$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/df1d2790-04a3-3ed1-808b-1dab0cc2d47e.roa File: df1d2790-04a3-3ed1-808b-1dab0cc2d47e.roa (raw, json) Hash identifier: 8EL4oTeFepI+voEjBaeUnNBGdxq5lS8tPxDAc4LEAvc= Subject key identifier: 38:72:D7:BE:A3:B1:14:01:59:62:5B:20:AE:9A:3A:96:8E:82:75:E9 Certificate issuer: /CN=86b35f71-51ac-43ff-b604-cba3552c4c8c Certificate serial: 010D0C9F4328584B2A2C2D186A817DB4BA334700 Authority key identifier: 64:9C:3D:FE:D3:DF:3D:6B:67:BC:6D:BC:E9:05:BC:C0:6C:E6:1C:D7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/df1d2790-04a3-3ed1-808b-1dab0cc2d47e.roa Signing time: Fri 12 Sep 2025 01:00:32 +0000 ROA not before: Fri 12 Sep 2025 01:00:32 +0000 ROA not after: Thu 11 Dec 2025 02:00:32 +0000 asID: 46841 IP address blocks: 100.42.16.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/86b35f71-51ac-43ff-b604-cba3552c4c8c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/86b35f71-51ac-43ff-b604-cba3552c4c8c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2a:2c:2d:18:6a:81:7d:b4:ba:33:47:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86b35f71-51ac-43ff-b604-cba3552c4c8c Validity Not Before: Sep 12 01:00:32 2025 GMT Not After : Dec 11 02:00:32 2025 GMT Subject: CN=3b9d4973-5c79-4362-99bd-e0606e952027 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:0c:fb:79:9c:69:ae:d4:75:5c:69:36:51:50: a3:32:eb:6a:74:f5:d0:7a:17:c2:c6:89:89:96:ec: 96:e8:69:0c:c2:d7:8b:67:72:dd:57:05:fd:92:40: 15:a1:c1:04:73:f9:66:61:1f:31:cd:03:34:fa:83: 1e:4b:d7:8e:dd:53:d4:3c:d7:89:86:27:d2:3d:c0: 0a:51:cd:b1:27:9b:8f:ce:8e:e4:11:e4:9b:cd:77: bc:a7:79:d1:e9:37:cd:43:57:47:bc:ea:8e:d5:73: 7e:8c:25:a6:a7:d7:e0:db:7b:2a:a3:e7:a9:d7:cf: 91:4f:27:20:3a:47:01:fc:5a:07:07:c4:1b:51:bb: 41:45:bc:fc:24:98:67:42:f6:c4:55:b3:c4:e4:b9: 30:10:36:82:b5:2b:7e:9a:5f:45:0b:6e:ea:8e:1f: fc:0b:ce:14:78:55:54:80:68:ba:fb:ca:fe:a9:92: 91:aa:21:ac:e5:f1:d4:55:37:e5:56:fa:85:32:08: cd:60:ab:78:f6:da:27:ed:de:b9:06:af:99:fb:fe: 95:41:3e:2a:64:ca:e4:a1:d0:12:18:00:57:f9:bd: 4e:0f:95:c5:51:4d:9c:fb:59:56:9c:43:18:ee:45: 18:65:a1:2b:b9:1b:91:b2:09:6a:93:90:07:df:53: 67:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:72:D7:BE:A3:B1:14:01:59:62:5B:20:AE:9A:3A:96:8E:82:75:E9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/df1d2790-04a3-3ed1-808b-1dab0cc2d47e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/86b35f71-51ac-43ff-b604-cba3552c4c8c.crl X509v3 Authority Key Identifier: keyid:64:9C:3D:FE:D3:DF:3D:6B:67:BC:6D:BC:E9:05:BC:C0:6C:E6:1C:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c.cer sbgp-ipAddrBlock: critical IPv4: 100.42.