$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/086f01d4-c895-4205-9b95-29c50942197b/7306f123-b77b-3f28-a985-d5c709e98f55.roa File: 7306f123-b77b-3f28-a985-d5c709e98f55.roa (raw, json) Hash identifier: bA8w0XZSug+lBciekk7ApnhqooU+V15x0KhsKKxUo48= Subject key identifier: 35:55:AD:33:4A:DB:E2:4E:E4:09:23:A9:42:DF:97:97:EB:CB:D6:83 Certificate issuer: /CN=086f01d4-c895-4205-9b95-29c50942197b Certificate serial: 010D0C9F4328584B84E7681482811040F255D5C0 Authority key identifier: E4:5D:AB:DE:F1:67:DE:86:4B:CE:19:B3:B7:AF:B8:C8:11:19:D4:13 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/086f01d4-c895-4205-9b95-29c50942197b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/086f01d4-c895-4205-9b95-29c50942197b/7306f123-b77b-3f28-a985-d5c709e98f55.roa Signing time: Tue 14 Oct 2025 13:00:37 +0000 ROA not before: Tue 14 Oct 2025 13:00:37 +0000 ROA not after: Mon 12 Jan 2026 14:00:37 +0000 asID: 7050 IP address blocks: 192.107.164.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/086f01d4-c895-4205-9b95-29c50942197b/086f01d4-c895-4205-9b95-29c50942197b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/086f01d4-c895-4205-9b95-29c50942197b/086f01d4-c895-4205-9b95-29c50942197b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/086f01d4-c895-4205-9b95-29c50942197b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:84:e7:68:14:82:81:10:40:f2:55:d5:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=086f01d4-c895-4205-9b95-29c50942197b Validity Not Before: Oct 14 13:00:37 2025 GMT Not After : Jan 12 14:00:37 2026 GMT Subject: CN=65a3e84e-4471-4d62-98c3-462f64863fea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:ae:ac:e6:5d:86:2e:2a:20:17:95:bb:a2:7d: 67:33:17:24:68:cb:eb:97:d4:eb:07:74:14:04:69: e0:6e:b4:e7:2e:28:a8:d6:54:d1:69:e7:8e:08:1f: c7:57:1e:66:d6:46:96:a5:05:c5:36:42:44:79:2a: 78:fb:7f:08:36:f2:5e:b8:45:f1:f2:b5:85:05:68: c6:98:53:45:23:ce:35:d5:34:4d:5f:bc:8c:c8:04: d3:f1:bf:15:07:e5:c7:4a:de:63:e7:16:20:ed:2f: c4:cd:da:a1:74:14:9f:b1:bd:f2:12:94:2e:b6:7c: 66:06:90:28:68:41:b0:ca:d8:46:6d:ed:57:ca:30: 2c:ac:b8:04:cd:65:1e:f7:67:08:6e:0c:58:e9:c5: 50:9c:8a:f0:a3:d6:29:f6:c2:e6:eb:c5:fc:09:26: e3:7f:31:47:fe:13:6d:e3:ed:29:c0:35:d3:b0:4d: 22:92:82:db:ba:7d:fe:1e:44:1c:fe:0f:bb:16:a5: b0:e4:48:d8:2c:d8:41:0d:77:92:3f:af:c5:f0:ab: 63:af:4f:0b:04:5f:dd:cf:d1:0f:d5:b0:6e:af:ae: eb:7e:53:a8:ac:4e:1d:fd:96:ce:66:c6:f4:27:ae: ba:01:b9:2a:24:e2:cd:b6:14:03:f0:4f:56:ba:d6: d1:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:55:AD:33:4A:DB:E2:4E:E4:09:23:A9:42:DF:97:97:EB:CB:D6:83 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/086f01d4-c895-4205-9b95-29c50942197b/7306f123-b77b-3f28-a985-d5c709e98f55.