$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/c024bbee-23b7-32a0-a732-a4c7c0a2b58c.roa File: c024bbee-23b7-32a0-a732-a4c7c0a2b58c.roa (raw, json) Hash identifier: o6tbyWargUoja5Ji0arA9va3xggfSV+aB18vPVsABaw= Subject key identifier: EC:43:8D:42:BB:F6:0B:C8:C1:0B:E5:78:21:69:69:4C:A8:D5:84:7D Certificate issuer: /CN=86fea470-b380-45c0-9f6b-033b7d884388 Certificate serial: 010D0C9F4328584ACCA658E67DAA13A0BE6C7800 Authority key identifier: 08:74:8A:31:09:3C:2C:49:44:A1:2E:8A:D6:5C:9E:92:04:01:CF:16 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/c024bbee-23b7-32a0-a732-a4c7c0a2b58c.roa Signing time: Sat 09 Aug 2025 13:00:41 +0000 ROA not before: Sat 09 Aug 2025 13:00:41 +0000 ROA not after: Fri 07 Nov 2025 14:00:41 +0000 asID: 54852 IP address blocks: 68.168.23.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/86fea470-b380-45c0-9f6b-033b7d884388.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/86fea470-b380-45c0-9f6b-033b7d884388.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:cc:a6:58:e6:7d:aa:13:a0:be:6c:78:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86fea470-b380-45c0-9f6b-033b7d884388 Validity Not Before: Aug 9 13:00:41 2025 GMT Not After : Nov 7 14:00:41 2025 GMT Subject: CN=2e18c9de-248a-4ada-8d8f-15c7f339b8d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:a0:6f:ba:34:0e:b3:64:53:cd:3a:34:e8:1d: cc:67:00:95:92:8e:8b:10:19:60:b3:9d:40:c8:28: 89:15:23:b1:9c:23:67:5d:be:12:7f:8b:bb:c0:bf: 7f:4e:43:1f:dc:37:1b:84:ce:8a:a1:20:90:f6:08: 14:8d:d2:1b:7b:3d:e5:cf:f9:38:ab:20:5c:1d:8e: eb:b8:52:51:87:ac:dc:57:1f:31:0a:2c:4c:39:7b: 71:e4:74:85:5d:fe:b4:b9:4a:18:be:8b:56:90:ae: 4c:52:b1:1f:84:aa:76:9f:fb:57:d5:18:a6:f7:d8: cc:bd:73:f4:b8:89:98:21:07:46:39:52:af:8a:0d: 8d:a0:18:94:9a:3b:70:ca:3d:94:b7:0b:c6:38:ae: 80:38:09:35:d8:44:fb:8c:dd:8e:4d:59:2c:ff:4d: dd:0d:e0:5b:77:43:a4:5f:a7:61:83:8a:63:3c:6f: 59:d3:3f:59:8f:98:dd:2d:dd:0f:2c:3d:cb:29:78: 68:2d:1a:76:70:0b:e9:39:62:5c:e4:cc:39:2e:a7: 13:c1:c8:37:4b:eb:03:78:aa:5c:2c:ef:18:a1:59: b7:20:77:fd:22:11:3a:f7:7f:aa:33:35:18:b7:e5: c4:9b:11:52:e7:ba:74:4d:af:b5:ab:32:2b:43:62: db:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:43:8D:42:BB:F6:0B:C8:C1:0B:E5:78:21:69:69:4C:A8:D5:84:7D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/c024bbee-23b7-32a0-a732-a4c7c0a2b58c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/86fea470-b380-45c0-9f6b-033b7d884388.crl X509v3 Authority Key Identifier: keyid:08:74:8A:31:09:3C:2C:49:44:A1:2E:8A:D6:5C:9E:92:04:01:CF:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388.cer sbgp-ipAddrBlock: critical IPv4: 68.168.23.