$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a636afd-ece5-4e23-a54f-c43e0fc08124/86ce795d-c584-310b-9693-21cb26b6e90a.roa File: 86ce795d-c584-310b-9693-21cb26b6e90a.roa (raw, json) Hash identifier: qqdYngo5D+o3hg9kBFr/sMg94Z0lGGys0C4Qy/8CSjI= Subject key identifier: 99:68:C2:6F:20:70:FE:39:F9:BC:E0:9C:B4:44:71:3A:AC:B4:F1:B2 Certificate issuer: /CN=3a636afd-ece5-4e23-a54f-c43e0fc08124 Certificate serial: 010D0C9F4328584AE4610F163E52265FBAA4CE80 Authority key identifier: 8B:CE:40:F1:5E:3E:E3:95:3C:35:42:B6:04:3C:3E:D1:61:07:37:23 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a636afd-ece5-4e23-a54f-c43e0fc08124.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a636afd-ece5-4e23-a54f-c43e0fc08124/86ce795d-c584-310b-9693-21cb26b6e90a.roa Signing time: Mon 18 Aug 2025 01:00:33 +0000 ROA not before: Mon 18 Aug 2025 01:00:33 +0000 ROA not after: Sun 16 Nov 2025 02:00:33 +0000 asID: 14618 IP address blocks: 148.59.78.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a636afd-ece5-4e23-a54f-c43e0fc08124/3a636afd-ece5-4e23-a54f-c43e0fc08124.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a636afd-ece5-4e23-a54f-c43e0fc08124/3a636afd-ece5-4e23-a54f-c43e0fc08124.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a636afd-ece5-4e23-a54f-c43e0fc08124.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e4:61:0f:16:3e:52:26:5f:ba:a4:ce:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3a636afd-ece5-4e23-a54f-c43e0fc08124 Validity Not Before: Aug 18 01:00:33 2025 GMT Not After : Nov 16 02:00:33 2025 GMT Subject: CN=1c46e74e-853b-4289-89a7-76d56d3677e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:7a:c8:65:59:cb:5b:63:c2:fb:30:e1:0d:df: 7e:f3:05:71:5a:c4:82:dc:04:b7:7a:d6:ee:a9:7e: 15:67:a5:fc:fc:b6:a7:f2:ef:2f:69:c4:b4:1c:b4: a5:99:63:e7:dc:2c:cc:fd:58:27:bd:24:a9:aa:80: 36:3e:96:4f:17:86:8b:51:5a:0f:cf:98:fe:0b:b7: 55:c9:8c:56:5b:cd:f1:63:2a:2f:87:de:2d:dd:da: f3:29:51:e6:79:60:35:29:71:95:07:c1:7e:09:01: 64:6e:aa:43:a2:28:7d:f1:e7:7d:7c:7e:f4:a8:fa: 9e:b6:f6:59:a1:33:2c:b2:86:9e:57:44:26:11:ec: b0:6d:97:00:ec:ac:94:9f:32:8b:69:b9:21:84:e1: 3e:e9:b3:37:fe:6a:c1:bf:71:7a:8c:3b:db:40:a9: 7b:d8:91:66:55:c1:9f:54:7f:5c:57:b8:6d:9a:79: 75:bb:11:e5:03:5c:55:ef:41:47:63:11:ce:63:d5: e1:81:3d:1a:5a:35:d6:9c:ae:a7:c2:5c:28:62:18: b8:95:4f:33:c8:cc:89:c9:c8:e1:98:15:d3:57:76: 1c:ac:0d:fa:50:6f:63:a4:97:76:96:2a:1a:77:08: b6:0d:a7:fc:13:b5:bb:41:22:bd:d0:0c:55:f8:94: a6:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:68:C2:6F:20:70:FE:39:F9:BC:E0:9C:B4:44:71:3A:AC:B4:F1:B2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a636afd-ece5-4e23-a54f-c43e0fc08124/86ce795d-c584-310b-9693-21cb26b6e90a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a636afd-ece5-4e23-a54f-c43e0fc08124/3a636afd-ece5-4e23-a54f-c43e0fc08124.crl X509v3 Authority Key Identifier: keyid:8B:CE:40:F1:5E:3E:E3:95:3C:35:42:B6:04:3C:3E:D1:61:07:37:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a636afd-ece5-4e23-a54f-c43e0fc08124.cer sbgp-ipAddrBlock: critical IPv4: 148.59.78.