$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/42218378-fc67-3b7b-af80-93064b4e7d2a.roa File: 42218378-fc67-3b7b-af80-93064b4e7d2a.roa (raw, json) Hash identifier: lHFvQFg1LVLy3O3sNUHSYIs4K9btGkp+Era+gs72u0I= Subject key identifier: C1:1B:FC:A7:45:70:E1:82:45:57:7E:90:65:51:36:8D:5A:04:E2:1B Certificate issuer: /CN=286639fc-94c4-4d6a-9de1-f1b3ebb5f758 Certificate serial: 010D0C9F4328584ED431E048EE9C555A0772EF00 Authority key identifier: 63:C7:11:22:88:E9:0B:38:04:E5:58:20:EC:45:6D:8A:6F:96:C0:01 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/42218378-fc67-3b7b-af80-93064b4e7d2a.roa Signing time: Fri 14 Aug 2026 01:00:13 +0000 ROA not before: Fri 14 Aug 2026 01:00:13 +0000 ROA not after: Thu 12 Nov 2026 02:00:13 +0000 asID: 7131 IP address blocks: 64.86.72.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:d4:31:e0:48:ee:9c:55:5a:07:72:ef:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=286639fc-94c4-4d6a-9de1-f1b3ebb5f758 Validity Not Before: Aug 14 01:00:13 2026 GMT Not After : Nov 12 02:00:13 2026 GMT Subject: CN=aae7ad6d-2d1b-47e0-9e2d-acfad75a9033 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:4b:12:19:70:a2:09:96:af:57:2e:34:0a:6b: b6:7d:83:95:f0:a9:bf:55:44:b4:73:cb:42:18:13: d3:34:dc:8f:25:9e:1b:56:c9:2b:5a:64:51:9d:d5: a4:e5:a8:88:e5:e0:c3:49:88:0b:40:2e:dd:c8:b6: 2c:fe:38:7e:58:0c:37:2c:f2:1f:41:04:c4:20:d3: ed:e0:ac:82:5b:29:7d:0b:7d:1e:3a:51:6c:93:9f: e9:48:ab:f8:ad:39:6a:3b:f4:8a:e9:99:f5:0e:81: bc:8a:bb:08:9c:a1:27:55:14:b1:9b:96:4c:6a:4c: 83:43:6c:4f:0d:cb:34:c6:b7:06:ac:49:ba:39:a9: 71:dc:d2:5f:aa:10:f0:18:bc:3c:6e:43:d6:b0:30: e6:4f:43:5e:eb:51:99:25:ac:80:5c:1a:c6:42:c5: 01:c3:5d:a5:70:e4:8b:02:59:1a:ff:3a:12:c1:e3: 94:b1:06:3f:01:00:d3:c5:ec:9a:f6:8b:65:a0:5a: 77:79:87:be:6f:dc:33:8a:cf:35:7c:4a:08:22:ae: d0:23:05:b0:28:b2:92:86:41:c9:13:cc:3f:39:e0: 75:62:98:0e:3e:75:20:5e:f4:31:19:eb:f5:13:5f: c4:71:b4:3a:c5:20:fa:8d:d2:5d:e0:5b:ca:c7:4d: 10:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:1B:FC:A7:45:70:E1:82:45:57:7E:90:65:51:36:8D:5A:04:E2:1B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/42218378-fc67-3b7b-af80-93064b4e7d2a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.crl X509v3 Authority Key Identifier: keyid:63:C7:11:22:88:E9:0B:38:04:E5:58:20:EC:45:6D:8A:6F:96:C0:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.cer sbgp-ipAddrBlock: critical IPv4: 64.86.72.