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:be:a4:09:a2:bf:7b:b4:25:8c:3d:9e:f7:67:24:aa:32:89: 78:af:2b:cb:dd:47:64:f3:e7:48:f7:f4:b4:35:7d:58:ab:b6: c9:02:92:6c:40:ce:86:92:7a:0c:72:05:14:c4:62:2d:98:c0: 15:c5:ae:3a:18:1f:7f:11:66:57:d5:0d:6a:ea:e7:a0:9e:57: 74:9e:03:a2:94:be:a0:d8:2d:5c:33:66:0e:aa:76:1c:5c:9b: 4f:a9:80:c9:2f:69:b7:b9:9f:c1:24:96:6c:ee:0c:3a:7a:f6: ef:ca:82:3c:4a:da:f5:5d:e7:92:7f:72:29:48:c9:80:65:e8: bc:1f:7a:6a:4a:d0:af:60:45:fb:b6:75:8b:0b:39:8a:56:b0: e4:81:5e:a0:55:9a:a4:27:46:00:7e:08:95:69:08:1d:bd:7f: bd:22:74:9c:57:8a:4d:78:19:07:5e:39:2e:23:14:16:10:fe: 25:71:59:fd:05:c2:da:de:f6:d1:ff:b8:32:67:c2:8c:a1:c0: df:21:cf:3d:17:12:d3:c9:f3:76:4b:cb:42:44:03:b9:46:b0: f6:58:16:8a:79:c6:ff:06:c8:cc:1a:9a:54:a1:ba:2a:e3:d6: 27:06:6a:f2:85:61:e9:2b:d0:31:cc:ad:fa:e6:94:1f:9b:bf: d2:1f:64:f1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErMpljmfaoToL5seAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODZmZWE0NzAtYjM4MC00NWMwLTlmNmItMDMzYjdkODg0 Mzg4MB4XDTI1MDgwOTEzMDA0MVoXDTI1MTEwNzE0MDA0MVowLzEtMCsGA1UEAxMk MmUxOGM5ZGUtMjQ4YS00YWRhLThkOGYtMTVjN2YzMzliOGQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhKBvujQOs2RTzTo06B3MZwCVko6LEBlgs51A yCiJFSOxnCNnXb4Sf4u7wL9/TkMf3DcbhM6KoSCQ9ggUjdIbez3lz/k4qyBcHY7r uFJRh6zcVx8xCixMOXtx5HSFXf60uUoYvotWkK5MUrEfhKp2n/tX1Rim99jMvXP0 uImYIQdGOVKvig2NoBiUmjtwyj2UtwvGOK6AOAk12ET7jN2OTVks/03dDeBbd0Ok X6dhg4pjPG9Z0z9Zj5jdLd0PLD3LKXhoLRp2cAvpOWJc5Mw5LqcTwcg3S+sDeKpc LO8YoVm3IHf9IhE693+qMzUYt+XEmxFS57p0Ta+1qzIrQ2LbnQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOxDjUK79gvIwQvleCFpaUyo1YR9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS84NmZl YTQ3MC1iMzgwLTQ1YzAtOWY2Yi0wMzNiN2Q4ODQzODgvYzAyNGJiZWUtMjNiNy0z MmEwLWE3MzItYTRjN2MwYTJiNThjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvODZmZWE0NzAtYjM4MC00NWMwLTlm NmItMDMzYjdkODg0Mzg4Lzg2ZmVhNDcwLWIzODAtNDVjMC05ZjZiLTAzM2I3ZDg4 NDM4OC5jcmwwHwYDVR0jBBgwFoAUCHSKMQk8LElEoS6K1lyekgQBzxYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS84NmZlYTQ3MC1iMzgwLTQ1YzAtOWY2Yi0wMzNi N2Q4ODQzODguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARKgXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABu+pAmiv3u0JYw9nvdnJKoyiXivK8vdR2Tz50j39LQ1fVirtskCkmxA zoaSegxyBRTEYi2YwBXFrjoYH38RZlfVDWrq56CeV3SeA6KUvqDYLVwzZg6qdhxc m0+pgMkvabe5n8EklmzuDDp69u/KgjxK2vVd55J/cilIyYBl6LwfempK0K9gRfu2 dYsLOYpWsOSBXqBVmqQnRgB+CJVpCB29f70idJxXik14GQdeOS4jFBYQ/iVxWf0F wtre9tH/uDJnwoyhwN8hzz0XEtPJ83ZLy0JEA7lGsPZYFop5xv8GyMwamlShuirj 1icGavKFYekr0DHMrfrmlB+bv9IfZPE= -----END CERTIFICATE-----Generated at Sat Aug 23 13:59:57 2025 by rpki-client