$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/239c7b2a-d138-33cf-be7d-13d8071140a8.roa File: 239c7b2a-d138-33cf-be7d-13d8071140a8.roa (raw, json) Hash identifier: YgFVnaWgFgp+N4G+3Il+RcaRimcmAoIbD5FhOcM0Mrs= Subject key identifier: D3:5D:EE:53:17:40:E2:C2:1E:FA:86:29:5A:CB:8F:1E:0E:01:FE:99 Certificate issuer: /CN=286639fc-94c4-4d6a-9de1-f1b3ebb5f758 Certificate serial: 010D0C9F4328584ED431E397AE7A7533B60B3980 Authority key identifier: 63:C7:11:22:88:E9:0B:38:04:E5:58:20:EC:45:6D:8A:6F:96:C0:01 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/239c7b2a-d138-33cf-be7d-13d8071140a8.roa Signing time: Fri 14 Aug 2026 01:00:13 +0000 ROA not before: Fri 14 Aug 2026 01:00:13 +0000 ROA not after: Thu 12 Nov 2026 02:00:13 +0000 asID: 18563 IP address blocks: 64.86.140.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 28 Aug 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:d4:31:e3:97:ae:7a:75:33:b6:0b:39:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=286639fc-94c4-4d6a-9de1-f1b3ebb5f758 Validity Not Before: Aug 14 01:00:13 2026 GMT Not After : Nov 12 02:00:13 2026 GMT Subject: CN=19378a18-ecba-4ccf-8f4f-257be5468b8c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:15:9d:c9:53:99:ee:30:eb:86:90:ff:01:02: f2:99:0a:b1:dd:71:f7:30:d0:fd:fd:a6:ca:62:67: ba:9a:c3:ed:9c:6c:d1:38:8b:16:cf:c5:bb:19:c4: 4c:77:7e:89:62:ff:0a:a7:48:f1:19:31:43:3e:5f: 17:44:d7:ee:d3:56:1e:66:bd:51:ed:0d:36:fe:3f: 0d:cb:15:b3:62:f6:d8:d2:d2:d5:db:2f:ea:a5:97: 99:92:4a:52:ec:09:dc:91:67:cc:e3:e3:68:3a:7b: eb:ed:4d:cf:7a:93:94:8a:94:5d:3b:f2:40:19:95: da:f1:2b:c3:02:35:ec:8d:d5:46:a8:52:2c:b5:24: 65:34:d4:b8:8c:88:8f:db:ec:15:8d:38:c2:4e:62: a2:e5:6b:93:11:c3:c5:b4:6e:5f:af:a2:f0:59:e5: c9:fd:45:80:9e:9f:71:32:d7:c3:8d:cf:54:e9:9d: 87:9f:95:51:68:3a:7a:cb:9c:4d:1f:a4:73:e2:b9: dc:81:95:82:22:7e:ed:54:cb:2f:99:82:6b:85:12: 28:56:9b:36:54:48:82:57:f0:06:b4:5c:67:20:5a: a6:42:b4:1c:b4:66:15:d5:17:bd:b0:8f:85:db:18: 8f:3d:36:36:b3:de:ee:38:e3:22:d4:0e:32:a6:0c: 64:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:5D:EE:53:17:40:E2:C2:1E:FA:86:29:5A:CB:8F:1E:0E:01:FE:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/239c7b2a-d138-33cf-be7d-13d8071140a8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.crl X509v3 Authority Key Identifier: keyid:63:C7:11:22:88:E9:0B:38:04:E5:58:20:EC:45:6D:8A:6F:96:C0:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.cer sbgp-ipAddrBlock: critical IPv4: 64.86.140.