$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/69552b47-13a2-397a-b4b1-1e5f9973ffb0.roa File: 69552b47-13a2-397a-b4b1-1e5f9973ffb0.roa (raw, json) Hash identifier: fncrfAZaxjMJcM/3c1y47RNC2+ojGmwXR1uVhA/NJCs= Subject key identifier: 0E:0B:E2:43:5E:9F:66:89:90:FE:D7:80:37:32:73:EF:DE:78:71:7D Certificate issuer: /CN=86fea470-b380-45c0-9f6b-033b7d884388 Certificate serial: 010D0C9F4328584B63673CBDD4375DD8B0B29580 Authority key identifier: 08:74:8A:31:09:3C:2C:49:44:A1:2E:8A:D6:5C:9E:92:04:01:CF:16 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/69552b47-13a2-397a-b4b1-1e5f9973ffb0.roa Signing time: Thu 02 Oct 2025 13:00:40 +0000 ROA not before: Thu 02 Oct 2025 13:00:40 +0000 ROA not after: Wed 31 Dec 2025 14:00:40 +0000 asID: 8100 IP address blocks: 186.190.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/86fea470-b380-45c0-9f6b-033b7d884388.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/86fea470-b380-45c0-9f6b-033b7d884388.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:63:67:3c:bd:d4:37:5d:d8:b0:b2:95:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86fea470-b380-45c0-9f6b-033b7d884388 Validity Not Before: Oct 2 13:00:40 2025 GMT Not After : Dec 31 14:00:40 2025 GMT Subject: CN=b50d6278-0a34-4145-b405-cebd0a6d4cfd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:21:00:83:cf:a8:7d:16:5b:13:98:89:db:9c: c7:0c:6b:3d:60:33:19:45:b5:75:36:45:cc:80:82: 79:85:df:11:b0:04:61:93:ea:f7:31:6c:13:7b:c9: 91:d9:c7:b6:6c:10:c2:f1:53:13:65:65:a0:bd:58: 4f:1b:3d:1d:bc:0b:13:19:c8:65:d3:84:8f:0b:b2: 59:da:cb:4c:ad:7b:df:e4:a7:84:1a:11:c0:71:f4: c7:53:e6:d7:39:af:9c:42:8e:59:46:18:aa:0f:ff: 97:d1:06:7c:15:59:4e:db:75:e5:7e:bd:f0:30:13: 2b:72:2e:76:d9:18:73:73:54:c5:03:ac:95:5e:39: f7:dd:c5:20:84:b5:23:d7:e0:f9:2f:c6:d8:fb:f1: 83:7c:49:c4:fd:91:d6:72:cc:27:8f:46:cc:37:ba: e4:fc:97:eb:0d:a0:c6:18:e9:f1:4b:6c:8e:68:90: 43:06:13:8e:af:97:b7:95:b6:55:13:3b:8b:0f:91: de:aa:7e:c4:28:4a:26:dd:aa:ad:c6:52:9d:34:fe: c7:f1:e3:a6:b0:0f:4c:6d:e2:6f:a9:7e:f7:ca:9a: cb:ea:61:51:a4:12:58:3c:01:b2:4d:b2:0b:a9:38: 34:7d:f1:1f:88:ac:33:95:62:8d:8a:dd:cb:a1:d8: 0c:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:0B:E2:43:5E:9F:66:89:90:FE:D7:80:37:32:73:EF:DE:78:71:7D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/69552b47-13a2-397a-b4b1-1e5f9973ffb0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/86fea470-b380-45c0-9f6b-033b7d884388.crl X509v3 Authority Key Identifier: keyid:08:74:8A:31:09:3C:2C:49:44:A1:2E:8A:D6:5C:9E:92:04:01:CF:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388.cer sbgp-ipAddrBlock: critical IPv4: 186.190.220.