$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/f7b3b4db-44c1-3096-8bf9-01bfba232028.roa File: f7b3b4db-44c1-3096-8bf9-01bfba232028.roa (raw, json) Hash identifier: jjtNCs5WdJPLlXWKtdt2rOgq4okBIMzyTApMXezg93o= Subject key identifier: 18:26:80:3C:4C:30:85:BF:EF:FA:21:95:F2:50:C2:47:41:9F:ED:20 Certificate issuer: /CN=86fea470-b380-45c0-9f6b-033b7d884388 Certificate serial: 010D0C9F4328584BC353B88D9690E6554A779D80 Authority key identifier: 08:74:8A:31:09:3C:2C:49:44:A1:2E:8A:D6:5C:9E:92:04:01:CF:16 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/f7b3b4db-44c1-3096-8bf9-01bfba232028.roa Signing time: Mon 01 Sep 2025 13:00:40 +0000 ROA not before: Mon 01 Sep 2025 13:00:40 +0000 ROA not after: Sun 30 Nov 2025 14:00:40 +0000 asID: 63023 IP address blocks: 67.220.66.0/23 maxlen: 24 67.220.70.0/23 maxlen: 24 67.220.72.0/22 maxlen: 24 67.220.80.0/24 maxlen: 24 67.220.82.0/24 maxlen: 24 67.220.85.0/24 maxlen: 24 67.220.86.0/23 maxlen: 24 67.220.88.0/23 maxlen: 24 67.220.94.0/23 maxlen: 24 68.168.31.0/24 maxlen: 24 69.42.209.0/24 maxlen: 24 186.190.215.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/86fea470-b380-45c0-9f6b-033b7d884388.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/86fea470-b380-45c0-9f6b-033b7d884388.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 12 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c3:53:b8:8d:96:90:e6:55:4a:77:9d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86fea470-b380-45c0-9f6b-033b7d884388 Validity Not Before: Sep 1 13:00:40 2025 GMT Not After : Nov 30 14:00:40 2025 GMT Subject: CN=7d98acae-6a60-474e-ad85-bde6c30ae091 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:55:f7:6a:7c:99:4f:e1:f5:f9:c8:d1:27:35: 10:e9:c6:1b:29:76:61:c6:4e:dc:0a:39:1a:ae:36: 25:7c:77:a2:3e:58:49:1f:7b:5a:09:0b:df:21:2a: 1f:62:8e:ca:22:53:22:32:cf:9d:7d:e3:94:c9:61: a2:95:01:d8:52:4d:44:24:8b:e4:1c:69:8b:fd:72: c7:bc:94:66:c1:3a:2d:77:36:ed:da:cd:31:eb:bd: 7e:ee:70:68:ed:c7:0e:aa:92:a2:39:12:82:3d:22: c4:98:fa:fa:71:6c:5d:67:23:f1:13:30:55:ed:cf: 2a:59:75:90:26:ac:fa:34:78:fb:92:ea:5c:d8:6a: 53:8b:30:ca:eb:1e:15:f7:2e:81:b2:54:69:b2:60: 04:63:6a:5f:2b:8b:e5:41:69:bd:38:a6:86:73:86: 5a:fd:a1:92:93:34:3d:9e:04:6a:3b:95:fe:6c:98: 26:2f:5d:06:bf:81:6a:f1:fd:f7:08:eb:eb:4b:7f: 3c:31:3e:b4:33:e2:d4:3e:ac:6b:d1:b0:b1:23:4b: f9:24:d5:46:21:69:15:f2:96:b9:f2:66:fa:58:57: c2:18:70:df:30:84:c9:1e:fb:e6:5e:6b:7a:bc:87: c7:65:c1:56:e1:01:ea:f2:ae:89:f3:49:49:db:52: 45:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:26:80:3C:4C:30:85:BF:EF:FA:21:95:F2:50:C2:47:41:9F:ED:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/f7b3b4db-44c1-3096-8bf9-01bfba232028.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/86fea470-b380-45c0-9f6b-033b7d884388.crl X509v3 Authority Key Identifier: keyid:08:74:8A:31:09:3C:2C:49:44:A1:2E:8A:D6:5C:9E:92:04:01:CF:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388.cer sbgp-ipAddrBlock: critical IPv4: 67.220.66.0/23 67.220.70.0-67.220.75.255 67.220.80.0/24 67.220.82.0/24 67.220.85.0-67.220.89.255 67.220.94.0/23 68.168.31.0/24 69.42.209.0/24 186.190.215.