$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/42218378-fc67-3b7b-af80-93064b4e7d2a.roa File: 42218378-fc67-3b7b-af80-93064b4e7d2a.roa (raw, json) Hash identifier: TZgk1zsVN3xVSX1e2CYWCAyQqrlqH9fJ/NYWBKjl8eU= Subject key identifier: 2C:BD:9C:E8:C2:E7:AD:F2:73:95:36:78:E3:25:38:78:B6:83:E4:BB Certificate issuer: /CN=286639fc-94c4-4d6a-9de1-f1b3ebb5f758 Certificate serial: 010D0C9F4328584B92DCDC2EA03D20FA77674E60 Authority key identifier: 63:C7:11:22:88:E9:0B:38:04:E5:58:20:EC:45:6D:8A:6F:96:C0:01 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/42218378-fc67-3b7b-af80-93064b4e7d2a.roa Signing time: Sun 19 Oct 2025 13:00:39 +0000 ROA not before: Sun 19 Oct 2025 13:00:39 +0000 ROA not after: Sat 17 Jan 2026 14:00:39 +0000 asID: 7131 IP address blocks: 64.86.72.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:92:dc:dc:2e:a0:3d:20:fa:77:67:4e:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=286639fc-94c4-4d6a-9de1-f1b3ebb5f758 Validity Not Before: Oct 19 13:00:39 2025 GMT Not After : Jan 17 14:00:39 2026 GMT Subject: CN=acfa9f8c-6752-4c34-a6ad-4cf17fe2a976 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:47:38:0b:14:45:11:c0:60:66:78:75:d1:68: c6:92:0c:66:db:c2:87:53:d7:98:a2:b3:82:99:22: b0:f2:8b:9d:b6:1e:b1:29:37:ad:58:8c:ff:6c:54: 27:7e:d9:fb:ea:96:8e:c1:45:85:80:70:89:79:7a: a4:dd:c0:85:9e:0f:ff:2b:a8:18:d6:78:2f:21:e1: d2:bf:29:7e:86:1f:31:fa:dd:27:61:e5:db:17:6d: f6:3c:1b:6f:eb:cd:59:83:bc:2e:46:99:32:1a:f5: 68:d5:28:dc:3a:91:8f:00:4a:a8:b6:e6:23:ea:c9: 48:98:60:ab:43:ff:9d:f0:5b:96:8c:57:2b:8b:c5: ba:a8:73:1c:2c:68:49:66:a3:7d:0f:0c:63:34:4d: 66:08:68:61:64:77:bf:e3:82:cd:f7:28:f5:cb:a5: 43:48:c1:2c:4d:2b:f9:08:97:bc:76:f5:04:88:cc: 43:d4:0a:ba:5c:53:fa:72:de:6d:c2:b9:da:49:00: 65:66:c7:c1:48:aa:c1:76:6a:d6:4a:2c:e4:f4:0d: 12:f1:9a:14:84:0e:2c:18:34:2e:7d:4d:23:57:41: 39:76:a0:42:2c:8d:d5:28:a5:52:60:bd:44:79:c7: 2d:c1:f8:e6:9b:01:f1:1d:d8:f8:d6:b8:53:9e:77: 40:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:BD:9C:E8:C2:E7:AD:F2:73:95:36:78:E3:25:38:78:B6:83:E4:BB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/42218378-fc67-3b7b-af80-93064b4e7d2a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.crl X509v3 Authority Key Identifier: keyid:63:C7:11:22:88:E9:0B:38:04:E5:58:20:EC:45:6D:8A:6F:96:C0:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.cer sbgp-ipAddrBlock: critical IPv4: 64.86.72.