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:44:6c:5b:48:c4:4d:9e:a8:07:95:2c:b5:ae:ae:d8:da:29: 5b:32:78:79:54:dd:6e:16:23:e0:b5:0e:0d:22:c1:32:53:27: ec:0b:0c:1b:88:cc:71:6a:fd:ce:c2:ab:01:43:ec:d5:14:f8: 26:b1:11:67:25:f4:58:99:4f:b8:e3:04:18:b1:bb:61:11:b5: 4a:64:59:c8:72:37:31:94:19:c9:46:77:5a:b7:b1:e0:47:64: f4:2f:3d:fe:e8:01:49:0e:51:e3:32:29:48:fe:ad:cb:c7:87: 82:22:19:3d:2c:b4:b3:be:17:f9:55:f2:fc:e1:ae:9e:f9:a8: 2c:b2:e4:56:da:56:8a:fd:4d:b2:04:c1:ce:6f:d0:ca:13:e3: 9a:c5:02:8d:02:e3:ad:77:eb:8b:9e:16:4f:87:78:0d:ef:aa: ef:1a:ca:3c:3b:1c:77:1c:58:88:7c:e8:5c:4a:6b:1e:e3:30: a0:96:2d:9a:35:6e:6e:b0:8d:fa:70:47:4d:38:69:39:b2:cb: 5c:cc:a8:b2:70:61:ff:63:a7:2a:61:06:35:b1:76:72:56:7b: 6b:3d:47:1a:66:62:ee:c6:d4:f2:71:bf:09:8f:be:84:13:37: 88:71:66:c2:9d:c2:26:aa:73:16:f6:a5:d3:4d:90:d7:b9:f5: e5:c2:15:51 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7UMeOXrnp1M7YLOYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjg2NjM5ZmMtOTRjNC00ZDZhLTlkZTEtZjFiM2ViYjVm NzU4MB4XDTI2MDgxNDAxMDAxM1oXDTI2MTExMjAyMDAxM1owLzEtMCsGA1UEAxMk MTkzNzhhMTgtZWNiYS00Y2NmLThmNGYtMjU3YmU1NDY4YjhjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4xWdyVOZ7jDrhpD/AQLymQqx3XH3MND9/abK Yme6msPtnGzROIsWz8W7GcRMd36JYv8Kp0jxGTFDPl8XRNfu01YeZr1R7Q02/j8N yxWzYvbY0tLV2y/qpZeZkkpS7AnckWfM4+NoOnvr7U3PepOUipRdO/JAGZXa8SvD AjXsjdVGqFIstSRlNNS4jIiP2+wVjTjCTmKi5WuTEcPFtG5fr6LwWeXJ/UWAnp9x MtfDjc9U6Z2Hn5VRaDp6y5xNH6Rz4rncgZWCIn7tVMsvmYJrhRIoVps2VEiCV/AG tFxnIFqmQrQctGYV1Re9sI+F2xiPPTY2s97uOOMi1A4ypgxkuwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNNd7lMXQOLCHvqGKVrLjx4OAf6ZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODY2 MzlmYy05NGM0LTRkNmEtOWRlMS1mMWIzZWJiNWY3NTgvMjM5YzdiMmEtZDEzOC0z M2NmLWJlN2QtMTNkODA3MTE0MGE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjg2NjM5ZmMtOTRjNC00ZDZhLTlk ZTEtZjFiM2ViYjVmNzU4LzI4NjYzOWZjLTk0YzQtNGQ2YS05ZGUxLWYxYjNlYmI1 Zjc1OC5jcmwwHwYDVR0jBBgwFoAUY8cRIojpCzgE5Vgg7EVtim+WwAEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODY2MzlmYy05NGM0LTRkNmEtOWRlMS1mMWIz ZWJiNWY3NTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQFaMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD5EbFtIxE2eqAeVLLWurtjaKVsyeHlU3W4WI+C1Dg0iwTJTJ+wLDBuI zHFq/c7CqwFD7NUU+CaxEWcl9FiZT7jjBBixu2ERtUpkWchyNzGUGclGd1q3seBH ZPQvPf7oAUkOUeMyKUj+rcvHh4IiGT0stLO+F/lV8vzhrp75qCyy5FbaVor9TbIE wc5v0MoT45rFAo0C461364ueFk+HeA3vqu8ayjw7HHccWIh86FxKax7jMKCWLZo1 bm6wjfpwR004aTmyy1zMqLJwYf9jpyphBjWxdnJWe2s9RxpmYu7G1PJxvwmPvoQT N4hxZsKdwiaqcxb2pdNNkNe59eXCFVE= -----END CERTIFICATE-----Generated at Thu Aug 27 08:55:12 2026 by rpki-client