$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/c024bbee-23b7-32a0-a732-a4c7c0a2b58c.roa File: c024bbee-23b7-32a0-a732-a4c7c0a2b58c.roa (raw, json) Hash identifier: cnHqe4DkR+g5C8G0ONa16Q1TG4j6j9VUlO+M2kGMltA= Subject key identifier: 03:53:9A:C6:6C:3C:14:62:DE:34:78:27:B4:58:AF:FF:7C:9A:DE:9D Certificate issuer: /CN=86fea470-b380-45c0-9f6b-033b7d884388 Certificate serial: 010D0C9F4328584BAD6253162BA880997E86FBD0 Authority key identifier: 08:74:8A:31:09:3C:2C:49:44:A1:2E:8A:D6:5C:9E:92:04:01:CF:16 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/c024bbee-23b7-32a0-a732-a4c7c0a2b58c.roa Signing time: Wed 29 Oct 2025 01:00:31 +0000 ROA not before: Wed 29 Oct 2025 01:00:31 +0000 ROA not after: Tue 27 Jan 2026 02:00:31 +0000 asID: 54852 IP address blocks: 68.168.23.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/86fea470-b380-45c0-9f6b-033b7d884388.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/86fea470-b380-45c0-9f6b-033b7d884388.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ad:62:53:16:2b:a8:80:99:7e:86:fb:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86fea470-b380-45c0-9f6b-033b7d884388 Validity Not Before: Oct 29 01:00:31 2025 GMT Not After : Jan 27 02:00:31 2026 GMT Subject: CN=7fdcc6f0-cd90-48c2-bda4-3f7043453fb8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:e1:5c:c2:3c:a3:9c:23:5c:dd:0c:d9:d5:5b: 6a:9f:70:50:42:27:e8:8c:de:4b:7d:c6:ad:a2:2e: 03:62:f6:17:e7:06:bd:90:44:e7:3b:22:a8:2c:1b: 85:1e:04:31:fb:7a:7c:4e:3b:b6:3d:5a:2c:2d:87: 01:7e:41:93:11:f8:3f:40:c1:cf:13:a7:a7:2c:da: 99:43:2b:34:42:2f:44:40:b8:63:51:6e:ce:3b:b3: d7:d2:61:e5:c6:dc:00:be:97:de:06:0d:90:1e:00: 62:94:73:40:cc:cb:66:4a:4a:29:b2:62:07:83:0a: 90:a2:91:1d:5f:f8:26:6d:12:76:f4:3b:73:34:43: 73:12:b3:2a:ad:dc:29:e0:92:ab:51:f6:38:f9:e1: b7:e0:f2:37:f2:0c:ea:16:a7:dd:2b:f1:88:4f:9b: 3d:56:5b:9b:81:7d:e3:39:f5:f6:2e:a4:62:a4:79: 30:2d:5f:40:ec:b7:fe:17:44:7d:86:5c:01:49:a9: 24:19:4a:a5:43:45:0a:f7:d4:c9:da:65:cc:d4:39: 10:92:c9:ca:16:9e:28:36:6f:e9:00:84:ad:9c:69: 75:e0:b3:1d:38:2c:a3:42:57:6a:c8:aa:c3:38:eb: d3:0f:a8:3e:ec:5f:c4:d9:4e:23:77:11:06:8e:ee: a7:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:53:9A:C6:6C:3C:14:62:DE:34:78:27:B4:58:AF:FF:7C:9A:DE:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/c024bbee-23b7-32a0-a732-a4c7c0a2b58c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/86fea470-b380-45c0-9f6b-033b7d884388.crl X509v3 Authority Key Identifier: keyid:08:74:8A:31:09:3C:2C:49:44:A1:2E:8A:D6:5C:9E:92:04:01:CF:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388.cer sbgp-ipAddrBlock: critical IPv4: 68.168.23.