$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/ccaf4e02-9e30-3f29-bf04-4ee0a5e9e204.roa File: ccaf4e02-9e30-3f29-bf04-4ee0a5e9e204.roa (raw, json) Hash identifier: s+U+O3j7EVTr1Z12Xnw5bnn6hdLr21xQoQW5F+l2LJs= Subject key identifier: 64:92:7B:8A:34:6B:87:87:8F:D4:E0:ED:B6:85:4E:44:D4:1D:CA:B5 Certificate issuer: /CN=86fea470-b380-45c0-9f6b-033b7d884388 Certificate serial: 010D0C9F4328584CE3621372292FA0C6E31B5610 Authority key identifier: 08:74:8A:31:09:3C:2C:49:44:A1:2E:8A:D6:5C:9E:92:04:01:CF:16 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/ccaf4e02-9e30-3f29-bf04-4ee0a5e9e204.roa Signing time: Tue 17 Feb 2026 02:00:31 +0000 ROA not before: Tue 17 Feb 2026 02:00:31 +0000 ROA not after: Mon 18 May 2026 01:00:31 +0000 asID: 63150 IP address blocks: 68.168.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/86fea470-b380-45c0-9f6b-033b7d884388.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/86fea470-b380-45c0-9f6b-033b7d884388.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:e3:62:13:72:29:2f:a0:c6:e3:1b:56:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86fea470-b380-45c0-9f6b-033b7d884388 Validity Not Before: Feb 17 02:00:31 2026 GMT Not After : May 18 01:00:31 2026 GMT Subject: CN=d351f6e6-9fa0-4fc0-b080-907596ad04c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:14:4b:94:5b:41:05:34:f5:f3:5a:ee:cd:b9: 3a:b4:58:fa:57:d9:24:00:54:39:7c:91:2a:1b:d4: 99:0a:3c:5e:f3:b5:08:68:30:8a:3b:34:ed:b9:2d: c5:6c:31:61:d3:b6:f6:f6:08:b6:79:25:5f:4a:f0: 09:7e:a3:6a:c9:ca:ce:19:03:e7:bd:9b:02:bb:6c: fc:bf:ad:a1:d7:12:0f:c8:58:b9:7a:2c:4f:ab:ad: 4b:f3:18:55:6c:fa:93:86:33:e0:b2:10:d4:73:68: 35:69:79:70:3c:b2:53:95:66:93:57:d8:08:72:ea: 75:eb:fd:f8:84:d2:03:81:b1:7b:68:4d:7e:5e:76: a6:f2:10:6d:02:77:fc:78:5c:83:9a:f2:a6:6d:3c: 3b:80:9e:48:14:ad:0c:6e:65:54:58:9e:b2:a6:2f: cb:7d:fb:e3:21:32:3d:58:bb:85:10:8f:6e:39:d3: 0e:bd:8d:8a:a3:d4:bd:c5:72:07:87:57:4f:b2:0b: 67:05:8a:de:c4:33:9d:04:b3:31:9c:54:75:27:1e: 94:20:96:26:f4:9e:a0:aa:01:dc:00:5e:2a:41:95: 97:21:38:9f:7b:9f:98:f3:6a:3f:73:15:fb:4d:22: f6:35:bb:3b:af:49:e1:52:56:7b:65:8e:2a:9b:1f: 17:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:92:7B:8A:34:6B:87:87:8F:D4:E0:ED:B6:85:4E:44:D4:1D:CA:B5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/ccaf4e02-9e30-3f29-bf04-4ee0a5e9e204.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/86fea470-b380-45c0-9f6b-033b7d884388.crl X509v3 Authority Key Identifier: keyid:08:74:8A:31:09:3C:2C:49:44:A1:2E:8A:D6:5C:9E:92:04:01:CF:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388.cer sbgp-ipAddrBlock: critical IPv4: 68.168.20.