$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/e836d0a7-8196-3fd1-98dc-d4a2a10dec14.roa File: e836d0a7-8196-3fd1-98dc-d4a2a10dec14.roa (raw, json) Hash identifier: x4+ImYAoNiPtkpi0E6hNljYhLJsyvo6nuGGdvO/oHbs= Subject key identifier: 86:8D:27:19:F1:B8:16:1E:65:C5:6B:D8:2A:DB:FF:8C:FD:04:45:E1 Certificate issuer: /CN=286639fc-94c4-4d6a-9de1-f1b3ebb5f758 Certificate serial: 010D0C9F4328584ED431E08853513506BC1BA800 Authority key identifier: 63:C7:11:22:88:E9:0B:38:04:E5:58:20:EC:45:6D:8A:6F:96:C0:01 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/e836d0a7-8196-3fd1-98dc-d4a2a10dec14.roa Signing time: Fri 14 Aug 2026 01:00:13 +0000 ROA not before: Fri 14 Aug 2026 01:00:13 +0000 ROA not after: Thu 12 Nov 2026 02:00:13 +0000 asID: 40009 IP address blocks: 64.86.232.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:d4:31:e0:88:53:51:35:06:bc:1b:a8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=286639fc-94c4-4d6a-9de1-f1b3ebb5f758 Validity Not Before: Aug 14 01:00:13 2026 GMT Not After : Nov 12 02:00:13 2026 GMT Subject: CN=85a71823-29a3-4df1-9cd7-a26b82d6a2c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:4a:0a:51:81:0f:77:6a:0d:9d:b3:8a:e8:96: 28:65:4b:20:1f:66:17:a6:f6:e5:91:54:80:e0:af: c6:9c:c1:7b:46:c9:e8:86:43:f0:d1:7e:cd:17:b0: 6d:cb:ac:78:6d:5a:cd:09:b2:73:86:37:d6:b2:e3: 23:08:19:9c:58:82:e1:8a:3e:ee:ac:38:13:a4:4a: cb:5d:ef:b9:9b:cb:fa:02:2d:e3:e5:fa:2d:60:f8: ac:6c:2c:ed:9c:7a:fa:47:3e:62:2a:2c:3b:10:18: 50:ff:c5:b0:f5:8f:e9:7a:06:95:f1:ad:a2:72:ee: 00:53:2a:b7:f1:ad:c8:89:d1:b7:44:e6:9c:93:50: 8d:14:0e:88:7d:dd:a7:6c:72:fa:6e:10:1c:53:df: 0b:05:7c:8a:4c:0f:46:9e:e5:2f:bc:27:f6:c8:4b: db:25:2f:07:68:fc:14:a8:82:ff:c8:93:05:2e:5e: cb:2a:df:45:cc:38:00:28:19:a0:37:6a:65:ec:95: d0:40:29:d2:53:96:97:33:55:13:1f:a6:42:47:c7: c1:d7:db:dd:88:be:6b:76:09:03:de:d5:8c:72:fb: d5:31:63:fc:ee:33:83:f7:54:a5:72:dd:6d:c4:97: 40:40:66:8b:54:fd:de:b7:61:db:e3:89:4e:c7:50: 2e:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:8D:27:19:F1:B8:16:1E:65:C5:6B:D8:2A:DB:FF:8C:FD:04:45:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/e836d0a7-8196-3fd1-98dc-d4a2a10dec14.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.crl X509v3 Authority Key Identifier: keyid:63:C7:11:22:88:E9:0B:38:04:E5:58:20:EC:45:6D:8A:6F:96:C0:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.cer sbgp-ipAddrBlock: critical IPv4: 64.86.232.