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:cb:b2:1d:27:f4:dc:5c:58:bf:4b:42:28:a2:31:90:e0:14: 93:90:95:6b:c5:e6:e0:3b:68:b2:83:17:81:d1:da:0d:97:42: f6:27:0d:d0:dc:e4:7a:dd:13:bf:17:b3:89:54:4a:ab:7b:f4: 76:66:bb:10:4d:42:34:f3:2f:9f:98:33:c2:05:98:b5:43:2e: d9:ef:e2:ef:44:55:fb:d1:20:71:40:42:e5:27:ae:ed:6b:de: 35:f2:76:c4:52:52:3d:31:81:8c:3e:56:4f:60:00:59:44:e4: 6e:de:bc:81:fd:94:4c:0d:af:e7:c5:d9:56:37:ee:54:55:3d: 91:ac:43:03:ef:95:fe:b0:78:80:c9:32:32:46:28:77:a8:88: b3:0b:d3:0d:22:4a:98:e6:df:7e:43:86:ae:4f:5a:b7:d0:52: fe:63:ed:5b:33:de:0b:64:60:da:77:f0:83:9a:2f:04:52:62: 9a:3f:3f:21:37:6a:05:88:91:e0:4b:2e:89:c2:50:61:5b:64: 81:23:c2:35:45:68:79:c6:aa:1a:b5:dd:ca:1c:dc:4e:f2:f7: 82:28:bc:d9:ab:f1:5d:fd:df:cf:4d:52:0a:de:bc:f0:32:00: de:13:21:97:0c:b2:7b:16:f3:46:af:27:8a:e9:57:20:18:0a: a0:ea:8d:2e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtjZzy91Ddd2LCylYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODZmZWE0NzAtYjM4MC00NWMwLTlmNmItMDMzYjdkODg0 Mzg4MB4XDTI1MTAwMjEzMDA0MFoXDTI1MTIzMTE0MDA0MFowLzEtMCsGA1UEAxMk YjUwZDYyNzgtMGEzNC00MTQ1LWI0MDUtY2ViZDBhNmQ0Y2ZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhyEAg8+ofRZbE5iJ25zHDGs9YDMZRbV1NkXM gIJ5hd8RsARhk+r3MWwTe8mR2ce2bBDC8VMTZWWgvVhPGz0dvAsTGchl04SPC7JZ 2stMrXvf5KeEGhHAcfTHU+bXOa+cQo5ZRhiqD/+X0QZ8FVlO23Xlfr3wMBMrci52 2Rhzc1TFA6yVXjn33cUghLUj1+D5L8bY+/GDfEnE/ZHWcswnj0bMN7rk/JfrDaDG GOnxS2yOaJBDBhOOr5e3lbZVEzuLD5Heqn7EKEom3aqtxlKdNP7H8eOmsA9MbeJv qX73yprL6mFRpBJYPAGyTbILqTg0ffEfiKwzlWKNit3LodgMwwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA4L4kNen2aJkP7XgDcyc+/eeHF9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS84NmZl YTQ3MC1iMzgwLTQ1YzAtOWY2Yi0wMzNiN2Q4ODQzODgvNjk1NTJiNDctMTNhMi0z OTdhLWI0YjEtMWU1Zjk5NzNmZmIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvODZmZWE0NzAtYjM4MC00NWMwLTlm NmItMDMzYjdkODg0Mzg4Lzg2ZmVhNDcwLWIzODAtNDVjMC05ZjZiLTAzM2I3ZDg4 NDM4OC5jcmwwHwYDVR0jBBgwFoAUCHSKMQk8LElEoS6K1lyekgQBzxYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS84NmZlYTQ3MC1iMzgwLTQ1YzAtOWY2Yi0wMzNi N2Q4ODQzODguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAur7cMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABfLsh0n9NxcWL9LQiiiMZDgFJOQlWvF5uA7aLKDF4HR2g2XQvYnDdDc 5HrdE78Xs4lUSqt79HZmuxBNQjTzL5+YM8IFmLVDLtnv4u9EVfvRIHFAQuUnru1r 3jXydsRSUj0xgYw+Vk9gAFlE5G7evIH9lEwNr+fF2VY37lRVPZGsQwPvlf6weIDJ MjJGKHeoiLML0w0iSpjm335Dhq5PWrfQUv5j7Vsz3gtkYNp38IOaLwRSYpo/PyE3 agWIkeBLLonCUGFbZIEjwjVFaHnGqhq13coc3E7y94IovNmr8V39389NUgrevPAy AN4TIZcMsnsW80avJ4rpVyAYCqDqjS4= -----END CERTIFICATE-----Generated at Mon Oct 20 05:31:52 2025 by rpki-client