$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/d7aea177-906f-3c5a-ae7e-8bd551fb07d2.roa File: d7aea177-906f-3c5a-ae7e-8bd551fb07d2.roa (raw, json) Hash identifier: xNfwj1LQ5IBq9xWXI7BrCJoI95o8MQR4+EFJhdD3F9Y= Subject key identifier: 93:E6:D9:C0:1C:53:96:45:FC:10:93:76:55:FC:8E:F0:7B:13:5C:F9 Certificate issuer: /CN=86fea470-b380-45c0-9f6b-033b7d884388 Certificate serial: 010D0C9F4328584A9900BCC2BD72D3E3A2A5DE80 Authority key identifier: 08:74:8A:31:09:3C:2C:49:44:A1:2E:8A:D6:5C:9E:92:04:01:CF:16 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/d7aea177-906f-3c5a-ae7e-8bd551fb07d2.roa Signing time: Tue 22 Jul 2025 01:00:50 +0000 ROA not before: Tue 22 Jul 2025 01:00:50 +0000 ROA not after: Mon 20 Oct 2025 01:00:50 +0000 asID: 19318 IP address blocks: 69.42.222.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/86fea470-b380-45c0-9f6b-033b7d884388.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/86fea470-b380-45c0-9f6b-033b7d884388.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 10 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:99:00:bc:c2:bd:72:d3:e3:a2:a5:de:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86fea470-b380-45c0-9f6b-033b7d884388 Validity Not Before: Jul 22 01:00:50 2025 GMT Not After : Oct 20 01:00:50 2025 GMT Subject: CN=4b5586f1-65f0-4eb0-944f-d023fae45a68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:5a:03:28:9c:5e:49:60:c4:5d:6f:af:91:f4: d2:58:b1:f0:98:9d:26:cd:9d:84:01:49:27:6e:5f: 85:f4:c1:73:ba:48:a7:47:35:3e:1c:69:cd:28:04: 0d:b7:46:a8:73:1d:e0:ec:d1:ff:53:a5:ad:da:b8: 8c:b6:f9:b3:3c:fc:3b:e3:ce:5c:49:fa:78:02:38: 74:ed:7e:75:1d:d0:8d:f0:f9:1c:ec:8a:74:46:94: 2d:20:9f:49:43:fd:f7:92:82:16:77:3f:a7:c3:de: ce:ae:e6:30:ff:c4:c7:18:e8:d4:c4:a2:7b:6f:a1: d1:d2:46:4d:62:42:6a:21:b5:ce:8a:10:27:c1:87: 44:0e:1b:ec:0e:55:c4:d6:b0:54:c9:0d:56:2d:fd: ac:7a:30:84:44:52:fb:59:33:2e:2d:fe:29:2e:08: 78:f1:0f:32:aa:1d:49:59:7b:55:c8:94:b3:96:69: 0b:9f:24:94:7f:79:3f:b2:59:19:ef:12:90:8f:ef: 8d:86:e7:f5:96:21:33:c7:b8:4b:a8:df:95:3a:b7: 79:5d:1b:de:93:f4:42:02:a4:8b:8b:c3:de:9c:10: e7:03:0b:3d:10:d3:ba:bd:f0:33:a5:bf:85:a1:0b: e9:bb:5c:86:0e:2b:61:93:73:1c:f7:1c:1b:e9:cd: 9a:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:E6:D9:C0:1C:53:96:45:FC:10:93:76:55:FC:8E:F0:7B:13:5C:F9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/d7aea177-906f-3c5a-ae7e-8bd551fb07d2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/86fea470-b380-45c0-9f6b-033b7d884388.crl X509v3 Authority Key Identifier: keyid:08:74:8A:31:09:3C:2C:49:44:A1:2E:8A:D6:5C:9E:92:04:01:CF:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388.cer sbgp-ipAddrBlock: critical IPv4: 69.42.222.