$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/239c7b2a-d138-33cf-be7d-13d8071140a8.roa File: 239c7b2a-d138-33cf-be7d-13d8071140a8.roa (raw, json) Hash identifier: 049Ysbdxm1LTqw5fRZ5W9QCqxkPzisXLB0clK7HEKa4= Subject key identifier: 4B:D3:3E:9E:EB:6F:70:2F:34:6C:EB:4F:49:37:74:EC:27:E6:19:0D Certificate issuer: /CN=286639fc-94c4-4d6a-9de1-f1b3ebb5f758 Certificate serial: 010D0C9F4328584F7782DFDA3B8105279FAAC900 Authority key identifier: 63:C7:11:22:88:E9:0B:38:04:E5:58:20:EC:45:6D:8A:6F:96:C0:01 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/239c7b2a-d138-33cf-be7d-13d8071140a8.roa Signing time: Sun 11 Oct 2026 13:00:12 +0000 ROA not before: Sun 11 Oct 2026 13:00:12 +0000 ROA not after: Sat 09 Jan 2027 14:00:12 +0000 asID: 18563 IP address blocks: 64.86.140.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 16 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:77:82:df:da:3b:81:05:27:9f:aa:c9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=286639fc-94c4-4d6a-9de1-f1b3ebb5f758 Validity Not Before: Oct 11 13:00:12 2026 GMT Not After : Jan 9 14:00:12 2027 GMT Subject: CN=b6d8b7bb-51f1-45e1-9a9d-59ffd90fc1b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:b2:74:65:78:6b:93:2e:e5:44:ea:8f:5a:a5: 78:2c:83:d0:2b:c8:6c:bd:18:9a:4a:a6:50:c3:52: 3d:68:7a:fe:79:29:08:6f:16:c2:f7:79:42:f8:c7: 33:0d:32:53:36:21:93:b8:83:16:93:9a:d2:42:1b: b3:33:b6:2c:59:f5:7c:7c:86:84:e6:47:6e:48:84: bc:05:2f:b4:d9:04:ac:88:88:78:27:d9:fc:a3:2d: 8d:a1:bd:2d:17:1e:e6:84:aa:e5:88:44:fb:9f:18: a0:89:4b:3d:cf:30:6e:31:02:94:f6:4d:b9:8a:4e: 40:92:89:78:99:80:75:82:8d:48:88:e7:aa:ad:80: 6b:ec:48:f0:b4:9f:31:db:79:4f:f8:e7:03:0d:80: b7:db:b5:45:2c:60:ff:86:9d:c0:15:c0:47:e3:5b: 1d:43:fd:1b:f5:fe:48:4a:d3:ec:1a:19:f9:1d:35: 07:dd:8a:b8:29:7b:81:de:6d:6e:38:0b:23:90:49: f2:a7:61:52:5a:f6:ea:2b:72:bd:9e:f2:23:c5:c7: 6e:ac:78:8a:af:9d:3a:5f:29:4f:f7:36:a6:15:1e: 2a:c2:47:e5:b6:7e:c3:de:f9:ad:4e:24:30:f5:08: 9b:db:61:e0:4d:92:cd:e4:e5:eb:9c:b8:cb:28:c5: 5e:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:D3:3E:9E:EB:6F:70:2F:34:6C:EB:4F:49:37:74:EC:27:E6:19:0D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/239c7b2a-d138-33cf-be7d-13d8071140a8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.crl X509v3 Authority Key Identifier: keyid:63:C7:11:22:88:E9:0B:38:04:E5:58:20:EC:45:6D:8A:6F:96:C0:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.cer sbgp-ipAddrBlock: critical IPv4: 64.86.140.