$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/86ec9619-2868-36f8-b49d-03305645f65d.roa File: 86ec9619-2868-36f8-b49d-03305645f65d.roa (raw, json) Hash identifier: IDYezMKL2pq8CQ4qwpZ8H7drKjG7AZoA+KwOh/3ZKmk= Subject key identifier: 07:BB:AE:2D:92:31:0B:D5:35:95:77:00:57:61:83:27:23:EB:BF:04 Certificate issuer: /CN=286639fc-94c4-4d6a-9de1-f1b3ebb5f758 Certificate serial: 010D0C9F4328584AADF0F89B643AAFA575405B70 Authority key identifier: 63:C7:11:22:88:E9:0B:38:04:E5:58:20:EC:45:6D:8A:6F:96:C0:01 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/86ec9619-2868-36f8-b49d-03305645f65d.roa Signing time: Tue 29 Jul 2025 13:01:04 +0000 ROA not before: Tue 29 Jul 2025 13:01:04 +0000 ROA not after: Mon 27 Oct 2025 13:01:04 +0000 asID: 33164 IP address blocks: 209.58.101.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ad:f0:f8:9b:64:3a:af:a5:75:40:5b:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=286639fc-94c4-4d6a-9de1-f1b3ebb5f758 Validity Not Before: Jul 29 13:01:04 2025 GMT Not After : Oct 27 13:01:04 2025 GMT Subject: CN=c8c22d05-a99f-4b39-95a2-66ae78e6944c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:fe:b6:64:e8:c1:77:1a:b9:25:09:c2:f6:78: 29:71:d7:c3:23:41:a8:20:4f:a1:8f:de:c2:ad:8d: 9e:df:34:80:82:d4:61:05:21:99:4c:fd:a7:89:c0: 88:ee:50:d0:85:6d:a8:d5:f5:87:ad:ae:3d:ea:a3: af:a1:25:68:db:e5:2f:dc:76:c3:86:2f:ad:00:e9: 6e:48:56:74:6d:b9:35:41:85:91:38:77:2d:a7:bc: e5:1d:ca:65:ed:65:67:bf:b3:c7:9c:d5:e4:5b:e5: 70:c1:98:25:ff:a2:b8:a3:e9:62:95:09:0b:ff:a4: cd:f1:13:4c:03:e6:ce:8b:d8:87:e7:76:b2:9f:7f: 60:45:10:35:75:94:6b:2e:d6:d0:9a:cc:29:2e:5f: 12:ce:9e:2d:02:22:81:40:e1:bd:fd:34:e5:9e:8e: 35:53:24:67:8a:e4:b4:64:b5:e1:e4:6c:a4:fc:4b: d3:d3:df:53:b9:65:48:05:92:e1:46:05:5e:bf:26: 9f:43:88:c9:c3:d7:52:75:81:33:40:dd:db:cb:f8: 8c:3c:cc:7c:32:15:03:e8:33:56:3c:43:ec:64:85: 59:ca:7a:ae:57:99:a5:6d:28:0a:69:5d:6c:c0:7a: 51:a0:ed:7a:80:4b:e9:e6:a1:5e:0b:36:21:57:d5: 41:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:BB:AE:2D:92:31:0B:D5:35:95:77:00:57:61:83:27:23:EB:BF:04 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/86ec9619-2868-36f8-b49d-03305645f65d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.crl X509v3 Authority Key Identifier: keyid:63:C7:11:22:88:E9:0B:38:04:E5:58:20:EC:45:6D:8A:6F:96:C0:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.cer sbgp-ipAddrBlock: critical IPv4: 209.58.101.