$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/3803122f-8f89-3418-b604-b66b21371855.roa File: 3803122f-8f89-3418-b604-b66b21371855.roa (raw, json) Hash identifier: /1aOkmZypdo458zX8S+s2wCZQzPw46x/rmMAq4bGKks= Subject key identifier: FB:C8:3B:FC:5C:63:7C:E5:C0:86:28:23:D7:F6:DE:39:18:54:C8:FD Certificate issuer: /CN=86fea470-b380-45c0-9f6b-033b7d884388 Certificate serial: 010D0C9F4328584B5B0741D22BF99BBAF19A9240 Authority key identifier: 08:74:8A:31:09:3C:2C:49:44:A1:2E:8A:D6:5C:9E:92:04:01:CF:16 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/3803122f-8f89-3418-b604-b66b21371855.roa Signing time: Mon 29 Sep 2025 13:00:41 +0000 ROA not before: Mon 29 Sep 2025 13:00:41 +0000 ROA not after: Sun 28 Dec 2025 14:00:41 +0000 asID: 14315 IP address blocks: 67.220.64.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/86fea470-b380-45c0-9f6b-033b7d884388.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/86fea470-b380-45c0-9f6b-033b7d884388.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5b:07:41:d2:2b:f9:9b:ba:f1:9a:92:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86fea470-b380-45c0-9f6b-033b7d884388 Validity Not Before: Sep 29 13:00:41 2025 GMT Not After : Dec 28 14:00:41 2025 GMT Subject: CN=9165ae14-c84e-4978-b810-23d5dc9dc23c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:20:2a:bd:f6:b0:c3:38:0c:a6:ff:b3:7e:fc: f0:b3:00:a7:fc:55:ec:ed:ba:37:bb:32:b5:19:dd: 49:60:a4:af:0d:43:92:e5:23:8f:77:af:a7:c3:1d: 6c:9c:87:00:77:96:e5:0e:39:21:71:38:b2:1c:26: 60:04:23:c9:b1:1e:40:ac:0f:ae:a7:39:13:56:38: 53:98:1a:87:a7:62:0a:af:f3:fe:6c:b5:84:c7:f1: ca:e6:ff:7a:19:83:53:02:5e:a8:95:90:4f:5c:fa: be:86:0f:db:6f:44:2d:4a:cb:f9:3a:38:a3:c5:82: 69:97:8f:95:42:f4:f1:d6:db:08:af:79:f9:98:a4: d0:67:2f:8b:0b:2a:7e:3b:b7:05:f7:fc:88:d2:ca: b4:b3:71:c1:08:3c:fd:6d:ca:92:87:14:73:e2:92: bd:31:e4:2c:df:a2:85:fa:25:68:49:bc:43:e9:43: 94:50:88:75:45:a2:b0:9b:6e:15:79:42:13:fe:a4: 0c:31:74:d6:ed:95:53:5f:45:e9:1b:53:56:68:95: c9:c2:fc:d7:e7:1e:40:7b:97:0b:c7:0d:37:89:23: dc:c1:9d:21:09:4f:12:98:4a:71:ce:27:80:aa:f3: 42:e6:5b:4c:02:40:a3:e1:bf:e4:15:f9:e2:0e:a8: e2:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:C8:3B:FC:5C:63:7C:E5:C0:86:28:23:D7:F6:DE:39:18:54:C8:FD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/3803122f-8f89-3418-b604-b66b21371855.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/86fea470-b380-45c0-9f6b-033b7d884388.crl X509v3 Authority Key Identifier: keyid:08:74:8A:31:09:3C:2C:49:44:A1:2E:8A:D6:5C:9E:92:04:01:CF:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388.cer sbgp-ipAddrBlock: critical IPv4: 67.220.64.