$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/239c7b2a-d138-33cf-be7d-13d8071140a8.roa File: 239c7b2a-d138-33cf-be7d-13d8071140a8.roa (raw, json) Hash identifier: AQ0KdBe7H9qcnc46xtYN4Z1Cq7IvEvamDM0eam24k3U= Subject key identifier: 7C:92:7D:6A:C7:AC:8D:A6:62:7A:61:D2:1E:1A:58:D2:1E:E7:F4:3B Certificate issuer: /CN=286639fc-94c4-4d6a-9de1-f1b3ebb5f758 Certificate serial: 010D0C9F4328584AB220C4375E70CA3C6C958A00 Authority key identifier: 63:C7:11:22:88:E9:0B:38:04:E5:58:20:EC:45:6D:8A:6F:96:C0:01 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/239c7b2a-d138-33cf-be7d-13d8071140a8.roa Signing time: Thu 31 Jul 2025 01:00:32 +0000 ROA not before: Thu 31 Jul 2025 01:00:32 +0000 ROA not after: Wed 29 Oct 2025 01:00:32 +0000 asID: 18563 IP address blocks: 64.86.140.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b2:20:c4:37:5e:70:ca:3c:6c:95:8a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=286639fc-94c4-4d6a-9de1-f1b3ebb5f758 Validity Not Before: Jul 31 01:00:32 2025 GMT Not After : Oct 29 01:00:32 2025 GMT Subject: CN=c30692ee-9f60-41e6-8295-fdab7d936a58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:03:dd:b5:10:37:17:41:63:b5:41:4d:21:ba: 2b:fb:19:10:68:bc:ce:31:5e:79:6b:83:b6:42:e3: 51:ce:02:ab:ca:b1:ef:13:ba:9f:4d:5d:a1:c0:c8: cf:ad:b8:a2:1d:ac:e6:c3:2c:56:3e:ef:48:68:61: b4:74:11:01:5e:b0:b3:80:9f:0b:0c:14:09:9a:e1: 35:a2:a7:50:71:03:29:20:0a:aa:6a:a8:e3:2d:87: 73:25:bd:e3:6e:49:2b:23:ae:01:a3:5e:4f:22:1e: a8:d3:d4:95:fb:56:93:0f:2d:c5:d9:3b:ef:20:5c: 96:1f:fa:e7:58:ca:51:2c:d2:35:87:19:44:0f:87: ad:b5:cc:55:80:07:5b:e4:d9:c5:00:69:2f:ac:d0: 19:c0:14:65:e3:9e:68:f9:33:40:08:76:8e:57:c7: 69:19:b5:a1:68:8e:6f:1e:1c:2f:62:99:2a:87:f4: b9:d5:26:e1:a0:85:9b:24:b8:15:82:5f:b7:a0:a2: 94:c4:97:20:0e:70:40:33:5e:46:ed:8b:60:4e:44: bf:b2:de:5b:a4:14:8e:25:98:90:9c:54:9b:8e:99: 38:a3:f3:ac:97:a4:ea:8e:b0:4d:65:10:cb:89:6b: 21:0c:34:22:70:d2:74:99:d2:df:58:7f:fa:66:c5: 3e:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:92:7D:6A:C7:AC:8D:A6:62:7A:61:D2:1E:1A:58:D2:1E:E7:F4:3B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/239c7b2a-d138-33cf-be7d-13d8071140a8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.crl X509v3 Authority Key Identifier: keyid:63:C7:11:22:88:E9:0B:38:04:E5:58:20:EC:45:6D:8A:6F:96:C0:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.cer sbgp-ipAddrBlock: critical IPv4: 64.86.140.