$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/69552b47-13a2-397a-b4b1-1e5f9973ffb0.roa File: 69552b47-13a2-397a-b4b1-1e5f9973ffb0.roa (raw, json) Hash identifier: UxhzmHJKKG8jFDcKe2b4+w85utZLmEW1W6qwLZ0xrY8= Subject key identifier: 01:A3:88:7F:58:EA:6A:79:D6:A7:8B:5B:52:92:9D:26:A0:9D:BF:BF Certificate issuer: /CN=86fea470-b380-45c0-9f6b-033b7d884388 Certificate serial: 010D0C9F4328584F49745E1441B154F51C078100 Authority key identifier: 08:74:8A:31:09:3C:2C:49:44:A1:2E:8A:D6:5C:9E:92:04:01:CF:16 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/69552b47-13a2-397a-b4b1-1e5f9973ffb0.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 8100 IP address blocks: 186.190.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/86fea470-b380-45c0-9f6b-033b7d884388.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/86fea470-b380-45c0-9f6b-033b7d884388.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:74:5e:14:41:b1:54:f5:1c:07:81:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86fea470-b380-45c0-9f6b-033b7d884388 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=d1943f7f-3558-4af0-85ec-3d5a9a91927b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:a7:e5:8c:da:42:a2:b0:cf:b5:70:fe:61:46: 20:f0:50:1f:e7:78:1d:37:06:47:ed:fe:39:43:da: 82:14:04:ef:f7:a4:e3:2a:c4:e8:60:e3:82:b8:f6: 64:62:11:ea:59:6f:f6:64:29:42:53:fa:54:96:e1: 71:5d:0c:4e:d9:7b:76:5f:cc:79:5b:2f:8f:c6:ff: a4:df:2b:bb:19:a6:5d:a1:95:0f:7a:04:4d:7a:80: 26:96:01:45:00:50:ed:e2:26:6d:72:ac:ea:96:fb: 68:ed:cc:20:06:99:b7:76:8c:b2:ab:06:8e:75:1a: 4b:35:66:06:bb:2a:65:31:13:ad:8b:0d:19:9e:8f: b9:0b:fe:64:8b:bc:05:83:8e:ba:ec:fb:26:2c:5b: 6e:14:a1:b0:ab:56:d5:39:07:86:06:18:32:54:99: 83:9d:bb:56:0f:6a:a0:f7:f6:87:93:c7:a2:46:3f: a1:fb:dd:94:1a:47:d1:92:1d:2e:50:86:d7:99:3a: 49:00:1a:a3:74:0a:d9:3a:33:77:ed:86:00:13:9d: 1d:22:c0:d0:cf:ce:65:11:af:93:e4:4e:4b:bb:84: dd:51:9f:9d:d5:33:d6:9c:3d:27:83:c2:a5:a1:83: 36:1b:cf:09:9e:40:ab:d1:25:06:d1:b3:f7:de:00: ad:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:A3:88:7F:58:EA:6A:79:D6:A7:8B:5B:52:92:9D:26:A0:9D:BF:BF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/69552b47-13a2-397a-b4b1-1e5f9973ffb0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/86fea470-b380-45c0-9f6b-033b7d884388.crl X509v3 Authority Key Identifier: keyid:08:74:8A:31:09:3C:2C:49:44:A1:2E:8A:D6:5C:9E:92:04:01:CF:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388.cer sbgp-ipAddrBlock: critical IPv4: 186.190.220.