$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/5736ce4f-a61e-3a85-a255-4fde2136358f.roa File: 5736ce4f-a61e-3a85-a255-4fde2136358f.roa (raw, json) Hash identifier: F1tmUct9OWB8hE+7S/jRRPvEuwstKQc/tH7N01LBhJc= Subject key identifier: 4E:19:81:AD:B7:50:47:23:25:70:1D:D4:F2:C3:58:26:F7:3D:C0:6C Certificate issuer: /CN=86fea470-b380-45c0-9f6b-033b7d884388 Certificate serial: 010D0C9F4328584B944222A04F1E706206DBDA00 Authority key identifier: 08:74:8A:31:09:3C:2C:49:44:A1:2E:8A:D6:5C:9E:92:04:01:CF:16 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/5736ce4f-a61e-3a85-a255-4fde2136358f.roa Signing time: Mon 20 Oct 2025 01:00:31 +0000 ROA not before: Mon 20 Oct 2025 01:00:31 +0000 ROA not after: Sun 18 Jan 2026 02:00:31 +0000 asID: 214894 IP address blocks: 68.168.30.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/86fea470-b380-45c0-9f6b-033b7d884388.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/86fea470-b380-45c0-9f6b-033b7d884388.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:94:42:22:a0:4f:1e:70:62:06:db:da:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86fea470-b380-45c0-9f6b-033b7d884388 Validity Not Before: Oct 20 01:00:31 2025 GMT Not After : Jan 18 02:00:31 2026 GMT Subject: CN=f89067a8-d1d1-4a41-b4e1-e58741af23a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:d8:82:da:ca:b6:fa:68:f5:cd:6f:92:3e:69: a8:42:ad:16:e3:0b:36:41:bc:78:e6:38:e2:51:d8: 3a:ed:21:cb:4e:7d:b3:0e:52:66:40:8e:11:f8:2d: 55:3a:d3:10:d1:41:07:c5:76:9c:ee:79:1c:52:6f: 03:44:8b:90:e3:ec:a1:5e:69:12:09:46:02:39:b0: 71:ce:43:ad:24:11:99:b2:7a:00:f5:8f:1f:0a:9d: 15:f0:a6:27:5e:26:ef:8e:cd:27:58:d1:42:eb:57: cb:a1:36:eb:a1:e1:03:e4:2a:06:08:31:0d:ab:13: 45:0b:da:6e:d3:57:e7:2c:a6:c3:79:f2:4f:f2:41: 37:90:44:93:ea:d9:68:3b:fb:66:2b:78:97:98:73: 71:c7:c8:97:06:8e:58:4d:e2:4f:d4:f3:5f:9d:e1: a7:4c:d4:7f:16:af:ce:09:af:27:59:1c:03:bc:eb: 98:d9:b0:ed:0a:28:26:83:28:e5:44:59:53:96:32: fa:4f:76:e7:3a:99:03:1b:6d:cf:95:8a:e4:a0:df: b7:9e:e3:34:d9:23:af:d1:8e:c9:d6:3e:64:5f:57: ab:e4:9a:3a:8a:ee:b1:3f:d2:62:f2:32:18:61:ed: 8c:15:4c:0f:b4:6a:16:a4:c9:86:f5:0f:cc:18:5c: 67:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:19:81:AD:B7:50:47:23:25:70:1D:D4:F2:C3:58:26:F7:3D:C0:6C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/5736ce4f-a61e-3a85-a255-4fde2136358f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/86fea470-b380-45c0-9f6b-033b7d884388.crl X509v3 Authority Key Identifier: keyid:08:74:8A:31:09:3C:2C:49:44:A1:2E:8A:D6:5C:9E:92:04:01:CF:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388.cer sbgp-ipAddrBlock: critical IPv4: 68.168.30.