$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/d8f8a9be-4f08-3f23-a598-e79e48acaa67.roa File: d8f8a9be-4f08-3f23-a598-e79e48acaa67.roa (raw, json) Hash identifier: ttUEYxwWF/mpRG38lekpMEefuB+TY2o1VWH3yx9fSuA= Subject key identifier: 52:79:1E:DB:CF:7D:DC:4B:22:C5:58:FF:38:90:3B:45:A2:4E:19:DB Certificate issuer: /CN=86b35f71-51ac-43ff-b604-cba3552c4c8c Certificate serial: 010D0C9F4328584B13D6B6FB1DF428BAE76EE300 Authority key identifier: 64:9C:3D:FE:D3:DF:3D:6B:67:BC:6D:BC:E9:05:BC:C0:6C:E6:1C:D7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/d8f8a9be-4f08-3f23-a598-e79e48acaa67.roa Signing time: Thu 04 Sep 2025 01:00:33 +0000 ROA not before: Thu 04 Sep 2025 01:00:33 +0000 ROA not after: Wed 03 Dec 2025 02:00:33 +0000 asID: 54098 IP address blocks: 100.42.27.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/86b35f71-51ac-43ff-b604-cba3552c4c8c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/86b35f71-51ac-43ff-b604-cba3552c4c8c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 11 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:13:d6:b6:fb:1d:f4:28:ba:e7:6e:e3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86b35f71-51ac-43ff-b604-cba3552c4c8c Validity Not Before: Sep 4 01:00:33 2025 GMT Not After : Dec 3 02:00:33 2025 GMT Subject: CN=74eafd58-169c-49e5-8e38-bf6d0beeb8e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:04:4b:39:12:2b:f6:ee:bb:17:5d:05:55:3e: 01:e6:8f:52:75:7f:03:6a:e3:39:c7:f7:97:9c:34: fe:54:3c:77:7c:6a:d4:f8:fe:9a:d5:32:2f:fc:2b: e0:10:07:f1:32:db:4b:36:72:ce:58:3f:a5:4e:7e: 0b:fb:20:09:52:5b:d2:56:a1:ff:4b:67:ad:35:0d: 9e:ac:0d:63:ce:39:31:1e:9c:6a:ce:07:75:9b:f5: b5:a3:13:41:16:32:90:c2:13:70:bc:85:c1:b2:05: d2:d5:b7:db:3b:15:33:66:2f:9d:5f:90:eb:c4:ed: 05:5b:47:b9:6c:12:2b:5a:ea:24:70:ef:bf:94:08: 29:b4:8b:eb:22:9f:56:d3:35:1f:6a:bb:a0:02:45: a0:35:70:c8:d3:9e:2d:59:73:dc:b3:ec:d8:a0:93: 6f:e3:94:ab:a1:14:d2:ae:91:3e:ec:69:b6:0e:29: b5:74:a6:a2:0e:9f:3f:5e:79:9f:1f:6f:f5:1b:d8: 92:bc:69:06:63:07:fa:43:1f:44:4f:c5:f5:9d:06: 93:59:a9:84:bd:ac:14:a2:e7:75:49:32:ab:82:cf: b8:a6:59:dd:7c:e1:93:4e:80:20:24:02:52:12:d4: dd:9c:84:d7:76:5b:9f:56:37:8b:74:89:b4:33:38: 68:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:79:1E:DB:CF:7D:DC:4B:22:C5:58:FF:38:90:3B:45:A2:4E:19:DB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/d8f8a9be-4f08-3f23-a598-e79e48acaa67.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/86b35f71-51ac-43ff-b604-cba3552c4c8c.crl X509v3 Authority Key Identifier: keyid:64:9C:3D:FE:D3:DF:3D:6B:67:BC:6D:BC:E9:05:BC:C0:6C:E6:1C:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c.cer sbgp-ipAddrBlock: critical IPv4: 100.42.27.