$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4e87c0b3-383a-438c-aa45-1e5df0d0e061/1c2d769e-b210-3e6b-9095-f066b9cb35a1.roa File: 1c2d769e-b210-3e6b-9095-f066b9cb35a1.roa (raw, json) Hash identifier: xsilEUG5iCij2y4JL6edrxcU7TmgxV2TPgLLxSAhSKw= Subject key identifier: 83:F9:00:AD:70:60:59:3C:C8:0A:4C:8E:BE:5A:6C:22:3C:43:8A:D7 Certificate issuer: /CN=4e87c0b3-383a-438c-aa45-1e5df0d0e061 Certificate serial: 010D0C9F4328584B5DD1F1BE9210F5A661DC6980 Authority key identifier: 21:B4:6D:BF:CB:19:2A:8D:29:54:F0:6B:20:82:83:C2:12:1B:7F:D9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4e87c0b3-383a-438c-aa45-1e5df0d0e061.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4e87c0b3-383a-438c-aa45-1e5df0d0e061/1c2d769e-b210-3e6b-9095-f066b9cb35a1.roa Signing time: Tue 30 Sep 2025 13:00:40 +0000 ROA not before: Tue 30 Sep 2025 13:00:40 +0000 ROA not after: Mon 29 Dec 2025 14:00:40 +0000 asID: 8075 IP address blocks: 208.64.86.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4e87c0b3-383a-438c-aa45-1e5df0d0e061/4e87c0b3-383a-438c-aa45-1e5df0d0e061.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4e87c0b3-383a-438c-aa45-1e5df0d0e061/4e87c0b3-383a-438c-aa45-1e5df0d0e061.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4e87c0b3-383a-438c-aa45-1e5df0d0e061.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5d:d1:f1:be:92:10:f5:a6:61:dc:69:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e87c0b3-383a-438c-aa45-1e5df0d0e061 Validity Not Before: Sep 30 13:00:40 2025 GMT Not After : Dec 29 14:00:40 2025 GMT Subject: CN=01af9ffa-8230-45e3-8a19-b722295efc3a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:7f:da:28:22:d5:64:8a:dc:bc:64:e6:0e:ce: 7b:b8:4d:fb:b9:fb:92:70:92:56:e7:a6:00:8f:b4: 95:c2:54:03:40:38:0c:9e:34:13:76:b9:d9:61:1e: 85:09:52:f8:af:bc:59:77:82:c1:10:8d:1c:78:1f: 6c:c8:bc:9a:32:b2:d8:29:ef:12:0e:43:ee:47:c0: 85:fb:21:eb:b9:c5:18:5a:12:04:fa:06:f3:29:3e: 50:f8:7e:27:87:de:db:c8:60:15:f1:53:72:bc:a5: da:41:94:e9:63:bd:cc:bd:3e:23:58:1e:55:7f:a9: 1b:2f:4b:5b:79:1b:b0:ea:a2:c5:b8:06:84:73:9c: 02:07:b4:9e:70:df:7e:db:ed:86:3d:4f:51:f1:37: 64:9d:b2:ba:9b:df:0c:3c:b7:1b:d6:3e:19:ef:f7: f2:f2:46:f7:d2:42:eb:09:f8:fd:a9:84:f2:92:83: f7:5d:e6:57:e2:15:ff:55:c8:c5:cb:e0:01:f0:8c: c9:5c:c7:bf:38:cf:3c:93:95:69:86:89:fc:48:a6: 06:a6:aa:be:f1:1c:68:90:ac:7b:a8:d2:68:96:0e: 42:94:a4:9c:c2:60:fc:ca:62:46:9e:8d:02:e2:ae: 06:18:ec:a5:20:60:4b:21:9b:b3:5d:1f:c5:98:90: dc:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:F9:00:AD:70:60:59:3C:C8:0A:4C:8E:BE:5A:6C:22:3C:43:8A:D7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4e87c0b3-383a-438c-aa45-1e5df0d0e061/1c2d769e-b210-3e6b-9095-f066b9cb35a1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4e87c0b3-383a-438c-aa45-1e5df0d0e061/4e87c0b3-383a-438c-aa45-1e5df0d0e061.crl X509v3 Authority Key Identifier: keyid:21:B4:6D:BF:CB:19:2A:8D:29:54:F0:6B:20:82:83:C2:12:1B:7F:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4e87c0b3-383a-438c-aa45-1e5df0d0e061.cer sbgp-ipAddrBlock: critical IPv4: 208.64.86.