$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/6e3736c0-7b6a-329b-b7a9-ffcecec9d5a7.roa File: 6e3736c0-7b6a-329b-b7a9-ffcecec9d5a7.roa (raw, json) Hash identifier: khJS2NgNnp4PjtLS9BQruPOlUlBOqFRNOme6kU5kJCM= Subject key identifier: CF:FB:CC:64:7B:FA:0B:17:7E:88:BB:1C:DD:1B:31:5C:FE:15:13:E8 Certificate issuer: /CN=86fea470-b380-45c0-9f6b-033b7d884388 Certificate serial: 010D0C9F4328584B63673EA6CCC87A8169D2C680 Authority key identifier: 08:74:8A:31:09:3C:2C:49:44:A1:2E:8A:D6:5C:9E:92:04:01:CF:16 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/6e3736c0-7b6a-329b-b7a9-ffcecec9d5a7.roa Signing time: Thu 02 Oct 2025 13:00:40 +0000 ROA not before: Thu 02 Oct 2025 13:00:40 +0000 ROA not after: Wed 31 Dec 2025 14:00:40 +0000 asID: 29802 IP address blocks: 186.190.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/86fea470-b380-45c0-9f6b-033b7d884388.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/86fea470-b380-45c0-9f6b-033b7d884388.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:63:67:3e:a6:cc:c8:7a:81:69:d2:c6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86fea470-b380-45c0-9f6b-033b7d884388 Validity Not Before: Oct 2 13:00:40 2025 GMT Not After : Dec 31 14:00:40 2025 GMT Subject: CN=a1cf690d-248f-49f1-be2b-7faa3ae4f79a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:ca:a5:89:8c:c2:de:20:70:74:94:8c:28:6b: 61:d8:71:47:05:93:ae:b6:22:73:cb:c9:40:ba:7f: 60:7b:03:d7:72:62:26:f8:85:f5:00:f4:5c:b5:23: 5e:51:c9:0b:2d:f1:7e:d7:d0:07:58:bd:c8:76:15: 64:51:9e:8d:dd:5d:62:ba:50:22:0c:4a:9b:24:b5: 4f:f8:e9:4b:eb:93:3e:b7:eb:a0:e2:f9:41:e2:cc: 03:93:4b:05:0e:10:d6:aa:43:89:48:2b:58:db:b2: 2a:55:6d:a5:50:74:1c:8e:a1:b2:3e:6c:ff:2c:82: 1e:40:46:64:4c:9d:a3:8b:5d:66:79:b6:53:57:03: f5:76:ac:b3:2c:9d:cf:c6:53:82:88:3c:02:bd:22: 80:f2:3f:cb:9f:f0:33:28:8e:b9:f6:5b:96:09:fc: c6:ca:1b:75:af:91:a0:fd:8b:ac:30:a7:83:81:ac: c5:dd:d9:ca:1c:0c:6d:57:3a:cf:e7:ac:f8:23:b0: 48:8d:68:19:f0:83:bf:d9:a0:74:10:59:82:e8:da: b2:12:85:02:f7:00:e9:2f:55:eb:43:12:65:5b:eb: 2a:d1:a5:1f:8e:8e:fd:ec:5f:44:13:c6:f2:95:b6: 86:34:7e:b9:41:90:22:fa:ae:32:9c:55:81:0c:74: ef:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:FB:CC:64:7B:FA:0B:17:7E:88:BB:1C:DD:1B:31:5C:FE:15:13:E8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/6e3736c0-7b6a-329b-b7a9-ffcecec9d5a7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/86fea470-b380-45c0-9f6b-033b7d884388.crl X509v3 Authority Key Identifier: keyid:08:74:8A:31:09:3C:2C:49:44:A1:2E:8A:D6:5C:9E:92:04:01:CF:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388.cer sbgp-ipAddrBlock: critical IPv4: 186.190.220.