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:ee:d2:93:46:68:9b:ac:f3:f8:84:39:36:98:29:fb:47:64: e2:79:57:bc:a0:3e:ce:8b:12:6e:8a:ac:a8:e8:b3:07:76:c1: 53:a9:28:42:f4:ab:18:d6:dd:d8:0a:ea:2e:a1:82:29:47:12: 5e:db:b3:d5:30:b9:9e:af:29:f7:7c:2c:13:54:98:1a:e1:da: 6c:3c:18:4e:bd:b4:1f:35:67:82:60:44:1a:a0:60:1a:6c:7d: 88:35:e8:e1:b7:b9:ad:ad:62:a6:81:b1:48:7a:20:90:5c:75: ae:a6:b0:25:e2:3f:05:6a:98:eb:bb:c9:11:92:b6:de:ea:d1: a3:da:6f:ad:3f:29:ea:9e:a9:75:17:1a:c3:53:4f:6c:eb:e0: b3:6a:04:4e:c2:d2:ba:7d:8e:da:9e:b0:fb:e4:51:f4:d9:8b: a3:99:6c:08:d2:ed:75:5e:ea:50:58:1c:fa:aa:8a:05:da:67: 60:93:de:85:c4:71:9b:79:fc:48:80:26:6c:a3:a5:6c:62:96: 45:a6:a9:15:4e:0e:bb:0c:17:bb:05:f3:c2:23:12:43:27:a4: 5f:de:8b:ec:d2:80:91:3a:79:b9:11:ed:00:a8:63:7b:c7:45: 3c:1b:19:b1:5c:dd:22:4d:a4:bb:cb:32:40:4f:bd:a8:ff:40: a4:e0:16:16 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsqLC0YaoF9tLozRwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODZiMzVmNzEtNTFhYy00M2ZmLWI2MDQtY2JhMzU1MmM0 YzhjMB4XDTI1MDkxMjAxMDAzMloXDTI1MTIxMTAyMDAzMlowLzEtMCsGA1UEAxMk M2I5ZDQ5NzMtNWM3OS00MzYyLTk5YmQtZTA2MDZlOTUyMDI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArQz7eZxprtR1XGk2UVCjMutqdPXQehfCxomJ luyW6GkMwteLZ3LdVwX9kkAVocEEc/lmYR8xzQM0+oMeS9eO3VPUPNeJhifSPcAK Uc2xJ5uPzo7kEeSbzXe8p3nR6TfNQ1dHvOqO1XN+jCWmp9fg23sqo+ep18+RTycg OkcB/FoHB8QbUbtBRbz8JJhnQvbEVbPE5LkwEDaCtSt+ml9FC27qjh/8C84UeFVU gGi6+8r+qZKRqiGs5fHUVTflVvqFMgjNYKt49ton7d65Bq+Z+/6VQT4qZMrkodAS GABX+b1OD5XFUU2c+1lWnEMY7kUYZaEruRuRsglqk5AH31NnPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDhy176jsRQBWWJbIK6aOpaOgnXpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84NmIz NWY3MS01MWFjLTQzZmYtYjYwNC1jYmEzNTUyYzRjOGMvZGYxZDI3OTAtMDRhMy0z ZWQxLTgwOGItMWRhYjBjYzJkNDdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvODZiMzVmNzEtNTFhYy00M2ZmLWI2 MDQtY2JhMzU1MmM0YzhjLzg2YjM1ZjcxLTUxYWMtNDNmZi1iNjA0LWNiYTM1NTJj NGM4Yy5jcmwwHwYDVR0jBBgwFoAUZJw9/tPfPWtnvG286QW8wGzmHNcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS84NmIzNWY3MS01MWFjLTQzZmYtYjYwNC1jYmEz NTUyYzRjOGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEZCoQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIju0pNGaJus8/iEOTaYKftHZOJ5V7ygPs6LEm6KrKjoswd2wVOpKEL0 qxjW3dgK6i6hgilHEl7bs9UwuZ6vKfd8LBNUmBrh2mw8GE69tB81Z4JgRBqgYBps fYg16OG3ua2tYqaBsUh6IJBcda6msCXiPwVqmOu7yRGStt7q0aPab60/KeqeqXUX GsNTT2zr4LNqBE7C0rp9jtqesPvkUfTZi6OZbAjS7XVe6lBYHPqqigXaZ2CT3oXE cZt5/EiAJmyjpWxilkWmqRVODrsMF7sF88IjEkMnpF/ei+zSgJE6ebkR7QCoY3vH RTwbGbFc3SJNpLvLMkBPvaj/QKTgFhY= -----END CERTIFICATE-----Generated at Mon Oct 20 12:37:46 2025 by rpki-client