$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/bcbb36b3-d8e7-31a4-a360-085363e54218.roa File: bcbb36b3-d8e7-31a4-a360-085363e54218.roa (raw, json) Hash identifier: zAiAWOFQcCvIMFNwx7gwSPw4fjnPzlTemoQCxrJ6eOE= Subject key identifier: BC:7D:8B:2A:57:73:3D:6E:1F:85:E1:8F:2B:DD:40:A6:C0:82:1F:3E Certificate issuer: /CN=286639fc-94c4-4d6a-9de1-f1b3ebb5f758 Certificate serial: 010D0C9F4328584B9E0797640B0283D579E6B240 Authority key identifier: 63:C7:11:22:88:E9:0B:38:04:E5:58:20:EC:45:6D:8A:6F:96:C0:01 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/bcbb36b3-d8e7-31a4-a360-085363e54218.roa Signing time: Thu 23 Oct 2025 13:00:38 +0000 ROA not before: Thu 23 Oct 2025 13:00:38 +0000 ROA not after: Wed 21 Jan 2026 14:00:38 +0000 asID: 6453 IP address blocks: 64.86.205.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9e:07:97:64:0b:02:83:d5:79:e6:b2:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=286639fc-94c4-4d6a-9de1-f1b3ebb5f758 Validity Not Before: Oct 23 13:00:38 2025 GMT Not After : Jan 21 14:00:38 2026 GMT Subject: CN=faed97ed-2ab5-4d5e-91a5-9d4741f5d20f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:07:fd:80:d2:b6:07:cc:81:6f:ea:80:4f:b9: 78:56:7f:1e:5c:6f:45:31:33:07:65:74:43:d7:f4: f1:78:1c:1c:fb:f0:24:4b:4c:f0:79:5e:f3:76:d1: 9c:cd:dd:f5:52:96:41:9a:d8:37:6d:5d:36:29:3d: be:39:d1:9d:f3:d9:cc:91:c3:36:8a:e9:f3:96:6e: 0f:1d:ea:df:2b:60:6b:52:2c:5b:c7:dd:34:f6:09: 2e:bb:64:88:f8:41:f6:7f:ba:5e:3c:78:1f:80:97: a3:b1:d0:b3:46:09:9c:1f:d3:25:70:05:44:75:ad: dc:ff:15:72:2c:42:c2:e5:a6:1f:b1:d7:11:56:1b: c1:4c:65:2e:ec:c4:63:af:31:67:bb:fd:08:f6:77: 92:df:b5:46:08:26:ff:1a:60:42:21:a4:40:c9:31: 1e:28:38:3d:58:34:58:0c:98:40:bc:58:bb:ed:ee: 3c:03:08:11:49:57:9d:89:5a:4d:3b:d9:16:9d:ee: 1c:d3:68:23:06:14:ae:d2:b1:d0:bc:73:9f:0c:e7: 6a:d2:8d:88:53:9a:32:53:39:4f:89:23:02:7a:b2: bb:4d:e3:fe:da:d9:c4:c8:30:ce:17:22:c6:b3:48: 49:29:a1:4c:a7:fe:5e:b5:04:94:0c:e6:52:49:ba: 6c:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:7D:8B:2A:57:73:3D:6E:1F:85:E1:8F:2B:DD:40:A6:C0:82:1F:3E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/bcbb36b3-d8e7-31a4-a360-085363e54218.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.crl X509v3 Authority Key Identifier: keyid:63:C7:11:22:88:E9:0B:38:04:E5:58:20:EC:45:6D:8A:6F:96:C0:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.cer sbgp-ipAddrBlock: critical IPv4: 64.86.205.