$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/bef06e49-a62b-35b4-b63d-855e5a9e3052.roa File: bef06e49-a62b-35b4-b63d-855e5a9e3052.roa (raw, json) Hash identifier: +Wlhb4IMPQNGQYe+nokdZlke3FhmvlUaNmBMBOlDshE= Subject key identifier: 43:DC:92:CA:F5:5A:39:F0:65:23:AB:01:16:BB:90:D5:F2:69:90:01 Certificate issuer: /CN=286639fc-94c4-4d6a-9de1-f1b3ebb5f758 Certificate serial: 010D0C9F4328584B13D6AAA8A85FA2D1ECFF4A80 Authority key identifier: 63:C7:11:22:88:E9:0B:38:04:E5:58:20:EC:45:6D:8A:6F:96:C0:01 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/bef06e49-a62b-35b4-b63d-855e5a9e3052.roa Signing time: Thu 04 Sep 2025 01:00:33 +0000 ROA not before: Thu 04 Sep 2025 01:00:33 +0000 ROA not after: Wed 03 Dec 2025 02:00:33 +0000 asID: 7029 IP address blocks: 64.86.216.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:13:d6:aa:a8:a8:5f:a2:d1:ec:ff:4a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=286639fc-94c4-4d6a-9de1-f1b3ebb5f758 Validity Not Before: Sep 4 01:00:33 2025 GMT Not After : Dec 3 02:00:33 2025 GMT Subject: CN=b1328de5-7075-421c-96e6-a8defb6559d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:5a:ac:76:2a:1b:6c:c4:48:de:59:23:69:aa: 11:d6:5d:78:3b:79:3d:4e:04:12:af:fd:2c:67:45: 37:8b:db:c6:42:d1:21:40:7a:e7:67:77:76:a4:28: 04:b4:7b:e2:f2:e3:e5:83:67:0f:4f:f1:79:02:44: 8b:f9:ed:d5:7a:59:83:9b:7e:b5:ad:e6:3b:46:3e: 5d:9e:96:5f:c3:9d:48:73:5e:cb:e4:a3:ae:df:13: 4a:2c:b2:d3:71:74:6b:4b:e6:32:98:0f:54:5e:b2: 01:34:d5:ba:18:06:3b:22:9b:5c:ac:ea:28:50:fb: 15:38:d3:b6:49:a1:6a:a2:7e:e4:a4:65:b8:15:cc: 75:3e:58:33:ba:d1:4d:5c:2c:e9:f3:5f:bb:0c:02: b9:bf:09:5f:54:10:6b:8c:f9:55:15:ed:51:08:43: 3a:9a:05:98:17:ee:c3:6b:07:e8:db:02:40:11:9e: 07:db:e4:06:47:e9:0c:5c:c3:02:54:a2:fb:e7:05: 58:27:ec:34:f5:c5:9e:82:63:04:96:e1:41:85:3b: 23:ff:48:10:8d:0d:b8:23:4b:31:bd:43:0e:ad:03: ef:75:9d:4c:c3:82:a0:28:5b:d3:0d:2e:a1:da:e5: 8c:fa:f5:29:32:6a:9d:00:7a:fb:46:14:33:a7:c3: 7a:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:DC:92:CA:F5:5A:39:F0:65:23:AB:01:16:BB:90:D5:F2:69:90:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/bef06e49-a62b-35b4-b63d-855e5a9e3052.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.crl X509v3 Authority Key Identifier: keyid:63:C7:11:22:88:E9:0B:38:04:E5:58:20:EC:45:6D:8A:6F:96:C0:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.cer sbgp-ipAddrBlock: critical IPv4: 64.86.216.