$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/3e8b7889-e23e-3034-ab41-de81b60a5710.roa File: 3e8b7889-e23e-3034-ab41-de81b60a5710.roa (raw, json) Hash identifier: WlOj+D1vsqcc2eGn01NFiOw+Hr3G6o4zmKZqv1pgNTg= Subject key identifier: 02:AE:2A:C5:72:C9:01:A0:60:DD:E2:D9:37:38:30:09:85:1B:46:79 Certificate issuer: /CN=286639fc-94c4-4d6a-9de1-f1b3ebb5f758 Certificate serial: 010D0C9F4328584B92DCDC7A898B533913D99BC0 Authority key identifier: 63:C7:11:22:88:E9:0B:38:04:E5:58:20:EC:45:6D:8A:6F:96:C0:01 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/3e8b7889-e23e-3034-ab41-de81b60a5710.roa Signing time: Sun 19 Oct 2025 13:00:39 +0000 ROA not before: Sun 19 Oct 2025 13:00:39 +0000 ROA not after: Sat 17 Jan 2026 14:00:39 +0000 asID: 14080 IP address blocks: 64.86.224.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:92:dc:dc:7a:89:8b:53:39:13:d9:9b:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=286639fc-94c4-4d6a-9de1-f1b3ebb5f758 Validity Not Before: Oct 19 13:00:39 2025 GMT Not After : Jan 17 14:00:39 2026 GMT Subject: CN=61f9761f-3e7a-4560-867a-ef4c22dd3367 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:06:76:3e:3c:6d:f7:ec:c7:fa:3c:97:e2:43: d1:13:2e:d1:cd:4f:65:b6:5b:af:b5:a7:c2:6e:82: d5:f3:ce:0e:18:f5:ba:8f:7f:2e:73:11:ae:26:0f: 5b:e4:e4:8a:3c:92:a2:be:aa:33:99:19:10:d9:da: f1:28:43:30:26:5c:68:1b:ed:52:e7:4d:f6:b6:b6: 3b:7d:78:36:89:46:27:95:bf:8d:59:68:ea:be:f1: c8:5f:82:1d:01:10:81:af:fd:ae:bc:86:c8:27:92: 43:a0:56:57:7d:34:bc:d4:23:8a:41:b7:e5:c8:92: fc:7c:eb:1d:e4:9d:08:08:df:75:d9:db:0e:e9:dc: 30:8d:90:91:3f:11:61:df:93:d0:d0:37:57:66:bf: ae:56:fd:2d:e5:73:fc:ba:c1:f7:0c:13:4d:5a:c7: 2c:bc:e6:b0:aa:e6:c1:4a:70:f1:03:b3:14:51:f2: f8:a1:dd:88:98:75:ec:c1:5a:13:19:6c:ab:e4:a7: 56:01:0e:3c:41:fd:ac:d4:ef:7a:5e:8f:b2:7c:75: e8:80:18:9c:40:3e:d9:13:86:8e:4d:e5:0e:f8:1c: ad:57:94:d4:c6:5d:31:0a:c8:40:e1:4f:06:b2:96: bd:9c:c6:7a:fd:40:bb:6f:de:87:98:ca:e4:71:cc: 69:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:AE:2A:C5:72:C9:01:A0:60:DD:E2:D9:37:38:30:09:85:1B:46:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/3e8b7889-e23e-3034-ab41-de81b60a5710.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.crl X509v3 Authority Key Identifier: keyid:63:C7:11:22:88:E9:0B:38:04:E5:58:20:EC:45:6D:8A:6F:96:C0:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.cer sbgp-ipAddrBlock: critical IPv4: 64.86.224.