$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/5736ce4f-a61e-3a85-a255-4fde2136358f.roa File: 5736ce4f-a61e-3a85-a255-4fde2136358f.roa (raw, json) Hash identifier: AgS1aKo6tyK6ZOMHYbnI1Ta52w0xstzhRurw1GoTo5U= Subject key identifier: DA:A2:85:95:C7:13:22:73:0E:97:34:62:8F:DD:D9:2E:30:B1:99:D1 Certificate issuer: /CN=86fea470-b380-45c0-9f6b-033b7d884388 Certificate serial: 010D0C9F4328584AB386250B9669580E566E9250 Authority key identifier: 08:74:8A:31:09:3C:2C:49:44:A1:2E:8A:D6:5C:9E:92:04:01:CF:16 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/5736ce4f-a61e-3a85-a255-4fde2136358f.roa Signing time: Thu 31 Jul 2025 13:00:39 +0000 ROA not before: Thu 31 Jul 2025 13:00:39 +0000 ROA not after: Wed 29 Oct 2025 13:00:39 +0000 asID: 214894 IP address blocks: 68.168.30.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/86fea470-b380-45c0-9f6b-033b7d884388.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/86fea470-b380-45c0-9f6b-033b7d884388.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 12 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b3:86:25:0b:96:69:58:0e:56:6e:92:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86fea470-b380-45c0-9f6b-033b7d884388 Validity Not Before: Jul 31 13:00:39 2025 GMT Not After : Oct 29 13:00:39 2025 GMT Subject: CN=a28e2e15-3828-4d04-87ea-e317f622163e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:32:e2:a6:af:fd:63:24:63:52:7c:38:a0:9f: 47:bf:7b:3f:ce:8e:1a:e3:40:b0:00:01:ed:3c:3a: 67:73:d4:9a:26:89:6e:4d:d2:0d:b8:93:b1:e4:39: 74:98:dc:0a:60:9d:b8:2b:d8:f8:7a:5a:b2:38:ea: 64:38:3d:c3:1a:8f:c6:da:02:7e:d2:80:f1:02:20: 70:51:46:7c:6c:88:ab:26:ea:5f:f7:f6:38:3a:20: d2:49:f1:56:e4:03:44:5b:2b:73:65:0e:49:ca:1d: a8:94:15:54:7b:cf:7c:d8:ab:38:38:77:8d:9b:51: cc:eb:83:d4:0c:ba:20:f1:1f:67:ef:9b:30:26:d7: 6a:7b:ef:a9:d4:5b:6d:a5:f1:54:07:5c:9e:5f:38: 71:c7:b6:1e:2a:cf:00:27:18:da:fb:8a:73:e9:96: ab:b9:a3:65:69:4f:dd:0d:ea:dd:8c:27:d0:b7:25: a9:8d:e4:99:8e:ff:5a:bf:93:a4:ba:a0:76:71:93: e6:35:0b:c4:4d:5f:1a:a1:ee:d8:b4:8c:e3:9f:35: 13:a0:03:ec:c9:4c:71:8b:a5:30:69:8c:3c:83:6c: 97:6a:f6:fb:48:aa:46:7a:62:34:74:91:48:22:54: 63:1c:23:56:3e:67:42:64:a0:fd:87:71:1b:36:5a: 2d:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:A2:85:95:C7:13:22:73:0E:97:34:62:8F:DD:D9:2E:30:B1:99:D1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/5736ce4f-a61e-3a85-a255-4fde2136358f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/86fea470-b380-45c0-9f6b-033b7d884388.crl X509v3 Authority Key Identifier: keyid:08:74:8A:31:09:3C:2C:49:44:A1:2E:8A:D6:5C:9E:92:04:01:CF:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388.cer sbgp-ipAddrBlock: critical IPv4: 68.168.30.