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d2:ee:af:fe:31:c9:b3:b1:68:18:93:6c:7a:04:11:c9:c2:99: 9d:56:65:2b:a9:e8:1d:01:40:52:8b:bd:e4:5d:7a:fa:c7:ab: 6c:82:70:ab:65:0f:81:16:20:5d:03:5b:85:b6:8e:9d:53:44: 28:66:c1:72:d8:27:08:35:0e:6a:b4:fb:2e:b1:37:51:b3:63: 49:29:eb:46:bf:30:f2:60:4d:f6:2a:b7:7a:3b:26:c4:42:07: 3e:2d:0b:36:7b:12:94:a9:da:e1:ac:2c:be:bf:aa:6c:69:27: 35:78:0b:0e:03:4c:bf:ce:5d:a9:1e:90:bb:5a:db:ee:ce:d1: e8:32:2d:83:7b:f0:59:04:9d:c9:f5:70:ce:e0:48:a5:df:4f: 82:06:d2:de:6c:1a:dc:4f:20:f3:3e:aa:a8:23:f3:a3:03:a2: 68:c0:73:1f:93:4a:de:ce:91:35:1f:65:e1:0b:5b:a0:3e:8d: 26:63:e0:37:f8:4c:18:04:74:fd:9b:51:12:21:f3:2a:de:2f: 1c:d3:34:ef:53:41:41:8f:30:29:39:e0:84:5b:86:18:4e:ef: 00:56:c3:0e:ae:89:da:34:9d:0a:d9:d8:42:19:1d:83:a5:2f: cd:96:15:88:ff:e7:db:7f:34:38:e1:06:19:a8:9b:e9:35:aa: f5:1a:5b:93 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqZALzCvXLT46Kl3oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODZmZWE0NzAtYjM4MC00NWMwLTlmNmItMDMzYjdkODg0 Mzg4MB4XDTI1MDcyMjAxMDA1MFoXDTI1MTAyMDAxMDA1MFowLzEtMCsGA1UEAxMk NGI1NTg2ZjEtNjVmMC00ZWIwLTk0NGYtZDAyM2ZhZTQ1YTY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArFoDKJxeSWDEXW+vkfTSWLHwmJ0mzZ2EAUkn bl+F9MFzukinRzU+HGnNKAQNt0aocx3g7NH/U6Wt2riMtvmzPPw7485cSfp4Ajh0 7X51HdCN8Pkc7Ip0RpQtIJ9JQ/33koIWdz+nw97OruYw/8THGOjUxKJ7b6HR0kZN YkJqIbXOihAnwYdEDhvsDlXE1rBUyQ1WLf2sejCERFL7WTMuLf4pLgh48Q8yqh1J WXtVyJSzlmkLnySUf3k/slkZ7xKQj++Nhuf1liEzx7hLqN+VOrd5XRvek/RCAqSL i8PenBDnAws9ENO6vfAzpb+FoQvpu1yGDithk3Mc9xwb6c2aOwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJPm2cAcU5ZF/BCTdlX8jvB7E1z5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS84NmZl YTQ3MC1iMzgwLTQ1YzAtOWY2Yi0wMzNiN2Q4ODQzODgvZDdhZWExNzctOTA2Zi0z YzVhLWFlN2UtOGJkNTUxZmIwN2QyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvODZmZWE0NzAtYjM4MC00NWMwLTlm NmItMDMzYjdkODg0Mzg4Lzg2ZmVhNDcwLWIzODAtNDVjMC05ZjZiLTAzM2I3ZDg4 NDM4OC5jcmwwHwYDVR0jBBgwFoAUCHSKMQk8LElEoS6K1lyekgQBzxYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS84NmZlYTQ3MC1iMzgwLTQ1YzAtOWY2Yi0wMzNi N2Q4ODQzODguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARSreMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANLur/4xybOxaBiTbHoEEcnCmZ1WZSup6B0BQFKLveRdevrHq2yCcKtl D4EWIF0DW4W2jp1TRChmwXLYJwg1Dmq0+y6xN1GzY0kp60a/MPJgTfYqt3o7JsRC Bz4tCzZ7EpSp2uGsLL6/qmxpJzV4Cw4DTL/OXakekLta2+7O0egyLYN78FkEncn1 cM7gSKXfT4IG0t5sGtxPIPM+qqgj86MDomjAcx+TSt7OkTUfZeELW6A+jSZj4Df4 TBgEdP2bURIh8yreLxzTNO9TQUGPMCk54IRbhhhO7wBWww6uido0nQrZ2EIZHYOl L82WFYj/59t/NDjhBhmom+k1qvUaW5M= -----END CERTIFICATE-----Generated at Sat Aug 9 02:47:32 2025 by rpki-client