$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/f7b3b4db-44c1-3096-8bf9-01bfba232028.roa File: f7b3b4db-44c1-3096-8bf9-01bfba232028.roa (raw, json) Hash identifier: u5x1ZiHfaMe09NKGQ8RLRYyQgDIw//m2yKYsOOH4My4= Subject key identifier: 8F:A6:E2:02:09:F4:15:33:F3:D4:63:12:94:C8:6C:4A:42:AB:CF:96 Certificate issuer: /CN=86fea470-b380-45c0-9f6b-033b7d884388 Certificate serial: 010D0C9F4328584DADAAE35EF1D7703A84B54F80 Authority key identifier: 08:74:8A:31:09:3C:2C:49:44:A1:2E:8A:D6:5C:9E:92:04:01:CF:16 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/f7b3b4db-44c1-3096-8bf9-01bfba232028.roa Signing time: Thu 30 Apr 2026 13:00:31 +0000 ROA not before: Thu 30 Apr 2026 13:00:31 +0000 ROA not after: Wed 29 Jul 2026 13:00:31 +0000 asID: 63023 IP address blocks: 67.220.66.0/23 maxlen: 24 67.220.70.0/23 maxlen: 24 67.220.72.0/22 maxlen: 24 67.220.80.0/24 maxlen: 24 67.220.82.0/24 maxlen: 24 67.220.85.0/24 maxlen: 24 67.220.86.0/24 maxlen: 24 67.220.94.0/23 maxlen: 24 68.168.31.0/24 maxlen: 24 69.42.209.0/24 maxlen: 24 186.190.215.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/86fea470-b380-45c0-9f6b-033b7d884388.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/86fea470-b380-45c0-9f6b-033b7d884388.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:ad:aa:e3:5e:f1:d7:70:3a:84:b5:4f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86fea470-b380-45c0-9f6b-033b7d884388 Validity Not Before: Apr 30 13:00:31 2026 GMT Not After : Jul 29 13:00:31 2026 GMT Subject: CN=aaffd4b5-9b67-4798-bdef-ce2f339630bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:43:42:ba:85:78:21:69:4e:bd:5e:9b:b0:97: e7:e0:85:ed:2e:c0:e9:a7:6a:ea:7b:f2:62:40:dd: 64:55:3d:d0:3b:78:6e:89:a5:02:e6:03:be:16:60: e8:aa:db:10:d3:3e:64:ff:0b:91:09:60:97:55:ac: 50:35:38:f3:9c:9a:57:b0:52:16:44:47:3f:e7:5a: d4:be:99:4a:ce:c5:60:ba:b3:3a:58:df:8b:6c:93: 8e:8b:17:53:c9:9c:fe:07:b7:7f:38:95:f0:7a:6d: d3:14:11:0a:3c:5a:e0:ef:27:b1:4f:9e:87:3d:9d: 50:bb:b3:35:ec:90:fe:de:00:03:48:56:c9:74:28: ca:5c:b3:29:9e:64:c6:2d:25:29:b1:1d:18:f8:7e: e9:97:35:3b:ba:0f:f7:45:64:2b:a1:2b:4e:c6:10: 44:6e:1f:a2:06:0e:2d:3f:84:03:13:cb:ac:fd:9a: d6:84:af:43:85:f3:af:51:56:27:9b:34:57:1e:f2: b6:93:ea:6b:6b:f3:e4:03:33:c3:7d:a3:5d:63:3a: be:a9:26:a5:89:d8:19:77:cf:da:be:2a:fa:77:91: d5:cd:23:92:65:a2:7b:29:05:79:d8:5d:6d:80:0a: e8:35:21:ad:4d:ce:28:33:23:41:16:a2:63:df:37: cb:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:A6:E2:02:09:F4:15:33:F3:D4:63:12:94:C8:6C:4A:42:AB:CF:96 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/f7b3b4db-44c1-3096-8bf9-01bfba232028.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/86fea470-b380-45c0-9f6b-033b7d884388.crl X509v3 Authority Key Identifier: keyid:08:74:8A:31:09:3C:2C:49:44:A1:2E:8A:D6:5C:9E:92:04:01:CF:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388.cer sbgp-ipAddrBlock: critical IPv4: 67.220.66.0/23 67.220.70.0-67.220.75.255 67.220.80.0/24 67.220.82.0/24 67.220.85.0-67.220.86.255 67.220.94.0/23 68.168.31.0/24 69.42.209.0/24 186.190.215.