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:f9:80:19:eb:98:a6:63:14:a2:10:0c:d7:ca:a5:3f:1f:4f: 02:23:40:35:52:44:c4:aa:2b:92:6e:ae:07:66:47:35:3e:d7: 9a:82:5c:95:6c:81:72:38:db:49:1c:55:18:3e:56:8a:48:20: 6f:48:c6:21:9c:4c:42:a8:13:09:3a:65:69:18:6e:78:51:0d: 40:16:21:bf:12:1d:47:7f:ac:28:8b:50:1b:35:a7:ba:19:bf: c4:b3:b2:32:b5:a1:04:b6:dc:22:fd:db:4b:71:88:29:2e:06: 59:1c:fa:ef:80:e0:41:3f:f9:01:53:fc:3b:c4:56:92:e1:04: 3c:8e:24:d1:32:fb:ab:a8:65:a9:e1:4c:41:e9:3c:f0:e4:00: 95:9d:53:62:8f:10:10:53:58:ab:b3:67:a3:80:4a:37:fc:ca: e2:93:44:76:3a:3b:75:97:b6:34:07:8a:6e:05:ba:cd:d4:c6: 88:14:3c:ac:3f:f9:91:1d:cb:2f:0a:66:53:ec:59:0b:74:59: 7b:6e:a0:df:84:96:d1:9f:05:86:64:1d:f4:6e:ff:78:d0:e8: f4:af:a0:25:a2:68:d5:3f:08:6b:8d:a6:e7:b5:54:63:66:ab: 2c:44:33:a4:68:f5:0e:ac:21:f6:e2:68:75:bf:19:45:f7:58: 65:51:7d:87 -----BEGIN CERTIFICATE----- MIIGgzCCBWugAwIBAgIUAQ0Mn0MoWEvDU7iNlpDmVUp3nYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODZmZWE0NzAtYjM4MC00NWMwLTlmNmItMDMzYjdkODg0 Mzg4MB4XDTI1MDkwMTEzMDA0MFoXDTI1MTEzMDE0MDA0MFowLzEtMCsGA1UEAxMk N2Q5OGFjYWUtNmE2MC00NzRlLWFkODUtYmRlNmMzMGFlMDkxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnFX3anyZT+H1+cjRJzUQ6cYbKXZhxk7cCjka rjYlfHeiPlhJH3taCQvfISofYo7KIlMiMs+dfeOUyWGilQHYUk1EJIvkHGmL/XLH vJRmwTotdzbt2s0x671+7nBo7ccOqpKiORKCPSLEmPr6cWxdZyPxEzBV7c8qWXWQ Jqz6NHj7kupc2GpTizDK6x4V9y6BslRpsmAEY2pfK4vlQWm9OKaGc4Za/aGSkzQ9 ngRqO5X+bJgmL10Gv4Fq8f33COvrS388MT60M+LUPqxr0bCxI0v5JNVGIWkV8pa5 8mb6WFfCGHDfMITJHvvmXmt6vIfHZcFW4QHq8q6J80lJ21JFmQIDAQABo4IDlTCC A5EwHQYDVR0OBBYEFBgmgDxMMIW/7/ohlfJQwkdBn+0gMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS84NmZl YTQ3MC1iMzgwLTQ1YzAtOWY2Yi0wMzNiN2Q4ODQzODgvZjdiM2I0ZGItNDRjMS0z MDk2LThiZjktMDFiZmJhMjMyMDI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvODZmZWE0NzAtYjM4MC00NWMwLTlm NmItMDMzYjdkODg0Mzg4Lzg2ZmVhNDcwLWIzODAtNDVjMC05ZjZiLTAzM2I3ZDg4 NDM4OC5jcmwwHwYDVR0jBBgwFoAUCHSKMQk8LElEoS6K1lyekgQBzxYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS84NmZlYTQ3MC1iMzgwLTQ1YzAtOWY2Yi0wMzNi N2Q4ODQzODguY2VyMF8GCCsGAQUFBwEHAQH/BFAwTjBMBAIAATBGAwQBQ9xCMAwD BAFD3EYDBAJD3EgDBABD3FADBABD3FIwDAMEAEPcVQMEAUPcWAMEAUPcXgMEAESo HwMEAEUq0QMEALq+1zBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCO+YAZ65imYxSiEAzXyqU/H08CI0A1UkTE qiuSbq4HZkc1PteaglyVbIFyONtJHFUYPlaKSCBvSMYhnExCqBMJOmVpGG54UQ1A FiG/Eh1Hf6woi1AbNae6Gb/Es7IytaEEttwi/dtLcYgpLgZZHPrvgOBBP/kBU/w7 xFaS4QQ8jiTRMvurqGWp4UxB6Tzw5ACVnVNijxAQU1irs2ejgEo3/Mrik0R2Ojt1 l7Y0B4puBbrN1MaIFDysP/mRHcsvCmZT7FkLdFl7bqDfhJbRnwWGZB30bv940Oj0 r6AlomjVPwhrjabntVRjZqssRDOkaPUOrCH24mh1vxlF91hlUX2H -----END CERTIFICATE-----Generated at Mon Nov 10 14:15:28 2025 by rpki-client