$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/8182d60d-3c7d-3792-a357-7322d40fd2b4.roa File: 8182d60d-3c7d-3792-a357-7322d40fd2b4.roa (raw, json) Hash identifier: 3grnSUkdmBJutlLa2c0mOhv/3fG/PqUk7zlk8Yr9nPA= Subject key identifier: 17:40:25:D9:88:C3:88:EE:3D:2E:78:7B:4D:FF:A9:CE:78:1E:9E:F8 Certificate issuer: /CN=86fea470-b380-45c0-9f6b-033b7d884388 Certificate serial: 010D0C9F4328584E863F437E668A5F24271E0A80 Authority key identifier: 08:74:8A:31:09:3C:2C:49:44:A1:2E:8A:D6:5C:9E:92:04:01:CF:16 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/8182d60d-3c7d-3792-a357-7322d40fd2b4.roa Signing time: Fri 17 Jul 2026 02:54:18 +0000 ROA not before: Fri 17 Jul 2026 02:54:18 +0000 ROA not after: Thu 15 Oct 2026 02:54:18 +0000 asID: 62633 IP address blocks: 68.168.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/86fea470-b380-45c0-9f6b-033b7d884388.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/86fea470-b380-45c0-9f6b-033b7d884388.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:86:3f:43:7e:66:8a:5f:24:27:1e:0a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86fea470-b380-45c0-9f6b-033b7d884388 Validity Not Before: Jul 17 02:54:18 2026 GMT Not After : Oct 15 02:54:18 2026 GMT Subject: CN=9cb7fe95-0bbc-4b44-b8df-951e34603cd5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:33:89:5c:05:ba:0b:e7:d4:08:9a:67:65:a2: 72:c3:e9:2c:14:1b:ce:38:7c:d4:07:c9:81:33:9e: ef:21:b4:5a:c2:d2:46:79:c1:be:72:c2:f9:4b:b1: 20:54:ef:d2:0c:a0:88:35:5e:98:6d:a3:e8:a0:77: 8b:6b:27:b1:a4:4c:56:34:bf:69:37:7b:66:86:83: da:a2:30:f7:71:dd:e8:2c:83:87:6c:33:65:c1:dc: 9c:20:78:68:ac:bc:d6:7e:e0:3b:0c:6f:cf:93:ac: a9:f8:1c:32:38:57:df:32:c3:5b:4f:44:44:20:01: 8e:4f:e0:20:c1:47:fd:de:74:75:1d:d0:03:cb:8f: 58:81:b0:b0:84:f2:eb:d9:2b:74:4a:ab:5c:bc:74: 69:ab:fe:37:b1:72:69:bb:8f:6f:71:3a:7e:a0:13: 4d:9a:9b:d1:cb:b6:ab:d7:15:09:4c:19:f6:03:11: c8:f4:53:a0:16:2a:ee:22:99:be:a5:ad:63:d8:54: 05:70:d1:34:ca:f2:bd:dd:f3:14:9f:c3:96:00:f6: 11:b4:f9:eb:9d:a2:0e:1b:ea:64:34:fb:85:33:8d: 83:c3:c7:15:23:fb:15:bc:2f:44:49:1f:68:2c:16: 7b:cc:20:d9:d5:83:6d:19:73:e9:a1:0d:13:67:22: 49:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:40:25:D9:88:C3:88:EE:3D:2E:78:7B:4D:FF:A9:CE:78:1E:9E:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/8182d60d-3c7d-3792-a357-7322d40fd2b4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/86fea470-b380-45c0-9f6b-033b7d884388.crl X509v3 Authority Key Identifier: keyid:08:74:8A:31:09:3C:2C:49:44:A1:2E:8A:D6:5C:9E:92:04:01:CF:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388.cer sbgp-ipAddrBlock: critical IPv4: 68.168.20.