$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/7f657ef3-b6c0-309f-ad5a-e936efa5fe63.roa File: 7f657ef3-b6c0-309f-ad5a-e936efa5fe63.roa (raw, json) Hash identifier: KOcfmapWb1mA6i+Fy58upyG7pJO5FsBf/mRoCj9OiXY= Subject key identifier: 4B:DF:CF:30:78:3E:EC:5D:CC:0D:33:E8:F9:96:7A:08:03:39:B9:A1 Certificate issuer: /CN=86fea470-b380-45c0-9f6b-033b7d884388 Certificate serial: 010D0C9F4328584B79BCC788B37447922D2EF380 Authority key identifier: 08:74:8A:31:09:3C:2C:49:44:A1:2E:8A:D6:5C:9E:92:04:01:CF:16 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/7f657ef3-b6c0-309f-ad5a-e936efa5fe63.roa Signing time: Fri 10 Oct 2025 13:00:37 +0000 ROA not before: Fri 10 Oct 2025 13:00:37 +0000 ROA not after: Thu 08 Jan 2026 14:00:37 +0000 asID: 208208 IP address blocks: 69.42.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/86fea470-b380-45c0-9f6b-033b7d884388.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/86fea470-b380-45c0-9f6b-033b7d884388.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:79:bc:c7:88:b3:74:47:92:2d:2e:f3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86fea470-b380-45c0-9f6b-033b7d884388 Validity Not Before: Oct 10 13:00:37 2025 GMT Not After : Jan 8 14:00:37 2026 GMT Subject: CN=2900a897-204e-4968-a4d9-c2d3d73baddb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:18:9b:70:25:00:01:98:3e:e1:08:2f:04:e8: e5:db:03:9a:06:63:09:f7:77:54:8d:b4:f6:f8:42: d9:70:65:ea:8c:4e:38:a7:1e:79:94:09:10:7c:7b: 6b:50:ea:58:73:04:cd:7f:62:3c:03:36:67:8c:94: 9b:8c:95:c7:80:a9:13:4b:6f:8d:84:df:af:8e:65: e0:94:be:24:8e:e4:f0:a8:b6:ff:8c:51:ca:05:98: 20:ec:e7:1b:0f:b9:fd:32:16:40:66:d8:17:b3:e2: ba:2b:de:9b:0a:70:2e:60:c1:55:64:9c:55:ab:42: 40:94:7b:33:cb:11:fe:c5:10:b5:96:17:91:d0:a6: a7:7a:3f:0f:ce:45:c1:4b:ac:a6:20:8f:a1:22:a4: ae:05:81:1e:ae:18:54:0c:9c:2e:44:c5:d4:a7:4f: e6:b9:ec:c3:a1:53:13:da:92:02:57:7f:2f:28:89: a8:93:d3:b2:2b:56:22:c2:6f:5a:a3:44:3c:c9:51: 56:89:29:8c:ee:0f:c1:8a:32:a0:79:00:98:fb:f0: e1:5e:b4:b7:a9:f3:cb:eb:65:26:35:c2:d5:9f:a6: 99:38:9f:c9:5d:2e:0f:f1:16:64:9c:93:0e:28:a8: 16:b7:e9:a1:86:49:7d:54:15:66:df:be:4e:95:cb: 20:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:DF:CF:30:78:3E:EC:5D:CC:0D:33:E8:F9:96:7A:08:03:39:B9:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/7f657ef3-b6c0-309f-ad5a-e936efa5fe63.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/86fea470-b380-45c0-9f6b-033b7d884388.crl X509v3 Authority Key Identifier: keyid:08:74:8A:31:09:3C:2C:49:44:A1:2E:8A:D6:5C:9E:92:04:01:CF:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388.cer sbgp-ipAddrBlock: critical IPv4: 69.42.220.