$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e633b4b1-c2b2-44d5-a1ec-3fe8e1f9773a/86736a96-ae61-34d5-afd4-91ce542c3947.roa File: 86736a96-ae61-34d5-afd4-91ce542c3947.roa (raw, json) Hash identifier: 7ecCNah79fD1G6u6NnELAU+3bD/sRlDMZfDD4DEN5TI= Subject key identifier: 77:90:BA:59:64:AF:C5:36:6F:50:CF:CD:CA:95:00:0E:2A:C9:99:82 Certificate issuer: /CN=e633b4b1-c2b2-44d5-a1ec-3fe8e1f9773a Certificate serial: 010D0C9F4328584B13D6C6E3F5FC33E689FEC800 Authority key identifier: 4E:6B:2C:DE:04:7A:9D:BE:6D:A4:92:3D:62:DD:65:18:18:1C:B8:AA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e633b4b1-c2b2-44d5-a1ec-3fe8e1f9773a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e633b4b1-c2b2-44d5-a1ec-3fe8e1f9773a/86736a96-ae61-34d5-afd4-91ce542c3947.roa Signing time: Thu 04 Sep 2025 01:00:33 +0000 ROA not before: Thu 04 Sep 2025 01:00:33 +0000 ROA not after: Wed 03 Dec 2025 02:00:33 +0000 asID: 394671 IP address blocks: 167.100.0.0/23 maxlen: 23 216.47.32.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e633b4b1-c2b2-44d5-a1ec-3fe8e1f9773a/e633b4b1-c2b2-44d5-a1ec-3fe8e1f9773a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e633b4b1-c2b2-44d5-a1ec-3fe8e1f9773a/e633b4b1-c2b2-44d5-a1ec-3fe8e1f9773a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e633b4b1-c2b2-44d5-a1ec-3fe8e1f9773a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:13:d6:c6:e3:f5:fc:33:e6:89:fe:c8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e633b4b1-c2b2-44d5-a1ec-3fe8e1f9773a Validity Not Before: Sep 4 01:00:33 2025 GMT Not After : Dec 3 02:00:33 2025 GMT Subject: CN=b2926d45-f9f8-4835-bccc-01b6ca35fe57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:7a:48:64:82:5d:bd:bf:11:4f:07:8e:d2:08: 74:e5:33:0e:45:2e:7e:4f:34:51:d4:3a:de:8c:00: fe:fc:4e:78:3c:8c:f4:2e:29:4e:9d:a5:59:60:6e: 4d:fe:e6:6d:c4:aa:ad:2c:f8:b5:e8:85:ca:8e:92: 8f:6a:f6:0f:02:5a:75:cc:33:a5:92:b7:27:16:d0: 29:c5:53:8f:1c:12:3f:1f:2f:02:54:c4:fa:24:bd: b5:79:1c:ac:b5:ba:69:2f:c3:b6:76:ed:0a:ad:ec: 3c:b3:26:94:44:3e:94:1f:39:23:3f:e5:4d:b4:1e: 9d:22:11:dd:c7:fd:10:2f:15:fa:a9:47:66:c5:fc: 57:cf:80:67:31:36:57:1b:6b:9f:a8:ba:f6:51:95: ea:93:d6:07:54:14:18:a2:b4:71:8e:0a:7b:09:52: b5:1e:96:d5:ca:68:bc:6c:eb:11:59:24:c0:c1:04: 18:25:79:51:39:38:84:d3:fa:42:08:00:e9:6b:f8: a8:0c:cf:b9:16:ad:3b:41:c5:c0:6d:8e:ca:48:c4: e5:40:16:2a:b9:5b:a5:dd:21:49:7f:70:30:fb:50: 0e:ca:74:91:e7:31:81:a3:d0:10:a0:10:9b:be:b6: 60:b1:9d:21:3a:1e:b2:38:64:32:ef:e2:85:33:d8: 13:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:90:BA:59:64:AF:C5:36:6F:50:CF:CD:CA:95:00:0E:2A:C9:99:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e633b4b1-c2b2-44d5-a1ec-3fe8e1f9773a/86736a96-ae61-34d5-afd4-91ce542c3947.