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9b:48:3c:f2:5d:9f:73:c7:65:94:c1:a3:10:fc:a5:bf:af:5e: 5d:a5:df:f4:b4:2d:0a:89:a9:e1:21:aa:91:5e:88:4b:f0:ee: 80:82:7b:4c:d7:43:60:cd:55:2a:3e:40:be:15:2f:62:1a:4b: ce:cf:2b:1d:3d:1b:bd:fa:91:0d:33:7e:38:e4:71:f9:b4:51: b4:49:0e:5b:30:2f:cd:0b:b9:31:ed:d0:f3:3a:46:71:db:40: e3:7f:ce:ac:68:87:f3:0b:76:69:98:44:6b:47:27:9f:86:cf: bb:80:0f:ed:cc:11:4e:27:1a:35:0f:23:c7:04:ca:9c:6a:d1: d0:c3:ca:fc:df:5e:46:7d:a3:c5:23:ee:8e:2c:04:01:75:07: 91:ae:ae:6e:9a:be:57:2f:4b:41:a3:35:0b:3a:8b:f5:33:a0: 60:bb:3e:9d:bf:f7:2b:5f:d6:3b:1f:97:f8:47:ec:91:5c:42: 92:5f:a2:83:e7:64:e1:f9:ee:8e:cd:8d:2a:85:e6:ec:1e:5c: 31:a8:7d:c5:fc:02:51:5b:32:58:d6:59:1b:ff:13:6e:d0:e1: 06:37:27:57:25:50:d3:e4:83:58:3c:79:6e:8e:be:8f:16:d7: b6:48:5e:b8:34:5e:ac:f8:ff:03:b7:53:79:dc:99:5b:af:f3: fb:b9:13:e4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6GP0N+ZopfJCceCoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODZmZWE0NzAtYjM4MC00NWMwLTlmNmItMDMzYjdkODg0 Mzg4MB4XDTI2MDcxNzAyNTQxOFoXDTI2MTAxNTAyNTQxOFowLzEtMCsGA1UEAxMk OWNiN2ZlOTUtMGJiYy00YjQ0LWI4ZGYtOTUxZTM0NjAzY2Q1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2jOJXAW6C+fUCJpnZaJyw+ksFBvOOHzUB8mB M57vIbRawtJGecG+csL5S7EgVO/SDKCINV6YbaPooHeLayexpExWNL9pN3tmhoPa ojD3cd3oLIOHbDNlwdycIHhorLzWfuA7DG/Pk6yp+BwyOFffMsNbT0REIAGOT+Ag wUf93nR1HdADy49YgbCwhPLr2St0SqtcvHRpq/43sXJpu49vcTp+oBNNmpvRy7ar 1xUJTBn2AxHI9FOgFiruIpm+pa1j2FQFcNE0yvK93fMUn8OWAPYRtPnrnaIOG+pk NPuFM42Dw8cVI/sVvC9ESR9oLBZ7zCDZ1YNtGXPpoQ0TZyJJ9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBdAJdmIw4juPS54e03/qc54Hp74MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS84NmZl YTQ3MC1iMzgwLTQ1YzAtOWY2Yi0wMzNiN2Q4ODQzODgvODE4MmQ2MGQtM2M3ZC0z NzkyLWEzNTctNzMyMmQ0MGZkMmI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvODZmZWE0NzAtYjM4MC00NWMwLTlm NmItMDMzYjdkODg0Mzg4Lzg2ZmVhNDcwLWIzODAtNDVjMC05ZjZiLTAzM2I3ZDg4 NDM4OC5jcmwwHwYDVR0jBBgwFoAUCHSKMQk8LElEoS6K1lyekgQBzxYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS84NmZlYTQ3MC1iMzgwLTQ1YzAtOWY2Yi0wMzNi N2Q4ODQzODguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARKgUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJtIPPJdn3PHZZTBoxD8pb+vXl2l3/S0LQqJqeEhqpFeiEvw7oCCe0zX Q2DNVSo+QL4VL2IaS87PKx09G736kQ0zfjjkcfm0UbRJDlswL80LuTHt0PM6RnHb QON/zqxoh/MLdmmYRGtHJ5+Gz7uAD+3MEU4nGjUPI8cEypxq0dDDyvzfXkZ9o8Uj 7o4sBAF1B5Gurm6avlcvS0GjNQs6i/UzoGC7Pp2/9ytf1jsfl/hH7JFcQpJfooPn ZOH57o7NjSqF5uweXDGofcX8AlFbMljWWRv/E27Q4QY3J1clUNPkg1g8eW6Ovo8W 17ZIXrg0Xqz4/wO3U3ncmVuv8/u5E+Q= -----END CERTIFICATE-----Generated at Fri Jul 24 05:56:42 2026 by rpki-client