$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/cfceb236-8fe4-3606-ba08-df4723910ec2.roa File: cfceb236-8fe4-3606-ba08-df4723910ec2.roa (raw, json) Hash identifier: kCOxL/Kgxp8pbwfXWrpxKuIfx9CvL/et4+k1fzZ0K9g= Subject key identifier: 66:0B:42:B2:0A:71:98:95:67:A5:F2:A8:1C:C9:E4:0B:1D:FB:EA:35 Certificate issuer: /CN=86fea470-b380-45c0-9f6b-033b7d884388 Certificate serial: 010D0C9F4328584ABD4B9C4B3EE75D176DF3A700 Authority key identifier: 08:74:8A:31:09:3C:2C:49:44:A1:2E:8A:D6:5C:9E:92:04:01:CF:16 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/cfceb236-8fe4-3606-ba08-df4723910ec2.roa Signing time: Mon 04 Aug 2025 01:00:32 +0000 ROA not before: Mon 04 Aug 2025 01:00:32 +0000 ROA not after: Sun 02 Nov 2025 01:00:32 +0000 asID: 23470 IP address blocks: 68.168.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/86fea470-b380-45c0-9f6b-033b7d884388.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/86fea470-b380-45c0-9f6b-033b7d884388.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:bd:4b:9c:4b:3e:e7:5d:17:6d:f3:a7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86fea470-b380-45c0-9f6b-033b7d884388 Validity Not Before: Aug 4 01:00:32 2025 GMT Not After : Nov 2 01:00:32 2025 GMT Subject: CN=33392852-0038-405a-ad37-5ef59d833933 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:fe:7b:18:8f:e9:e5:17:95:57:46:af:1a:8e: 0d:d3:2e:e6:88:34:fc:39:ff:05:66:80:2a:4d:c7: 51:3e:be:b9:d6:15:7e:a2:74:fb:50:4f:b3:10:9e: e7:38:e8:52:f0:9c:e6:00:f7:87:f2:0c:23:0e:be: 05:b1:f7:ff:21:7e:15:07:43:49:05:4c:62:a5:32: f5:07:b9:30:9d:7e:d1:d4:5a:c7:60:bf:17:9a:ac: ea:5a:a6:0e:74:c9:ee:4b:6b:f7:de:bf:42:ec:11: 59:4d:77:83:8a:ec:f2:c1:a2:6f:cd:77:ec:9e:69: 59:82:01:1d:a8:54:f8:39:7a:39:a7:a7:27:10:cd: 69:a9:b5:09:bf:5f:b3:ef:e6:de:99:6e:50:85:5d: 3f:e1:2e:64:86:af:87:43:fe:46:3a:7d:a6:27:42: f4:9a:0b:1a:2a:b8:ba:ef:b3:3f:a9:2e:8a:04:2e: d4:8e:c3:a4:56:fb:ec:3d:fb:d5:12:54:d0:3c:f4: d1:a5:52:f2:e5:b9:fb:70:a7:96:4c:77:0a:23:77: bc:b2:35:18:66:63:7e:d0:e5:89:40:06:64:06:2e: 68:d4:7f:4f:08:08:1a:a0:25:c6:db:d8:ab:9d:74: 65:13:57:c3:b6:90:8e:dd:b2:6a:31:f3:f1:29:84: 06:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:0B:42:B2:0A:71:98:95:67:A5:F2:A8:1C:C9:E4:0B:1D:FB:EA:35 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/cfceb236-8fe4-3606-ba08-df4723910ec2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/86fea470-b380-45c0-9f6b-033b7d884388.crl X509v3 Authority Key Identifier: keyid:08:74:8A:31:09:3C:2C:49:44:A1:2E:8A:D6:5C:9E:92:04:01:CF:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388.cer sbgp-ipAddrBlock: critical IPv4: 68.168.20.