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:66:7e:25:7b:a8:c0:71:83:8d:85:10:09:fc:de:ac:33:e0: 3b:d0:8b:3a:4f:76:14:03:17:55:66:67:c8:04:73:48:4f:97: 9b:85:90:74:b4:1e:09:e1:3b:20:4a:31:2b:49:cc:84:4d:39: 17:e4:a9:6c:9e:ff:4a:29:67:61:bc:58:3d:eb:03:91:61:5c: 3b:64:99:0f:15:e5:26:a1:47:7b:3e:d8:27:4c:e8:26:c6:9a: ef:0a:a7:c6:a1:ac:b0:a2:5d:2c:df:20:b1:2c:1e:a5:7f:1c: 25:55:15:30:a8:6e:a9:80:7a:3a:bf:7f:07:e0:e0:1c:88:82: af:95:15:d2:65:8a:6c:68:18:f8:23:5f:17:c5:bc:fd:9c:6e: f2:12:a4:e2:00:13:f2:97:9c:65:13:81:6d:50:bb:3d:c4:5b: 8c:3b:66:c0:01:3c:eb:36:2d:ce:db:0c:e4:ee:ec:fb:52:b4: 30:65:d1:8c:5f:f1:cc:f6:a2:b4:2c:b8:3c:1d:45:3b:9d:c0: a7:11:cf:ff:b0:66:bb:3d:7f:99:10:3e:0e:06:37:59:eb:cf: a3:31:78:a9:4d:b7:27:af:50:d4:b7:bd:1a:73:62:f2:02:51: 50:b0:7a:9a:ca:7e:b8:c4:8a:fd:93:77:2c:48:7a:ea:ab:d9: bc:ed:97:34 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqzhiULlmlYDlZuklAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODZmZWE0NzAtYjM4MC00NWMwLTlmNmItMDMzYjdkODg0 Mzg4MB4XDTI1MDczMTEzMDAzOVoXDTI1MTAyOTEzMDAzOVowLzEtMCsGA1UEAxMk YTI4ZTJlMTUtMzgyOC00ZDA0LTg3ZWEtZTMxN2Y2MjIxNjNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgDLipq/9YyRjUnw4oJ9Hv3s/zo4a40CwAAHt PDpnc9SaJoluTdINuJOx5Dl0mNwKYJ24K9j4elqyOOpkOD3DGo/G2gJ+0oDxAiBw UUZ8bIirJupf9/Y4OiDSSfFW5ANEWytzZQ5Jyh2olBVUe8982Ks4OHeNm1HM64PU DLog8R9n75swJtdqe++p1FttpfFUB1yeXzhxx7YeKs8AJxja+4pz6ZaruaNlaU/d DerdjCfQtyWpjeSZjv9av5OkuqB2cZPmNQvETV8aoe7YtIzjnzUToAPsyUxxi6Uw aYw8g2yXavb7SKpGemI0dJFIIlRjHCNWPmdCZKD9h3EbNlotYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNqihZXHEyJzDpc0Yo/d2S4wsZnRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS84NmZl YTQ3MC1iMzgwLTQ1YzAtOWY2Yi0wMzNiN2Q4ODQzODgvNTczNmNlNGYtYTYxZS0z YTg1LWEyNTUtNGZkZTIxMzYzNThmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvODZmZWE0NzAtYjM4MC00NWMwLTlm NmItMDMzYjdkODg0Mzg4Lzg2ZmVhNDcwLWIzODAtNDVjMC05ZjZiLTAzM2I3ZDg4 NDM4OC5jcmwwHwYDVR0jBBgwFoAUCHSKMQk8LElEoS6K1lyekgQBzxYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS84NmZlYTQ3MC1iMzgwLTQ1YzAtOWY2Yi0wMzNi N2Q4ODQzODguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARKgeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACVmfiV7qMBxg42FEAn83qwz4DvQizpPdhQDF1VmZ8gEc0hPl5uFkHS0 HgnhOyBKMStJzIRNORfkqWye/0opZ2G8WD3rA5FhXDtkmQ8V5SahR3s+2CdM6CbG mu8Kp8ahrLCiXSzfILEsHqV/HCVVFTCobqmAejq/fwfg4ByIgq+VFdJlimxoGPgj XxfFvP2cbvISpOIAE/KXnGUTgW1Quz3EW4w7ZsABPOs2Lc7bDOTu7PtStDBl0Yxf 8cz2orQsuDwdRTudwKcRz/+wZrs9f5kQPg4GN1nrz6MxeKlNtyevUNS3vRpzYvIC UVCweprKfrjEiv2TdyxIeuqr2bztlzQ= -----END CERTIFICATE-----Generated at Sun Aug 10 18:13:50 2025 by rpki-client