$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/88089700-6560-3403-a85d-651c59fddc52.roa File: 88089700-6560-3403-a85d-651c59fddc52.roa (raw, json) Hash identifier: e2GCMNK2pWq+1X+f+6bnjOgL36DGxjJz6IWPq86dzgA= Subject key identifier: 89:AB:AE:D0:B1:55:05:62:DA:74:E8:4D:71:16:3F:1E:5E:6D:A2:5B Certificate issuer: /CN=86b35f71-51ac-43ff-b604-cba3552c4c8c Certificate serial: 010D0C9F4328584B2A2C253628146DD1CF00D200 Authority key identifier: 64:9C:3D:FE:D3:DF:3D:6B:67:BC:6D:BC:E9:05:BC:C0:6C:E6:1C:D7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/88089700-6560-3403-a85d-651c59fddc52.roa Signing time: Fri 12 Sep 2025 01:00:32 +0000 ROA not before: Fri 12 Sep 2025 01:00:32 +0000 ROA not after: Thu 11 Dec 2025 02:00:32 +0000 asID: 46841 IP address blocks: 162.218.64.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/86b35f71-51ac-43ff-b604-cba3552c4c8c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/86b35f71-51ac-43ff-b604-cba3552c4c8c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2a:2c:25:36:28:14:6d:d1:cf:00:d2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86b35f71-51ac-43ff-b604-cba3552c4c8c Validity Not Before: Sep 12 01:00:32 2025 GMT Not After : Dec 11 02:00:32 2025 GMT Subject: CN=e69b50a3-cdb9-4d81-812f-e4b2fafd8afd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:be:79:7d:c6:66:a1:65:21:36:94:cb:35:51: d9:f0:e0:68:14:8d:01:7c:58:e6:bc:03:be:ac:69: cc:54:94:9b:d1:50:32:48:f3:2b:d7:41:54:1b:a0: be:55:20:c8:bd:b9:5a:ed:53:40:25:9b:f5:89:6c: 1e:e7:2b:1f:4d:52:c5:e7:23:eb:7a:00:26:da:7e: e4:00:b7:b2:1e:e5:bc:e7:98:4d:f8:63:42:fb:f3: 0c:5f:4c:2e:8e:31:32:e2:ae:db:8d:33:7c:62:fe: 14:d7:6a:0d:16:ea:a1:99:e2:a3:0e:4a:55:4b:7e: 14:43:0b:7d:0a:06:c9:54:e5:4a:1d:25:fb:b8:d8: 09:32:da:af:e5:13:0b:e5:ef:6b:0f:a3:51:e8:00: 88:cb:02:4d:57:06:9d:b2:00:f5:c6:8f:75:4a:d4: 07:68:6a:e9:13:f6:00:20:bb:8e:0c:5b:92:6e:74: b3:c0:61:14:ec:f1:80:2a:b2:85:80:7b:13:15:7a: 59:94:e3:f6:2c:3f:0f:17:c6:11:89:9e:06:2f:de: 19:a4:fe:4c:3f:76:fb:c0:50:cd:2a:23:73:1a:dc: d8:bf:9a:ec:81:9e:7b:c1:85:49:f1:f8:34:01:0f: a9:e6:11:db:32:ff:0f:f2:a0:bb:66:76:fe:62:71: 8f:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:AB:AE:D0:B1:55:05:62:DA:74:E8:4D:71:16:3F:1E:5E:6D:A2:5B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/88089700-6560-3403-a85d-651c59fddc52.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/86b35f71-51ac-43ff-b604-cba3552c4c8c.crl X509v3 Authority Key Identifier: keyid:64:9C:3D:FE:D3:DF:3D:6B:67:BC:6D:BC:E9:05:BC:C0:6C:E6:1C:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c.cer sbgp-ipAddrBlock: critical IPv4: 162.218.64.