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d6:26:f5:32:51:75:37:83:86:93:67:76:cf:0a:0f:ec:80:65: 46:52:64:ab:c1:af:31:65:90:5e:29:fe:33:74:eb:47:8d:ce: 95:34:58:96:a7:52:27:fe:ef:5c:79:63:77:09:d8:dd:8d:9b: 91:ad:49:19:54:d8:30:d4:69:b1:a7:99:d8:1c:3d:74:80:eb: 2c:b6:bc:f6:e2:b3:41:17:1e:1b:a3:91:1a:3d:45:4e:2b:5c: 60:17:4b:fe:01:3c:8e:53:bf:f5:b8:f6:80:99:7e:05:c3:5b: b9:1d:df:4c:8a:04:f3:0b:fd:3e:1d:22:40:c6:54:98:4f:e2: 33:17:d2:69:b5:59:7e:6d:e5:41:da:82:bc:c4:84:5e:01:52: 13:17:a5:10:c7:0c:69:17:e2:0a:5b:cc:d4:06:a9:c5:9c:4f: 7d:02:d8:a8:0b:e8:fd:12:ca:77:f5:48:d1:a5:32:98:e4:81: f3:6c:29:34:f1:3b:67:ef:e1:e0:0c:98:8d:a3:30:1d:02:0f: 85:8c:dc:42:8e:4c:7e:98:2b:ed:91:cb:da:d8:66:a7:23:69: 35:12:b7:3d:ab:f7:83:56:53:01:e2:8d:a4:ee:1e:ad:00:aa: bf:90:8a:b3:9c:2d:fa:f7:98:93:36:24:b5:3c:60:cc:49:3a: 86:ad:4f:d3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtjZz6mzMh6gWnSxoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODZmZWE0NzAtYjM4MC00NWMwLTlmNmItMDMzYjdkODg0 Mzg4MB4XDTI1MTAwMjEzMDA0MFoXDTI1MTIzMTE0MDA0MFowLzEtMCsGA1UEAxMk YTFjZjY5MGQtMjQ4Zi00OWYxLWJlMmItN2ZhYTNhZTRmNzlhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi8qliYzC3iBwdJSMKGth2HFHBZOutiJzy8lA un9gewPXcmIm+IX1APRctSNeUckLLfF+19AHWL3IdhVkUZ6N3V1iulAiDEqbJLVP +OlL65M+t+ug4vlB4swDk0sFDhDWqkOJSCtY27IqVW2lUHQcjqGyPmz/LIIeQEZk TJ2ji11mebZTVwP1dqyzLJ3PxlOCiDwCvSKA8j/Ln/AzKI659luWCfzGyht1r5Gg /YusMKeDgazF3dnKHAxtVzrP56z4I7BIjWgZ8IO/2aB0EFmC6NqyEoUC9wDpL1Xr QxJlW+sq0aUfjo797F9EE8bylbaGNH65QZAi+q4ynFWBDHTvEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM/7zGR7+gsXfoi7HN0bMVz+FRPoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS84NmZl YTQ3MC1iMzgwLTQ1YzAtOWY2Yi0wMzNiN2Q4ODQzODgvNmUzNzM2YzAtN2I2YS0z MjliLWI3YTktZmZjZWNlYzlkNWE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvODZmZWE0NzAtYjM4MC00NWMwLTlm NmItMDMzYjdkODg0Mzg4Lzg2ZmVhNDcwLWIzODAtNDVjMC05ZjZiLTAzM2I3ZDg4 NDM4OC5jcmwwHwYDVR0jBBgwFoAUCHSKMQk8LElEoS6K1lyekgQBzxYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS84NmZlYTQ3MC1iMzgwLTQ1YzAtOWY2Yi0wMzNi N2Q4ODQzODguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAur7cMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANYm9TJRdTeDhpNnds8KD+yAZUZSZKvBrzFlkF4p/jN060eNzpU0WJan Uif+71x5Y3cJ2N2Nm5GtSRlU2DDUabGnmdgcPXSA6yy2vPbis0EXHhujkRo9RU4r XGAXS/4BPI5Tv/W49oCZfgXDW7kd30yKBPML/T4dIkDGVJhP4jMX0mm1WX5t5UHa grzEhF4BUhMXpRDHDGkX4gpbzNQGqcWcT30C2KgL6P0Synf1SNGlMpjkgfNsKTTx O2fv4eAMmI2jMB0CD4WM3EKOTH6YK+2Ry9rYZqcjaTUStz2r94NWUwHijaTuHq0A qr+QirOcLfr3mJM2JLU8YMxJOoatT9M= -----END CERTIFICATE-----Generated at Mon Oct 20 07:55:59 2025 by rpki-client