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c5:98:ba:e0:f3:2b:f7:20:07:12:aa:11:ba:26:ad:90:db:a0: 36:99:84:05:f6:08:06:fa:5b:1b:38:60:54:0f:49:c8:f0:fa: 51:a5:65:ee:db:00:f5:a9:b2:08:81:5b:6e:df:1c:e7:dd:e6: e0:e4:8b:3e:aa:fd:39:35:30:6e:8e:ba:19:17:3b:81:91:11: 9c:e6:5f:69:9f:d0:14:28:33:62:d9:2c:fc:a1:5e:f6:db:cd: e0:85:6f:18:a3:fd:01:68:2a:8d:00:9f:09:fb:26:1c:59:7a: 88:f3:a0:9b:6c:7f:22:ba:7f:32:90:1e:34:f9:d9:b3:52:f6: 6b:a0:ae:0a:d7:b0:d6:a8:1b:b4:a5:29:e9:bb:e7:3a:91:25: 02:d3:ab:df:2b:8a:d0:78:4d:9e:c4:a3:e4:f4:b4:ac:8a:2f: f8:d5:2d:5e:ff:54:ff:ef:0c:c7:92:b1:04:f1:90:01:a8:52: fa:f3:5b:c3:28:6c:88:7c:17:32:58:ed:a9:ae:ea:45:4f:9f: 3c:04:f2:b1:ac:12:82:ab:d9:ec:3c:20:68:01:7f:81:f3:50: 19:4c:6e:41:0d:1a:fa:f5:c4:7f:d5:31:d5:7a:0b:b3:0c:c7: d5:3c:cf:e8:b0:6d:d7:b4:17:32:fa:6c:59:5e:56:40:be:7a: 10:17:4d:a3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEutYlMWK6iAmX6G+9AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODZmZWE0NzAtYjM4MC00NWMwLTlmNmItMDMzYjdkODg0 Mzg4MB4XDTI1MTAyOTAxMDAzMVoXDTI2MDEyNzAyMDAzMVowLzEtMCsGA1UEAxMk N2ZkY2M2ZjAtY2Q5MC00OGMyLWJkYTQtM2Y3MDQzNDUzZmI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmOFcwjyjnCNc3QzZ1Vtqn3BQQifojN5Lfcat oi4DYvYX5wa9kETnOyKoLBuFHgQx+3p8Tju2PVosLYcBfkGTEfg/QMHPE6enLNqZ Qys0Qi9EQLhjUW7OO7PX0mHlxtwAvpfeBg2QHgBilHNAzMtmSkopsmIHgwqQopEd X/gmbRJ29DtzNENzErMqrdwp4JKrUfY4+eG34PI38gzqFqfdK/GIT5s9VlubgX3j OfX2LqRipHkwLV9A7Lf+F0R9hlwBSakkGUqlQ0UK99TJ2mXM1DkQksnKFp4oNm/p AIStnGl14LMdOCyjQldqyKrDOOvTD6g+7F/E2U4jdxEGju6nYwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFANTmsZsPBRi3jR4J7RYr/98mt6dMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS84NmZl YTQ3MC1iMzgwLTQ1YzAtOWY2Yi0wMzNiN2Q4ODQzODgvYzAyNGJiZWUtMjNiNy0z MmEwLWE3MzItYTRjN2MwYTJiNThjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvODZmZWE0NzAtYjM4MC00NWMwLTlm NmItMDMzYjdkODg0Mzg4Lzg2ZmVhNDcwLWIzODAtNDVjMC05ZjZiLTAzM2I3ZDg4 NDM4OC5jcmwwHwYDVR0jBBgwFoAUCHSKMQk8LElEoS6K1lyekgQBzxYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS84NmZlYTQ3MC1iMzgwLTQ1YzAtOWY2Yi0wMzNi N2Q4ODQzODguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARKgXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMWYuuDzK/cgBxKqEbomrZDboDaZhAX2CAb6Wxs4YFQPScjw+lGlZe7b APWpsgiBW27fHOfd5uDkiz6q/Tk1MG6OuhkXO4GREZzmX2mf0BQoM2LZLPyhXvbb zeCFbxij/QFoKo0Anwn7JhxZeojzoJtsfyK6fzKQHjT52bNS9mugrgrXsNaoG7Sl Kem75zqRJQLTq98ritB4TZ7Eo+T0tKyKL/jVLV7/VP/vDMeSsQTxkAGoUvrzW8Mo bIh8FzJY7amu6kVPnzwE8rGsEoKr2ew8IGgBf4HzUBlMbkENGvr1xH/VMdV6C7MM x9U8z+iwbde0FzL6bFleVkC+ehAXTaM= -----END CERTIFICATE-----Generated at Tue Nov 4 23:41:55 2025 by rpki-client