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d5:3c:55:76:80:8c:76:a0:b6:24:e2:95:76:30:9a:81:3c:cb: 9c:1a:ed:32:63:dd:b8:45:08:52:2c:20:d5:e9:f2:42:9e:33: 6e:df:0c:cd:84:8d:9c:cb:de:d1:ef:de:f6:14:5b:95:a7:5b: dc:7e:9d:9b:7a:49:e4:c4:48:ee:46:b7:cd:9a:98:63:70:8a: 70:4b:a9:6b:19:cd:4f:e3:e8:a9:74:23:93:3d:25:59:93:ba: af:73:64:d3:5e:22:23:c4:9b:2a:df:5c:33:dd:dd:21:27:97: 5f:c5:ce:dd:85:89:72:6c:5b:89:d7:84:d9:40:5a:d4:9b:8e: b9:3e:bb:2e:bb:55:a7:3e:e8:bf:d7:69:2f:54:d6:86:c3:b1: 0d:96:a9:24:59:04:f7:62:4c:3a:65:3b:08:e4:0c:08:b2:53: e7:a4:82:9c:c9:07:3a:1b:ba:62:ff:d6:ef:26:b3:25:dc:79: 86:cb:b7:c2:a8:91:a4:92:16:e6:14:08:7b:91:51:75:c2:8a: 25:d7:59:3e:b0:b1:d6:1f:19:65:8e:65:25:03:10:a1:b1:63: 4b:d9:1d:a5:04:f5:ba:2a:1d:19:89:4d:9e:1f:c9:d7:71:67: 38:21:14:9b:96:3a:75:16:20:d9:c2:2d:af:bf:a6:fa:d4:7f: a1:3a:5e:ad -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzjYhNyKS+gxuMbVhAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODZmZWE0NzAtYjM4MC00NWMwLTlmNmItMDMzYjdkODg0 Mzg4MB4XDTI2MDIxNzAyMDAzMVoXDTI2MDUxODAxMDAzMVowLzEtMCsGA1UEAxMk ZDM1MWY2ZTYtOWZhMC00ZmMwLWIwODAtOTA3NTk2YWQwNGM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsRRLlFtBBTT181ruzbk6tFj6V9kkAFQ5fJEq G9SZCjxe87UIaDCKOzTtuS3FbDFh07b29gi2eSVfSvAJfqNqycrOGQPnvZsCu2z8 v62h1xIPyFi5eixPq61L8xhVbPqThjPgshDUc2g1aXlwPLJTlWaTV9gIcup16/34 hNIDgbF7aE1+Xnam8hBtAnf8eFyDmvKmbTw7gJ5IFK0MbmVUWJ6ypi/LffvjITI9 WLuFEI9uOdMOvY2Ko9S9xXIHh1dPsgtnBYrexDOdBLMxnFR1Jx6UIJYm9J6gqgHc AF4qQZWXITife5+Y82o/cxX7TSL2Nbs7r0nhUlZ7ZY4qmx8X9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGSSe4o0a4eHj9Tg7baFTkTUHcq1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS84NmZl YTQ3MC1iMzgwLTQ1YzAtOWY2Yi0wMzNiN2Q4ODQzODgvY2NhZjRlMDItOWUzMC0z ZjI5LWJmMDQtNGVlMGE1ZTllMjA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvODZmZWE0NzAtYjM4MC00NWMwLTlm NmItMDMzYjdkODg0Mzg4Lzg2ZmVhNDcwLWIzODAtNDVjMC05ZjZiLTAzM2I3ZDg4 NDM4OC5jcmwwHwYDVR0jBBgwFoAUCHSKMQk8LElEoS6K1lyekgQBzxYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS84NmZlYTQ3MC1iMzgwLTQ1YzAtOWY2Yi0wMzNi N2Q4ODQzODguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARKgUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANU8VXaAjHagtiTilXYwmoE8y5wa7TJj3bhFCFIsINXp8kKeM27fDM2E jZzL3tHv3vYUW5WnW9x+nZt6SeTESO5Gt82amGNwinBLqWsZzU/j6Kl0I5M9JVmT uq9zZNNeIiPEmyrfXDPd3SEnl1/Fzt2FiXJsW4nXhNlAWtSbjrk+uy67Vac+6L/X aS9U1obDsQ2WqSRZBPdiTDplOwjkDAiyU+ekgpzJBzobumL/1u8msyXceYbLt8Ko kaSSFuYUCHuRUXXCiiXXWT6wsdYfGWWOZSUDEKGxY0vZHaUE9boqHRmJTZ4fyddx ZzghFJuWOnUWINnCLa+/pvrUf6E6Xq0= -----END CERTIFICATE-----Generated at Mon Mar 2 00:46:12 2026 by rpki-client