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:0d:29:f5:4b:dc:dd:1b:17:42:c4:9d:08:58:fe:6e:cc:9c: 24:0a:c8:c3:c9:55:4f:cb:f7:fc:16:4d:dd:5c:61:41:9a:d6: 18:3c:46:9e:c8:5c:9d:21:3c:46:2e:1f:f6:c3:d5:1f:04:bc: d7:ea:da:72:0d:ac:2e:f9:46:3c:bf:a4:56:f6:68:da:73:82: 28:89:53:82:56:b6:ea:75:25:18:1f:64:a4:8c:1f:70:6d:5e: 53:08:a6:04:32:10:99:be:b2:20:30:17:53:c6:49:35:f3:32: a1:22:9a:13:05:6e:73:fb:c4:43:91:bd:f1:7d:15:a6:52:8d: 55:82:0d:7f:19:e4:26:38:b3:89:a5:67:9d:dc:90:58:45:32: 15:4a:49:aa:8f:b7:b7:ce:b5:ba:88:db:f6:ac:38:98:29:ca: 90:aa:bb:23:7b:3a:98:07:3b:10:72:4c:32:cc:c9:17:4e:5a: e9:c7:30:a4:99:39:a4:c8:00:c7:db:cb:7f:c5:fa:40:f8:ab: 6f:e6:e1:49:88:db:3f:db:c5:28:36:dc:1a:58:fe:23:60:46: 28:b4:66:d7:fa:d5:5d:d7:43:b6:13:ff:dd:b5:df:44:ce:3c: 84:c0:0a:90:85:ef:92:c3:e4:ed:37:e2:fe:ac:8f:02:36:83: ba:40:21:fa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq9S5xLPuddF23zpwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODZmZWE0NzAtYjM4MC00NWMwLTlmNmItMDMzYjdkODg0 Mzg4MB4XDTI1MDgwNDAxMDAzMloXDTI1MTEwMjAxMDAzMlowLzEtMCsGA1UEAxMk MzMzOTI4NTItMDAzOC00MDVhLWFkMzctNWVmNTlkODMzOTMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhv57GI/p5ReVV0avGo4N0y7miDT8Of8FZoAq TcdRPr651hV+onT7UE+zEJ7nOOhS8JzmAPeH8gwjDr4Fsff/IX4VB0NJBUxipTL1 B7kwnX7R1FrHYL8XmqzqWqYOdMnuS2v33r9C7BFZTXeDiuzywaJvzXfsnmlZggEd qFT4OXo5p6cnEM1pqbUJv1+z7+bemW5QhV0/4S5khq+HQ/5GOn2mJ0L0mgsaKri6 77M/qS6KBC7UjsOkVvvsPfvVElTQPPTRpVLy5bn7cKeWTHcKI3e8sjUYZmN+0OWJ QAZkBi5o1H9PCAgaoCXG29irnXRlE1fDtpCO3bJqMfPxKYQGlQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGYLQrIKcZiVZ6XyqBzJ5Asd++o1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS84NmZl YTQ3MC1iMzgwLTQ1YzAtOWY2Yi0wMzNiN2Q4ODQzODgvY2ZjZWIyMzYtOGZlNC0z NjA2LWJhMDgtZGY0NzIzOTEwZWMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvODZmZWE0NzAtYjM4MC00NWMwLTlm NmItMDMzYjdkODg0Mzg4Lzg2ZmVhNDcwLWIzODAtNDVjMC05ZjZiLTAzM2I3ZDg4 NDM4OC5jcmwwHwYDVR0jBBgwFoAUCHSKMQk8LElEoS6K1lyekgQBzxYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS84NmZlYTQ3MC1iMzgwLTQ1YzAtOWY2Yi0wMzNi N2Q4ODQzODguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARKgUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEANKfVL3N0bF0LEnQhY/m7MnCQKyMPJVU/L9/wWTd1cYUGa1hg8Rp7I XJ0hPEYuH/bD1R8EvNfq2nINrC75Rjy/pFb2aNpzgiiJU4JWtup1JRgfZKSMH3Bt XlMIpgQyEJm+siAwF1PGSTXzMqEimhMFbnP7xEORvfF9FaZSjVWCDX8Z5CY4s4ml Z53ckFhFMhVKSaqPt7fOtbqI2/asOJgpypCquyN7OpgHOxByTDLMyRdOWunHMKSZ OaTIAMfby3/F+kD4q2/m4UmI2z/bxSg23BpY/iNgRii0Ztf61V3XQ7YT/92130TO PITACpCF75LD5O034v6sjwI2g7pAIfo= -----END CERTIFICATE-----Generated at Thu Aug 7 05:14:56 2025 by rpki-client