$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/e836d0a7-8196-3fd1-98dc-d4a2a10dec14.roa File: e836d0a7-8196-3fd1-98dc-d4a2a10dec14.roa (raw, json) Hash identifier: aUjcLLhusSTYbERc9eczfkgl5yuAC8gIXiEC0MgsU58= Subject key identifier: DE:4A:1A:F7:18:AB:E2:2F:E6:AB:7E:1A:D2:72:48:62:13:21:BF:E1 Certificate issuer: /CN=286639fc-94c4-4d6a-9de1-f1b3ebb5f758 Certificate serial: 010D0C9F4328584B92DCDC8D7FD49D0A3F588300 Authority key identifier: 63:C7:11:22:88:E9:0B:38:04:E5:58:20:EC:45:6D:8A:6F:96:C0:01 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/e836d0a7-8196-3fd1-98dc-d4a2a10dec14.roa Signing time: Sun 19 Oct 2025 13:00:39 +0000 ROA not before: Sun 19 Oct 2025 13:00:39 +0000 ROA not after: Sat 17 Jan 2026 14:00:39 +0000 asID: 40009 IP address blocks: 64.86.232.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:92:dc:dc:8d:7f:d4:9d:0a:3f:58:83:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=286639fc-94c4-4d6a-9de1-f1b3ebb5f758 Validity Not Before: Oct 19 13:00:39 2025 GMT Not After : Jan 17 14:00:39 2026 GMT Subject: CN=7c0df7e0-c0dc-4699-815f-9691a5485e12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:1e:59:95:20:9d:c1:ba:d1:1c:c8:94:bd:d4: 43:f3:c0:a8:a8:93:82:2c:75:96:9f:b7:53:dd:82: 96:e8:57:e1:42:a9:fd:f7:72:bb:dc:67:50:ea:69: 8d:73:20:8d:cb:49:05:cc:25:eb:6d:a1:38:db:23: 9f:ce:de:ac:83:cb:50:35:5b:33:d6:51:09:f7:8e: 87:bc:51:ca:e3:d6:6b:65:a2:35:33:0d:cd:31:31: be:58:8a:a1:81:8f:e9:81:78:3b:d4:bc:5a:e6:59: c4:f7:86:5c:78:ea:96:d1:79:cd:76:f8:6a:df:af: 82:e6:b3:c7:64:f6:10:cf:74:96:2e:ef:02:25:4a: 07:05:54:b1:79:7c:24:ba:a1:47:0b:46:9a:6c:b6: 47:ec:14:c9:5f:5b:ae:2c:48:eb:85:38:ce:07:59: ef:1e:04:88:2d:9b:e7:ec:0f:a7:0e:d7:9c:cb:e3: 04:c9:08:e6:07:ed:94:a0:be:a9:f9:a9:15:5b:cc: 6d:76:30:4c:96:0e:0d:45:d0:3e:8d:06:00:a0:75: db:1c:12:7f:44:2c:84:43:47:2e:26:56:76:bc:38: 4c:5e:18:25:42:f2:6e:8e:1d:8b:6c:2b:f1:e7:49: a0:2d:c4:83:7d:51:de:cd:e3:e6:39:ab:94:a2:69: 9a:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:4A:1A:F7:18:AB:E2:2F:E6:AB:7E:1A:D2:72:48:62:13:21:BF:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/e836d0a7-8196-3fd1-98dc-d4a2a10dec14.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.crl X509v3 Authority Key Identifier: keyid:63:C7:11:22:88:E9:0B:38:04:E5:58:20:EC:45:6D:8A:6F:96:C0:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.cer sbgp-ipAddrBlock: critical IPv4: 64.86.232.