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:ed:d9:7a:21:73:f7:31:e3:dc:c4:5c:88:cc:52:d1:f9:0d: ac:fe:ee:7f:b9:6f:ce:87:72:9d:f5:78:e1:98:a9:c7:8d:4c: 1a:a4:bc:d4:9a:19:a4:15:06:cc:93:1b:6f:63:0e:61:67:eb: f9:cd:fc:0a:22:59:85:92:b8:c6:e1:9c:bc:c6:b9:0c:01:b7: 0b:4c:af:85:e6:de:35:4c:d0:38:88:e4:69:bc:6d:cd:d1:53: bb:61:24:ca:0a:57:b5:24:69:d2:d9:5e:32:d6:73:66:fb:59: 1d:aa:0a:a3:67:e5:1f:9a:bf:4d:5c:87:8a:df:42:90:7b:6e: 69:44:ab:44:52:73:eb:9e:17:e3:80:7f:16:bb:97:99:e3:b9: 64:76:38:ea:2e:c0:36:d1:9c:5d:ef:81:87:6f:84:3f:37:c8: 5c:68:6d:d1:ad:aa:fd:c2:2f:3a:0b:9e:fa:56:7d:0b:fd:49: 20:1b:99:64:3b:c4:b8:64:07:5a:87:c4:3c:6e:dd:01:4d:7b: 8e:d3:45:b4:20:56:10:37:65:57:fc:30:a4:2f:1c:2e:2c:aa: cc:2a:5e:c1:97:c8:e6:e8:7b:bd:50:44:f3:59:24:91:77:d6: bf:12:6a:17:f0:dd:2a:49:ce:13:29:01:b0:92:d3:fe:41:e3: 3c:8a:b9:f6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqt8PibZDqvpXVAW3AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjg2NjM5ZmMtOTRjNC00ZDZhLTlkZTEtZjFiM2ViYjVm NzU4MB4XDTI1MDcyOTEzMDEwNFoXDTI1MTAyNzEzMDEwNFowLzEtMCsGA1UEAxMk YzhjMjJkMDUtYTk5Zi00YjM5LTk1YTItNjZhZTc4ZTY5NDRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm/62ZOjBdxq5JQnC9ngpcdfDI0GoIE+hj97C rY2e3zSAgtRhBSGZTP2nicCI7lDQhW2o1fWHra496qOvoSVo2+Uv3HbDhi+tAOlu SFZ0bbk1QYWROHctp7zlHcpl7WVnv7PHnNXkW+VwwZgl/6K4o+lilQkL/6TN8RNM A+bOi9iH53ayn39gRRA1dZRrLtbQmswpLl8Szp4tAiKBQOG9/TTlno41UyRniuS0 ZLXh5Gyk/EvT099TuWVIBZLhRgVevyafQ4jJw9dSdYEzQN3by/iMPMx8MhUD6DNW PEPsZIVZynquV5mlbSgKaV1swHpRoO16gEvp5qFeCzYhV9VBfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAe7ri2SMQvVNZV3AFdhgycj678EMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODY2 MzlmYy05NGM0LTRkNmEtOWRlMS1mMWIzZWJiNWY3NTgvODZlYzk2MTktMjg2OC0z NmY4LWI0OWQtMDMzMDU2NDVmNjVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjg2NjM5ZmMtOTRjNC00ZDZhLTlk ZTEtZjFiM2ViYjVmNzU4LzI4NjYzOWZjLTk0YzQtNGQ2YS05ZGUxLWYxYjNlYmI1 Zjc1OC5jcmwwHwYDVR0jBBgwFoAUY8cRIojpCzgE5Vgg7EVtim+WwAEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODY2MzlmYy05NGM0LTRkNmEtOWRlMS1mMWIz ZWJiNWY3NTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0TplMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD/t2Xohc/cx49zEXIjMUtH5Daz+7n+5b86Hcp31eOGYqceNTBqkvNSa GaQVBsyTG29jDmFn6/nN/AoiWYWSuMbhnLzGuQwBtwtMr4Xm3jVM0DiI5Gm8bc3R U7thJMoKV7UkadLZXjLWc2b7WR2qCqNn5R+av01ch4rfQpB7bmlEq0RSc+ueF+OA fxa7l5njuWR2OOouwDbRnF3vgYdvhD83yFxobdGtqv3CLzoLnvpWfQv9SSAbmWQ7 xLhkB1qHxDxu3QFNe47TRbQgVhA3ZVf8MKQvHC4sqswqXsGXyOboe71QRPNZJJF3 1r8Sahfw3SpJzhMpAbCS0/5B4zyKufY= -----END CERTIFICATE-----Generated at Wed Aug 6 11:22:26 2025 by rpki-client