$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/af478d3d-02cc-354c-a27f-6b17372db688.roa File: af478d3d-02cc-354c-a27f-6b17372db688.roa (raw, json) Hash identifier: lF2+czovj3W3HgnRDIf1csPqu1KxSGpfcK14JCD68Iw= Subject key identifier: F5:A1:12:93:C1:AC:B0:67:C7:A0:85:E2:39:C9:F0:70:A5:9E:E2:47 Certificate issuer: /CN=86fea470-b380-45c0-9f6b-033b7d884388 Certificate serial: 010D0C9F4328584B33F1A42486D6FA93E65CA5C0 Authority key identifier: 08:74:8A:31:09:3C:2C:49:44:A1:2E:8A:D6:5C:9E:92:04:01:CF:16 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/af478d3d-02cc-354c-a27f-6b17372db688.roa Signing time: Mon 15 Sep 2025 13:00:40 +0000 ROA not before: Mon 15 Sep 2025 13:00:40 +0000 ROA not after: Sun 14 Dec 2025 14:00:40 +0000 asID: 3320 IP address blocks: 68.168.18.0/24 maxlen: 24 68.168.19.0/24 maxlen: 24 186.190.214.0/24 maxlen: 24 186.190.222.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/86fea470-b380-45c0-9f6b-033b7d884388.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/86fea470-b380-45c0-9f6b-033b7d884388.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:33:f1:a4:24:86:d6:fa:93:e6:5c:a5:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86fea470-b380-45c0-9f6b-033b7d884388 Validity Not Before: Sep 15 13:00:40 2025 GMT Not After : Dec 14 14:00:40 2025 GMT Subject: CN=1923e0a4-8840-4630-a9e2-d5c7c9de363b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:9f:71:c0:8f:76:3d:d5:bc:8b:8c:29:59:e7: eb:91:54:f9:59:0e:a6:6b:7e:77:23:93:bd:f1:8c: 27:d9:6e:88:13:35:f4:4d:7c:f8:31:f3:b8:85:be: 71:34:01:20:55:c5:59:b8:21:d1:d2:c0:f1:50:b0: 52:92:ad:cb:98:7a:00:70:29:a8:6a:32:e7:99:44: 15:f7:82:ab:9c:00:de:46:c7:e7:1b:0c:8d:91:65: e7:7e:8c:db:27:87:46:b1:c3:38:b0:3f:43:d9:56: dc:38:ad:38:64:84:f3:36:37:08:e2:01:7b:b9:0a: 5b:8c:08:c4:f7:12:1d:1b:3f:87:0f:3a:66:e3:fa: d8:69:fa:8b:96:83:cc:b5:e2:df:87:cc:59:67:d1: 12:0a:c5:7b:86:f1:a6:3b:7d:d9:e8:09:ac:e2:68: 1c:21:4b:87:69:17:18:5a:5d:87:95:c8:b6:56:fd: 56:90:ee:d1:34:1f:11:72:d8:61:9d:00:ac:4f:14: 89:c2:9a:ed:cc:03:e9:46:01:78:0a:10:78:6c:8a: a1:60:6b:cf:d9:77:16:2e:2a:41:95:23:8c:19:e2: 54:4a:c3:1c:22:cb:fe:40:37:5c:dc:c6:bc:79:ba: 1e:66:c5:6f:68:3b:cb:ef:bf:f1:b6:02:a2:bf:30: 19:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:A1:12:93:C1:AC:B0:67:C7:A0:85:E2:39:C9:F0:70:A5:9E:E2:47 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/af478d3d-02cc-354c-a27f-6b17372db688.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/86fea470-b380-45c0-9f6b-033b7d884388.crl X509v3 Authority Key Identifier: keyid:08:74:8A:31:09:3C:2C:49:44:A1:2E:8A:D6:5C:9E:92:04:01:CF:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388.cer sbgp-ipAddrBlock: critical IPv4: 68.168.18.0/23 186.190.214.0/24 186.190.222.