$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/27495369-f50d-3ffe-af45-6c407307205a.roa File: 27495369-f50d-3ffe-af45-6c407307205a.roa (raw, json) Hash identifier: 0vR1gsn08MBwM91unm3i3KMGbS01TB036ppe60ky/Is= Subject key identifier: E3:FC:6C:3E:FC:E2:22:40:BA:84:D8:7F:97:3A:78:07:D2:83:FA:0C Certificate issuer: /CN=86fea470-b380-45c0-9f6b-033b7d884388 Certificate serial: 010D0C9F4328584BB88D2528A2CFFCE83B5DC850 Authority key identifier: 08:74:8A:31:09:3C:2C:49:44:A1:2E:8A:D6:5C:9E:92:04:01:CF:16 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/27495369-f50d-3ffe-af45-6c407307205a.roa Signing time: Sun 02 Nov 2025 01:00:31 +0000 ROA not before: Sun 02 Nov 2025 01:00:31 +0000 ROA not after: Sat 31 Jan 2026 02:00:31 +0000 asID: 63023 IP address blocks: 68.168.29.0/24 maxlen: 24 186.190.213.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/86fea470-b380-45c0-9f6b-033b7d884388.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/86fea470-b380-45c0-9f6b-033b7d884388.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b8:8d:25:28:a2:cf:fc:e8:3b:5d:c8:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86fea470-b380-45c0-9f6b-033b7d884388 Validity Not Before: Nov 2 01:00:31 2025 GMT Not After : Jan 31 02:00:31 2026 GMT Subject: CN=59c122bc-ed6c-45d8-8d4c-ea2cd6d40253 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:08:18:85:0d:0c:0d:1a:cb:c9:6c:ff:22:f4: 10:9d:ca:bd:89:a0:ea:17:5b:45:cc:99:56:26:b5: 26:d3:a3:76:80:aa:70:a3:1c:3a:7e:92:3a:bf:71: da:0c:ab:02:d8:d5:67:38:66:e0:38:29:1a:44:4e: d6:a8:06:21:9d:de:58:4f:0b:2c:a2:c6:b8:28:ef: 61:31:7d:be:65:1c:e4:02:a6:b5:d3:d7:26:f1:d3: 46:e6:e3:2e:61:ff:6f:c3:cb:16:06:8e:0a:fd:7a: 2f:8d:08:14:d2:c0:fa:ca:3b:7d:86:d6:13:7a:55: 59:fb:d8:ec:64:d9:30:31:43:3d:d4:3f:48:3e:ac: 34:62:d7:f1:16:55:c6:93:18:d8:66:6c:7f:96:31: 48:2c:16:e8:3a:cd:ce:d7:c7:9b:7b:e8:a4:a1:7c: 07:ec:b9:be:5a:19:1f:38:29:e8:56:f8:8c:85:cb: 39:01:35:81:86:88:9e:48:e5:e7:e8:7b:df:e6:4c: 0e:66:76:e1:bf:6e:86:a3:72:f8:a1:ae:6a:24:76: 36:38:69:ba:d7:0b:f5:7b:f6:78:8a:ca:b9:a9:37: d4:51:23:e5:e0:34:fc:0c:1c:f9:56:9c:e6:da:4f: a3:cc:e5:db:12:53:31:69:7a:0f:cc:f3:0d:f5:6a: 5f:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:FC:6C:3E:FC:E2:22:40:BA:84:D8:7F:97:3A:78:07:D2:83:FA:0C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/27495369-f50d-3ffe-af45-6c407307205a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/86fea470-b380-45c0-9f6b-033b7d884388.crl X509v3 Authority Key Identifier: keyid:08:74:8A:31:09:3C:2C:49:44:A1:2E:8A:D6:5C:9E:92:04:01:CF:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388.cer sbgp-ipAddrBlock: critical IPv4: 68.168.29.0/24 186.190.213.