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9a:c3:ad:11:e2:6a:f1:00:18:90:19:ef:f3:a0:5e:e7:a9:9f: 78:b6:2c:93:46:c0:ce:43:a4:94:9e:82:0d:33:5a:1b:57:6d: 0e:70:89:6d:f4:69:53:ce:11:6a:68:c2:b4:4b:ed:c3:02:6d: 93:db:43:9b:31:43:0d:58:be:40:a5:c9:da:0c:16:af:0f:99: 32:18:b0:d5:f6:04:22:6b:79:40:58:e3:d0:7e:d2:b2:02:f6: b8:5d:94:29:74:30:db:08:13:0e:07:e2:ab:f9:e1:30:2d:44: 58:28:6a:43:63:62:56:ee:eb:12:17:69:b4:38:31:b9:a2:e1: 40:86:fa:39:ba:c0:6b:8c:02:0e:92:26:bf:87:54:dc:7a:e7: 9a:a8:c0:05:d4:4b:14:0b:ce:6a:8b:ad:31:53:e8:4c:b0:5a: 35:7f:19:57:8f:dc:c6:a7:f4:79:10:e2:4b:2f:db:aa:cc:e9: 18:9e:b9:26:c7:59:38:5d:91:3a:95:f4:ee:c6:9d:27:41:71: 44:a9:63:a7:e6:50:6a:e0:2a:70:76:43:ca:8e:2d:10:95:8c: 3b:d8:42:ae:b6:ae:67:c8:cb:de:a8:72:20:3c:c2:18:b8:20: 25:df:23:b7:d1:f9:fc:67:12:9c:18:06:79:2b:2e:af:16:ec: dd:d6:fe:d6 -----BEGIN CERTIFICATE----- MIIGgzCCBWugAwIBAgIUAQ0Mn0MoWE2tquNe8ddwOoS1T4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODZmZWE0NzAtYjM4MC00NWMwLTlmNmItMDMzYjdkODg0 Mzg4MB4XDTI2MDQzMDEzMDAzMVoXDTI2MDcyOTEzMDAzMVowLzEtMCsGA1UEAxMk YWFmZmQ0YjUtOWI2Ny00Nzk4LWJkZWYtY2UyZjMzOTYzMGJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAukNCuoV4IWlOvV6bsJfn4IXtLsDpp2rqe/Ji QN1kVT3QO3huiaUC5gO+FmDoqtsQ0z5k/wuRCWCXVaxQNTjznJpXsFIWREc/51rU vplKzsVgurM6WN+LbJOOixdTyZz+B7d/OJXwem3TFBEKPFrg7yexT56HPZ1Qu7M1 7JD+3gADSFbJdCjKXLMpnmTGLSUpsR0Y+H7plzU7ug/3RWQroStOxhBEbh+iBg4t P4QDE8us/ZrWhK9DhfOvUVYnmzRXHvK2k+pra/PkAzPDfaNdYzq+qSalidgZd8/a vir6d5HVzSOSZaJ7KQV52F1tgAroNSGtTc4oMyNBFqJj3zfLKwIDAQABo4IDlTCC A5EwHQYDVR0OBBYEFI+m4gIJ9BUz89RjEpTIbEpCq8+WMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS84NmZl YTQ3MC1iMzgwLTQ1YzAtOWY2Yi0wMzNiN2Q4ODQzODgvZjdiM2I0ZGItNDRjMS0z MDk2LThiZjktMDFiZmJhMjMyMDI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvODZmZWE0NzAtYjM4MC00NWMwLTlm NmItMDMzYjdkODg0Mzg4Lzg2ZmVhNDcwLWIzODAtNDVjMC05ZjZiLTAzM2I3ZDg4 NDM4OC5jcmwwHwYDVR0jBBgwFoAUCHSKMQk8LElEoS6K1lyekgQBzxYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS84NmZlYTQ3MC1iMzgwLTQ1YzAtOWY2Yi0wMzNi N2Q4ODQzODguY2VyMF8GCCsGAQUFBwEHAQH/BFAwTjBMBAIAATBGAwQBQ9xCMAwD BAFD3EYDBAJD3EgDBABD3FADBABD3FIwDAMEAEPcVQMEAEPcVgMEAUPcXgMEAESo HwMEAEUq0QMEALq+1zBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCaw60R4mrxABiQGe/zoF7nqZ94tiyTRsDO Q6SUnoINM1obV20OcIlt9GlTzhFqaMK0S+3DAm2T20ObMUMNWL5ApcnaDBavD5ky GLDV9gQia3lAWOPQftKyAva4XZQpdDDbCBMOB+Kr+eEwLURYKGpDY2JW7usSF2m0 ODG5ouFAhvo5usBrjAIOkia/h1TceueaqMAF1EsUC85qi60xU+hMsFo1fxlXj9zG p/R5EOJLL9uqzOkYnrkmx1k4XZE6lfTuxp0nQXFEqWOn5lBq4CpwdkPKji0QlYw7 2EKutq5nyMveqHIgPMIYuCAl3yO30fn8ZxKcGAZ5Ky6vFuzd1v7W -----END CERTIFICATE-----Generated at Wed May 13 12:56:39 2026 by rpki-client