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:a3:63:24:3d:63:be:1f:3f:4a:a0:0a:65:a8:e0:1b:67:cc: 4f:12:4c:0f:ed:01:d5:71:f7:a9:c4:d9:47:8a:09:b2:a7:62: 18:44:98:54:d0:3d:84:55:15:b2:1c:05:d3:33:b5:b2:75:4a: 4e:d0:92:3b:84:ce:4d:e4:5c:f8:ae:2b:3b:66:15:5e:3a:f0: df:33:c3:06:9b:86:1e:ad:0d:4f:ba:43:93:0e:10:9e:83:27: e3:25:3f:77:ab:35:c5:2e:bc:7b:a7:8d:4c:88:a4:e8:78:aa: 1e:c9:39:03:19:23:5e:a6:35:9a:1e:6a:13:2f:e8:ac:5b:06: 84:a0:65:33:8b:bc:30:08:8b:69:5e:6c:ab:95:f0:fd:c1:94: 2e:88:60:c2:dd:ab:7f:61:46:f0:6d:59:e9:4a:06:8e:9b:23: 8a:dd:c5:59:7e:09:65:54:07:ee:53:6c:75:20:2d:9e:e9:15: 86:ac:65:16:21:9f:4e:49:27:c4:e4:d4:48:6d:47:68:5b:7e: 4f:83:8c:2b:35:97:93:96:e9:02:41:8c:74:f8:05:ff:06:9f: 63:15:5a:59:b2:c2:d3:af:a2:c7:a1:0a:0f:97:64:43:d7:5e: db:99:cd:4d:53:17:d5:8f:0d:a2:cf:c4:68:19:25:23:6a:a9: 85:1b:05:af -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuS3NwuoD0g+ndnTmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjg2NjM5ZmMtOTRjNC00ZDZhLTlkZTEtZjFiM2ViYjVm NzU4MB4XDTI1MTAxOTEzMDAzOVoXDTI2MDExNzE0MDAzOVowLzEtMCsGA1UEAxMk YWNmYTlmOGMtNjc1Mi00YzM0LWE2YWQtNGNmMTdmZTJhOTc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA20c4CxRFEcBgZnh10WjGkgxm28KHU9eYorOC mSKw8oudth6xKTetWIz/bFQnftn76paOwUWFgHCJeXqk3cCFng//K6gY1ngvIeHS vyl+hh8x+t0nYeXbF232PBtv681Zg7wuRpkyGvVo1SjcOpGPAEqotuYj6slImGCr Q/+d8FuWjFcri8W6qHMcLGhJZqN9DwxjNE1mCGhhZHe/44LN9yj1y6VDSMEsTSv5 CJe8dvUEiMxD1Aq6XFP6ct5twrnaSQBlZsfBSKrBdmrWSizk9A0S8ZoUhA4sGDQu fU0jV0E5dqBCLI3VKKVSYL1EecctwfjmmwHxHdj41rhTnndAuwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCy9nOjC563yc5U2eOMlOHi2g+S7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODY2 MzlmYy05NGM0LTRkNmEtOWRlMS1mMWIzZWJiNWY3NTgvNDIyMTgzNzgtZmM2Ny0z YjdiLWFmODAtOTMwNjRiNGU3ZDJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjg2NjM5ZmMtOTRjNC00ZDZhLTlk ZTEtZjFiM2ViYjVmNzU4LzI4NjYzOWZjLTk0YzQtNGQ2YS05ZGUxLWYxYjNlYmI1 Zjc1OC5jcmwwHwYDVR0jBBgwFoAUY8cRIojpCzgE5Vgg7EVtim+WwAEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODY2MzlmYy05NGM0LTRkNmEtOWRlMS1mMWIz ZWJiNWY3NTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQFZIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA+jYyQ9Y74fP0qgCmWo4BtnzE8STA/tAdVx96nE2UeKCbKnYhhEmFTQ PYRVFbIcBdMztbJ1Sk7QkjuEzk3kXPiuKztmFV468N8zwwabhh6tDU+6Q5MOEJ6D J+MlP3erNcUuvHunjUyIpOh4qh7JOQMZI16mNZoeahMv6KxbBoSgZTOLvDAIi2le bKuV8P3BlC6IYMLdq39hRvBtWelKBo6bI4rdxVl+CWVUB+5TbHUgLZ7pFYasZRYh n05JJ8Tk1EhtR2hbfk+DjCs1l5OW6QJBjHT4Bf8Gn2MVWlmywtOvosehCg+XZEPX XtuZzU1TF9WPDaLPxGgZJSNqqYUbBa8= -----END CERTIFICATE-----Generated at Mon Oct 20 15:52:52 2025 by rpki-client