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a7:70:ec:c5:ac:37:57:68:d8:51:c1:7b:b6:4f:22:cc:ec:10: da:e5:21:2d:c4:19:01:f0:fa:56:05:21:9d:e6:47:96:5a:7b: 3d:7e:a4:a6:42:82:34:c9:e3:60:c4:a7:9c:b4:1b:24:0d:fc: 17:e9:58:cd:e1:44:d0:27:cd:69:03:c4:c1:68:73:b0:c2:40: 3b:ae:77:47:84:90:e6:47:ac:be:28:9c:8b:4b:9a:a0:07:a1: fa:0f:ad:56:2e:00:94:20:59:aa:d5:b5:85:06:cc:33:bd:8a: cb:b9:87:39:6b:a8:8e:83:84:0f:44:b1:aa:a0:db:d1:75:36: 10:ef:e0:d4:b9:75:4e:2d:d3:64:98:79:21:11:60:9c:8b:58: 3b:1b:b0:a9:3e:64:06:67:24:33:cb:09:24:d2:a8:e7:a3:84: 2f:5f:ff:31:d7:fe:84:8c:e8:83:b1:ce:51:0f:02:15:bf:30: 8a:77:26:e6:ab:ad:07:4a:82:ac:d0:ce:8c:c1:8f:6c:e0:d9: 22:79:ac:44:6c:95:8d:bc:03:f4:be:a3:13:43:8d:35:db:47: b8:d4:d3:1a:13:a6:52:fd:a0:24:2c:3e:96:79:8e:8d:b9:33: 37:26:2f:0f:32:26:15:de:ec:30:86:08:45:13:4a:7f:eb:c0: c3:6c:dc:c0 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEu4jSUoos/86DtdyFAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODZmZWE0NzAtYjM4MC00NWMwLTlmNmItMDMzYjdkODg0 Mzg4MB4XDTI1MTEwMjAxMDAzMVoXDTI2MDEzMTAyMDAzMVowLzEtMCsGA1UEAxMk NTljMTIyYmMtZWQ2Yy00NWQ4LThkNGMtZWEyY2Q2ZDQwMjUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiwgYhQ0MDRrLyWz/IvQQncq9iaDqF1tFzJlW JrUm06N2gKpwoxw6fpI6v3HaDKsC2NVnOGbgOCkaRE7WqAYhnd5YTwssosa4KO9h MX2+ZRzkAqa109cm8dNG5uMuYf9vw8sWBo4K/XovjQgU0sD6yjt9htYTelVZ+9js ZNkwMUM91D9IPqw0YtfxFlXGkxjYZmx/ljFILBboOs3O18ebe+ikoXwH7Lm+Whkf OCnoVviMhcs5ATWBhoieSOXn6Hvf5kwOZnbhv26Go3L4oa5qJHY2OGm61wv1e/Z4 isq5qTfUUSPl4DT8DBz5Vpzm2k+jzOXbElMxaXoPzPMN9WpfAQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFOP8bD784iJAuoTYf5c6eAfSg/oMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS84NmZl YTQ3MC1iMzgwLTQ1YzAtOWY2Yi0wMzNiN2Q4ODQzODgvMjc0OTUzNjktZjUwZC0z ZmZlLWFmNDUtNmM0MDczMDcyMDVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvODZmZWE0NzAtYjM4MC00NWMwLTlm NmItMDMzYjdkODg0Mzg4Lzg2ZmVhNDcwLWIzODAtNDVjMC05ZjZiLTAzM2I3ZDg4 NDM4OC5jcmwwHwYDVR0jBBgwFoAUCHSKMQk8LElEoS6K1lyekgQBzxYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS84NmZlYTQ3MC1iMzgwLTQ1YzAtOWY2Yi0wMzNi N2Q4ODQzODguY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQARKgdAwQA ur7VMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAKdw7MWsN1do2FHBe7ZPIszsENrlIS3EGQHw+lYFIZ3mR5Za ez1+pKZCgjTJ42DEp5y0GyQN/BfpWM3hRNAnzWkDxMFoc7DCQDuud0eEkOZHrL4o nItLmqAHofoPrVYuAJQgWarVtYUGzDO9isu5hzlrqI6DhA9Esaqg29F1NhDv4NS5 dU4t02SYeSERYJyLWDsbsKk+ZAZnJDPLCSTSqOejhC9f/zHX/oSM6IOxzlEPAhW/ MIp3JuarrQdKgqzQzozBj2zg2SJ5rERslY28A/S+oxNDjTXbR7jU0xoTplL9oCQs PpZ5jo25MzcmLw8yJhXe7DCGCEUTSn/rwMNs3MA= -----END CERTIFICATE-----Generated at Wed Nov 5 00:24:50 2025 by rpki-client