$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/cfceb236-8fe4-3606-ba08-df4723910ec2.roa File: cfceb236-8fe4-3606-ba08-df4723910ec2.roa (raw, json) Hash identifier: UwTPQP6KgwZVtdoTitCS7OZ/B7+fTYiHObNhH9Gsqx0= Subject key identifier: 09:CF:DF:CC:D9:75:91:23:96:5B:4C:45:60:17:68:F9:83:B8:B8:7F Certificate issuer: /CN=86fea470-b380-45c0-9f6b-033b7d884388 Certificate serial: 010D0C9F43285849DC8FC6D52C00CB103080D4C0 Authority key identifier: 08:74:8A:31:09:3C:2C:49:44:A1:2E:8A:D6:5C:9E:92:04:01:CF:16 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/cfceb236-8fe4-3606-ba08-df4723910ec2.roa Signing time: Thu 15 May 2025 13:01:00 +0000 ROA not before: Thu 15 May 2025 13:01:00 +0000 ROA not after: Wed 13 Aug 2025 13:01:00 +0000 asID: 23470 IP address blocks: 68.168.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/86fea470-b380-45c0-9f6b-033b7d884388.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/86fea470-b380-45c0-9f6b-033b7d884388.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 19 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:dc:8f:c6:d5:2c:00:cb:10:30:80:d4:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86fea470-b380-45c0-9f6b-033b7d884388 Validity Not Before: May 15 13:01:00 2025 GMT Not After : Aug 13 13:01:00 2025 GMT Subject: CN=0537fbde-024f-4971-88c0-c7b5b33422f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:e6:ef:7c:22:20:e7:57:9e:aa:a1:36:8c:9a: 0e:f9:b0:44:2d:1a:99:3f:1e:48:af:82:b4:64:2f: db:e8:28:ab:0c:03:e1:2a:ed:3e:d9:ac:f4:21:6c: 81:22:9a:b8:7d:b5:7e:2a:9a:50:bc:81:b8:de:4d: d4:3a:35:6e:a4:30:2d:0e:97:2a:44:5b:2e:f6:bf: e8:4a:06:e9:18:a5:87:d5:53:92:36:31:ed:cb:05: 8e:6a:4d:0d:04:a9:7b:aa:0d:d7:3c:e5:c0:e3:1e: 17:03:d9:9b:ff:2a:89:ee:38:5f:03:54:98:a3:bf: ce:a3:58:f5:ec:5a:b4:66:62:c2:fc:e7:14:f6:76: 85:60:7b:af:cd:d9:49:c4:d5:b7:4b:f0:02:7d:49: a0:27:be:8d:d8:6d:f4:ab:16:e6:05:19:d3:8f:0c: d5:21:8d:fe:eb:ee:9c:13:f3:07:4f:6e:1d:44:34: f7:52:a1:e1:2b:31:ec:1c:8c:36:3c:4b:c9:8c:a1: 10:ae:61:4e:93:89:e0:1e:fb:79:43:99:36:e9:80: 60:ee:10:10:ed:59:7b:9f:c6:a7:85:e4:d2:d2:1a: 16:b4:72:11:56:0c:2b:f0:99:f4:b0:93:e5:20:a3: 47:0d:75:15:f2:1e:b4:34:e3:4d:9b:c4:1a:b0:e9: 74:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:CF:DF:CC:D9:75:91:23:96:5B:4C:45:60:17:68:F9:83:B8:B8:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/cfceb236-8fe4-3606-ba08-df4723910ec2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/86fea470-b380-45c0-9f6b-033b7d884388.crl X509v3 Authority Key Identifier: keyid:08:74:8A:31:09:3C:2C:49:44:A1:2E:8A:D6:5C:9E:92:04:01:CF:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388.cer sbgp-ipAddrBlock: critical IPv4: 68.168.20.