$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/f85dcb0a-3f9e-3aaa-9818-ef0cff74b75d.roa File: f85dcb0a-3f9e-3aaa-9818-ef0cff74b75d.roa (raw, json) Hash identifier: /6sPw9vD33NRX7HdNS7MM2jeb6slCjPSA03fbwrFLVo= Subject key identifier: E1:E9:7C:8B:DD:91:ED:53:42:AF:D9:A2:CE:14:FC:18:70:CE:41:0F Certificate issuer: /CN=86fea470-b380-45c0-9f6b-033b7d884388 Certificate serial: 010D0C9F4328584B047C1076836EF395C4670FE0 Authority key identifier: 08:74:8A:31:09:3C:2C:49:44:A1:2E:8A:D6:5C:9E:92:04:01:CF:16 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/f85dcb0a-3f9e-3aaa-9818-ef0cff74b75d.roa Signing time: Fri 29 Aug 2025 13:00:41 +0000 ROA not before: Fri 29 Aug 2025 13:00:41 +0000 ROA not after: Thu 27 Nov 2025 14:00:41 +0000 asID: 62563 IP address blocks: 67.220.94.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/86fea470-b380-45c0-9f6b-033b7d884388.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/86fea470-b380-45c0-9f6b-033b7d884388.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 09 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:04:7c:10:76:83:6e:f3:95:c4:67:0f:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86fea470-b380-45c0-9f6b-033b7d884388 Validity Not Before: Aug 29 13:00:41 2025 GMT Not After : Nov 27 14:00:41 2025 GMT Subject: CN=cd54d73b-8bf7-4330-98fb-558803a21f54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:93:f2:34:10:4a:e4:b1:1f:bc:0a:4b:93:13: 30:27:fd:63:57:3b:6c:24:eb:bb:55:a7:7f:7f:27: 28:6e:b4:3c:39:86:75:db:4b:aa:98:29:97:bc:97: 65:77:ae:db:2f:75:87:9c:52:12:03:62:5b:fb:e9: 6c:54:65:83:dd:19:77:29:db:f1:24:8d:b9:b0:5f: f2:09:a3:b6:d4:b6:1c:1a:cc:78:de:42:1f:28:72: 5c:23:ba:36:5b:b3:b4:ff:3c:6d:eb:1e:15:48:62: b9:fa:b8:b9:16:2b:0c:4b:c1:0c:96:b9:24:fc:0c: a8:05:7f:73:5d:52:05:97:b7:42:83:39:ec:6a:f0: 43:76:b4:61:03:82:26:20:0e:e9:9f:d7:01:1c:43: 46:64:31:e4:b8:07:59:ef:33:8f:73:c1:67:49:d6: c8:9d:b0:55:f9:6f:c9:9c:6e:3c:e0:78:80:fe:55: ad:eb:da:01:bf:ae:7b:fc:6d:aa:59:30:1e:af:d0: 52:96:47:8e:2f:17:79:e5:1f:0a:02:a8:07:41:45: 7e:0a:8f:b1:e3:31:82:bb:5a:c7:a4:3d:f6:38:b3: 77:9b:a7:a5:e5:49:c0:cc:2d:72:f7:01:81:8a:87: ab:d7:de:2e:69:f6:71:fa:53:6b:3b:47:1e:a2:f2: be:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:E9:7C:8B:DD:91:ED:53:42:AF:D9:A2:CE:14:FC:18:70:CE:41:0F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/f85dcb0a-3f9e-3aaa-9818-ef0cff74b75d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/86fea470-b380-45c0-9f6b-033b7d884388.crl X509v3 Authority Key Identifier: keyid:08:74:8A:31:09:3C:2C:49:44:A1:2E:8A:D6:5C:9E:92:04:01:CF:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388.cer sbgp-ipAddrBlock: critical IPv4: 67.220.94.