$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/b28d5c43-f8e2-3dd7-9f5c-abff9bdacfd1.roa File: b28d5c43-f8e2-3dd7-9f5c-abff9bdacfd1.roa (raw, json) Hash identifier: B0r4O+U0MovD01BLsQ7o40gZByCLkYB72Xj8Z99OJjM= Subject key identifier: 45:F7:7E:FF:B2:8D:8C:50:1D:72:84:F3:82:69:D9:06:8F:8E:63:E7 Certificate issuer: /CN=286639fc-94c4-4d6a-9de1-f1b3ebb5f758 Certificate serial: 010D0C9F4328584ABD4B765955E884EDD8851F80 Authority key identifier: 63:C7:11:22:88:E9:0B:38:04:E5:58:20:EC:45:6D:8A:6F:96:C0:01 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/b28d5c43-f8e2-3dd7-9f5c-abff9bdacfd1.roa Signing time: Mon 04 Aug 2025 01:00:32 +0000 ROA not before: Mon 04 Aug 2025 01:00:32 +0000 ROA not after: Sun 02 Nov 2025 01:00:32 +0000 asID: 6453 IP address blocks: 64.86.203.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:bd:4b:76:59:55:e8:84:ed:d8:85:1f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=286639fc-94c4-4d6a-9de1-f1b3ebb5f758 Validity Not Before: Aug 4 01:00:32 2025 GMT Not After : Nov 2 01:00:32 2025 GMT Subject: CN=1ae74cdf-1da8-464a-971b-905f3c2c944d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:85:e6:69:50:00:77:89:d1:e5:d3:6b:ef:05: 18:7d:b4:b4:29:2a:93:53:6b:e2:91:ea:1b:bd:f5: aa:74:86:b5:b0:80:32:5f:30:6a:c8:c5:d9:2e:d9: 74:2c:f5:20:72:f7:07:fb:d0:73:32:e4:ec:05:8f: 49:0e:34:07:6d:7e:4e:ea:0a:b4:34:fe:e4:0e:5a: 21:31:18:e0:3d:26:9b:78:37:09:c8:40:cf:8f:7f: 3d:32:77:eb:76:71:56:5b:d7:df:80:51:0b:0e:f1: 27:bc:40:48:6c:5a:20:1b:37:20:42:b8:0b:1b:0d: be:60:d6:4d:dc:b8:ec:7d:86:15:8e:9b:71:d8:20: a6:d7:74:f8:2f:d6:a0:65:36:90:f8:2b:fb:3b:db: 54:92:ab:37:15:12:13:6e:2c:60:51:4b:b8:ef:ab: e2:c2:f6:ef:20:17:77:57:dd:2a:dd:2c:a9:39:de: 5c:10:a0:aa:84:b3:79:a8:2b:56:4b:78:89:e9:26: 75:7b:da:91:3b:ea:ee:11:79:b9:11:b9:e3:44:15: 37:44:84:fb:76:9c:3b:6a:38:f5:85:37:39:a6:ef: 47:67:6d:3e:78:55:d4:42:68:a4:8f:fe:7e:73:a6: 7c:6f:83:74:42:1d:9f:d7:ba:06:8e:97:3c:de:0a: 73:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:F7:7E:FF:B2:8D:8C:50:1D:72:84:F3:82:69:D9:06:8F:8E:63:E7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/b28d5c43-f8e2-3dd7-9f5c-abff9bdacfd1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.crl X509v3 Authority Key Identifier: keyid:63:C7:11:22:88:E9:0B:38:04:E5:58:20:EC:45:6D:8A:6F:96:C0:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.cer sbgp-ipAddrBlock: critical IPv4: 64.86.203.