$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/9dc53f79-5229-395e-abe4-ac308a1251e7.roa File: 9dc53f79-5229-395e-abe4-ac308a1251e7.roa (raw, json) Hash identifier: bq/et6R4q0x5iuqpPYEe+4HGrpisdTbO8hook3HpYuA= Subject key identifier: 52:9E:DA:AF:AF:01:8F:70:82:21:D9:21:40:75:EA:98:88:07:E4:32 Certificate issuer: /CN=86fea470-b380-45c0-9f6b-033b7d884388 Certificate serial: 010D0C9F4328584DADAAE3504BD0BEFF68016CC0 Authority key identifier: 08:74:8A:31:09:3C:2C:49:44:A1:2E:8A:D6:5C:9E:92:04:01:CF:16 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/9dc53f79-5229-395e-abe4-ac308a1251e7.roa Signing time: Thu 30 Apr 2026 13:00:31 +0000 ROA not before: Thu 30 Apr 2026 13:00:31 +0000 ROA not after: Wed 29 Jul 2026 13:00:31 +0000 asID: 40065 IP address blocks: 67.220.90.0/23 maxlen: 24 67.220.92.0/23 maxlen: 24 68.168.16.0/23 maxlen: 24 68.168.22.0/24 maxlen: 24 68.168.24.0/22 maxlen: 24 68.168.28.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/86fea470-b380-45c0-9f6b-033b7d884388.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/86fea470-b380-45c0-9f6b-033b7d884388.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:ad:aa:e3:50:4b:d0:be:ff:68:01:6c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86fea470-b380-45c0-9f6b-033b7d884388 Validity Not Before: Apr 30 13:00:31 2026 GMT Not After : Jul 29 13:00:31 2026 GMT Subject: CN=175c4eee-de87-49ae-958c-b1a333cdf18b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:2f:95:af:09:f0:7c:45:68:ff:ea:21:58:eb: f0:27:7b:cf:ff:3f:04:2e:d4:34:a4:ac:38:58:5c: 27:c9:33:83:bf:f7:52:5a:39:97:49:21:cc:63:41: b2:77:b5:9c:2e:07:82:19:09:b2:fe:3a:34:d4:a2: 0f:93:5e:34:aa:10:15:b4:b0:0c:ef:3b:ba:aa:2c: 7e:b3:cf:e6:31:67:c8:8d:dd:ac:e3:13:c2:27:cb: f4:58:59:f3:64:6f:dc:6d:d9:30:02:28:46:e5:22: d2:1b:0c:4b:21:78:d4:c0:93:73:59:6c:95:02:fd: 13:1f:1a:f6:a0:dc:13:b7:e5:de:9e:3c:6f:48:f9: d8:6f:15:e1:e9:b7:27:00:6d:62:58:3a:b8:62:5b: 89:54:96:bf:1b:79:d5:6d:a5:cf:de:62:6d:cc:bc: 81:39:71:89:f1:05:63:b5:f7:fb:0b:28:da:90:9a: 95:99:00:68:8c:ba:98:6c:b0:55:ec:a6:10:65:ba: 94:85:84:74:12:9d:d7:4b:72:10:73:cf:39:c3:50: ad:d9:b9:27:a9:3b:e7:3a:62:0b:df:4c:0a:37:33: 00:8a:e2:92:b2:55:07:95:20:b0:53:ae:c0:db:3a: e0:bf:98:9a:c9:c6:4c:a4:a9:38:cd:55:3c:b9:f3: d4:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:9E:DA:AF:AF:01:8F:70:82:21:D9:21:40:75:EA:98:88:07:E4:32 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/9dc53f79-5229-395e-abe4-ac308a1251e7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/86fea470-b380-45c0-9f6b-033b7d884388.crl X509v3 Authority Key Identifier: keyid:08:74:8A:31:09:3C:2C:49:44:A1:2E:8A:D6:5C:9E:92:04:01:CF:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388.cer sbgp-ipAddrBlock: critical IPv4: 67.220.90.0-67.220.93.255 68.168.16.0/23 68.168.22.0/24 68.168.24.0-68.168.28.