$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/9dc53f79-5229-395e-abe4-ac308a1251e7.roa File: 9dc53f79-5229-395e-abe4-ac308a1251e7.roa (raw, json) Hash identifier: i0UtASD17Im2ih/iLQPjTO7GtqPbjQvM1pf9m1fc4nA= Subject key identifier: E3:12:39:10:A7:04:30:29:93:11:B9:6B:3B:9D:CA:05:76:2E:B7:F8 Certificate issuer: /CN=86fea470-b380-45c0-9f6b-033b7d884388 Certificate serial: 010D0C9F4328584A2C2022741289D636B8657800 Authority key identifier: 08:74:8A:31:09:3C:2C:49:44:A1:2E:8A:D6:5C:9E:92:04:01:CF:16 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/9dc53f79-5229-395e-abe4-ac308a1251e7.roa Signing time: Fri 13 Jun 2025 01:00:51 +0000 ROA not before: Fri 13 Jun 2025 01:00:51 +0000 ROA not after: Thu 11 Sep 2025 01:00:51 +0000 asID: 40065 IP address blocks: 67.220.90.0/23 maxlen: 24 67.220.92.0/23 maxlen: 24 68.168.16.0/23 maxlen: 24 68.168.22.0/24 maxlen: 24 68.168.24.0/22 maxlen: 24 68.168.28.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/86fea470-b380-45c0-9f6b-033b7d884388.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/86fea470-b380-45c0-9f6b-033b7d884388.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 19 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:2c:20:22:74:12:89:d6:36:b8:65:78:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86fea470-b380-45c0-9f6b-033b7d884388 Validity Not Before: Jun 13 01:00:51 2025 GMT Not After : Sep 11 01:00:51 2025 GMT Subject: CN=274a8005-faee-4aee-bb6f-8e4bad0af2f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:d4:d8:b8:d5:f7:4c:38:49:40:b7:42:ad:cf: a0:45:17:9a:d2:09:02:48:9d:77:45:bf:11:cf:d2: 51:8e:39:8c:8b:b4:1f:bd:df:9b:7a:ed:47:cc:cf: e7:6a:71:37:55:48:9a:bb:e4:b5:0f:7f:35:21:81: 5c:00:74:00:28:e4:04:33:a8:0b:bf:ca:c3:fd:19: 57:d6:25:57:01:f3:c8:ee:bf:9d:71:92:02:b2:74: d9:52:92:d2:27:35:1c:b1:4b:b0:05:b4:fe:f7:e6: 46:a3:9e:ce:82:5e:22:a1:7a:f2:32:1a:4b:7b:74: 83:ee:aa:80:83:dd:12:34:7c:f3:3a:8a:5f:9f:07: 53:4e:12:7f:bc:24:05:70:94:58:3a:17:1d:03:3d: cd:2d:84:4f:20:77:42:ea:b1:66:a3:a6:24:2f:ed: 2d:0e:61:c1:fb:df:d9:2c:58:6a:f4:e7:46:9c:8a: 51:a1:c7:cc:4c:8a:a4:e2:c3:38:b1:71:d7:a3:91: 24:1b:0e:3f:02:dd:5b:ea:34:70:dc:97:eb:99:be: 32:32:0e:6d:41:e7:76:f4:20:f0:d1:ef:f0:01:e8: f5:2f:fd:97:cb:cc:04:03:27:9b:88:fe:2f:d3:d2: c7:21:fa:ae:d4:73:64:e6:f3:63:29:26:33:0a:f6: 78:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:12:39:10:A7:04:30:29:93:11:B9:6B:3B:9D:CA:05:76:2E:B7:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/9dc53f79-5229-395e-abe4-ac308a1251e7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/86fea470-b380-45c0-9f6b-033b7d884388.crl X509v3 Authority Key Identifier: keyid:08:74:8A:31:09:3C:2C:49:44:A1:2E:8A:D6:5C:9E:92:04:01:CF:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388.cer sbgp-ipAddrBlock: critical IPv4: 67.220.90.0-67.220.93.255 68.168.16.0/23 68.168.22.0/24 68.168.24.0-68.168.28.