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:1c:40:08:fc:66:5c:af:3c:ff:43:8b:e1:d3:1d:a7:18:1c: 43:2b:85:a9:66:b4:19:22:78:94:31:93:06:f1:32:06:9f:59: f5:80:d4:4a:e7:d6:ab:db:e3:5d:65:e1:72:f1:37:14:40:0a: 6d:91:76:ef:10:eb:cb:a8:71:ed:21:ff:77:a4:f5:ae:bf:68: 15:45:07:26:5c:f7:1d:5c:6d:1f:9c:89:4e:a9:52:73:aa:c6: 9c:96:19:d8:eb:d1:ba:06:0f:3d:14:b6:e5:d6:16:72:d8:69: df:21:6d:be:70:d4:b0:90:5d:0c:22:9e:20:ae:fd:b6:41:b9: fd:47:72:9f:8e:d1:5a:9b:da:93:6e:db:3b:75:05:41:3d:03: 84:36:8a:18:49:b6:80:0d:e3:d9:3e:db:7a:69:38:dd:74:cc: a6:c4:a7:58:89:2a:1f:84:b6:81:80:c3:21:bc:e7:87:af:14: 26:38:d6:e9:1f:54:ba:3f:91:da:a6:9e:3f:c9:67:ba:a1:a9: d8:60:6e:e2:50:24:86:50:d5:a0:c8:59:a3:60:07:11:33:94: e3:33:65:15:5f:16:52:f7:7d:e8:ad:f0:9f:0e:f4:b7:32:bc: cd:e7:ab:4d:0a:9b:79:0b:a2:4b:1f:6d:5d:22:23:c4:0a:4e: e1:f8:32:53 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuS3NyNf9SdCj9YgwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjg2NjM5ZmMtOTRjNC00ZDZhLTlkZTEtZjFiM2ViYjVm NzU4MB4XDTI1MTAxOTEzMDAzOVoXDTI2MDExNzE0MDAzOVowLzEtMCsGA1UEAxMk N2MwZGY3ZTAtYzBkYy00Njk5LTgxNWYtOTY5MWE1NDg1ZTEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwB5ZlSCdwbrRHMiUvdRD88CoqJOCLHWWn7dT 3YKW6FfhQqn993K73GdQ6mmNcyCNy0kFzCXrbaE42yOfzt6sg8tQNVsz1lEJ946H vFHK49ZrZaI1Mw3NMTG+WIqhgY/pgXg71Lxa5lnE94ZceOqW0XnNdvhq36+C5rPH ZPYQz3SWLu8CJUoHBVSxeXwkuqFHC0aabLZH7BTJX1uuLEjrhTjOB1nvHgSILZvn 7A+nDtecy+MEyQjmB+2UoL6p+akVW8xtdjBMlg4NRdA+jQYAoHXbHBJ/RCyEQ0cu JlZ2vDhMXhglQvJujh2LbCvx50mgLcSDfVHezePmOauUommaIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN5KGvcYq+Iv5qt+GtJySGITIb/hMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODY2 MzlmYy05NGM0LTRkNmEtOWRlMS1mMWIzZWJiNWY3NTgvZTgzNmQwYTctODE5Ni0z ZmQxLTk4ZGMtZDRhMmExMGRlYzE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjg2NjM5ZmMtOTRjNC00ZDZhLTlk ZTEtZjFiM2ViYjVmNzU4LzI4NjYzOWZjLTk0YzQtNGQ2YS05ZGUxLWYxYjNlYmI1 Zjc1OC5jcmwwHwYDVR0jBBgwFoAUY8cRIojpCzgE5Vgg7EVtim+WwAEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODY2MzlmYy05NGM0LTRkNmEtOWRlMS1mMWIz ZWJiNWY3NTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDQFboMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIAcQAj8ZlyvPP9Di+HTHacYHEMrhalmtBkieJQxkwbxMgafWfWA1Ern 1qvb411l4XLxNxRACm2Rdu8Q68uoce0h/3ek9a6/aBVFByZc9x1cbR+ciU6pUnOq xpyWGdjr0boGDz0UtuXWFnLYad8hbb5w1LCQXQwiniCu/bZBuf1Hcp+O0Vqb2pNu 2zt1BUE9A4Q2ihhJtoAN49k+23ppON10zKbEp1iJKh+EtoGAwyG854evFCY41ukf VLo/kdqmnj/JZ7qhqdhgbuJQJIZQ1aDIWaNgBxEzlOMzZRVfFlL3feit8J8O9Lcy vM3nq00Km3kLoksfbV0iI8QKTuH4MlM= -----END CERTIFICATE-----Generated at Mon Oct 20 06:49:52 2025 by rpki-client