$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/f85dcb0a-3f9e-3aaa-9818-ef0cff74b75d.roa File: f85dcb0a-3f9e-3aaa-9818-ef0cff74b75d.roa (raw, json) Hash identifier: pBh+g9x2eDdy4X67L9rlYr8us7AzCWR770TlBkkOw7c= Subject key identifier: 6B:DE:D2:2D:D8:B5:0C:E2:A9:0E:70:80:E4:33:12:6F:99:43:79:C7 Certificate issuer: /CN=86fea470-b380-45c0-9f6b-033b7d884388 Certificate serial: 010D0C9F4328584A23C014CBE38F58FDF3877EC0 Authority key identifier: 08:74:8A:31:09:3C:2C:49:44:A1:2E:8A:D6:5C:9E:92:04:01:CF:16 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/f85dcb0a-3f9e-3aaa-9818-ef0cff74b75d.roa Signing time: Tue 10 Jun 2025 01:00:50 +0000 ROA not before: Tue 10 Jun 2025 01:00:50 +0000 ROA not after: Mon 08 Sep 2025 01:00:50 +0000 asID: 62563 IP address blocks: 67.220.94.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/86fea470-b380-45c0-9f6b-033b7d884388.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/86fea470-b380-45c0-9f6b-033b7d884388.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 19 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:23:c0:14:cb:e3:8f:58:fd:f3:87:7e:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86fea470-b380-45c0-9f6b-033b7d884388 Validity Not Before: Jun 10 01:00:50 2025 GMT Not After : Sep 8 01:00:50 2025 GMT Subject: CN=ac2dbb84-518d-4ebc-b703-97ff43827d0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:5d:22:d0:e8:57:3f:cb:d9:fd:40:2a:ba:a7: 2c:b4:87:0c:e3:47:40:6e:e0:66:01:e7:be:55:2b: 1e:33:b8:9d:26:74:80:58:6f:c3:28:82:43:61:5f: 2d:9f:9c:ae:9c:9f:39:e5:bb:22:95:b8:83:ae:b1: 08:3a:43:b7:84:5b:f0:53:05:4f:ec:74:76:8a:c2: 9e:99:c7:6f:ba:32:31:fe:48:bd:c8:c6:61:f0:d9: a2:3a:39:fb:7f:f6:f7:05:4d:fd:d4:49:14:fe:89: 96:0a:72:5e:54:c8:46:e9:5c:aa:bf:91:b3:28:31: fc:5e:9a:d4:96:3a:5f:f2:90:59:52:2a:48:6e:95: 1d:75:7e:24:30:32:1e:1f:20:ce:c1:57:02:e8:07: 62:78:71:94:48:e7:2d:6c:30:dd:59:1f:0f:cc:cf: 15:5f:93:b5:58:83:21:45:dc:66:84:ca:90:da:1c: b7:00:59:4c:99:0f:3d:77:10:96:89:53:31:f8:24: 7a:15:27:1e:2f:f9:a7:bb:4a:b3:d4:51:a9:aa:ac: 0f:91:bb:7a:2c:3f:56:99:d0:2f:63:8e:8f:06:ca: c9:79:5e:3a:12:64:ea:25:23:10:88:f8:15:73:86: 04:d6:b0:9b:21:ac:17:f0:cd:8c:13:ad:bc:c1:15: 61:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:DE:D2:2D:D8:B5:0C:E2:A9:0E:70:80:E4:33:12:6F:99:43:79:C7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/f85dcb0a-3f9e-3aaa-9818-ef0cff74b75d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/86fea470-b380-45c0-9f6b-033b7d884388.crl X509v3 Authority Key Identifier: keyid:08:74:8A:31:09:3C:2C:49:44:A1:2E:8A:D6:5C:9E:92:04:01:CF:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388.cer sbgp-ipAddrBlock: critical IPv4: 67.220.94.