$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/0af33e37-3fbd-37d4-ae50-a7e7f28fa9ca.roa File: 0af33e37-3fbd-37d4-ae50-a7e7f28fa9ca.roa (raw, json) Hash identifier: rhjAo/ljiiOmRMm4VzSX5uzf7PXma6qE0XeDL1lNdqE= Subject key identifier: 5E:4C:32:02:76:4B:B2:F2:23:AE:B4:A4:05:0B:69:1D:C3:D6:40:0A Certificate issuer: /CN=286639fc-94c4-4d6a-9de1-f1b3ebb5f758 Certificate serial: 010D0C9F4328584B92DCE1D83C5FF584FDBFD400 Authority key identifier: 63:C7:11:22:88:E9:0B:38:04:E5:58:20:EC:45:6D:8A:6F:96:C0:01 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/0af33e37-3fbd-37d4-ae50-a7e7f28fa9ca.roa Signing time: Sun 19 Oct 2025 13:00:39 +0000 ROA not before: Sun 19 Oct 2025 13:00:39 +0000 ROA not after: Sat 17 Jan 2026 14:00:39 +0000 asID: 24439 IP address blocks: 64.86.23.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:92:dc:e1:d8:3c:5f:f5:84:fd:bf:d4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=286639fc-94c4-4d6a-9de1-f1b3ebb5f758 Validity Not Before: Oct 19 13:00:39 2025 GMT Not After : Jan 17 14:00:39 2026 GMT Subject: CN=6bf2a8da-214e-4351-8cde-7702382af875 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:18:82:e6:0c:de:0d:42:e0:00:7b:3e:7f:d0: ad:56:e8:ee:78:ec:55:fc:9d:e4:0f:59:85:4a:7f: 8d:56:17:58:eb:61:0d:f8:d8:ef:e4:74:17:17:3a: b0:e3:7d:7d:9c:e7:04:7e:35:e0:38:c2:cd:0a:f8: df:45:09:2d:22:ca:a3:f8:d8:52:44:f1:90:56:22: 61:29:57:71:04:e4:ec:9b:be:df:2c:8d:87:61:6c: 05:07:b0:71:b3:e2:6c:71:be:8c:33:22:9e:2a:62: 57:45:00:df:bd:33:70:9d:dc:40:b1:1d:f6:8c:e4: f1:e7:b3:90:e4:2d:57:b3:57:c9:be:57:c8:12:ac: 9b:64:cc:49:93:53:2b:19:76:12:a8:c6:0b:46:65: 40:d7:f6:98:6c:b3:99:5f:c9:5b:c7:47:df:c1:7c: 49:a8:38:d6:5c:a6:95:97:67:20:b0:33:25:d1:91: 1e:da:a2:0d:e7:8c:0e:83:e6:b0:6c:63:b1:67:ec: 3c:16:f0:9b:06:e3:92:37:49:b3:8e:f4:1f:f6:45: dd:52:ca:c2:d4:c0:32:2a:c2:96:e1:1f:eb:ea:a5: 2e:ba:7e:fc:e0:82:6b:bd:58:f9:3b:f6:78:13:2c: 90:82:10:3f:89:e7:41:91:ea:26:45:0f:03:6d:80: 08:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:4C:32:02:76:4B:B2:F2:23:AE:B4:A4:05:0B:69:1D:C3:D6:40:0A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/0af33e37-3fbd-37d4-ae50-a7e7f28fa9ca.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.crl X509v3 Authority Key Identifier: keyid:63:C7:11:22:88:E9:0B:38:04:E5:58:20:EC:45:6D:8A:6F:96:C0:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.cer sbgp-ipAddrBlock: critical IPv4: 64.86.23.