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ca:d9:ae:31:76:56:2d:8a:00:85:49:55:08:05:d1:31:38:f9: 29:5d:a8:e2:9b:bd:9e:5b:37:11:48:e5:00:c1:71:4e:fe:3b: bc:0a:f0:e2:bf:c4:53:f5:3b:8b:97:de:d4:f7:20:57:bb:bd: 96:d6:3f:6f:ad:0c:a9:a7:76:34:aa:75:38:e1:0a:d5:4b:04: 4d:4e:81:a4:8e:17:c5:5d:91:9b:bb:94:f4:7e:3c:ef:cd:7a: 92:57:2c:9e:d5:d9:7c:10:ac:13:54:0e:e2:3b:24:77:2e:cb: 53:b9:37:25:bd:cb:04:94:89:08:1a:47:e5:cf:ee:63:c5:25: 2b:11:32:56:35:f0:6e:6e:02:1f:5d:b6:3f:d0:cd:58:1a:09: 68:37:40:69:b3:98:90:64:98:67:3b:47:5c:01:f2:07:33:64: cd:d3:ab:48:09:89:f5:ce:e1:4b:79:d3:77:4a:f4:1b:a3:1c: b2:98:1f:73:72:22:17:1f:16:92:7e:5a:3c:b2:85:f8:9d:d0: da:7a:9e:01:d3:de:3b:c3:7d:91:d5:9d:c8:37:b1:38:25:f9: cd:14:86:5a:03:e3:51:22:57:f6:b6:46:48:0a:e6:c1:9a:57: a8:aa:be:2d:19:f8:23:cf:5c:4c:79:68:c9:f1:bf:67:9b:35: d0:33:17:98 -----BEGIN CERTIFICATE----- MIIGZTCCBU2gAwIBAgIUAQ0Mn0MoWEosICJ0EonWNrhleAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODZmZWE0NzAtYjM4MC00NWMwLTlmNmItMDMzYjdkODg0 Mzg4MB4XDTI1MDYxMzAxMDA1MVoXDTI1MDkxMTAxMDA1MVowLzEtMCsGA1UEAxMk Mjc0YTgwMDUtZmFlZS00YWVlLWJiNmYtOGU0YmFkMGFmMmYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp9TYuNX3TDhJQLdCrc+gRRea0gkCSJ13Rb8R z9JRjjmMi7Qfvd+beu1HzM/nanE3VUiau+S1D381IYFcAHQAKOQEM6gLv8rD/RlX 1iVXAfPI7r+dcZICsnTZUpLSJzUcsUuwBbT+9+ZGo57Ogl4ioXryMhpLe3SD7qqA g90SNHzzOopfnwdTThJ/vCQFcJRYOhcdAz3NLYRPIHdC6rFmo6YkL+0tDmHB+9/Z LFhq9OdGnIpRocfMTIqk4sM4sXHXo5EkGw4/At1b6jRw3Jfrmb4yMg5tQed29CDw 0e/wAej1L/2Xy8wEAyebiP4v09LHIfqu1HNk5vNjKSYzCvZ4rQIDAQABo4IDdzCC A3MwHQYDVR0OBBYEFOMSORCnBDApkxG5azudygV2Lrf4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS84NmZl YTQ3MC1iMzgwLTQ1YzAtOWY2Yi0wMzNiN2Q4ODQzODgvOWRjNTNmNzktNTIyOS0z OTVlLWFiZTQtYWMzMDhhMTI1MWU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvODZmZWE0NzAtYjM4MC00NWMwLTlm NmItMDMzYjdkODg0Mzg4Lzg2ZmVhNDcwLWIzODAtNDVjMC05ZjZiLTAzM2I3ZDg4 NDM4OC5jcmwwHwYDVR0jBBgwFoAUCHSKMQk8LElEoS6K1lyekgQBzxYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS84NmZlYTQ3MC1iMzgwLTQ1YzAtOWY2Yi0wMzNi N2Q4ODQzODguY2VyMEEGCCsGAQUFBwEHAQH/BDIwMDAuBAIAATAoMAwDBAFD3FoD BAFD3FwDBAFEqBADBABEqBYwDAMEA0SoGAMEAESoHDBUBgNVHSABAf8ESjBIMEYG CCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jl c291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQDK2a4xdlYt igCFSVUIBdExOPkpXajim72eWzcRSOUAwXFO/ju8CvDiv8RT9TuLl97U9yBXu72W 1j9vrQypp3Y0qnU44QrVSwRNToGkjhfFXZGbu5T0fjzvzXqSVyye1dl8EKwTVA7i OyR3LstTuTclvcsElIkIGkflz+5jxSUrETJWNfBubgIfXbY/0M1YGgloN0Bps5iQ ZJhnO0dcAfIHM2TN06tICYn1zuFLedN3SvQboxyymB9zciIXHxaSflo8soX4ndDa ep4B0947w32R1Z3IN7E4JfnNFIZaA+NRIlf2tkZICubBmleoqr4tGfgjz1xMeWjJ 8b9nmzXQMxeY -----END CERTIFICATE-----Generated at Wed Jun 18 10:25:16 2025 by rpki-client