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:de:81:11:a3:0d:65:66:09:57:83:3c:92:cd:67:b5:5b:73: 53:d1:b9:74:cf:c6:2f:5f:3e:d7:b2:d7:43:07:e3:80:e0:77: d2:c2:39:48:46:fa:bc:0c:6c:0e:3e:70:dc:13:67:60:7e:69: 7b:f8:d2:34:48:01:74:a7:94:05:6e:79:78:3b:05:b0:62:eb: 97:1e:2c:d8:b1:b6:25:a2:ad:1e:57:1b:f7:90:ed:49:fb:7d: 0a:77:c3:63:17:93:33:88:e3:d5:ec:9f:0f:79:de:d7:c9:17: 97:49:4a:cc:02:e0:eb:eb:bc:35:7e:51:04:c6:b1:6c:a1:2b: a6:1d:86:42:98:af:3f:91:36:7a:b6:0a:91:94:56:c8:80:3a: 5d:be:c4:34:f4:fc:6b:a0:3e:f1:c1:a5:75:0d:fc:58:c9:a4: 97:23:1c:1c:6f:4d:ac:9b:57:99:3a:ab:25:5a:d2:be:93:39: 41:dd:ca:9e:fd:60:b0:2b:3d:9e:04:e2:58:10:54:d0:7c:35: 2d:6c:c8:96:0c:08:33:76:48:75:fd:86:8d:1d:a0:e6:78:7a: 6a:cf:d5:ef:25:30:e1:52:99:c2:09:24:67:ed:b5:a0:de:d3: ad:5b:aa:01:19:ab:59:9e:6e:85:63:a4:e5:1c:35:2b:a0:f1: 54:14:84:b8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsT1rb7HfQouudu4wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODZiMzVmNzEtNTFhYy00M2ZmLWI2MDQtY2JhMzU1MmM0 YzhjMB4XDTI1MDkwNDAxMDAzM1oXDTI1MTIwMzAyMDAzM1owLzEtMCsGA1UEAxMk NzRlYWZkNTgtMTY5Yy00OWU1LThlMzgtYmY2ZDBiZWViOGU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiQRLORIr9u67F10FVT4B5o9SdX8DauM5x/eX nDT+VDx3fGrU+P6a1TIv/CvgEAfxMttLNnLOWD+lTn4L+yAJUlvSVqH/S2etNQ2e rA1jzjkxHpxqzgd1m/W1oxNBFjKQwhNwvIXBsgXS1bfbOxUzZi+dX5DrxO0FW0e5 bBIrWuokcO+/lAgptIvrIp9W0zUfarugAkWgNXDI054tWXPcs+zYoJNv45SroRTS rpE+7Gm2Dim1dKaiDp8/XnmfH2/1G9iSvGkGYwf6Qx9ET8X1nQaTWamEvawUoud1 STKrgs+4plndfOGTToAgJAJSEtTdnITXdlufVjeLdIm0Mzho+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFJ5HtvPfdxLIsVY/ziQO0WiThnbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84NmIz NWY3MS01MWFjLTQzZmYtYjYwNC1jYmEzNTUyYzRjOGMvZDhmOGE5YmUtNGYwOC0z ZjIzLWE1OTgtZTc5ZTQ4YWNhYTY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvODZiMzVmNzEtNTFhYy00M2ZmLWI2 MDQtY2JhMzU1MmM0YzhjLzg2YjM1ZjcxLTUxYWMtNDNmZi1iNjA0LWNiYTM1NTJj NGM4Yy5jcmwwHwYDVR0jBBgwFoAUZJw9/tPfPWtnvG286QW8wGzmHNcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS84NmIzNWY3MS01MWFjLTQzZmYtYjYwNC1jYmEz NTUyYzRjOGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZCobMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC/egRGjDWVmCVeDPJLNZ7Vbc1PRuXTPxi9fPtey10MH44Dgd9LCOUhG +rwMbA4+cNwTZ2B+aXv40jRIAXSnlAVueXg7BbBi65ceLNixtiWirR5XG/eQ7Un7 fQp3w2MXkzOI49Xsnw953tfJF5dJSswC4OvrvDV+UQTGsWyhK6YdhkKYrz+RNnq2 CpGUVsiAOl2+xDT0/GugPvHBpXUN/FjJpJcjHBxvTaybV5k6qyVa0r6TOUHdyp79 YLArPZ4E4lgQVNB8NS1syJYMCDN2SHX9ho0doOZ4emrP1e8lMOFSmcIJJGfttaDe 061bqgEZq1meboVjpOUcNSug8VQUhLg= -----END CERTIFICATE-----Generated at Wed Sep 10 06:35:36 2025 by rpki-client