$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/a3355fb3-d03a-3f23-ab1e-a37d0f03a377.roa File: a3355fb3-d03a-3f23-ab1e-a37d0f03a377.roa (raw, json) Hash identifier: UFFDFNF9PRji4yyaHnDZJ5+IxqzYPE4JjMD/vPGtObI= Subject key identifier: E3:47:52:1E:FF:DD:F0:05:B1:99:80:6A:BA:35:83:13:CD:5C:05:F5 Certificate issuer: /CN=286639fc-94c4-4d6a-9de1-f1b3ebb5f758 Certificate serial: 010D0C9F4328584BA0D25129BA2B190B69641B60 Authority key identifier: 63:C7:11:22:88:E9:0B:38:04:E5:58:20:EC:45:6D:8A:6F:96:C0:01 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/a3355fb3-d03a-3f23-ab1e-a37d0f03a377.roa Signing time: Fri 24 Oct 2025 13:00:38 +0000 ROA not before: Fri 24 Oct 2025 13:00:38 +0000 ROA not after: Thu 22 Jan 2026 14:00:38 +0000 asID: 20940 IP address blocks: 63.243.228.0/24 maxlen: 24 63.243.230.0/24 maxlen: 24 64.86.206.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a0:d2:51:29:ba:2b:19:0b:69:64:1b:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=286639fc-94c4-4d6a-9de1-f1b3ebb5f758 Validity Not Before: Oct 24 13:00:38 2025 GMT Not After : Jan 22 14:00:38 2026 GMT Subject: CN=ddfcc6d7-9738-4303-b38f-64487bced497 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:c1:84:7e:c1:a9:03:0b:58:66:4e:b8:06:6a: fc:fe:6f:a4:9f:f1:66:05:52:b6:7a:a9:5e:ed:48: 1b:5b:2d:a4:f6:33:d6:1f:8f:f6:16:e7:b7:e4:d0: b9:a4:48:6e:d3:f2:77:16:1a:fa:67:55:14:b7:f6: bc:be:a5:a3:7a:5e:e7:1c:75:27:a2:d4:42:03:a1: 13:d0:54:a9:32:cb:4b:5a:57:57:e4:72:10:e9:57: f0:b9:4c:66:89:a7:2f:cd:ba:2f:83:45:6e:9a:ff: ee:76:1d:9b:bf:27:cc:f8:01:0e:a3:03:77:17:72: ba:41:40:3a:9d:1f:9a:4e:bb:67:f3:9f:87:d9:51: 1d:aa:25:4b:53:5e:d5:42:6a:81:15:1c:f3:82:e4: 61:90:83:d4:85:89:f5:53:7e:2c:a3:6f:29:0f:cb: a4:e3:e5:72:71:04:4a:ef:b5:b2:19:23:7c:41:2e: aa:ac:66:67:7c:3d:9e:2c:ee:69:de:fe:dd:e6:65: 7a:a2:b7:1d:e7:47:c1:d3:9f:1d:4d:c2:35:6c:93: 99:f8:17:03:bb:e6:75:14:b1:aa:34:35:92:f1:dc: 71:93:9b:5a:53:f1:2b:5d:46:4f:a6:49:d7:85:46: 91:a7:62:05:e1:31:a6:09:9b:48:7d:57:f8:75:42: 02:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:47:52:1E:FF:DD:F0:05:B1:99:80:6A:BA:35:83:13:CD:5C:05:F5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/a3355fb3-d03a-3f23-ab1e-a37d0f03a377.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.crl X509v3 Authority Key Identifier: keyid:63:C7:11:22:88:E9:0B:38:04:E5:58:20:EC:45:6D:8A:6F:96:C0:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.cer sbgp-ipAddrBlock: critical IPv4: 63.243.228.0/24 63.243.230.0/24 64.86.206.