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:75:b9:0c:7b:2a:57:42:6f:bd:19:b3:f9:e8:08:a7:98:37: fa:dd:e5:42:c7:bc:3c:67:d8:e4:65:fa:1b:c7:cf:36:16:29: 0d:d5:f2:56:9f:64:90:fd:cf:d4:26:ea:f0:ae:c2:c9:00:12: d9:91:70:1c:c0:5d:aa:c4:43:5d:b9:c2:f6:76:7b:3a:68:4c: f8:d1:32:13:1d:25:c8:90:f1:65:8e:1a:74:42:27:11:50:1b: 26:e9:99:96:1e:e5:3d:4d:e2:0f:9e:9b:3f:8e:07:d8:53:a4: f7:e5:0d:64:17:d3:83:20:93:52:66:31:ca:17:5e:4c:3b:f5: aa:8f:37:5f:17:35:1c:39:e3:e6:7c:0f:31:73:d6:2e:2b:d8: 5f:19:54:2c:79:a8:0d:bd:44:cf:8c:58:42:ec:9e:03:6b:1c: 2f:30:b0:e7:fb:da:1b:1d:e7:e7:26:36:ae:ce:cc:f6:26:1f: d5:79:f8:fe:6d:b6:b4:5e:d5:54:3f:e3:0b:08:5c:b1:7a:6d: 57:bb:bf:ae:94:75:03:0e:02:44:d0:69:7e:2f:4f:01:6e:96: d4:3f:95:26:54:0c:0f:88:4e:a1:cf:c6:a3:9b:56:07:b0:e5: 79:0b:aa:2f:fa:b2:49:ea:8c:d5:5b:8d:08:47:3e:0d:84:ba: eb:cd:22:82 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtd0fG+khD1pmHcaYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU4N2MwYjMtMzgzYS00MzhjLWFhNDUtMWU1ZGYwZDBl MDYxMB4XDTI1MDkzMDEzMDA0MFoXDTI1MTIyOTE0MDA0MFowLzEtMCsGA1UEAxMk MDFhZjlmZmEtODIzMC00NWUzLThhMTktYjcyMjI5NWVmYzNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiX/aKCLVZIrcvGTmDs57uE37ufuScJJW56YA j7SVwlQDQDgMnjQTdrnZYR6FCVL4r7xZd4LBEI0ceB9syLyaMrLYKe8SDkPuR8CF +yHrucUYWhIE+gbzKT5Q+H4nh97byGAV8VNyvKXaQZTpY73MvT4jWB5Vf6kbL0tb eRuw6qLFuAaEc5wCB7SecN9+2+2GPU9R8TdknbK6m98MPLcb1j4Z7/fy8kb30kLr Cfj9qYTykoP3XeZX4hX/VcjFy+AB8IzJXMe/OM88k5Vphon8SKYGpqq+8RxokKx7 qNJolg5ClKScwmD8ymJGno0C4q4GGOylIGBLIZuzXR/FmJDc9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIP5AK1wYFk8yApMjr5abCI8Q4rXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80ZTg3 YzBiMy0zODNhLTQzOGMtYWE0NS0xZTVkZjBkMGUwNjEvMWMyZDc2OWUtYjIxMC0z ZTZiLTkwOTUtZjA2NmI5Y2IzNWExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNGU4N2MwYjMtMzgzYS00MzhjLWFh NDUtMWU1ZGYwZDBlMDYxLzRlODdjMGIzLTM4M2EtNDM4Yy1hYTQ1LTFlNWRmMGQw ZTA2MS5jcmwwHwYDVR0jBBgwFoAUIbRtv8sZKo0pVPBrIIKDwhIbf9kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS80ZTg3YzBiMy0zODNhLTQzOGMtYWE0NS0xZTVk ZjBkMGUwNjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0EBWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACZ1uQx7KldCb70Zs/noCKeYN/rd5ULHvDxn2ORl+hvHzzYWKQ3V8laf ZJD9z9Qm6vCuwskAEtmRcBzAXarEQ125wvZ2ezpoTPjRMhMdJciQ8WWOGnRCJxFQ GybpmZYe5T1N4g+emz+OB9hTpPflDWQX04Mgk1JmMcoXXkw79aqPN18XNRw54+Z8 DzFz1i4r2F8ZVCx5qA29RM+MWELsngNrHC8wsOf72hsd5+cmNq7OzPYmH9V5+P5t trRe1VQ/4wsIXLF6bVe7v66UdQMOAkTQaX4vTwFultQ/lSZUDA+ITqHPxqObVgew 5XkLqi/6sknqjNVbjQhHPg2EuuvNIoI= -----END CERTIFICATE-----Generated at Mon Oct 20 04:57:18 2025 by rpki-client