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:26:c6:f6:16:df:78:f1:57:8f:ef:33:6f:39:f8:91:a5:bf: e3:59:e6:60:e3:b8:36:c1:68:45:93:18:a4:37:85:09:be:7d: 8d:a7:db:d7:8f:6a:ad:99:be:de:9d:4e:0c:0f:29:93:91:bd: 19:46:c3:69:9c:18:df:28:9f:18:d6:7d:17:1f:d8:72:8d:0f: f2:93:b7:73:a9:8b:01:9d:73:64:25:d0:9e:8f:b3:c6:98:57: 0c:a6:a3:3c:94:6f:09:f2:3d:be:14:a8:75:4a:ba:0b:e2:66: 0a:5a:e1:c2:dd:7b:62:91:0a:8e:d1:c4:de:fd:2f:29:cd:76: c5:a1:6d:f3:28:c6:15:67:04:ca:29:bb:21:88:e6:77:46:69: 00:65:f8:47:23:70:4b:e6:f8:9e:2f:76:75:71:0e:54:bd:51: b2:d3:33:79:9a:0c:60:9a:1e:7b:e3:11:03:65:47:42:18:79: 8d:0d:26:ae:aa:0b:84:64:0b:e4:1b:f8:df:0c:4a:9a:8a:e3: 95:77:6b:54:ad:e1:c6:19:b1:46:ea:dc:41:85:e1:46:ff:3f: 79:94:80:4d:29:af:d7:1a:f5:da:95:9c:db:e1:ab:d0:69:1b: 0b:8b:43:3c:ea:08:21:af:b3:f1:33:0b:38:e8:40:13:80:bf: e9:50:0e:cd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtbB0HSK/mbuvGakkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODZmZWE0NzAtYjM4MC00NWMwLTlmNmItMDMzYjdkODg0 Mzg4MB4XDTI1MDkyOTEzMDA0MVoXDTI1MTIyODE0MDA0MVowLzEtMCsGA1UEAxMk OTE2NWFlMTQtYzg0ZS00OTc4LWI4MTAtMjNkNWRjOWRjMjNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoCAqvfawwzgMpv+zfvzwswCn/FXs7bo3uzK1 Gd1JYKSvDUOS5SOPd6+nwx1snIcAd5blDjkhcTiyHCZgBCPJsR5ArA+upzkTVjhT mBqHp2IKr/P+bLWEx/HK5v96GYNTAl6olZBPXPq+hg/bb0QtSsv5OjijxYJpl4+V QvTx1tsIr3n5mKTQZy+LCyp+O7cF9/yI0sq0s3HBCDz9bcqShxRz4pK9MeQs36KF +iVoSbxD6UOUUIh1RaKwm24VeUIT/qQMMXTW7ZVTX0XpG1NWaJXJwvzX5x5Ae5cL xw03iSPcwZ0hCU8SmEpxzieAqvNC5ltMAkCj4b/kFfniDqjixQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPvIO/xcY3zlwIYoI9f23jkYVMj9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS84NmZl YTQ3MC1iMzgwLTQ1YzAtOWY2Yi0wMzNiN2Q4ODQzODgvMzgwMzEyMmYtOGY4OS0z NDE4LWI2MDQtYjY2YjIxMzcxODU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvODZmZWE0NzAtYjM4MC00NWMwLTlm NmItMDMzYjdkODg0Mzg4Lzg2ZmVhNDcwLWIzODAtNDVjMC05ZjZiLTAzM2I3ZDg4 NDM4OC5jcmwwHwYDVR0jBBgwFoAUCHSKMQk8LElEoS6K1lyekgQBzxYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS84NmZlYTQ3MC1iMzgwLTQ1YzAtOWY2Yi0wMzNi N2Q4ODQzODguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQ9xAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJYmxvYW33jxV4/vM285+JGlv+NZ5mDjuDbBaEWTGKQ3hQm+fY2n29eP aq2Zvt6dTgwPKZORvRlGw2mcGN8onxjWfRcf2HKND/KTt3OpiwGdc2Ql0J6Ps8aY VwymozyUbwnyPb4UqHVKugviZgpa4cLde2KRCo7RxN79LynNdsWhbfMoxhVnBMop uyGI5ndGaQBl+EcjcEvm+J4vdnVxDlS9UbLTM3maDGCaHnvjEQNlR0IYeY0NJq6q C4RkC+Qb+N8MSpqK45V3a1St4cYZsUbq3EGF4Ub/P3mUgE0pr9ca9dqVnNvhq9Bp GwuLQzzqCCGvs/EzCzjoQBOAv+lQDs0= -----END CERTIFICATE-----Generated at Mon Oct 20 21:36:25 2025 by rpki-client