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:00:05:12:3d:3c:1b:cd:14:8d:22:32:49:64:3b:fb:ec:c3: 57:50:87:4b:3d:c8:94:fd:2d:3a:b2:c1:e5:c4:74:f1:97:03: f6:37:a2:2e:85:42:ac:aa:b9:4b:a2:b7:d0:fa:66:cd:a8:98: 55:d1:e6:06:54:5c:f8:59:32:e3:73:11:0c:39:19:8a:20:66: 48:55:11:fa:cd:b0:6e:28:2d:3b:ed:27:74:06:da:15:60:b5: e4:99:4b:32:e9:66:e8:0c:bc:73:6a:c9:ac:8b:7d:0d:8f:59: bb:f1:02:20:2f:a8:30:63:c1:66:8e:aa:b7:5e:4a:20:1b:e3: 0e:a6:ab:9f:0d:54:61:6d:b0:59:d0:9c:49:2c:2b:f7:7b:1a: 4c:70:e2:97:8f:d1:7e:2a:d4:87:30:5d:55:32:46:b4:39:46: de:cc:06:89:4f:e8:6d:02:e9:9f:61:66:a8:a4:e0:19:c6:69: 77:6f:7a:da:c5:f1:d8:8f:4c:f8:e8:22:ef:4c:5f:a6:09:26: 8a:1d:f8:fc:06:b1:de:2e:77:1a:b2:af:92:cc:9e:e0:61:92: 17:aa:ec:1f:44:f9:7b:aa:5a:de:6c:51:00:16:8d:37:bf:ec: e0:02:7a:32:42:92:8c:58:e0:91:39:fb:a5:99:12:36:b9:78: b0:d7:86:f3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuUQiKgTx5wYgbb2gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODZmZWE0NzAtYjM4MC00NWMwLTlmNmItMDMzYjdkODg0 Mzg4MB4XDTI1MTAyMDAxMDAzMVoXDTI2MDExODAyMDAzMVowLzEtMCsGA1UEAxMk Zjg5MDY3YTgtZDFkMS00YTQxLWI0ZTEtZTU4NzQxYWYyM2E4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjdiC2sq2+mj1zW+SPmmoQq0W4ws2Qbx45jji Udg67SHLTn2zDlJmQI4R+C1VOtMQ0UEHxXac7nkcUm8DRIuQ4+yhXmkSCUYCObBx zkOtJBGZsnoA9Y8fCp0V8KYnXibvjs0nWNFC61fLoTbroeED5CoGCDENqxNFC9pu 01fnLKbDefJP8kE3kEST6tloO/tmK3iXmHNxx8iXBo5YTeJP1PNfneGnTNR/Fq/O Ca8nWRwDvOuY2bDtCigmgyjlRFlTljL6T3bnOpkDG23PlYrkoN+3nuM02SOv0Y7J 1j5kX1er5Jo6iu6xP9Ji8jIYYe2MFUwPtGoWpMmG9Q/MGFxnTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE4Zga23UEcjJXAd1PLDWCb3PcBsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS84NmZl YTQ3MC1iMzgwLTQ1YzAtOWY2Yi0wMzNiN2Q4ODQzODgvNTczNmNlNGYtYTYxZS0z YTg1LWEyNTUtNGZkZTIxMzYzNThmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvODZmZWE0NzAtYjM4MC00NWMwLTlm NmItMDMzYjdkODg0Mzg4Lzg2ZmVhNDcwLWIzODAtNDVjMC05ZjZiLTAzM2I3ZDg4 NDM4OC5jcmwwHwYDVR0jBBgwFoAUCHSKMQk8LElEoS6K1lyekgQBzxYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS84NmZlYTQ3MC1iMzgwLTQ1YzAtOWY2Yi0wMzNi N2Q4ODQzODguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARKgeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHIABRI9PBvNFI0iMklkO/vsw1dQh0s9yJT9LTqyweXEdPGXA/Y3oi6F QqyquUuit9D6Zs2omFXR5gZUXPhZMuNzEQw5GYogZkhVEfrNsG4oLTvtJ3QG2hVg teSZSzLpZugMvHNqyayLfQ2PWbvxAiAvqDBjwWaOqrdeSiAb4w6mq58NVGFtsFnQ nEksK/d7Gkxw4peP0X4q1IcwXVUyRrQ5Rt7MBolP6G0C6Z9hZqik4BnGaXdvetrF 8diPTPjoIu9MX6YJJood+PwGsd4udxqyr5LMnuBhkheq7B9E+XuqWt5sUQAWjTe/ 7OACejJCkoxY4JE5+6WZEja5eLDXhvM= -----END CERTIFICATE-----Generated at Fri Oct 24 15:19:11 2025 by rpki-client