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:77:68:fc:32:d1:11:54:7a:19:09:fc:22:49:3c:bd:44:2e: 17:ca:95:6a:b2:75:73:99:4a:8b:33:1e:5e:bf:ac:65:c4:08: dc:29:da:69:fa:67:61:a4:25:51:a2:6c:23:67:1e:a9:5a:84: 00:3b:1d:bc:11:cd:dd:bf:09:83:95:50:1b:64:d3:57:10:ed: 75:0b:d5:48:cb:11:af:e1:a8:49:1a:ea:06:48:be:88:6a:55: 3c:0d:7e:a5:f9:ae:a9:02:d0:f7:2b:96:b3:07:c3:f8:95:57: 46:0c:d5:7f:70:54:2d:e4:82:20:67:0e:f7:c1:0c:7b:91:8e: f1:23:95:8b:8b:bd:31:38:62:55:20:ab:49:d0:a3:c0:94:ed: 1c:5d:87:23:d1:33:3b:7e:dc:fb:5b:0a:e9:20:25:4e:4e:79: dc:5a:ec:b0:21:03:be:8c:d2:14:34:8c:a8:c0:4d:9f:f5:69: c4:09:04:da:84:73:64:5b:af:56:cc:41:e4:2b:e2:33:9b:2a: c1:24:42:87:2a:1a:03:74:38:39:8b:5a:62:e1:1c:07:a2:6d: 1d:5e:cf:00:51:4f:49:86:bb:24:14:b1:39:d9:ee:ff:13:dd: fc:d7:a6:2a:2f:33:a1:8c:de:ef:14:ce:54:d5:a3:bc:da:5d: 4e:7d:9a:f6 -----BEGIN CERTIFICATE----- MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWEug0lEpuisZC2lkG2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjg2NjM5ZmMtOTRjNC00ZDZhLTlkZTEtZjFiM2ViYjVm NzU4MB4XDTI1MTAyNDEzMDAzOFoXDTI2MDEyMjE0MDAzOFowLzEtMCsGA1UEAxMk ZGRmY2M2ZDctOTczOC00MzAzLWIzOGYtNjQ0ODdiY2VkNDk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApcGEfsGpAwtYZk64Bmr8/m+kn/FmBVK2eqle 7UgbWy2k9jPWH4/2Fue35NC5pEhu0/J3Fhr6Z1UUt/a8vqWjel7nHHUnotRCA6ET 0FSpMstLWldX5HIQ6VfwuUxmiacvzbovg0Vumv/udh2bvyfM+AEOowN3F3K6QUA6 nR+aTrtn85+H2VEdqiVLU17VQmqBFRzzguRhkIPUhYn1U34so28pD8uk4+VycQRK 77WyGSN8QS6qrGZnfD2eLO5p3v7d5mV6orcd50fB058dTcI1bJOZ+BcDu+Z1FLGq NDWS8dxxk5taU/ErXUZPpknXhUaRp2IF4TGmCZtIfVf4dUICZQIDAQABo4IDYTCC A10wHQYDVR0OBBYEFONHUh7/3fAFsZmAaro1gxPNXAX1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODY2 MzlmYy05NGM0LTRkNmEtOWRlMS1mMWIzZWJiNWY3NTgvYTMzNTVmYjMtZDAzYS0z ZjIzLWFiMWUtYTM3ZDBmMDNhMzc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjg2NjM5ZmMtOTRjNC00ZDZhLTlk ZTEtZjFiM2ViYjVmNzU4LzI4NjYzOWZjLTk0YzQtNGQ2YS05ZGUxLWYxYjNlYmI1 Zjc1OC5jcmwwHwYDVR0jBBgwFoAUY8cRIojpCzgE5Vgg7EVtim+WwAEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODY2MzlmYy05NGM0LTRkNmEtOWRlMS1mMWIz ZWJiNWY3NTguY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAP/PkAwQA P/PmAwQAQFbOMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBAAx3aPwy0RFUehkJ/CJJPL1ELhfKlWqydXOZSosz Hl6/rGXECNwp2mn6Z2GkJVGibCNnHqlahAA7HbwRzd2/CYOVUBtk01cQ7XUL1UjL Ea/hqEka6gZIvohqVTwNfqX5rqkC0PcrlrMHw/iVV0YM1X9wVC3kgiBnDvfBDHuR jvEjlYuLvTE4YlUgq0nQo8CU7RxdhyPRMzt+3PtbCukgJU5Oedxa7LAhA76M0hQ0 jKjATZ/1acQJBNqEc2Rbr1bMQeQr4jObKsEkQocqGgN0ODmLWmLhHAeibR1ezwBR T0mGuyQUsTnZ7v8T3fzXpiovM6GM3u8UzlTVo7zaXU59mvY= -----END CERTIFICATE-----Generated at Wed Nov 5 00:05:02 2025 by rpki-client