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:a5:9d:8e:a4:41:a9:a9:3b:d6:f9:40:2f:bc:fb:96:08:51: 24:4b:ae:37:e7:50:3f:17:0f:ee:b2:93:41:c1:aa:8d:83:3a: 5e:30:de:2c:1d:e2:e5:14:07:42:37:77:6e:25:c2:83:c7:35: 9e:6c:74:3a:a9:f8:cc:a6:33:f9:49:eb:3d:3c:37:de:c3:03: db:bf:88:4e:0b:aa:ed:3b:b5:95:bb:6f:f4:83:b5:f9:4b:7d: a5:73:1e:4f:af:2c:d9:82:d4:68:ba:39:d0:de:8a:7f:cc:db: f2:d9:03:df:47:34:47:ed:e8:67:68:56:7e:81:82:a8:c5:a5: 29:e8:27:b8:63:6e:ce:34:f2:49:a8:4c:ad:7e:89:bf:a8:95: 09:e9:e9:c0:af:2c:2a:c1:70:e9:56:1b:ec:75:f9:1f:f3:df: c3:f1:24:ca:d2:29:a7:b6:46:cc:cb:61:dd:02:75:37:79:7f: 49:b4:7e:4b:35:e1:84:7a:58:a9:1a:a4:8f:58:de:02:e9:f1: 6d:c4:ce:91:4a:d6:33:cc:bb:7f:a0:f5:71:10:7c:9e:f3:f7: 8a:5f:d5:6d:00:9b:ec:f7:15:96:f4:c9:7a:6c:ca:8b:3f:07: 09:b8:9f:df:4d:ce:91:fa:9b:2f:16:93:ef:53:fa:85:ed:7c: 79:4a:da:3e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuS3OHYPF/1hP2/1AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjg2NjM5ZmMtOTRjNC00ZDZhLTlkZTEtZjFiM2ViYjVm NzU4MB4XDTI1MTAxOTEzMDAzOVoXDTI2MDExNzE0MDAzOVowLzEtMCsGA1UEAxMk NmJmMmE4ZGEtMjE0ZS00MzUxLThjZGUtNzcwMjM4MmFmODc1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5BiC5gzeDULgAHs+f9CtVujueOxV/J3kD1mF Sn+NVhdY62EN+Njv5HQXFzqw4319nOcEfjXgOMLNCvjfRQktIsqj+NhSRPGQViJh KVdxBOTsm77fLI2HYWwFB7Bxs+Jscb6MMyKeKmJXRQDfvTNwndxAsR32jOTx57OQ 5C1Xs1fJvlfIEqybZMxJk1MrGXYSqMYLRmVA1/aYbLOZX8lbx0ffwXxJqDjWXKaV l2cgsDMl0ZEe2qIN54wOg+awbGOxZ+w8FvCbBuOSN0mzjvQf9kXdUsrC1MAyKsKW 4R/r6qUuun784IJrvVj5O/Z4EyyQghA/iedBkeomRQ8DbYAIvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF5MMgJ2S7LyI660pAULaR3D1kAKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODY2 MzlmYy05NGM0LTRkNmEtOWRlMS1mMWIzZWJiNWY3NTgvMGFmMzNlMzctM2ZiZC0z N2Q0LWFlNTAtYTdlN2YyOGZhOWNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjg2NjM5ZmMtOTRjNC00ZDZhLTlk ZTEtZjFiM2ViYjVmNzU4LzI4NjYzOWZjLTk0YzQtNGQ2YS05ZGUxLWYxYjNlYmI1 Zjc1OC5jcmwwHwYDVR0jBBgwFoAUY8cRIojpCzgE5Vgg7EVtim+WwAEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODY2MzlmYy05NGM0LTRkNmEtOWRlMS1mMWIz ZWJiNWY3NTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQFYXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAISlnY6kQampO9b5QC+8+5YIUSRLrjfnUD8XD+6yk0HBqo2DOl4w3iwd 4uUUB0I3d24lwoPHNZ5sdDqp+MymM/lJ6z08N97DA9u/iE4Lqu07tZW7b/SDtflL faVzHk+vLNmC1Gi6OdDein/M2/LZA99HNEft6GdoVn6BgqjFpSnoJ7hjbs408kmo TK1+ib+olQnp6cCvLCrBcOlWG+x1+R/z38PxJMrSKae2RszLYd0CdTd5f0m0fks1 4YR6WKkapI9Y3gLp8W3EzpFK1jPMu3+g9XEQfJ7z94pf1W0Am+z3FZb0yXpsyos/ Bwm4n99NzpH6my8Wk+9T+oXtfHlK2j4= -----END CERTIFICATE-----Generated at Mon Oct 20 09:23:22 2025 by rpki-client