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:5d:b2:f0:80:f4:73:cf:31:40:84:70:46:cc:e9:8d:37:ab: 84:0d:c9:09:8f:30:9f:c4:d8:75:9c:18:7b:a1:92:e9:37:7c: 68:58:ac:90:4c:56:cd:7c:b1:96:32:ba:d5:bd:8c:79:63:72: f2:ef:eb:62:1f:e2:fb:70:2c:3a:18:ea:10:b1:75:10:8a:0a: 0f:5e:17:f8:e8:26:a9:ed:75:6b:ed:42:f6:f5:1c:f7:ea:6a: f1:3f:7c:b7:59:44:67:ef:bf:2a:50:b0:d2:08:b3:ba:0c:02: 46:7e:28:13:9b:50:ca:19:ff:21:ca:86:81:d9:80:78:a6:14: 4e:2b:ed:81:e9:74:bf:3d:41:3f:21:90:15:d5:95:f0:80:33: ad:90:94:f8:4a:38:9f:47:28:77:6a:5f:8b:31:22:2b:a3:af: 6e:7a:84:22:b1:38:9b:af:4c:c6:6e:61:2f:ce:e9:16:eb:f3: c2:c5:38:56:72:2a:e4:2c:1a:54:d9:21:ad:47:73:16:98:1c: a9:88:07:d0:d5:c8:a0:99:3b:96:c4:d6:c9:76:fe:b9:ea:ab: 9b:af:3c:cc:d2:f3:c9:4f:5b:56:86:36:07:a5:cf:d0:71:63: 29:50:d8:f8:d3:6e:c8:7c:99:83:c9:8c:bf:e8:bf:44:0a:66: 81:1f:7c:ac -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEueB5dkCwKD1XnmskAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjg2NjM5ZmMtOTRjNC00ZDZhLTlkZTEtZjFiM2ViYjVm NzU4MB4XDTI1MTAyMzEzMDAzOFoXDTI2MDEyMTE0MDAzOFowLzEtMCsGA1UEAxMk ZmFlZDk3ZWQtMmFiNS00ZDVlLTkxYTUtOWQ0NzQxZjVkMjBmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtQf9gNK2B8yBb+qAT7l4Vn8eXG9FMTMHZXRD 1/TxeBwc+/AkS0zweV7zdtGczd31UpZBmtg3bV02KT2+OdGd89nMkcM2iunzlm4P HerfK2BrUixbx9009gkuu2SI+EH2f7pePHgfgJejsdCzRgmcH9MlcAVEda3c/xVy LELC5aYfsdcRVhvBTGUu7MRjrzFnu/0I9neS37VGCCb/GmBCIaRAyTEeKDg9WDRY DJhAvFi77e48AwgRSVediVpNO9kWne4c02gjBhSu0rHQvHOfDOdq0o2IU5oyUzlP iSMCerK7TeP+2tnEyDDOFyLGs0hJKaFMp/5etQSUDOZSSbps2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLx9iypXcz1uH4XhjyvdQKbAgh8+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODY2 MzlmYy05NGM0LTRkNmEtOWRlMS1mMWIzZWJiNWY3NTgvYmNiYjM2YjMtZDhlNy0z MWE0LWEzNjAtMDg1MzYzZTU0MjE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjg2NjM5ZmMtOTRjNC00ZDZhLTlk ZTEtZjFiM2ViYjVmNzU4LzI4NjYzOWZjLTk0YzQtNGQ2YS05ZGUxLWYxYjNlYmI1 Zjc1OC5jcmwwHwYDVR0jBBgwFoAUY8cRIojpCzgE5Vgg7EVtim+WwAEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODY2MzlmYy05NGM0LTRkNmEtOWRlMS1mMWIz ZWJiNWY3NTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQFbNMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABJdsvCA9HPPMUCEcEbM6Y03q4QNyQmPMJ/E2HWcGHuhkuk3fGhYrJBM Vs18sZYyutW9jHljcvLv62If4vtwLDoY6hCxdRCKCg9eF/joJqntdWvtQvb1HPfq avE/fLdZRGfvvypQsNIIs7oMAkZ+KBObUMoZ/yHKhoHZgHimFE4r7YHpdL89QT8h kBXVlfCAM62QlPhKOJ9HKHdqX4sxIiujr256hCKxOJuvTMZuYS/O6Rbr88LFOFZy KuQsGlTZIa1HcxaYHKmIB9DVyKCZO5bE1sl2/rnqq5uvPMzS88lPW1aGNgelz9Bx YylQ2PjTbsh8mYPJjL/ov0QKZoEffKw= -----END CERTIFICATE-----Generated at Tue Nov 4 16:57:11 2025 by rpki-client