$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/af478d3d-02cc-354c-a27f-6b17372db688.roa File: af478d3d-02cc-354c-a27f-6b17372db688.roa (raw, json) Hash identifier: GZYQhUxcNd1RDKMZkCEhgcRKpQyg9xlovhnjY8bAjtg= Subject key identifier: 52:DF:04:9F:0F:EC:A3:FC:BC:B6:26:84:0A:D1:44:AA:9E:13:DB:88 Certificate issuer: /CN=86fea470-b380-45c0-9f6b-033b7d884388 Certificate serial: 010D0C9F4328584A5335A6E355DAABCBA2827E00 Authority key identifier: 08:74:8A:31:09:3C:2C:49:44:A1:2E:8A:D6:5C:9E:92:04:01:CF:16 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/af478d3d-02cc-354c-a27f-6b17372db688.roa Signing time: Fri 27 Jun 2025 01:00:50 +0000 ROA not before: Fri 27 Jun 2025 01:00:50 +0000 ROA not after: Thu 25 Sep 2025 01:00:50 +0000 asID: 3320 IP address blocks: 68.168.18.0/24 maxlen: 24 68.168.19.0/24 maxlen: 24 186.190.214.0/24 maxlen: 24 186.190.222.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/86fea470-b380-45c0-9f6b-033b7d884388.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/86fea470-b380-45c0-9f6b-033b7d884388.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:53:35:a6:e3:55:da:ab:cb:a2:82:7e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86fea470-b380-45c0-9f6b-033b7d884388 Validity Not Before: Jun 27 01:00:50 2025 GMT Not After : Sep 25 01:00:50 2025 GMT Subject: CN=c0b2ca7a-cc1d-47c6-ad5a-25d062005bd0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:7e:36:f0:50:87:93:4a:cd:a8:36:6e:7a:26: 53:01:ab:3c:eb:09:f0:4a:bd:ba:59:19:3d:07:9c: 44:e3:0c:95:64:3a:ff:3e:6c:78:73:24:86:5d:ef: 6f:c2:ea:56:10:17:7a:d0:e8:f1:ec:5d:c1:8e:37: 6a:99:36:fd:ca:6d:69:93:7d:1c:40:84:d5:2e:35: dc:f7:b7:04:41:6b:c6:47:86:f5:e9:00:14:2f:86: c6:9b:38:25:b2:39:d5:90:2c:5d:22:7f:d6:be:59: 16:5e:0a:8b:8b:f7:65:86:20:c6:c0:85:63:ad:7f: 40:bd:ad:65:68:71:70:dd:16:b3:b1:47:17:0a:0e: 77:19:32:0d:99:0a:a6:c7:ba:bf:c7:4a:da:f5:39: 5b:21:d7:b0:37:4b:58:12:d9:80:f3:8d:5a:49:6a: 97:f3:99:8b:a9:5e:11:88:a6:bf:ff:9e:91:0a:44: dd:72:85:9d:58:a6:ac:59:de:30:c0:2f:c3:4f:82: 0b:a3:b4:6a:a9:71:6d:41:e5:24:e1:d5:a5:66:02: 7d:8d:82:9d:0e:b4:78:04:d9:05:a3:0c:d3:e2:b9: 0e:f6:65:41:bb:ca:aa:80:3f:f5:37:f6:34:f4:4e: ac:82:a1:7c:1c:5b:cb:54:2d:8c:67:1a:f7:18:a5: e5:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:DF:04:9F:0F:EC:A3:FC:BC:B6:26:84:0A:D1:44:AA:9E:13:DB:88 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/af478d3d-02cc-354c-a27f-6b17372db688.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/86fea470-b380-45c0-9f6b-033b7d884388.crl X509v3 Authority Key Identifier: keyid:08:74:8A:31:09:3C:2C:49:44:A1:2E:8A:D6:5C:9E:92:04:01:CF:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388.cer sbgp-ipAddrBlock: critical IPv4: 68.168.18.0/23 186.190.214.0/24 186.190.222.