$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/c024bbee-23b7-32a0-a732-a4c7c0a2b58c.roa File: c024bbee-23b7-32a0-a732-a4c7c0a2b58c.roa (raw, json) Hash identifier: JYYSbrWMAH1esqxUF7on4KVjtyT9fmt92HPKGvcnWqk= Subject key identifier: 4E:B4:A9:3F:A8:66:83:9D:08:AE:87:34:40:12:0D:F3:DB:85:EA:2E Certificate issuer: /CN=86fea470-b380-45c0-9f6b-033b7d884388 Certificate serial: 010D0C9F43285849EBEA568334451198955227C0 Authority key identifier: 08:74:8A:31:09:3C:2C:49:44:A1:2E:8A:D6:5C:9E:92:04:01:CF:16 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/c024bbee-23b7-32a0-a732-a4c7c0a2b58c.roa Signing time: Wed 21 May 2025 01:00:49 +0000 ROA not before: Wed 21 May 2025 01:00:49 +0000 ROA not after: Tue 19 Aug 2025 01:00:49 +0000 asID: 54852 IP address blocks: 68.168.23.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/86fea470-b380-45c0-9f6b-033b7d884388.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/86fea470-b380-45c0-9f6b-033b7d884388.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 07 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:eb:ea:56:83:34:45:11:98:95:52:27:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86fea470-b380-45c0-9f6b-033b7d884388 Validity Not Before: May 21 01:00:49 2025 GMT Not After : Aug 19 01:00:49 2025 GMT Subject: CN=0de5099b-c971-4996-9a6c-12984db91bfb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:5a:ae:d6:ad:ba:3d:6d:5f:98:fc:c4:a7:0c: 30:e1:f9:9c:7c:1f:01:8e:4d:a1:ba:8d:89:56:8a: b9:39:00:e0:fd:57:b5:8e:27:8f:e1:0e:5b:0c:a4: 24:4b:03:80:87:71:27:91:8b:68:d5:05:37:97:07: d6:3e:b3:88:93:ec:15:01:9c:5b:d8:09:2c:56:05: 70:37:0d:1e:73:26:d2:58:2f:d4:f5:46:8e:18:3d: fe:1d:b5:bd:1c:4f:4d:94:32:94:97:a4:87:91:7a: 58:9c:52:d1:51:df:18:a4:41:bb:9e:7e:8d:1c:d2: 9f:9a:1c:1d:1f:9c:ff:b0:b5:e9:1f:57:81:99:7e: 34:bd:c8:cd:d2:a7:f3:e8:a9:70:a6:0e:11:d7:f3: 7e:00:b7:3d:bd:d1:99:59:91:82:dd:68:4d:f5:6d: a1:01:aa:69:97:71:a2:e5:ff:e7:29:02:39:61:40: 12:db:b4:70:ef:c3:cb:01:d9:65:d2:a4:64:cb:21: ee:5f:63:88:e3:d1:db:5f:01:60:12:0e:19:1d:0c: cf:4c:f6:12:82:13:ff:ef:85:d5:77:69:82:df:92: 3f:eb:83:cd:cb:62:f6:21:72:7d:06:8b:bb:b1:95: 8c:9c:40:d0:a2:c9:5e:6e:7b:31:60:7f:a8:fd:87: 7a:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:B4:A9:3F:A8:66:83:9D:08:AE:87:34:40:12:0D:F3:DB:85:EA:2E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/c024bbee-23b7-32a0-a732-a4c7c0a2b58c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/86fea470-b380-45c0-9f6b-033b7d884388.crl X509v3 Authority Key Identifier: keyid:08:74:8A:31:09:3C:2C:49:44:A1:2E:8A:D6:5C:9E:92:04:01:CF:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388.cer sbgp-ipAddrBlock: critical IPv4: 68.168.23.