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption cf:88:52:1a:e9:4c:7f:0f:1d:bd:a9:62:b7:6a:ba:58:ab:54: 64:1d:0d:d3:ff:50:04:10:2a:38:36:8a:63:18:0c:dd:f3:88: df:86:3d:4a:e3:53:8c:46:05:27:ed:7e:79:af:82:4f:57:42: 75:f3:72:17:aa:3c:2a:ea:67:49:e6:a3:bc:73:01:a9:a9:9d: 07:2a:ca:0e:30:74:d3:64:f0:f9:39:66:3c:69:32:64:a3:d3: 5b:50:98:82:18:12:44:b6:7d:f8:48:58:25:15:56:46:57:d6: fd:fe:ed:9b:4e:e3:8a:85:f9:bb:ed:2c:ff:7b:de:5b:d3:a0: ad:5a:97:1c:0b:f4:76:68:39:b4:97:cb:47:b4:ff:8b:a4:30: d8:50:47:9b:b7:0e:bd:d7:fc:4c:af:f4:41:35:1d:74:5a:18: e1:a7:40:b2:e1:b0:bf:9c:d7:af:93:b1:6b:3a:0e:51:92:5a: 21:1d:3c:dc:ba:bb:1b:8e:2d:bf:f3:ba:b0:56:7f:ad:c4:e1: 9d:44:51:d4:42:fc:cb:d7:ee:d8:85:ad:36:60:8c:40:4e:25: 8f:6d:9a:a8:cd:d3:1c:da:91:1e:cc:7f:36:b1:37:e2:57:c0: 5a:3a:a4:5e:de:07:c3:07:6a:75:e5:a6:c2:e1:61:99:70:91: 83:57:55:3e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt5vMeIs3RHki0u84AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODZmZWE0NzAtYjM4MC00NWMwLTlmNmItMDMzYjdkODg0 Mzg4MB4XDTI1MTAxMDEzMDAzN1oXDTI2MDEwODE0MDAzN1owLzEtMCsGA1UEAxMk MjkwMGE4OTctMjA0ZS00OTY4LWE0ZDktYzJkM2Q3M2JhZGRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAphibcCUAAZg+4QgvBOjl2wOaBmMJ93dUjbT2 +ELZcGXqjE44px55lAkQfHtrUOpYcwTNf2I8AzZnjJSbjJXHgKkTS2+NhN+vjmXg lL4kjuTwqLb/jFHKBZgg7OcbD7n9MhZAZtgXs+K6K96bCnAuYMFVZJxVq0JAlHsz yxH+xRC1lheR0Kanej8PzkXBS6ymII+hIqSuBYEerhhUDJwuRMXUp0/muezDoVMT 2pICV38vKImok9OyK1Yiwm9ao0Q8yVFWiSmM7g/BijKgeQCY+/DhXrS3qfPL62Um NcLVn6aZOJ/JXS4P8RZknJMOKKgWt+mhhkl9VBVm375OlcsgwwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEvfzzB4PuxdzA0z6PmWeggDObmhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS84NmZl YTQ3MC1iMzgwLTQ1YzAtOWY2Yi0wMzNiN2Q4ODQzODgvN2Y2NTdlZjMtYjZjMC0z MDlmLWFkNWEtZTkzNmVmYTVmZTYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvODZmZWE0NzAtYjM4MC00NWMwLTlm NmItMDMzYjdkODg0Mzg4Lzg2ZmVhNDcwLWIzODAtNDVjMC05ZjZiLTAzM2I3ZDg4 NDM4OC5jcmwwHwYDVR0jBBgwFoAUCHSKMQk8LElEoS6K1lyekgQBzxYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS84NmZlYTQ3MC1iMzgwLTQ1YzAtOWY2Yi0wMzNi N2Q4ODQzODguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARSrcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAM+IUhrpTH8PHb2pYrdqulirVGQdDdP/UAQQKjg2imMYDN3ziN+GPUrj U4xGBSftfnmvgk9XQnXzcheqPCrqZ0nmo7xzAampnQcqyg4wdNNk8Pk5ZjxpMmSj 01tQmIIYEkS2ffhIWCUVVkZX1v3+7ZtO44qF+bvtLP973lvToK1alxwL9HZoObSX y0e0/4ukMNhQR5u3Dr3X/Eyv9EE1HXRaGOGnQLLhsL+c16+TsWs6DlGSWiEdPNy6 uxuOLb/zurBWf63E4Z1EUdRC/MvX7tiFrTZgjEBOJY9tmqjN0xzakR7MfzaxN+JX wFo6pF7eB8MHanXlpsLhYZlwkYNXVT4= -----END CERTIFICATE-----Generated at Fri Oct 24 15:20:34 2025 by rpki-client