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:77:c0:d6:f7:db:c2:5f:fe:b4:b9:6a:bc:13:9e:c5:a6:dc: 62:f9:43:d4:92:c4:d6:c0:fc:2d:f1:aa:f1:65:28:00:35:f8: 0d:8d:df:45:03:1a:d8:ac:63:4c:4b:b5:b4:7e:79:50:76:07: c7:d0:89:bb:88:08:19:75:e8:f8:6d:f2:13:c2:58:fa:83:9c: 7c:5e:42:3a:95:87:dc:43:ba:b5:40:08:5b:d0:18:c1:8c:14: da:e7:01:ce:56:7b:57:b0:ad:d0:16:e4:25:bc:01:df:29:4a: 4b:13:72:cb:2d:6f:fa:5a:85:99:54:5b:8e:00:45:2a:85:d8: 13:e3:80:4c:b4:f1:99:1e:28:03:f9:e9:d3:e5:22:5a:9f:f3: 47:68:56:73:7c:c6:6e:c9:b6:19:eb:b6:3a:ab:0c:7f:fc:ed: e4:d8:3b:1b:2e:53:ce:72:84:9c:98:8d:e6:19:cb:08:1b:6a: a5:43:14:3b:4f:30:1a:45:be:5c:69:7b:de:7a:a1:98:60:a1: 3d:57:8f:61:c7:f2:ef:c7:0a:3f:1e:91:97:af:44:23:08:ff: dd:55:79:e5:fb:84:6c:15:58:ae:b5:25:99:c1:a1:b5:1e:b5: 8e:2c:2f:1b:72:2a:87:d7:7e:26:d8:ea:10:c4:26:5f:9d:b9: e2:e3:ff:90 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE93gt/aO4EFJ5+qyQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjg2NjM5ZmMtOTRjNC00ZDZhLTlkZTEtZjFiM2ViYjVm NzU4MB4XDTI2MTAxMTEzMDAxMloXDTI3MDEwOTE0MDAxMlowLzEtMCsGA1UEAxMk YjZkOGI3YmItNTFmMS00NWUxLTlhOWQtNTlmZmQ5MGZjMWIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmLJ0ZXhrky7lROqPWqV4LIPQK8hsvRiaSqZQ w1I9aHr+eSkIbxbC93lC+MczDTJTNiGTuIMWk5rSQhuzM7YsWfV8fIaE5kduSIS8 BS+02QSsiIh4J9n8oy2Nob0tFx7mhKrliET7nxigiUs9zzBuMQKU9k25ik5Akol4 mYB1go1IiOeqrYBr7EjwtJ8x23lP+OcDDYC327VFLGD/hp3AFcBH41sdQ/0b9f5I StPsGhn5HTUH3Yq4KXuB3m1uOAsjkEnyp2FSWvbqK3K9nvIjxcdurHiKr506XylP 9zamFR4qwkfltn7D3vmtTiQw9Qib22HgTZLN5OXrnLjLKMVe0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEvTPp7rb3AvNGzrT0k3dOwn5hkNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODY2 MzlmYy05NGM0LTRkNmEtOWRlMS1mMWIzZWJiNWY3NTgvMjM5YzdiMmEtZDEzOC0z M2NmLWJlN2QtMTNkODA3MTE0MGE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjg2NjM5ZmMtOTRjNC00ZDZhLTlk ZTEtZjFiM2ViYjVmNzU4LzI4NjYzOWZjLTk0YzQtNGQ2YS05ZGUxLWYxYjNlYmI1 Zjc1OC5jcmwwHwYDVR0jBBgwFoAUY8cRIojpCzgE5Vgg7EVtim+WwAEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODY2MzlmYy05NGM0LTRkNmEtOWRlMS1mMWIz ZWJiNWY3NTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQFaMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF13wNb328Jf/rS5arwTnsWm3GL5Q9SSxNbA/C3xqvFlKAA1+A2N30UD GtisY0xLtbR+eVB2B8fQibuICBl16Pht8hPCWPqDnHxeQjqVh9xDurVACFvQGMGM FNrnAc5We1ewrdAW5CW8Ad8pSksTcsstb/pahZlUW44ARSqF2BPjgEy08ZkeKAP5 6dPlIlqf80doVnN8xm7JthnrtjqrDH/87eTYOxsuU85yhJyYjeYZywgbaqVDFDtP MBpFvlxpe956oZhgoT1Xj2HH8u/HCj8ekZevRCMI/91VeeX7hGwVWK61JZnBobUe tY4sLxtyKofXfibY6hDEJl+dueLj/5A= -----END CERTIFICATE-----Generated at Thu Oct 15 13:34:43 2026 by rpki-client