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:07:7a:4c:47:62:46:ae:64:ea:b1:1b:fc:e7:9a:97:f6:fe: f8:f2:33:70:cd:d5:bf:cb:99:09:c1:8b:34:5d:6a:1f:42:a4: 33:79:56:47:11:41:e4:df:d2:9c:23:55:29:ea:af:3a:03:2a: 0b:d0:43:a1:69:73:c8:fe:4f:28:7d:c3:7f:ab:bf:fd:0f:c0: ae:20:a8:46:75:84:2c:2d:4e:d4:f3:d8:65:81:46:72:c1:c3: 1a:ca:fd:9e:47:a9:0a:68:4b:9c:e4:19:2f:57:f3:05:8a:cc: c6:ef:6f:0e:c1:12:73:a4:7a:f7:1c:e5:da:ee:00:d5:bb:27: 2f:fa:05:68:f2:c8:ad:25:7a:1e:ee:f3:d3:21:72:87:b6:4b: ac:ef:1b:5e:fa:b7:3a:07:14:56:7b:b6:43:42:61:8e:e2:77: 85:42:dc:45:3d:ba:a1:86:15:85:cc:cf:04:bd:8b:21:fe:a0: 82:0a:ed:49:3a:b3:1b:4f:48:46:2a:40:70:70:90:fd:83:71: b1:9b:e1:e2:25:dd:9c:fe:1a:71:4d:ed:49:7e:8b:2d:ed:a2: 5c:da:92:c5:c0:bb:cf:d9:96:12:de:69:82:f6:e2:3f:fa:c6: 5c:78:41:49:a8:b0:d2:5d:8b:21:ff:d6:e9:b6:b8:2d:86:0f: d0:f9:fa:17 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsqLCU2KBRt0c8A0gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODZiMzVmNzEtNTFhYy00M2ZmLWI2MDQtY2JhMzU1MmM0 YzhjMB4XDTI1MDkxMjAxMDAzMloXDTI1MTIxMTAyMDAzMlowLzEtMCsGA1UEAxMk ZTY5YjUwYTMtY2RiOS00ZDgxLTgxMmYtZTRiMmZhZmQ4YWZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApb55fcZmoWUhNpTLNVHZ8OBoFI0BfFjmvAO+ rGnMVJSb0VAySPMr10FUG6C+VSDIvbla7VNAJZv1iWwe5ysfTVLF5yPregAm2n7k ALeyHuW855hN+GNC+/MMX0wujjEy4q7bjTN8Yv4U12oNFuqhmeKjDkpVS34UQwt9 CgbJVOVKHSX7uNgJMtqv5RML5e9rD6NR6ACIywJNVwadsgD1xo91StQHaGrpE/YA ILuODFuSbnSzwGEU7PGAKrKFgHsTFXpZlOP2LD8PF8YRiZ4GL94ZpP5MP3b7wFDN KiNzGtzYv5rsgZ57wYVJ8fg0AQ+p5hHbMv8P8qC7Znb+YnGPqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFImrrtCxVQVi2nToTXEWPx5ebaJbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84NmIz NWY3MS01MWFjLTQzZmYtYjYwNC1jYmEzNTUyYzRjOGMvODgwODk3MDAtNjU2MC0z NDAzLWE4NWQtNjUxYzU5ZmRkYzUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvODZiMzVmNzEtNTFhYy00M2ZmLWI2 MDQtY2JhMzU1MmM0YzhjLzg2YjM1ZjcxLTUxYWMtNDNmZi1iNjA0LWNiYTM1NTJj NGM4Yy5jcmwwHwYDVR0jBBgwFoAUZJw9/tPfPWtnvG286QW8wGzmHNcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS84NmIzNWY3MS01MWFjLTQzZmYtYjYwNC1jYmEz NTUyYzRjOGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDotpAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAwHekxHYkauZOqxG/znmpf2/vjyM3DN1b/LmQnBizRdah9CpDN5VkcR QeTf0pwjVSnqrzoDKgvQQ6Fpc8j+Tyh9w3+rv/0PwK4gqEZ1hCwtTtTz2GWBRnLB wxrK/Z5HqQpoS5zkGS9X8wWKzMbvbw7BEnOkevcc5druANW7Jy/6BWjyyK0leh7u 89Mhcoe2S6zvG176tzoHFFZ7tkNCYY7id4VC3EU9uqGGFYXMzwS9iyH+oIIK7Uk6 sxtPSEYqQHBwkP2DcbGb4eIl3Zz+GnFN7Ul+iy3tolzaksXAu8/ZlhLeaYL24j/6 xlx4QUmosNJdiyH/1um2uC2GD9D5+hc= -----END CERTIFICATE-----Generated at Sun Oct 19 20:40:05 2025 by rpki-client