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d8:20:8e:16:31:95:d1:b7:73:04:2a:28:9f:da:55:24:58:d6: 06:4a:cd:36:8a:c7:53:58:04:87:70:89:fc:4b:0a:1b:af:ca: 56:4b:3b:9c:67:bf:31:3c:ff:cc:04:d0:11:43:e4:11:ae:94: 8a:ce:9f:c3:b5:52:b8:f5:7a:4d:68:9c:48:a9:d3:9c:33:8e: b0:14:cb:8d:f3:ec:17:f3:25:b7:48:8c:ef:32:b8:a5:78:33: a7:96:b8:10:21:81:ca:e1:d1:ad:de:93:b9:bf:4b:27:ea:46: 60:dc:1f:2c:1b:0e:dd:fa:4d:00:59:38:14:1d:3a:c7:b4:cd: da:b0:37:95:5c:29:b8:b4:24:4c:05:01:fa:ce:8c:2a:85:b2: 1e:aa:bb:03:50:9c:f9:62:4f:4d:3b:bc:d7:f0:7b:10:77:9a: 56:da:24:e6:8a:fc:7f:eb:78:02:d2:50:1a:b8:12:c8:d8:75: a6:00:3a:95:76:00:46:fd:2c:24:b7:ad:5d:36:7d:94:13:d5: 2c:d4:3a:80:b0:87:53:9b:ac:a4:04:a5:6f:43:77:87:f4:30: 08:f9:28:c3:12:e5:02:72:4b:3c:bf:92:ca:1a:f9:02:5c:e5: d4:24:71:aa:31:47:dc:4e:74:7d:8c:78:27:c8:4e:77:63:36: 13:ed:cf:cf -----BEGIN CERTIFICATE----- MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWEsz8aQkhtb6k+ZcpcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODZmZWE0NzAtYjM4MC00NWMwLTlmNmItMDMzYjdkODg0 Mzg4MB4XDTI1MDkxNTEzMDA0MFoXDTI1MTIxNDE0MDA0MFowLzEtMCsGA1UEAxMk MTkyM2UwYTQtODg0MC00NjMwLWE5ZTItZDVjN2M5ZGUzNjNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjZ9xwI92PdW8i4wpWefrkVT5WQ6ma353I5O9 8Ywn2W6IEzX0TXz4MfO4hb5xNAEgVcVZuCHR0sDxULBSkq3LmHoAcCmoajLnmUQV 94KrnADeRsfnGwyNkWXnfozbJ4dGscM4sD9D2VbcOK04ZITzNjcI4gF7uQpbjAjE 9xIdGz+HDzpm4/rYafqLloPMteLfh8xZZ9ESCsV7hvGmO33Z6Ams4mgcIUuHaRcY Wl2Hlci2Vv1WkO7RNB8RcthhnQCsTxSJwprtzAPpRgF4ChB4bIqhYGvP2XcWLipB lSOMGeJUSsMcIsv+QDdc3Ma8eboeZsVvaDvL77/xtgKivzAZywIDAQABo4IDYTCC A10wHQYDVR0OBBYEFPWhEpPBrLBnx6CF4jnJ8HClnuJHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS84NmZl YTQ3MC1iMzgwLTQ1YzAtOWY2Yi0wMzNiN2Q4ODQzODgvYWY0NzhkM2QtMDJjYy0z NTRjLWEyN2YtNmIxNzM3MmRiNjg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvODZmZWE0NzAtYjM4MC00NWMwLTlm NmItMDMzYjdkODg0Mzg4Lzg2ZmVhNDcwLWIzODAtNDVjMC05ZjZiLTAzM2I3ZDg4 NDM4OC5jcmwwHwYDVR0jBBgwFoAUCHSKMQk8LElEoS6K1lyekgQBzxYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS84NmZlYTQ3MC1iMzgwLTQ1YzAtOWY2Yi0wMzNi N2Q4ODQzODguY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQBRKgSAwQA ur7WAwQAur7eMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBANggjhYxldG3cwQqKJ/aVSRY1gZKzTaKx1NYBIdw ifxLChuvylZLO5xnvzE8/8wE0BFD5BGulIrOn8O1Urj1ek1onEip05wzjrAUy43z 7BfzJbdIjO8yuKV4M6eWuBAhgcrh0a3ek7m/SyfqRmDcHywbDt36TQBZOBQdOse0 zdqwN5VcKbi0JEwFAfrOjCqFsh6quwNQnPliT007vNfwexB3mlbaJOaK/H/reALS UBq4EsjYdaYAOpV2AEb9LCS3rV02fZQT1SzUOoCwh1ObrKQEpW9Dd4f0MAj5KMMS 5QJySzy/ksoa+QJc5dQkcaoxR9xOdH2MeCfITndjNhPtz88= -----END CERTIFICATE-----Generated at Tue Nov 4 16:38:33 2025 by rpki-client