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:b6:17:36:50:f8:51:3e:54:c0:49:7d:17:2d:a1:c9:b1:89: 70:6c:3c:84:20:06:48:6e:60:99:c6:9b:ac:39:6d:10:3c:cf: ba:40:90:b1:22:88:46:4b:65:7d:98:2d:a5:6d:26:70:4b:82: 86:cb:98:e0:1c:93:2d:20:2e:63:4e:ab:ae:30:21:48:2c:65: 20:6a:70:1c:3e:c9:36:14:6e:8b:b9:ec:94:18:b4:42:f8:8b: 4a:be:fa:54:5e:42:88:74:c2:07:57:aa:0f:27:d4:cf:e1:bf: 18:2e:d7:39:fb:30:2f:1d:ab:9f:4b:fc:e1:ee:0f:a6:69:52: 7e:e7:ce:f9:f3:31:40:ed:fd:85:37:45:e1:b7:3a:0b:52:c5: e9:dc:97:f2:02:31:fb:ac:75:37:b9:64:c9:79:1e:a4:21:21: af:f0:e8:12:05:5c:bf:7b:fa:87:1b:a3:67:cf:cf:c3:e4:03: ea:e4:99:fd:eb:f0:af:7b:70:65:61:b0:71:34:63:86:50:34: b4:81:37:19:2e:84:3e:63:92:e6:d1:a9:e5:76:f3:48:3a:23: 7e:51:4f:3d:2f:0a:93:3e:f6:25:30:55:22:b5:85:79:b2:15: 55:ff:50:8f:98:2a:0e:bf:f0:42:ed:3c:83:8a:5c:f0:44:3f: 66:5a:c7:31 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdF4UQbFU9RwHgQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODZmZWE0NzAtYjM4MC00NWMwLTlmNmItMDMzYjdkODg0 Mzg4MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZDE5NDNmN2YtMzU1OC00YWYwLTg1ZWMtM2Q1YTlhOTE5MjdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8qfljNpCorDPtXD+YUYg8FAf53gdNwZH7f45 Q9qCFATv96TjKsToYOOCuPZkYhHqWW/2ZClCU/pUluFxXQxO2Xt2X8x5Wy+Pxv+k 3yu7GaZdoZUPegRNeoAmlgFFAFDt4iZtcqzqlvto7cwgBpm3doyyqwaOdRpLNWYG uyplMROtiw0Zno+5C/5ki7wFg4667PsmLFtuFKGwq1bVOQeGBhgyVJmDnbtWD2qg 9/aHk8eiRj+h+92UGkfRkh0uUIbXmTpJABqjdArZOjN37YYAE50dIsDQz85lEa+T 5E5Lu4TdUZ+d1TPWnD0ng8KloYM2G88JnkCr0SUG0bP33gCtywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAGjiH9Y6mp51qeLW1KSnSagnb+/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS84NmZl YTQ3MC1iMzgwLTQ1YzAtOWY2Yi0wMzNiN2Q4ODQzODgvNjk1NTJiNDctMTNhMi0z OTdhLWI0YjEtMWU1Zjk5NzNmZmIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvODZmZWE0NzAtYjM4MC00NWMwLTlm NmItMDMzYjdkODg0Mzg4Lzg2ZmVhNDcwLWIzODAtNDVjMC05ZjZiLTAzM2I3ZDg4 NDM4OC5jcmwwHwYDVR0jBBgwFoAUCHSKMQk8LElEoS6K1lyekgQBzxYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS84NmZlYTQ3MC1iMzgwLTQ1YzAtOWY2Yi0wMzNi N2Q4ODQzODguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAur7cMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGy2FzZQ+FE+VMBJfRctocmxiXBsPIQgBkhuYJnGm6w5bRA8z7pAkLEi iEZLZX2YLaVtJnBLgobLmOAcky0gLmNOq64wIUgsZSBqcBw+yTYUbou57JQYtEL4 i0q++lReQoh0wgdXqg8n1M/hvxgu1zn7MC8dq59L/OHuD6ZpUn7nzvnzMUDt/YU3 ReG3OgtSxencl/ICMfusdTe5ZMl5HqQhIa/w6BIFXL97+ocbo2fPz8PkA+rkmf3r 8K97cGVhsHE0Y4ZQNLSBNxkuhD5jkubRqeV280g6I35RTz0vCpM+9iUwVSK1hXmy FVX/UI+YKg6/8ELtPIOKXPBEP2ZaxzE= -----END CERTIFICATE-----Generated at Mon Sep 28 19:56:01 2026 by rpki-client