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:0c:60:11:67:e3:bc:c0:53:16:3c:59:2b:b1:4a:76:ec:10: 76:ab:56:d2:02:f9:fb:4e:96:9f:c3:ec:15:45:31:1e:1f:a3: a2:96:d3:d5:c4:b0:a3:f3:4f:e7:5d:65:d5:75:57:bb:41:e8: 06:bc:47:7b:75:e1:b8:8f:74:5f:25:57:0c:be:da:23:41:84: 78:02:c3:1c:66:13:d8:08:5a:2e:2f:39:59:33:bc:18:c8:dc: 5c:41:d7:8c:f0:aa:3b:47:22:63:5d:f2:0e:06:48:fa:61:83: 4f:03:25:9f:58:ed:54:8b:43:5a:c9:5c:b2:50:e8:83:f3:45: 0d:16:bf:a7:91:2e:cc:e2:49:e6:9a:76:49:1e:a9:0d:55:6f: 32:f3:1b:4d:47:a3:ef:be:29:8b:7a:8a:ae:7b:54:8e:19:cb: bb:f3:7e:60:1c:b9:92:17:4d:72:b2:20:d7:c1:46:13:11:2a: d4:49:95:fe:93:24:05:82:79:ae:9f:78:26:c9:11:79:81:34: 44:09:75:19:5f:14:86:6d:d1:38:39:1a:52:78:0a:e0:5a:2c: 4b:1d:70:e8:fd:d7:10:b2:61:6a:6a:b1:61:80:bd:66:87:cd: 68:9c:03:c7:68:0c:d8:61:60:83:ff:d2:aa:59:17:0b:f9:f8: 3f:65:a8:af -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEojwBTL449Y/fOHfsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODZmZWE0NzAtYjM4MC00NWMwLTlmNmItMDMzYjdkODg0 Mzg4MB4XDTI1MDYxMDAxMDA1MFoXDTI1MDkwODAxMDA1MFowLzEtMCsGA1UEAxMk YWMyZGJiODQtNTE4ZC00ZWJjLWI3MDMtOTdmZjQzODI3ZDBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAql0i0OhXP8vZ/UAquqcstIcM40dAbuBmAee+ VSseM7idJnSAWG/DKIJDYV8tn5yunJ855bsilbiDrrEIOkO3hFvwUwVP7HR2isKe mcdvujIx/ki9yMZh8NmiOjn7f/b3BU391EkU/omWCnJeVMhG6Vyqv5GzKDH8XprU ljpf8pBZUipIbpUddX4kMDIeHyDOwVcC6AdieHGUSOctbDDdWR8PzM8VX5O1WIMh RdxmhMqQ2hy3AFlMmQ89dxCWiVMx+CR6FSceL/mnu0qz1FGpqqwPkbt6LD9WmdAv Y46PBsrJeV46EmTqJSMQiPgVc4YE1rCbIawX8M2ME628wRVhJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGve0i3YtQziqQ5wgOQzEm+ZQ3nHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS84NmZl YTQ3MC1iMzgwLTQ1YzAtOWY2Yi0wMzNiN2Q4ODQzODgvZjg1ZGNiMGEtM2Y5ZS0z YWFhLTk4MTgtZWYwY2ZmNzRiNzVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvODZmZWE0NzAtYjM4MC00NWMwLTlm NmItMDMzYjdkODg0Mzg4Lzg2ZmVhNDcwLWIzODAtNDVjMC05ZjZiLTAzM2I3ZDg4 NDM4OC5jcmwwHwYDVR0jBBgwFoAUCHSKMQk8LElEoS6K1lyekgQBzxYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS84NmZlYTQ3MC1iMzgwLTQ1YzAtOWY2Yi0wMzNi N2Q4ODQzODguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQ9xeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABoMYBFn47zAUxY8WSuxSnbsEHarVtIC+ftOlp/D7BVFMR4fo6KW09XE sKPzT+ddZdV1V7tB6Aa8R3t14biPdF8lVwy+2iNBhHgCwxxmE9gIWi4vOVkzvBjI 3FxB14zwqjtHImNd8g4GSPphg08DJZ9Y7VSLQ1rJXLJQ6IPzRQ0Wv6eRLsziSeaa dkkeqQ1VbzLzG01Ho+++KYt6iq57VI4Zy7vzfmAcuZIXTXKyINfBRhMRKtRJlf6T JAWCea6feCbJEXmBNEQJdRlfFIZt0Tg5GlJ4CuBaLEsdcOj91xCyYWpqsWGAvWaH zWicA8doDNhhYIP/0qpZFwv5+D9lqK8= -----END CERTIFICATE-----Generated at Wed Jun 18 16:00:02 2025 by rpki-client