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:1d:18:3a:d8:69:8a:a5:0e:80:62:2d:68:65:90:ed:cb:d6: 26:dc:6d:38:4a:32:1b:13:7e:10:d6:7f:9e:9c:d3:bb:4a:ef: f4:58:94:53:c6:4d:25:66:80:6c:4c:2a:50:1b:24:c5:3b:28: f1:20:31:e0:e4:85:b9:89:ca:14:15:37:e6:3a:ab:95:48:ce: c9:82:d6:2f:c3:6e:93:d1:2f:0d:d1:97:44:86:e5:54:10:f4: 8a:53:a3:c4:ba:38:b3:fd:30:ba:6a:d4:c9:da:b7:6e:73:cd: f1:cd:23:34:f3:6c:42:b0:1b:03:4b:b2:db:c0:1b:ae:c4:67: d5:12:79:dd:01:44:b1:a2:96:44:3a:56:c3:95:52:6d:4c:07: ad:23:12:f3:06:34:ff:0a:19:a3:3f:77:2d:07:31:94:10:36: cb:ec:ab:53:4a:7e:97:76:52:3d:b3:27:3a:85:74:5f:ff:3c: 7a:00:d8:d6:5e:2c:38:17:78:1f:d8:31:b1:99:04:8c:65:fb: 6c:2e:2f:bd:d4:0a:ad:99:3f:ed:6d:f3:5a:24:aa:af:13:49: e6:0e:3b:50:de:94:76:f2:f1:db:0a:08:7d:b7:76:4e:1a:a5: 0b:f4:c1:eb:60:7d:62:5a:43:96:ba:e0:a9:77:b4:b1:89:19: b6:71:76:d5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7UMeBI7pxVWgdy7wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjg2NjM5ZmMtOTRjNC00ZDZhLTlkZTEtZjFiM2ViYjVm NzU4MB4XDTI2MDgxNDAxMDAxM1oXDTI2MTExMjAyMDAxM1owLzEtMCsGA1UEAxMk YWFlN2FkNmQtMmQxYi00N2UwLTllMmQtYWNmYWQ3NWE5MDMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoksSGXCiCZavVy40Cmu2fYOV8Km/VUS0c8tC GBPTNNyPJZ4bVskrWmRRndWk5aiI5eDDSYgLQC7dyLYs/jh+WAw3LPIfQQTEINPt 4KyCWyl9C30eOlFsk5/pSKv4rTlqO/SK6Zn1DoG8irsInKEnVRSxm5ZMakyDQ2xP Dcs0xrcGrEm6Oalx3NJfqhDwGLw8bkPWsDDmT0Ne61GZJayAXBrGQsUBw12lcOSL Alka/zoSweOUsQY/AQDTxeya9otloFp3eYe+b9wzis81fEoIIq7QIwWwKLKShkHJ E8w/OeB1YpgOPnUgXvQxGev1E1/EcbQ6xSD6jdJd4FvKx00QsQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMEb/KdFcOGCRVd+kGVRNo1aBOIbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODY2 MzlmYy05NGM0LTRkNmEtOWRlMS1mMWIzZWJiNWY3NTgvNDIyMTgzNzgtZmM2Ny0z YjdiLWFmODAtOTMwNjRiNGU3ZDJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjg2NjM5ZmMtOTRjNC00ZDZhLTlk ZTEtZjFiM2ViYjVmNzU4LzI4NjYzOWZjLTk0YzQtNGQ2YS05ZGUxLWYxYjNlYmI1 Zjc1OC5jcmwwHwYDVR0jBBgwFoAUY8cRIojpCzgE5Vgg7EVtim+WwAEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODY2MzlmYy05NGM0LTRkNmEtOWRlMS1mMWIz ZWJiNWY3NTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQFZIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGIdGDrYaYqlDoBiLWhlkO3L1ibcbThKMhsTfhDWf56c07tK7/RYlFPG TSVmgGxMKlAbJMU7KPEgMeDkhbmJyhQVN+Y6q5VIzsmC1i/DbpPRLw3Rl0SG5VQQ 9IpTo8S6OLP9MLpq1Mnat25zzfHNIzTzbEKwGwNLstvAG67EZ9USed0BRLGilkQ6 VsOVUm1MB60jEvMGNP8KGaM/dy0HMZQQNsvsq1NKfpd2Uj2zJzqFdF//PHoA2NZe LDgXeB/YMbGZBIxl+2wuL73UCq2ZP+1t81okqq8TSeYOO1DelHby8dsKCH23dk4a pQv0wetgfWJaQ5a64Kl3tLGJGbZxdtU= -----END CERTIFICATE-----Generated at Sat Oct 10 14:11:44 2026 by rpki-client