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b7:50:7a:9d:07:68:d4:db:f4:3e:21:9c:5d:a0:06:43:69:af: 77:b5:b4:e1:75:c1:75:64:3d:ad:9b:58:21:e7:d6:15:35:58: 24:81:c7:9e:f2:ef:16:1b:45:3a:eb:2c:29:ef:7c:37:dc:78: 75:85:ed:1f:90:a8:da:54:e2:b4:c8:ce:0e:47:51:e4:36:f0: 8f:8e:e2:58:0f:2a:98:33:d9:9a:8a:ad:7f:58:ca:dd:b7:20: 93:b8:16:17:a3:92:fb:f9:4a:f5:54:a6:06:de:6c:0c:fb:af: fa:a8:4e:64:16:42:6c:2f:8c:b5:af:a1:ee:13:fd:59:8d:9c: e1:25:77:23:d9:9c:65:ef:8f:28:e7:a6:0b:24:85:8e:d8:2b: e4:da:04:2a:ec:a9:77:34:87:c1:12:d7:a9:15:0e:00:92:4a: 17:73:7b:32:18:84:d6:72:16:b5:72:c4:4f:63:1f:12:6b:6d: 80:c6:dd:de:2b:64:7a:3f:ba:bb:5f:17:c6:77:6f:bb:67:27: 79:3f:c8:bc:98:0d:f7:8a:99:c5:6c:a1:a1:73:bd:2f:95:7a: 37:f4:38:07:e0:4d:05:d0:26:27:29:7a:b6:8c:31:48:74:c3: b6:cd:29:e6:85:bb:2d:4a:ad:ee:8b:26:b3:0e:ea:4d:7c:9c: ba:b6:20:c4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnr6laDNEURmJVSJ8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODZmZWE0NzAtYjM4MC00NWMwLTlmNmItMDMzYjdkODg0 Mzg4MB4XDTI1MDUyMTAxMDA0OVoXDTI1MDgxOTAxMDA0OVowLzEtMCsGA1UEAxMk MGRlNTA5OWItYzk3MS00OTk2LTlhNmMtMTI5ODRkYjkxYmZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoFqu1q26PW1fmPzEpwww4fmcfB8Bjk2huo2J Voq5OQDg/Ve1jieP4Q5bDKQkSwOAh3EnkYto1QU3lwfWPrOIk+wVAZxb2AksVgVw Nw0ecybSWC/U9UaOGD3+HbW9HE9NlDKUl6SHkXpYnFLRUd8YpEG7nn6NHNKfmhwd H5z/sLXpH1eBmX40vcjN0qfz6Klwpg4R1/N+ALc9vdGZWZGC3WhN9W2hAappl3Gi 5f/nKQI5YUAS27Rw78PLAdll0qRkyyHuX2OI49HbXwFgEg4ZHQzPTPYSghP/74XV d2mC35I/64PNy2L2IXJ9Bou7sZWMnEDQoslebnsxYH+o/Yd6ZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE60qT+oZoOdCK6HNEASDfPbheouMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS84NmZl YTQ3MC1iMzgwLTQ1YzAtOWY2Yi0wMzNiN2Q4ODQzODgvYzAyNGJiZWUtMjNiNy0z MmEwLWE3MzItYTRjN2MwYTJiNThjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvODZmZWE0NzAtYjM4MC00NWMwLTlm NmItMDMzYjdkODg0Mzg4Lzg2ZmVhNDcwLWIzODAtNDVjMC05ZjZiLTAzM2I3ZDg4 NDM4OC5jcmwwHwYDVR0jBBgwFoAUCHSKMQk8LElEoS6K1lyekgQBzxYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS84NmZlYTQ3MC1iMzgwLTQ1YzAtOWY2Yi0wMzNi N2Q4ODQzODguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARKgXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALdQep0HaNTb9D4hnF2gBkNpr3e1tOF1wXVkPa2bWCHn1hU1WCSBx57y 7xYbRTrrLCnvfDfceHWF7R+QqNpU4rTIzg5HUeQ28I+O4lgPKpgz2ZqKrX9Yyt23 IJO4Fhejkvv5SvVUpgbebAz7r/qoTmQWQmwvjLWvoe4T/VmNnOEldyPZnGXvjyjn pgskhY7YK+TaBCrsqXc0h8ES16kVDgCSShdzezIYhNZyFrVyxE9jHxJrbYDG3d4r ZHo/urtfF8Z3b7tnJ3k/yLyYDfeKmcVsoaFzvS+Vejf0OAfgTQXQJicperaMMUh0 w7bNKeaFuy1Kre6LJrMO6k18nLq2IMQ= -----END CERTIFICATE-----Generated at Fri Jun 6 06:25:30 2025 by rpki-client