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:b5:ba:f0:bb:65:a6:ad:b9:07:3a:33:6c:3e:c7:e2:6a:b1: c2:d2:54:f9:22:c7:a8:37:1f:1e:2b:71:a9:bb:53:a9:d9:02: e8:c5:43:f1:be:e3:45:fd:3f:31:9c:c6:e7:0a:31:5b:3d:21: 23:e0:c1:63:f7:ad:d5:9b:a5:0c:17:0c:6b:8e:5c:e7:44:8e: 99:b4:27:72:9a:a5:4f:7e:69:bd:fb:51:97:93:0a:6c:6d:37: 0c:5b:b3:35:73:c2:1b:48:f3:78:29:10:22:b9:70:91:0e:54: 5e:4a:97:d9:2d:eb:e2:e1:f3:58:89:bb:f5:0b:93:18:fe:ef: fb:27:16:7c:94:64:11:78:89:b6:ad:ad:97:aa:7d:5c:d0:c7: 1e:96:0b:14:98:fd:8f:14:5a:a2:bc:27:86:c1:3d:c9:09:dc: d5:d3:e3:d8:27:80:3b:cd:7a:5b:05:59:cb:d0:35:00:74:79: bc:8f:ba:c7:c3:05:e7:00:51:b6:c6:d6:6f:63:3f:f5:77:a4: 84:9f:ed:5c:21:f4:a1:45:8a:28:c8:ac:da:94:a5:c4:41:49: 97:a6:2b:cf:74:41:58:90:fd:35:d8:78:c1:02:d7:47:fb:5d: 1d:6f:2d:37:cb:3d:be:3d:ee:54:a3:83:75:fd:22:96:0f:a9: 30:74:bf:68 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErkYQ8WPlImX7qkzoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2E2MzZhZmQtZWNlNS00ZTIzLWE1NGYtYzQzZTBmYzA4 MTI0MB4XDTI1MDgxODAxMDAzM1oXDTI1MTExNjAyMDAzM1owLzEtMCsGA1UEAxMk MWM0NmU3NGUtODUzYi00Mjg5LTg5YTctNzZkNTZkMzY3N2U2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApXrIZVnLW2PC+zDhDd9+8wVxWsSC3AS3etbu qX4VZ6X8/Lan8u8vacS0HLSlmWPn3CzM/VgnvSSpqoA2PpZPF4aLUVoPz5j+C7dV yYxWW83xYyovh94t3drzKVHmeWA1KXGVB8F+CQFkbqpDoih98ed9fH70qPqetvZZ oTMssoaeV0QmEeywbZcA7KyUnzKLabkhhOE+6bM3/mrBv3F6jDvbQKl72JFmVcGf VH9cV7htmnl1uxHlA1xV70FHYxHOY9XhgT0aWjXWnK6nwlwoYhi4lU8zyMyJycjh mBXTV3YcrA36UG9jpJd2lioadwi2Daf8E7W7QSK90AxV+JSmuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJlowm8gcP45+bzgnLREcTqstPGyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zYTYz NmFmZC1lY2U1LTRlMjMtYTU0Zi1jNDNlMGZjMDgxMjQvODZjZTc5NWQtYzU4NC0z MTBiLTk2OTMtMjFjYjI2YjZlOTBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvM2E2MzZhZmQtZWNlNS00ZTIzLWE1 NGYtYzQzZTBmYzA4MTI0LzNhNjM2YWZkLWVjZTUtNGUyMy1hNTRmLWM0M2UwZmMw ODEyNC5jcmwwHwYDVR0jBBgwFoAUi85A8V4+45U8NUK2BDw+0WEHNyMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zYTYzNmFmZC1lY2U1LTRlMjMtYTU0Zi1jNDNl MGZjMDgxMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlDtOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIW1uvC7ZaatuQc6M2w+x+JqscLSVPkix6g3Hx4rcam7U6nZAujFQ/G+ 40X9PzGcxucKMVs9ISPgwWP3rdWbpQwXDGuOXOdEjpm0J3KapU9+ab37UZeTCmxt NwxbszVzwhtI83gpECK5cJEOVF5Kl9kt6+Lh81iJu/ULkxj+7/snFnyUZBF4ibat rZeqfVzQxx6WCxSY/Y8UWqK8J4bBPckJ3NXT49gngDvNelsFWcvQNQB0ebyPusfD BecAUbbG1m9jP/V3pISf7Vwh9KFFiijIrNqUpcRBSZemK890QViQ/TXYeMEC10f7 XR1vLTfLPb497lSjg3X9IpYPqTB0v2g= -----END CERTIFICATE-----Generated at Sat Aug 23 06:45:57 2025 by rpki-client