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/086f01d4-c895-4205-9b95-29c50942197b/086f01d4-c895-4205-9b95-29c50942197b.crl X509v3 Authority Key Identifier: keyid:E4:5D:AB:DE:F1:67:DE:86:4B:CE:19:B3:B7:AF:B8:C8:11:19:D4:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/086f01d4-c895-4205-9b95-29c50942197b.cer sbgp-ipAddrBlock: critical IPv4: 192.107.164.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:66:d0:c6:0f:30:c0:52:f8:23:3f:bb:19:7d:8a:42:b6:7f: 22:19:49:4b:8a:f5:5b:8d:fd:9c:44:d7:29:33:7c:1c:a0:e9: 52:b7:97:f2:72:54:dc:a6:02:c7:47:1e:1d:50:a2:46:d2:c4: b6:e6:f3:c1:f8:c5:a1:40:13:8e:c2:01:08:27:10:37:d0:5f: ac:9f:42:c4:b6:c1:ed:5f:a6:c1:1a:b6:e4:5a:b2:b9:74:df: d9:c0:da:80:1c:36:21:55:55:ee:f0:c6:6c:92:b0:1b:eb:dc: e5:eb:63:3b:4e:ff:4d:c3:d1:7a:a0:fa:c4:f0:ad:af:c4:75: 37:5f:fe:6c:a2:02:6a:2b:c5:ab:a8:8c:0f:e2:38:e7:51:cb: a5:9b:eb:45:78:6a:58:2f:fc:98:4a:e7:60:3d:0c:e7:86:de: 75:e1:12:39:72:e4:1b:76:8f:05:b4:92:20:bb:49:f8:a9:c1: a7:ff:9c:39:63:68:f3:bb:9a:9b:b9:2a:2e:2a:8c:42:b0:4b: a8:26:49:7a:82:0f:fa:53:cf:d2:9c:05:3c:08:3b:c7:50:cd: f4:1a:12:ee:5e:b1:f1:39:65:68:24:c0:47:c4:87:45:e7:41: 91:5b:31:e8:ce:25:ce:32:21:81:cc:bf:4b:05:38:dc:f9:e9: d5:ed:f7:de -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuE52gUgoEQQPJV1cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDg2ZjAxZDQtYzg5NS00MjA1LTliOTUtMjljNTA5NDIx OTdiMB4XDTI1MTAxNDEzMDAzN1oXDTI2MDExMjE0MDAzN1owLzEtMCsGA1UEAxMk NjVhM2U4NGUtNDQ3MS00ZDYyLTk4YzMtNDYyZjY0ODYzZmVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkK6s5l2GLiogF5W7on1nMxckaMvrl9TrB3QU BGngbrTnLiio1lTRaeeOCB/HVx5m1kaWpQXFNkJEeSp4+38INvJeuEXx8rWFBWjG mFNFI8411TRNX7yMyATT8b8VB+XHSt5j5xYg7S/EzdqhdBSfsb3yEpQutnxmBpAo aEGwythGbe1XyjAsrLgEzWUe92cIbgxY6cVQnIrwo9Yp9sLm68X8CSbjfzFH/hNt 4+0pwDXTsE0ikoLbun3+HkQc/g+7FqWw5EjYLNhBDXeSP6/F8Ktjr08LBF/dz9EP 1bBur67rflOorE4d/ZbOZsb0J666AbkqJOLNthQD8E9WutbRLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDVVrTNK2+JO5AkjqULfl5fry9aDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8wODZm MDFkNC1jODk1LTQyMDUtOWI5NS0yOWM1MDk0MjE5N2IvNzMwNmYxMjMtYjc3Yi0z ZjI4LWE5ODUtZDVjNzA5ZTk4ZjU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMDg2ZjAxZDQtYzg5NS00MjA1LTli OTUtMjljNTA5NDIxOTdiLzA4NmYwMWQ0LWM4OTUtNDIwNS05Yjk1LTI5YzUwOTQy MTk3Yi5jcmwwHwYDVR0jBBgwFoAU5F2r3vFn3oZLzhmzt6+4yBEZ1BMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8wODZmMDFkNC1jODk1LTQyMDUtOWI5NS0yOWM1 MDk0MjE5N2IuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwGukMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAxm0MYPMMBS+CM/uxl9ikK2fyIZSUuK9VuN/ZxE1ykzfByg6VK3l/Jy VNymAsdHHh1QokbSxLbm88H4xaFAE47CAQgnEDfQX6yfQsS2we1fpsEatuRasrl0 39nA2oAcNiFVVe7wxmySsBvr3OXrYztO/03D0Xqg+sTwra/EdTdf/myiAmorxauo jA/iOOdRy6Wb60V4algv/JhK52A9DOeG3nXhEjly5Bt2jwW0kiC7Sfipwaf/nDlj aPO7mpu5Ki4qjEKwS6gmSXqCD/pTz9KcBTwIO8dQzfQaEu5esfE5ZWgkwEfEh0Xn QZFbMejOJc4yIYHMv0sFONz56dXt994= -----END CERTIFICATE-----Generated at Tue Oct 21 11:40:33 2025 by rpki-client