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:0a:77:b1:96:b3:e8:22:51:03:62:cd:d9:d4:12:95:1a:3d: e1:6c:3d:f4:87:4e:87:21:b3:6f:24:f2:68:ae:10:ec:44:25: 22:7e:d7:16:91:24:98:f6:c9:ce:96:5c:00:c6:0d:7d:fb:65: e1:80:4e:3b:bd:66:3c:90:83:41:a6:5f:14:e5:fb:71:41:d3: 83:31:d1:0c:9b:3e:5d:46:6b:09:38:e6:b5:4c:74:80:3b:6b: 0c:6e:24:4f:94:62:82:4b:fd:38:eb:e3:a6:4a:70:f8:e7:62: ae:c8:c4:90:2b:d6:c3:14:7c:91:f2:80:f4:c4:62:a8:c8:68: 4f:1c:d2:8e:a2:4d:ac:c2:1a:38:1b:24:d3:a6:3f:4e:85:8f: 71:27:25:24:38:3d:10:61:85:57:2c:1c:56:d1:f0:7a:e0:f2: 40:00:f9:55:ba:60:39:2e:c1:36:3d:1d:e7:14:15:53:b7:85: eb:1f:9b:8d:1b:71:4e:5c:6a:be:5c:4d:98:e1:a1:e4:06:b5: f0:32:9b:29:67:5b:d4:28:e6:d2:da:ff:43:81:08:d7:25:79: a2:29:4f:17:57:ef:38:54:98:5c:04:64:73:97:bf:0b:bd:f5: 2b:e3:57:ba:fb:1d:a2:51:58:91:7d:36:dd:f6:5d:43:b9:86: 37:cb:f4:40 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqyIMQ3XnDKPGyVigAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjg2NjM5ZmMtOTRjNC00ZDZhLTlkZTEtZjFiM2ViYjVm NzU4MB4XDTI1MDczMTAxMDAzMloXDTI1MTAyOTAxMDAzMlowLzEtMCsGA1UEAxMk YzMwNjkyZWUtOWY2MC00MWU2LTgyOTUtZmRhYjdkOTM2YTU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAggPdtRA3F0FjtUFNIbor+xkQaLzOMV55a4O2 QuNRzgKryrHvE7qfTV2hwMjPrbiiHazmwyxWPu9IaGG0dBEBXrCzgJ8LDBQJmuE1 oqdQcQMpIAqqaqjjLYdzJb3jbkkrI64Bo15PIh6o09SV+1aTDy3F2TvvIFyWH/rn WMpRLNI1hxlED4ettcxVgAdb5NnFAGkvrNAZwBRl455o+TNACHaOV8dpGbWhaI5v HhwvYpkqh/S51SbhoIWbJLgVgl+3oKKUxJcgDnBAM15G7YtgTkS/st5bpBSOJZiQ nFSbjpk4o/Osl6TqjrBNZRDLiWshDDQicNJ0mdLfWH/6ZsU+SwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHySfWrHrI2mYnph0h4aWNIe5/Q7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODY2 MzlmYy05NGM0LTRkNmEtOWRlMS1mMWIzZWJiNWY3NTgvMjM5YzdiMmEtZDEzOC0z M2NmLWJlN2QtMTNkODA3MTE0MGE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjg2NjM5ZmMtOTRjNC00ZDZhLTlk ZTEtZjFiM2ViYjVmNzU4LzI4NjYzOWZjLTk0YzQtNGQ2YS05ZGUxLWYxYjNlYmI1 Zjc1OC5jcmwwHwYDVR0jBBgwFoAUY8cRIojpCzgE5Vgg7EVtim+WwAEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODY2MzlmYy05NGM0LTRkNmEtOWRlMS1mMWIz ZWJiNWY3NTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQFaMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIIKd7GWs+giUQNizdnUEpUaPeFsPfSHTochs28k8miuEOxEJSJ+1xaR JJj2yc6WXADGDX37ZeGATju9ZjyQg0GmXxTl+3FB04Mx0QybPl1Gawk45rVMdIA7 awxuJE+UYoJL/Tjr46ZKcPjnYq7IxJAr1sMUfJHygPTEYqjIaE8c0o6iTazCGjgb JNOmP06Fj3EnJSQ4PRBhhVcsHFbR8Hrg8kAA+VW6YDkuwTY9HecUFVO3hesfm40b cU5car5cTZjhoeQGtfAymylnW9Qo5tLa/0OBCNcleaIpTxdX7zhUmFwEZHOXvwu9 9SvjV7r7HaJRWJF9Nt32XUO5hjfL9EA= -----END CERTIFICATE-----Generated at Wed Aug 6 19:31:25 2025 by rpki-client