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:d3:f7:65:3b:99:3c:1f:40:0c:89:a7:49:8a:c7:a6:83:f9: c8:91:c5:31:3e:de:c1:6b:fa:78:36:44:fd:60:b6:15:81:dc: 67:d0:e6:b0:e5:6d:a4:85:67:3b:7e:d6:56:c5:3b:ab:c9:ca: e1:96:7b:cb:eb:cc:e3:b2:af:2e:85:85:03:9a:c7:cc:be:66: 98:6b:2f:8b:c8:d7:4c:f3:c0:cb:e7:74:34:96:59:d9:04:1f: 35:d2:3f:17:b5:dd:8e:23:fb:54:d8:87:31:f6:4e:60:84:99: 53:f1:55:50:29:93:b5:5c:78:93:86:6e:0f:71:1a:42:36:4e: f4:7b:23:4c:68:59:b3:50:f2:0b:0d:e4:47:7f:76:a2:9e:7b: f8:c2:b4:41:ff:d6:cf:13:99:b4:83:9b:f3:2b:f2:f1:2c:dd: 1d:5b:69:2b:7c:39:b4:fb:1c:3a:da:54:51:ab:b4:19:0e:c3: 4b:41:f0:2a:f0:16:23:79:52:2d:80:77:d9:aa:6d:1a:66:ec: 9b:57:0f:d6:66:26:0a:22:f7:59:e4:e7:35:b5:11:98:8e:77: ea:e1:90:15:96:6c:79:72:3b:45:49:0f:0d:8f:cd:c8:5b:71: f7:02:64:85:2e:f4:e0:f3:09:b6:a5:c2:d7:33:84:cb:05:6c: 4f:62:dd:11 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq9S3ZZVeiE7diFH4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjg2NjM5ZmMtOTRjNC00ZDZhLTlkZTEtZjFiM2ViYjVm NzU4MB4XDTI1MDgwNDAxMDAzMloXDTI1MTEwMjAxMDAzMlowLzEtMCsGA1UEAxMk MWFlNzRjZGYtMWRhOC00NjRhLTk3MWItOTA1ZjNjMmM5NDRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAroXmaVAAd4nR5dNr7wUYfbS0KSqTU2vikeob vfWqdIa1sIAyXzBqyMXZLtl0LPUgcvcH+9BzMuTsBY9JDjQHbX5O6gq0NP7kDloh MRjgPSabeDcJyEDPj389MnfrdnFWW9ffgFELDvEnvEBIbFogGzcgQrgLGw2+YNZN 3LjsfYYVjptx2CCm13T4L9agZTaQ+Cv7O9tUkqs3FRITbixgUUu476viwvbvIBd3 V90q3SypOd5cEKCqhLN5qCtWS3iJ6SZ1e9qRO+ruEXm5EbnjRBU3RIT7dpw7ajj1 hTc5pu9HZ20+eFXUQmikj/5+c6Z8b4N0Qh2f17oGjpc83gpz1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEX3fv+yjYxQHXKE84Jp2QaPjmPnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODY2 MzlmYy05NGM0LTRkNmEtOWRlMS1mMWIzZWJiNWY3NTgvYjI4ZDVjNDMtZjhlMi0z ZGQ3LTlmNWMtYWJmZjliZGFjZmQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjg2NjM5ZmMtOTRjNC00ZDZhLTlk ZTEtZjFiM2ViYjVmNzU4LzI4NjYzOWZjLTk0YzQtNGQ2YS05ZGUxLWYxYjNlYmI1 Zjc1OC5jcmwwHwYDVR0jBBgwFoAUY8cRIojpCzgE5Vgg7EVtim+WwAEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODY2MzlmYy05NGM0LTRkNmEtOWRlMS1mMWIz ZWJiNWY3NTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQFbLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHTT92U7mTwfQAyJp0mKx6aD+ciRxTE+3sFr+ng2RP1gthWB3GfQ5rDl baSFZzt+1lbFO6vJyuGWe8vrzOOyry6FhQOax8y+ZphrL4vI10zzwMvndDSWWdkE HzXSPxe13Y4j+1TYhzH2TmCEmVPxVVApk7VceJOGbg9xGkI2TvR7I0xoWbNQ8gsN 5Ed/dqKee/jCtEH/1s8TmbSDm/Mr8vEs3R1baSt8ObT7HDraVFGrtBkOw0tB8Crw FiN5Ui2Ad9mqbRpm7JtXD9ZmJgoi91nk5zW1EZiOd+rhkBWWbHlyO0VJDw2Pzchb cfcCZIUu9ODzCbalwtczhMsFbE9i3RE= -----END CERTIFICATE-----Generated at Mon Aug 4 14:51:14 2025 by rpki-client