$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/86d49b3f-c4e3-3131-b130-ef1b3c9250a3.roa File: 86d49b3f-c4e3-3131-b130-ef1b3c9250a3.roa (raw, json) Hash identifier: dTP9TCJv7ZlhSfH1cH2zlhDP7brPOmXVtKQevPTc1fY= Subject key identifier: 65:91:29:4B:3E:27:12:47:3B:CF:45:D6:2B:D3:AB:FC:B6:E2:47:54 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F4328584B5571CF753C68A030951EF4C0 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/86d49b3f-c4e3-3131-b130-ef1b3c9250a3.roa Signing time: Sat 27 Sep 2025 13:00:41 +0000 ROA not before: Sat 27 Sep 2025 13:00:41 +0000 ROA not after: Fri 26 Dec 2025 14:00:41 +0000 asID: 852 IP address blocks: 64.114.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:55:71:cf:75:3c:68:a0:30:95:1e:f4:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Sep 27 13:00:41 2025 GMT Not After : Dec 26 14:00:41 2025 GMT Subject: CN=dc3a1de7-ebb6-4922-b710-ed039a9320ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:4c:6c:ef:dd:c9:21:08:0b:2e:22:18:5e:50: 77:07:2a:91:04:70:c5:37:99:69:7b:3e:f9:9c:54: 8e:5a:5b:4c:57:42:43:d3:de:1d:fd:12:54:8d:7a: 2e:a6:69:30:2c:1f:52:f5:be:2e:c4:d7:2e:99:ff: a3:a6:0e:35:a5:fd:88:9c:0b:e8:e6:47:0a:8b:80: 26:78:38:be:9d:95:02:0b:0d:9c:88:ca:3c:db:fc: 4d:91:1d:39:56:af:83:0a:15:58:cd:a5:31:47:72: b3:ca:a1:68:19:91:7e:8a:0e:3a:38:90:f5:67:b4: d5:f8:46:8d:a5:4b:3a:47:08:a7:5b:16:75:ff:33: 2d:dc:40:b3:4f:c2:fa:d1:b7:f7:fa:02:79:d9:a3: 2d:14:3d:fb:92:6e:b6:6c:92:63:78:7c:84:59:3a: 90:a0:f7:e6:93:a6:f0:f5:b5:ad:dc:c9:f5:b5:d7: 6b:44:25:1f:78:21:7f:40:e9:8e:94:27:7b:51:c6: bf:21:a5:a8:4f:a4:7d:e4:a2:cd:a0:d3:bd:f5:1f: 85:c7:71:04:55:b4:d0:52:a3:cc:13:a2:b0:96:80: 3c:fd:30:39:76:18:7e:82:f5:e5:ca:d8:d0:7e:5a: 38:93:25:43:d3:86:27:da:de:d7:cf:9d:72:de:e6: e9:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:91:29:4B:3E:27:12:47:3B:CF:45:D6:2B:D3:AB:FC:B6:E2:47:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/86d49b3f-c4e3-3131-b130-ef1b3c9250a3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 64.114.255.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption cc:23:55:66:f7:9f:d0:3b:a2:4b:d1:93:b9:8a:2b:a8:bb:2e: 90:40:17:c0:0e:07:ad:67:f7:56:38:99:6a:08:86:62:fb:56: 85:63:b6:11:55:3d:42:6c:a7:54:a2:17:d4:7d:5d:a1:52:da: 3c:5e:9d:22:cf:a5:fd:c3:b2:67:00:d3:6f:4a:b9:71:d7:19: 81:47:9b:88:e5:8d:ec:70:41:70:8a:9f:77:17:8a:40:75:28: f6:f4:7b:13:1e:1e:fd:ab:76:7f:85:f5:7c:55:14:8b:98:ae: 27:06:53:83:1e:b8:1f:53:61:a1:0b:b7:6f:a8:de:a4:57:41: f6:10:40:67:9d:44:e6:85:83:25:46:29:68:1f:ba:85:4d:e3: e0:a9:cf:15:7f:6c:00:bd:6c:b3:9b:59:c1:8e:6f:4f:bf:ac: 77:5c:07:2b:a7:95:b3:81:e5:80:88:41:a1:58:4c:d6:9b:51: 7c:7a:6c:56:93:9a:5e:b8:81:e1:14:8e:0e:ca:b0:e3:a8:3d: b1:07:f4:6c:bd:06:91:b9:a3:2f:86:63:a7:10:f2:7b:fe:25: 6e:4a:72:4c:fe:08:80:54:ba:ef:ed:ae:6e:b6:bc:39:de:a7: 7a:f4:13:5b:a2:d9:22:02:e6:8a:35:f4:b0:75:46:f5:84:90: 18:11:b9:45 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtVcc91PGigMJUe9MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDkyNzEzMDA0MVoXDTI1MTIyNjE0MDA0MVowLzEtMCsGA1UEAxMk ZGMzYTFkZTctZWJiNi00OTIyLWI3MTAtZWQwMzlhOTMyMGNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy0xs793JIQgLLiIYXlB3ByqRBHDFN5lpez75 nFSOWltMV0JD094d/RJUjXoupmkwLB9S9b4uxNcumf+jpg41pf2InAvo5kcKi4Am eDi+nZUCCw2ciMo82/xNkR05Vq+DChVYzaUxR3KzyqFoGZF+ig46OJD1Z7TV+EaN pUs6RwinWxZ1/zMt3ECzT8L60bf3+gJ52aMtFD37km62bJJjeHyEWTqQoPfmk6bw 9bWt3Mn1tddrRCUfeCF/QOmOlCd7Uca/IaWoT6R95KLNoNO99R+Fx3EEVbTQUqPM E6KwloA8/TA5dhh+gvXlytjQflo4kyVD04Yn2t7Xz51y3ubpmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGWRKUs+JxJHO89F1ivTq/y24kdUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvODZkNDliM2YtYzRlMy0z MTMxLWIxMzAtZWYxYjNjOTI1MGEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQHL/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMwjVWb3n9A7okvRk7mKK6i7LpBAF8AOB61n91Y4mWoIhmL7VoVjthFV PUJsp1SiF9R9XaFS2jxenSLPpf3DsmcA029KuXHXGYFHm4jljexwQXCKn3cXikB1 KPb0exMeHv2rdn+F9XxVFIuYricGU4MeuB9TYaELt2+o3qRXQfYQQGedROaFgyVG KWgfuoVN4+CpzxV/bAC9bLObWcGOb0+/rHdcByunlbOB5YCIQaFYTNabUXx6bFaT ml64geEUjg7KsOOoPbEH9Gy9BpG5oy+GY6cQ8nv+JW5Kckz+CIBUuu/trm62vDne p3r0E1ui2SIC5oo19LB1RvWEkBgRuUU= -----END CERTIFICATE-----Generated at Sun Oct 19 20:17:51 2025 by rpki-client