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e633b4b1-c2b2-44d5-a1ec-3fe8e1f9773a/e633b4b1-c2b2-44d5-a1ec-3fe8e1f9773a.crl X509v3 Authority Key Identifier: keyid:4E:6B:2C:DE:04:7A:9D:BE:6D:A4:92:3D:62:DD:65:18:18:1C:B8:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e633b4b1-c2b2-44d5-a1ec-3fe8e1f9773a.cer sbgp-ipAddrBlock: critical IPv4: 167.100.0.0/23 216.47.32.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b8:df:11:8e:a7:5a:73:53:24:8c:fe:41:eb:f6:4c:7d:0d:ad: f6:e2:ab:40:24:b5:30:4a:5f:e1:8a:5d:4d:7f:08:f3:8e:4a: 92:51:40:24:29:fc:75:20:fc:94:f2:28:2c:09:c8:3d:71:e1: 7c:b8:ce:7e:38:1d:00:97:00:e0:ba:37:67:f0:7b:48:8f:a2: 7f:93:68:61:29:f3:30:74:20:29:06:f0:d2:c7:eb:b8:a5:d1: 78:95:12:62:a0:aa:75:aa:53:03:3b:28:85:64:b9:98:63:f1: 05:a1:f6:f8:07:b6:6f:27:0a:21:81:9f:e0:40:f4:8e:8d:20: 4a:89:0a:fc:ec:8f:90:35:f9:12:c8:b3:cc:5e:05:86:37:22: 03:05:b3:51:82:1c:c9:34:2b:37:33:55:63:50:63:fa:0e:a7: da:9c:2c:76:b7:36:c2:7f:35:02:8a:01:5c:bf:69:de:14:22: 6a:82:7d:ff:ba:e2:2b:5e:92:de:b7:e8:8d:73:cf:78:80:3a: 01:5b:ba:3c:85:a5:4c:0e:7b:36:40:29:a8:48:e3:3d:0b:1f: 3e:bd:75:d2:b9:28:b4:79:6b:3f:19:a3:ac:c0:cc:bc:c9:4e: 2f:d3:88:70:ff:98:57:c3:19:96:1c:f2:22:ba:a1:ad:cd:3d: 30:8e:7e:49 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEsT1sbj9fwz5on+yAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTYzM2I0YjEtYzJiMi00NGQ1LWExZWMtM2ZlOGUxZjk3 NzNhMB4XDTI1MDkwNDAxMDAzM1oXDTI1MTIwMzAyMDAzM1owLzEtMCsGA1UEAxMk YjI5MjZkNDUtZjlmOC00ODM1LWJjY2MtMDFiNmNhMzVmZTU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmnpIZIJdvb8RTweO0gh05TMORS5+TzRR1Dre jAD+/E54PIz0LilOnaVZYG5N/uZtxKqtLPi16IXKjpKPavYPAlp1zDOlkrcnFtAp xVOPHBI/Hy8CVMT6JL21eRystbppL8O2du0Krew8syaURD6UHzkjP+VNtB6dIhHd x/0QLxX6qUdmxfxXz4BnMTZXG2ufqLr2UZXqk9YHVBQYorRxjgp7CVK1HpbVymi8 bOsRWSTAwQQYJXlROTiE0/pCCADpa/ioDM+5Fq07QcXAbY7KSMTlQBYquVul3SFJ f3Aw+1AOynSR5zGBo9AQoBCbvrZgsZ0hOh6yOGQy7+KFM9gTFwIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFHeQullkr8U2b1DPzcqVAA4qyZmCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9lNjMz YjRiMS1jMmIyLTQ0ZDUtYTFlYy0zZmU4ZTFmOTc3M2EvODY3MzZhOTYtYWU2MS0z NGQ1LWFmZDQtOTFjZTU0MmMzOTQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZTYzM2I0YjEtYzJiMi00NGQ1LWEx ZWMtM2ZlOGUxZjk3NzNhL2U2MzNiNGIxLWMyYjItNDRkNS1hMWVjLTNmZThlMWY5 NzczYS5jcmwwHwYDVR0jBBgwFoAUTmss3gR6nb5tpJI9Yt1lGBgcuKowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9lNjMzYjRiMS1jMmIyLTQ0ZDUtYTFlYy0zZmU4 ZTFmOTc3M2EuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBp2QAAwQC 2C8gMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBALjfEY6nWnNTJIz+Qev2TH0Nrfbiq0AktTBKX+GKXU1/CPOO SpJRQCQp/HUg/JTyKCwJyD1x4Xy4zn44HQCXAOC6N2fwe0iPon+TaGEp8zB0ICkG 8NLH67il0XiVEmKgqnWqUwM7KIVkuZhj8QWh9vgHtm8nCiGBn+BA9I6NIEqJCvzs j5A1+RLIs8xeBYY3IgMFs1GCHMk0KzczVWNQY/oOp9qcLHa3NsJ/NQKKAVy/ad4U ImqCff+64itekt636I1zz3iAOgFbujyFpUwOezZAKahI4z0LHz69ddK5KLR5az8Z o6zAzLzJTi/TiHD/mFfDGZYc8iK6oa3NPTCOfkk= -----END CERTIFICATE-----Generated at Tue Oct 21 17:59:00 2025 by rpki-client