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:44:18:e3:92:5e:c3:22:e5:f8:66:4e:72:75:e3:0b:0f:ef: 72:e4:5a:06:ec:91:7e:b2:7c:2e:32:99:a5:49:86:f0:e5:dc: e2:98:e1:4e:69:d5:54:3a:46:33:ae:cc:0c:47:fa:dc:cb:ec: df:fe:ef:c0:da:07:42:88:c3:99:bf:62:b7:c5:f7:a0:c3:03: e4:d8:9b:50:13:00:6b:7e:a6:e2:8e:99:3b:26:46:38:c5:17: 98:c0:c0:5f:b6:1f:82:87:92:b1:3a:4d:40:d5:e0:62:73:27: b8:f3:9d:65:29:06:31:67:22:ca:e6:80:71:d0:18:cc:89:36: 50:2d:76:0f:9a:df:19:04:d6:70:4e:35:27:be:e4:1c:d5:84: 59:27:63:99:8b:e2:22:0c:b9:c4:71:1f:8f:9b:08:84:9f:13: ae:2f:aa:0a:59:5b:f2:a0:27:0c:06:13:6c:a9:ca:b0:96:b7: 5c:1a:28:ab:80:98:7a:fb:01:b0:8b:d0:52:fa:31:52:6a:bd: 3f:2f:d0:45:59:f3:10:83:e5:3a:29:2b:e7:e4:d9:fc:56:f0: 5f:02:d0:bf:f5:2b:f4:b3:f0:52:ac:e8:56:1a:af:54:1f:a1: 2b:02:4c:b1:6b:75:3c:55:f7:58:42:f6:a2:f5:7a:d8:50:70: 7e:54:4a:7e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsT1qqoqF+i0ez/SoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjg2NjM5ZmMtOTRjNC00ZDZhLTlkZTEtZjFiM2ViYjVm NzU4MB4XDTI1MDkwNDAxMDAzM1oXDTI1MTIwMzAyMDAzM1owLzEtMCsGA1UEAxMk YjEzMjhkZTUtNzA3NS00MjFjLTk2ZTYtYThkZWZiNjU1OWQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoVqsdiobbMRI3lkjaaoR1l14O3k9TgQSr/0s Z0U3i9vGQtEhQHrnZ3d2pCgEtHvi8uPlg2cPT/F5AkSL+e3VelmDm361reY7Rj5d npZfw51Ic17L5KOu3xNKLLLTcXRrS+YymA9UXrIBNNW6GAY7IptcrOooUPsVONO2 SaFqon7kpGW4Fcx1PlgzutFNXCzp81+7DAK5vwlfVBBrjPlVFe1RCEM6mgWYF+7D awfo2wJAEZ4H2+QGR+kMXMMCVKL75wVYJ+w09cWegmMEluFBhTsj/0gQjQ24I0sx vUMOrQPvdZ1Mw4KgKFvTDS6h2uWM+vUpMmqdAHr7RhQzp8N6AwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEPcksr1WjnwZSOrARa7kNXyaZABMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODY2 MzlmYy05NGM0LTRkNmEtOWRlMS1mMWIzZWJiNWY3NTgvYmVmMDZlNDktYTYyYi0z NWI0LWI2M2QtODU1ZTVhOWUzMDUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjg2NjM5ZmMtOTRjNC00ZDZhLTlk ZTEtZjFiM2ViYjVmNzU4LzI4NjYzOWZjLTk0YzQtNGQ2YS05ZGUxLWYxYjNlYmI1 Zjc1OC5jcmwwHwYDVR0jBBgwFoAUY8cRIojpCzgE5Vgg7EVtim+WwAEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODY2MzlmYy05NGM0LTRkNmEtOWRlMS1mMWIz ZWJiNWY3NTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQFbYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABBEGOOSXsMi5fhmTnJ14wsP73LkWgbskX6yfC4ymaVJhvDl3OKY4U5p 1VQ6RjOuzAxH+tzL7N/+78DaB0KIw5m/YrfF96DDA+TYm1ATAGt+puKOmTsmRjjF F5jAwF+2H4KHkrE6TUDV4GJzJ7jznWUpBjFnIsrmgHHQGMyJNlAtdg+a3xkE1nBO NSe+5BzVhFknY5mL4iIMucRxH4+bCISfE64vqgpZW/KgJwwGE2ypyrCWt1waKKuA mHr7AbCL0FL6MVJqvT8v0EVZ8xCD5TopK+fk2fxW8F8C0L/1K/Sz8FKs6FYar1Qf oSsCTLFrdTxV91hC9qL1ethQcH5USn4= -----END CERTIFICATE-----Generated at Fri Oct 24 23:31:26 2025 by rpki-client