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:99:86:fd:0f:c2:80:37:ab:1e:c9:2f:d1:cd:64:66:2d:b9: 23:5d:92:97:2d:bf:70:24:df:04:d9:08:06:67:dc:6e:0a:d7: f5:73:b9:4c:79:e0:3b:1c:d4:e2:37:74:7d:23:59:c9:93:49: 20:30:20:d1:51:26:a1:5f:97:ab:b4:89:88:99:51:de:b1:2d: b9:6e:af:ff:e8:0f:2b:86:61:a9:51:f8:a6:f4:23:f9:d2:79: 77:21:62:f5:9b:08:e1:66:b9:42:84:cf:0c:27:53:fb:7d:00: 39:a2:cd:12:82:99:ca:5d:71:44:3b:03:b3:89:3c:80:43:0a: b8:45:ce:8e:68:ae:30:83:68:11:f9:67:8e:97:4f:6c:80:b8: 59:0f:5d:f6:d0:c9:b2:8e:9b:1e:93:83:c3:df:9c:3d:c7:78: 29:ce:4a:ba:84:43:05:c6:d0:7e:9c:b9:b8:e9:1b:43:0c:eb: 47:03:bc:2d:70:d1:73:13:e5:b7:bc:b0:12:84:5a:e8:2d:b2: f6:c9:7a:21:2c:3a:77:d3:2d:fb:be:50:55:a3:c7:1b:a6:8c: 7e:fa:cc:08:21:49:07:d6:bb:10:b2:f6:b6:94:d9:6b:61:d6: 96:7a:dd:c0:ce:72:c5:7e:7b:cf:6d:49:94:0d:61:9c:2a:72: ae:74:69:c7 -----BEGIN CERTIFICATE----- MIIGZTCCBU2gAwIBAgIUAQ0Mn0MoWE2tquNQS9C+/2gBbMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODZmZWE0NzAtYjM4MC00NWMwLTlmNmItMDMzYjdkODg0 Mzg4MB4XDTI2MDQzMDEzMDAzMVoXDTI2MDcyOTEzMDAzMVowLzEtMCsGA1UEAxMk MTc1YzRlZWUtZGU4Ny00OWFlLTk1OGMtYjFhMzMzY2RmMThiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhS+VrwnwfEVo/+ohWOvwJ3vP/z8ELtQ0pKw4 WFwnyTODv/dSWjmXSSHMY0Gyd7WcLgeCGQmy/jo01KIPk140qhAVtLAM7zu6qix+ s8/mMWfIjd2s4xPCJ8v0WFnzZG/cbdkwAihG5SLSGwxLIXjUwJNzWWyVAv0THxr2 oNwTt+XenjxvSPnYbxXh6bcnAG1iWDq4YluJVJa/G3nVbaXP3mJtzLyBOXGJ8QVj tff7CyjakJqVmQBojLqYbLBV7KYQZbqUhYR0Ep3XS3IQc885w1Ct2bknqTvnOmIL 30wKNzMAiuKSslUHlSCwU67A2zrgv5iaycZMpKk4zVU8ufPUTwIDAQABo4IDdzCC A3MwHQYDVR0OBBYEFFKe2q+vAY9wgiHZIUB16piIB+QyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS84NmZl YTQ3MC1iMzgwLTQ1YzAtOWY2Yi0wMzNiN2Q4ODQzODgvOWRjNTNmNzktNTIyOS0z OTVlLWFiZTQtYWMzMDhhMTI1MWU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvODZmZWE0NzAtYjM4MC00NWMwLTlm NmItMDMzYjdkODg0Mzg4Lzg2ZmVhNDcwLWIzODAtNDVjMC05ZjZiLTAzM2I3ZDg4 NDM4OC5jcmwwHwYDVR0jBBgwFoAUCHSKMQk8LElEoS6K1lyekgQBzxYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS84NmZlYTQ3MC1iMzgwLTQ1YzAtOWY2Yi0wMzNi N2Q4ODQzODguY2VyMEEGCCsGAQUFBwEHAQH/BDIwMDAuBAIAATAoMAwDBAFD3FoD BAFD3FwDBAFEqBADBABEqBYwDAMEA0SoGAMEAESoHDBUBgNVHSABAf8ESjBIMEYG CCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jl c291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAMmYb9D8KA N6seyS/RzWRmLbkjXZKXLb9wJN8E2QgGZ9xuCtf1c7lMeeA7HNTiN3R9I1nJk0kg MCDRUSahX5ertImImVHesS25bq//6A8rhmGpUfim9CP50nl3IWL1mwjhZrlChM8M J1P7fQA5os0SgpnKXXFEOwOziTyAQwq4Rc6OaK4wg2gR+WeOl09sgLhZD1320Mmy jpsek4PD35w9x3gpzkq6hEMFxtB+nLm46RtDDOtHA7wtcNFzE+W3vLAShFroLbL2 yXohLDp30y37vlBVo8cbpox++swIIUkH1rsQsva2lNlrYdaWet3AznLFfnvPbUmU DWGcKnKudGnH -----END CERTIFICATE-----Generated at Wed May 13 15:48:17 2026 by rpki-client