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:2a:32:96:78:ea:82:b3:0a:47:24:31:1c:a0:4b:c8:0e:1b: e5:b2:48:23:d0:b8:c6:0a:5b:da:38:dc:2e:60:7a:9f:28:26: 47:16:06:11:69:ee:66:a0:b4:9d:b0:11:e9:47:1b:1d:26:0b: f7:28:1c:46:9b:9e:e5:09:9c:8f:41:82:93:81:a7:e2:a8:f1: 01:12:bc:95:fe:b6:05:50:45:ba:c8:4e:a6:02:a6:56:e4:ca: 5d:d4:97:e2:2d:e9:b0:29:7a:50:b7:57:99:56:fd:cb:46:74: 72:39:b4:37:54:73:13:4b:96:8e:30:31:89:da:1d:63:1e:7d: 09:27:dd:82:26:a3:88:58:bf:b9:40:4c:57:41:19:b2:32:03: bd:ed:af:be:b8:70:b8:85:d5:ee:e5:cb:43:5c:21:26:23:64: ed:24:1b:f3:86:29:ee:01:15:ce:c6:7f:44:8b:6c:a1:52:78: e7:3d:59:ab:f8:66:0e:8d:2e:3b:d5:80:e4:05:6c:9f:c7:c2: 46:9e:e2:dc:b3:5c:df:0e:97:a2:19:ed:13:f4:96:46:64:5d: 8e:00:f9:e9:54:d1:66:bc:31:4d:8b:af:af:61:5b:c0:34:2d: 08:b5:d8:33:f0:eb:50:c2:f4:e0:80:a7:d8:55:54:e9:17:36: 73:c7:19:27 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEncj8bVLADLEDCA1MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODZmZWE0NzAtYjM4MC00NWMwLTlmNmItMDMzYjdkODg0 Mzg4MB4XDTI1MDUxNTEzMDEwMFoXDTI1MDgxMzEzMDEwMFowLzEtMCsGA1UEAxMk MDUzN2ZiZGUtMDI0Zi00OTcxLTg4YzAtYzdiNWIzMzQyMmY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxObvfCIg51eeqqE2jJoO+bBELRqZPx5Ir4K0 ZC/b6CirDAPhKu0+2az0IWyBIpq4fbV+KppQvIG43k3UOjVupDAtDpcqRFsu9r/o SgbpGKWH1VOSNjHtywWOak0NBKl7qg3XPOXA4x4XA9mb/yqJ7jhfA1SYo7/Oo1j1 7Fq0ZmLC/OcU9naFYHuvzdlJxNW3S/ACfUmgJ76N2G30qxbmBRnTjwzVIY3+6+6c E/MHT24dRDT3UqHhKzHsHIw2PEvJjKEQrmFOk4ngHvt5Q5k26YBg7hAQ7Vl7n8an heTS0hoWtHIRVgwr8Jn0sJPlIKNHDXUV8h60NONNm8QasOl0OwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAnP38zZdZEjlltMRWAXaPmDuLh/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS84NmZl YTQ3MC1iMzgwLTQ1YzAtOWY2Yi0wMzNiN2Q4ODQzODgvY2ZjZWIyMzYtOGZlNC0z NjA2LWJhMDgtZGY0NzIzOTEwZWMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvODZmZWE0NzAtYjM4MC00NWMwLTlm NmItMDMzYjdkODg0Mzg4Lzg2ZmVhNDcwLWIzODAtNDVjMC05ZjZiLTAzM2I3ZDg4 NDM4OC5jcmwwHwYDVR0jBBgwFoAUCHSKMQk8LElEoS6K1lyekgQBzxYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS84NmZlYTQ3MC1iMzgwLTQ1YzAtOWY2Yi0wMzNi N2Q4ODQzODguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARKgUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFEqMpZ46oKzCkckMRygS8gOG+WySCPQuMYKW9o43C5gep8oJkcWBhFp 7magtJ2wEelHGx0mC/coHEabnuUJnI9BgpOBp+Ko8QESvJX+tgVQRbrITqYCplbk yl3Ul+It6bApelC3V5lW/ctGdHI5tDdUcxNLlo4wMYnaHWMefQkn3YImo4hYv7lA TFdBGbIyA73tr764cLiF1e7ly0NcISYjZO0kG/OGKe4BFc7Gf0SLbKFSeOc9Wav4 Zg6NLjvVgOQFbJ/Hwkae4tyzXN8Ol6IZ7RP0lkZkXY4A+elU0Wa8MU2Lr69hW8A0 LQi12DPw61DC9OCAp9hVVOkXNnPHGSc= -----END CERTIFICATE-----Generated at Tue Jun 17 15:01:45 2025 by rpki-client