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:e0:70:c0:75:82:32:11:3b:a1:30:dd:b8:f3:4d:f1:63:c8: 9b:09:0a:83:1a:86:14:00:38:01:94:62:71:50:4b:48:12:7a: 3b:06:d4:88:ba:d4:95:f7:c9:7b:29:59:62:d6:42:ef:a0:9e: e5:64:fe:e0:29:15:b2:54:0e:12:01:1f:fb:a6:7c:df:9c:ec: 62:59:be:64:4e:02:df:06:c7:20:31:8d:4d:91:2c:f6:be:ef: 4a:e1:87:16:5d:ae:35:95:5d:4b:90:b0:8c:a0:05:24:d8:70: b3:34:9a:76:dc:de:00:a9:41:0d:66:32:48:d8:e2:63:a0:25: f2:9d:55:98:0b:ef:17:63:65:bc:c5:8e:f1:01:78:98:f5:4d: a3:43:0e:0d:f6:7e:1d:c9:b7:9b:54:a9:9c:00:19:01:61:4f: aa:77:39:12:14:3f:b2:67:de:52:13:f6:07:a7:38:8c:67:fc: 92:0f:06:3e:64:e5:e6:9f:ae:4d:25:77:7f:be:35:74:57:a1: cc:fc:53:b0:99:c6:29:a7:da:2b:43:9e:68:42:5e:7d:18:14: 28:82:69:35:e1:ec:05:0c:2d:3d:bd:29:86:95:7e:5b:84:8b: ae:26:74:4b:b8:af:49:09:e4:45:3a:cb:25:82:2b:92:07:72: a4:94:af:ba -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuS3Nx6iYtTORPZm8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjg2NjM5ZmMtOTRjNC00ZDZhLTlkZTEtZjFiM2ViYjVm NzU4MB4XDTI1MTAxOTEzMDAzOVoXDTI2MDExNzE0MDAzOVowLzEtMCsGA1UEAxMk NjFmOTc2MWYtM2U3YS00NTYwLTg2N2EtZWY0YzIyZGQzMzY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmgZ2Pjxt9+zH+jyX4kPREy7RzU9ltluvtafC boLV884OGPW6j38ucxGuJg9b5OSKPJKivqozmRkQ2drxKEMwJlxoG+1S5032trY7 fXg2iUYnlb+NWWjqvvHIX4IdARCBr/2uvIbIJ5JDoFZXfTS81COKQbflyJL8fOsd 5J0ICN912dsO6dwwjZCRPxFh35PQ0DdXZr+uVv0t5XP8usH3DBNNWscsvOawqubB SnDxA7MUUfL4od2ImHXswVoTGWyr5KdWAQ48Qf2s1O96Xo+yfHXogBicQD7ZE4aO TeUO+BytV5TUxl0xCshA4U8Gspa9nMZ6/UC7b96HmMrkccxp6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAKuKsVyyQGgYN3i2Tc4MAmFG0Z5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODY2 MzlmYy05NGM0LTRkNmEtOWRlMS1mMWIzZWJiNWY3NTgvM2U4Yjc4ODktZTIzZS0z MDM0LWFiNDEtZGU4MWI2MGE1NzEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjg2NjM5ZmMtOTRjNC00ZDZhLTlk ZTEtZjFiM2ViYjVmNzU4LzI4NjYzOWZjLTk0YzQtNGQ2YS05ZGUxLWYxYjNlYmI1 Zjc1OC5jcmwwHwYDVR0jBBgwFoAUY8cRIojpCzgE5Vgg7EVtim+WwAEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODY2MzlmYy05NGM0LTRkNmEtOWRlMS1mMWIz ZWJiNWY3NTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQFbgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACPgcMB1gjIRO6Ew3bjzTfFjyJsJCoMahhQAOAGUYnFQS0gSejsG1Ii6 1JX3yXspWWLWQu+gnuVk/uApFbJUDhIBH/umfN+c7GJZvmROAt8GxyAxjU2RLPa+ 70rhhxZdrjWVXUuQsIygBSTYcLM0mnbc3gCpQQ1mMkjY4mOgJfKdVZgL7xdjZbzF jvEBeJj1TaNDDg32fh3Jt5tUqZwAGQFhT6p3ORIUP7Jn3lIT9genOIxn/JIPBj5k 5eafrk0ld3++NXRXocz8U7CZximn2itDnmhCXn0YFCiCaTXh7AUMLT29KYaVfluE i64mdEu4r0kJ5EU6yyWCK5IHcqSUr7o= -----END CERTIFICATE-----Generated at Tue Nov 4 23:56:32 2025 by rpki-client