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:01:6c:c6:10:7f:cf:7e:02:1e:f5:d6:23:a1:f8:9d:03:69: 8d:1a:e0:4f:29:34:fe:3d:cd:57:1c:69:f7:37:8a:e2:8b:68: ba:bd:47:77:6d:2f:2b:1f:ad:bb:90:3f:42:cb:c7:13:9f:a0: 89:62:f8:aa:50:54:8f:b6:16:d0:0c:85:af:17:9b:72:64:94: a6:02:b3:f4:a0:76:e3:4a:69:5f:1f:69:2f:dc:0e:1f:0d:d9: 54:12:b7:c7:a9:26:47:41:2d:bd:54:22:c6:1e:3a:eb:90:42: f5:2c:aa:ec:a6:10:c6:88:3c:9c:35:bf:87:c2:b8:f2:cc:89: c3:e2:10:91:10:c4:51:79:df:78:68:f5:f0:d5:1c:e1:ce:63: 00:0a:f1:99:e3:ac:9d:bd:e2:25:c4:79:8f:72:5c:65:9a:f9: 3e:0c:77:29:cb:28:64:cf:82:7a:47:c4:59:49:b2:08:bd:54: b4:45:cb:53:94:67:05:2b:5b:71:db:2c:30:a5:31:98:3b:5c: 78:7a:03:6b:09:bd:aa:5e:75:60:c5:e3:51:d7:f2:4b:11:23: 90:38:4f:e4:5c:0c:19:1f:40:66:21:8f:d0:d3:b9:f8:cf:b6: 5a:32:07:e9:08:60:99:13:d3:c6:ee:74:35:55:6f:95:2c:b3: cc:b6:81:84 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsEfBB2g27zlcRnD+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODZmZWE0NzAtYjM4MC00NWMwLTlmNmItMDMzYjdkODg0 Mzg4MB4XDTI1MDgyOTEzMDA0MVoXDTI1MTEyNzE0MDA0MVowLzEtMCsGA1UEAxMk Y2Q1NGQ3M2ItOGJmNy00MzMwLTk4ZmItNTU4ODAzYTIxZjU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi5PyNBBK5LEfvApLkxMwJ/1jVztsJOu7Vad/ fycobrQ8OYZ120uqmCmXvJdld67bL3WHnFISA2Jb++lsVGWD3Rl3KdvxJI25sF/y CaO21LYcGsx43kIfKHJcI7o2W7O0/zxt6x4VSGK5+ri5FisMS8EMlrkk/AyoBX9z XVIFl7dCgznsavBDdrRhA4ImIA7pn9cBHENGZDHkuAdZ7zOPc8FnSdbInbBV+W/J nG484HiA/lWt69oBv657/G2qWTAer9BSlkeOLxd55R8KAqgHQUV+Co+x4zGCu1rH pD32OLN3m6el5UnAzC1y9wGBioer194uafZx+lNrO0ceovK+dQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOHpfIvdke1TQq/Zos4U/BhwzkEPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS84NmZl YTQ3MC1iMzgwLTQ1YzAtOWY2Yi0wMzNiN2Q4ODQzODgvZjg1ZGNiMGEtM2Y5ZS0z YWFhLTk4MTgtZWYwY2ZmNzRiNzVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvODZmZWE0NzAtYjM4MC00NWMwLTlm NmItMDMzYjdkODg0Mzg4Lzg2ZmVhNDcwLWIzODAtNDVjMC05ZjZiLTAzM2I3ZDg4 NDM4OC5jcmwwHwYDVR0jBBgwFoAUCHSKMQk8LElEoS6K1lyekgQBzxYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS84NmZlYTQ3MC1iMzgwLTQ1YzAtOWY2Yi0wMzNi N2Q4ODQzODguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQ9xeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD4BbMYQf89+Ah711iOh+J0DaY0a4E8pNP49zVccafc3iuKLaLq9R3dt LysfrbuQP0LLxxOfoIli+KpQVI+2FtAMha8Xm3JklKYCs/SgduNKaV8faS/cDh8N 2VQSt8epJkdBLb1UIsYeOuuQQvUsquymEMaIPJw1v4fCuPLMicPiEJEQxFF533ho 9fDVHOHOYwAK8ZnjrJ294iXEeY9yXGWa+T4MdynLKGTPgnpHxFlJsgi9VLRFy1OU ZwUrW3HbLDClMZg7XHh6A2sJvapedWDF41HX8ksRI5A4T+RcDBkfQGYhj9DTufjP tloyB+kIYJkT08budDVVb5Uss8y2gYQ= -----END CERTIFICATE-----Generated at Mon Sep 8 09:58:29 2025 by rpki-client