asID: 26042 IP address blocks: 67.220.88.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/86fea470-b380-45c0-9f6b-033b7d884388.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/86fea470-b380-45c0-9f6b-033b7d884388.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:27:f2:5c:f7:ad:1b:3b:8d:e7:7d:00:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86fea470-b380-45c0-9f6b-033b7d884388 Validity Not Before: Sep 13 01:00:12 2026 GMT Not After : Dec 12 02:00:12 2026 GMT Subject: CN=c7102f01-5083-4589-b957-57e66d27990f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:51:29:2b:71:3e:b6:b0:92:cf:39:a4:23:bf: 62:7b:85:8f:63:7c:60:c9:47:03:f2:21:b0:14:d3: db:61:a7:b8:8a:6d:8f:3f:86:57:ef:0d:ed:0e:cf: b5:f4:97:28:12:47:1e:a4:f5:ec:50:8c:85:71:69: f5:13:29:89:6d:ff:f3:01:c1:33:8c:e6:7a:85:87: 64:62:51:16:31:c2:7a:5b:cd:2a:a7:ba:e8:75:84: 8f:eb:78:41:09:db:24:97:a9:f6:82:e3:76:d9:51: b7:e2:cc:f4:96:69:70:23:40:0a:7f:f4:02:78:c2: 3d:ae:0d:e6:21:e4:f6:9f:18:e4:a0:66:ff:ac:c6: 99:5a:da:49:91:6e:c1:c1:21:fd:2c:53:59:9d:1c: b2:3c:cc:9f:59:95:07:fe:59:6e:12:5f:9b:f7:b1: fa:7c:b6:5d:27:04:d6:19:da:d0:ee:78:ce:8a:8b: 6d:7b:a3:7b:1b:d1:5a:bd:18:2d:fd:c2:c1:21:a7: c7:85:62:80:76:07:d7:14:6c:c5:63:8c:5a:fe:43: 9d:a7:14:c9:37:52:71:f7:4d:2d:4c:f3:de:bd:7d: 7f:0b:20:79:c5:31:aa:53:66:60:c9:e7:ec:54:70: ff:2d:23:8a:f5:f9:fd:5e:f7:f7:ab:65:8c:57:bf: 62:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:A6:CE:5A:BA:91:96:FB:72:CB:96:F1:FA:F7:21:B3:A3:2B:12:8B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/a12abfa0-4549-3bf0-816e-c00fbe746ad8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/86fea470-b380-45c0-9f6b-033b7d884388.crl X509v3 Authority Key Identifier: keyid:08:74:8A:31:09:3C:2C:49:44:A1:2E:8A:D6:5C:9E:92:04:01:CF:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388.cer sbgp-ipAddrBlock: critical IPv4: 67.220.88.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b2:b5:50:1a:b3:a0:6b:1a:2b:48:75:dd:73:99:11:9b:cd:fd: 84:88:1b:9e:fe:b7:73:d0:6e:12:f6:a2:77:43:31:5e:d4:f0: a4:a3:b6:ed:ec:1e:80:53:94:77:40:fa:30:64:8e:c0:b7:63: 6a:a8:00:e7:d2:b7:45:30:3f:46:c2:7a:86:88:67:af:8e:b7: 28:95:b7:a0:44:54:48:d1:72:0c:90:45:7a:54:38:6d:ce:6c: a5:c7:fa:0e:45:3a:9b:25:11:58:18:01:3c:90:86:36:2a:96: 07:d1:44:0f:57:91:76:d4:68:17:e6:be:a1:d1:06:6c:7b:22: 61:4c:32:26:25:95:d9:97:4c:22:07:45:eb:54:ed:6d:b3:26: 42:08:17:84:84:c9:e5:65:81:40:54:b9:b7:5b:bf:55:73:73: 96:78:a5:07:9b:72:ff:93:5e:e0:ef:d2:56:e5:3e:1e:ee:fb: e7:ea:41:be:10:8c:71:04:bb:9e:64:98:76:ef:49:f7:6b:c6: f7:a3:cd:ee:9f:8e:5a:57:20:91:3c:25:21:0f:da:8a:96:cf: d5:4e:e1:81:29:58:64:8a:2f:24:21:8b:96:8c:1b:36:ce:36: 5c:49:15:c7:84:e9:e6:81:2f:38:d4:ab:a7:5f:72:a1:64:43: 03:47:8a:de -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8n8lz3rRs7jed9AIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODZmZWE0NzAtYjM4MC00NWMwLTlmNmItMDMzYjdkODg0 Mzg4MB4XDTI2MDkxMzAxMDAxMloXDTI2MTIxMjAyMDAxMlowLzEtMCsGA1UEAxMk YzcxMDJmMDEtNTA4My00NTg5LWI5NTctNTdlNjZkMjc5OTBmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgVEpK3E+trCSzzmkI79ie4WPY3xgyUcD8iGw FNPbYae4im2PP4ZX7w3tDs+19JcoEkcepPXsUIyFcWn1EymJbf/zAcEzjOZ6hYdk YlEWMcJ6W80qp7rodYSP63hBCdskl6n2guN22VG34sz0lmlwI0AKf/QCeMI9rg3m IeT2nxjkoGb/rMaZWtpJkW7BwSH9LFNZnRyyPMyfWZUH/lluEl+b97H6fLZdJwTW GdrQ7njOiotte6N7G9FavRgt/cLBIafHhWKAdgfXFGzFY4xa/kOdpxTJN1Jx900t TPPevX1/CyB5xTGqU2ZgyefsVHD/LSOK9fn9Xvf3q2WMV79idQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCCmzlq6kZb7csuW8fr3IbOjKxKLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS84NmZl YTQ3MC1iMzgwLTQ1YzAtOWY2Yi0wMzNiN2Q4ODQzODgvYTEyYWJmYTAtNDU0OS0z YmYwLTgxNmUtYzAwZmJlNzQ2YWQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvODZmZWE0NzAtYjM4MC00NWMwLTlm NmItMDMzYjdkODg0Mzg4Lzg2ZmVhNDcwLWIzODAtNDVjMC05ZjZiLTAzM2I3ZDg4 NDM4OC5jcmwwHwYDVR0jBBgwFoAUCHSKMQk8LElEoS6K1lyekgQBzxYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS84NmZlYTQ3MC1iMzgwLTQ1YzAtOWY2Yi0wMzNi N2Q4ODQzODguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQ9xYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALK1UBqzoGsaK0h13XOZEZvN/YSIG57+t3PQbhL2ondDMV7U8KSjtu3s HoBTlHdA+jBkjsC3Y2qoAOfSt0UwP0bCeoaIZ6+OtyiVt6BEVEjRcgyQRXpUOG3O bKXH+g5FOpslEVgYATyQhjYqlgfRRA9XkXbUaBfmvqHRBmx7ImFMMiYlldmXTCIH RetU7W2zJkIIF4SEyeVlgUBUubdbv1Vzc5Z4pQebcv+TXuDv0lblPh7u++fqQb4Q jHEEu55kmHbvSfdrxvejze6fjlpXIJE8JSEP2oqWz9VO4YEpWGSKLyQhi5aMGzbO NlxJFceE6eaBLzjUq6dfcqFkQwNHit4= -----END CERTIFICATE-----Generated at Mon Sep 28 21:09:24 2026 by rpki-client