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:5f:aa:6e:70:1a:a9:f8:82:2e:1f:c4:77:b0:32:84:e6:72: 81:98:1f:e3:a2:ce:74:8d:81:52:c2:94:42:d5:f8:f8:39:4b: 84:f7:ab:a6:79:5c:a3:a4:b3:86:a9:e1:fe:71:e3:83:9f:4c: 68:f9:36:f1:b0:31:37:e9:e1:3c:9d:11:69:95:3a:f3:24:c7: 63:db:02:e5:73:c7:93:63:22:60:83:a0:fa:4d:63:14:f8:0b: 01:93:98:40:65:81:21:79:bc:d3:3d:7e:99:c0:61:79:2d:60: cc:88:28:cc:21:87:51:ac:22:96:8a:ad:3e:97:d8:c9:4a:98: 63:52:15:d6:88:54:95:40:54:98:50:1d:24:1b:44:79:64:6a: fd:ae:ed:90:c6:52:1e:37:bf:eb:19:16:a0:8c:b9:bf:c4:99: 07:54:0a:9f:2d:20:96:59:66:f5:08:7f:be:6e:9e:8f:76:06: bc:77:92:16:a0:64:3b:31:62:e3:25:3d:99:76:a0:12:39:37: 80:af:b1:c8:0c:c1:e4:34:52:bc:de:6c:3a:36:54:7d:40:a2: 9a:a9:e6:9d:c2:32:f4:b4:38:f6:45:99:19:29:72:24:82:a0: 20:bb:d7:0a:35:4e:be:a0:cf:52:ef:ea:17:4d:83:fd:6c:1d: 72:42:f5:af -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7UMeCIU1E1BrwbqAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjg2NjM5ZmMtOTRjNC00ZDZhLTlkZTEtZjFiM2ViYjVm NzU4MB4XDTI2MDgxNDAxMDAxM1oXDTI2MTExMjAyMDAxM1owLzEtMCsGA1UEAxMk ODVhNzE4MjMtMjlhMy00ZGYxLTljZDctYTI2YjgyZDZhMmMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnEoKUYEPd2oNnbOK6JYoZUsgH2YXpvblkVSA 4K/GnMF7RsnohkPw0X7NF7Bty6x4bVrNCbJzhjfWsuMjCBmcWILhij7urDgTpErL Xe+5m8v6Ai3j5fotYPisbCztnHr6Rz5iKiw7EBhQ/8Ww9Y/pegaV8a2icu4AUyq3 8a3IidG3ROack1CNFA6Ifd2nbHL6bhAcU98LBXyKTA9GnuUvvCf2yEvbJS8HaPwU qIL/yJMFLl7LKt9FzDgAKBmgN2pl7JXQQCnSU5aXM1UTH6ZCR8fB19vdiL5rdgkD 3tWMcvvVMWP87jOD91Slct1txJdAQGaLVP3et2Hb44lOx1AuIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIaNJxnxuBYeZcVr2Crb/4z9BEXhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODY2 MzlmYy05NGM0LTRkNmEtOWRlMS1mMWIzZWJiNWY3NTgvZTgzNmQwYTctODE5Ni0z ZmQxLTk4ZGMtZDRhMmExMGRlYzE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjg2NjM5ZmMtOTRjNC00ZDZhLTlk ZTEtZjFiM2ViYjVmNzU4LzI4NjYzOWZjLTk0YzQtNGQ2YS05ZGUxLWYxYjNlYmI1 Zjc1OC5jcmwwHwYDVR0jBBgwFoAUY8cRIojpCzgE5Vgg7EVtim+WwAEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODY2MzlmYy05NGM0LTRkNmEtOWRlMS1mMWIz ZWJiNWY3NTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDQFboMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFVfqm5wGqn4gi4fxHewMoTmcoGYH+OiznSNgVLClELV+Pg5S4T3q6Z5 XKOks4ap4f5x44OfTGj5NvGwMTfp4TydEWmVOvMkx2PbAuVzx5NjImCDoPpNYxT4 CwGTmEBlgSF5vNM9fpnAYXktYMyIKMwhh1GsIpaKrT6X2MlKmGNSFdaIVJVAVJhQ HSQbRHlkav2u7ZDGUh43v+sZFqCMub/EmQdUCp8tIJZZZvUIf75uno92Brx3khag ZDsxYuMlPZl2oBI5N4CvscgMweQ0UrzebDo2VH1Aopqp5p3CMvS0OPZFmRkpciSC oCC71wo1Tr6gz1Lv6hdNg/1sHXJC9a8= -----END CERTIFICATE-----Generated at Sun Sep 27 09:10:58 2026 by rpki-client