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:dc:16:ca:95:27:c5:3d:66:37:3a:e6:a2:f8:03:55:e2:4c: ed:44:e9:8f:c2:95:d5:89:3d:f4:08:19:3c:96:22:57:7e:c7: d6:80:7f:6f:af:f0:e3:0f:36:4e:d0:2f:6e:fa:75:b8:ca:fd: 7f:43:16:19:ac:b6:8d:c0:ab:46:3a:b9:f9:5e:64:5f:a6:2d: 55:80:2c:59:bf:36:54:33:35:47:26:a1:f8:b9:68:41:ec:2b: ae:99:cf:70:37:54:66:55:a4:c4:db:45:a5:a2:27:fe:85:3e: ca:23:d9:89:b0:7f:28:f9:22:ff:fe:2c:98:90:0e:88:c5:2a: 38:bf:65:b6:57:2c:de:4b:8f:8c:41:81:da:6b:f8:0b:d9:81: 33:f9:b4:9d:c3:aa:08:04:d6:06:d1:c4:f6:3c:c5:25:69:71: 04:e8:3d:4c:0a:39:1d:6e:a2:5b:1c:e3:a1:ca:8e:9f:38:3d: fd:fb:41:74:b3:4d:49:aa:ed:48:e2:c6:e0:89:3a:41:1d:29: 42:6b:20:41:27:6b:bc:70:9e:91:8b:2e:9c:af:6d:75:6c:c5: 3b:c3:bf:b9:b4:8a:b2:ba:ce:20:ac:7b:01:54:c3:69:bd:7e: 57:82:d4:d1:6b:60:85:93:c3:81:6d:0e:19:8f:11:38:e2:de: 40:24:4e:e8 -----BEGIN CERTIFICATE----- MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWEpTNabjVdqry6KCfgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODZmZWE0NzAtYjM4MC00NWMwLTlmNmItMDMzYjdkODg0 Mzg4MB4XDTI1MDYyNzAxMDA1MFoXDTI1MDkyNTAxMDA1MFowLzEtMCsGA1UEAxMk YzBiMmNhN2EtY2MxZC00N2M2LWFkNWEtMjVkMDYyMDA1YmQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr3428FCHk0rNqDZueiZTAas86wnwSr26WRk9 B5xE4wyVZDr/Pmx4cySGXe9vwupWEBd60Ojx7F3BjjdqmTb9ym1pk30cQITVLjXc 97cEQWvGR4b16QAUL4bGmzglsjnVkCxdIn/WvlkWXgqLi/dlhiDGwIVjrX9Ava1l aHFw3RazsUcXCg53GTINmQqmx7q/x0ra9TlbIdewN0tYEtmA841aSWqX85mLqV4R iKa//56RCkTdcoWdWKasWd4wwC/DT4ILo7RqqXFtQeUk4dWlZgJ9jYKdDrR4BNkF owzT4rkO9mVBu8qqgD/1N/Y09E6sgqF8HFvLVC2MZxr3GKXlhQIDAQABo4IDYTCC A10wHQYDVR0OBBYEFFLfBJ8P7KP8vLYmhArRRKqeE9uIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS84NmZl YTQ3MC1iMzgwLTQ1YzAtOWY2Yi0wMzNiN2Q4ODQzODgvYWY0NzhkM2QtMDJjYy0z NTRjLWEyN2YtNmIxNzM3MmRiNjg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvODZmZWE0NzAtYjM4MC00NWMwLTlm NmItMDMzYjdkODg0Mzg4Lzg2ZmVhNDcwLWIzODAtNDVjMC05ZjZiLTAzM2I3ZDg4 NDM4OC5jcmwwHwYDVR0jBBgwFoAUCHSKMQk8LElEoS6K1lyekgQBzxYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS84NmZlYTQ3MC1iMzgwLTQ1YzAtOWY2Yi0wMzNi N2Q4ODQzODguY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQBRKgSAwQA ur7WAwQAur7eMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBAIbcFsqVJ8U9Zjc65qL4A1XiTO1E6Y/CldWJPfQI GTyWIld+x9aAf2+v8OMPNk7QL276dbjK/X9DFhmsto3Aq0Y6ufleZF+mLVWALFm/ NlQzNUcmofi5aEHsK66Zz3A3VGZVpMTbRaWiJ/6FPsoj2Ymwfyj5Iv/+LJiQDojF Kji/ZbZXLN5Lj4xBgdpr+AvZgTP5tJ3DqggE1gbRxPY8xSVpcQToPUwKOR1uolsc 46HKjp84Pf37QXSzTUmq7UjixuCJOkEdKUJrIEEna7xwnpGLLpyvbXVsxTvDv7m0 irK6ziCsewFUw2m9fleC1NFrYIWTw4FtDhmPETji3kAkTug= -----END CERTIFICATE-----Generated at Tue Jul 1 13:10:37 2025 by rpki-client