$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/bcbb36b3-d8e7-31a4-a360-085363e54218.roa File: bcbb36b3-d8e7-31a4-a360-085363e54218.roa (raw, json) Hash identifier: HQK7dqbQD7fAyB6Ydk8YIkxuK3Q1m5MlzqEBCAGKaDk= Subject key identifier: EF:45:D2:E9:36:A8:B6:B3:1F:AC:EC:76:E2:1B:C8:56:1C:C3:FB:8C Certificate issuer: /CN=286639fc-94c4-4d6a-9de1-f1b3ebb5f758 Certificate serial: 010D0C9F4328584ABD4B766AAA3630117AF05E00 Authority key identifier: 63:C7:11:22:88:E9:0B:38:04:E5:58:20:EC:45:6D:8A:6F:96:C0:01 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/bcbb36b3-d8e7-31a4-a360-085363e54218.roa Signing time: Mon 04 Aug 2025 01:00:32 +0000 ROA not before: Mon 04 Aug 2025 01:00:32 +0000 ROA not after: Sun 02 Nov 2025 01:00:32 +0000 asID: 6453 IP address blocks: 64.86.205.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:bd:4b:76:6a:aa:36:30:11:7a:f0:5e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=286639fc-94c4-4d6a-9de1-f1b3ebb5f758 Validity Not Before: Aug 4 01:00:32 2025 GMT Not After : Nov 2 01:00:32 2025 GMT Subject: CN=e02c9472-0d28-484d-973b-9aa91fad4758 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:91:33:dd:0c:69:9f:1e:a7:d3:e9:d6:b0:3a: 88:38:54:89:1a:54:64:3e:4a:69:08:32:d5:c5:65: db:ce:8c:0a:90:8e:66:21:47:20:73:ac:ee:19:67: 03:a9:48:8a:b2:87:f1:d9:34:dd:4a:26:46:2c:47: 33:da:9c:4e:2c:f0:e7:3c:0a:1e:86:ea:79:39:ea: bb:28:62:bc:0f:be:fa:37:b5:f4:ea:db:de:a2:67: 44:dd:70:ba:b1:8a:77:08:e6:ac:15:e4:a8:df:47: e6:97:99:54:98:42:f8:0a:ac:71:e8:57:bc:e4:fb: 6e:31:2e:8c:75:ba:10:0b:3e:c7:c9:b0:10:d7:9a: da:9a:26:4e:14:5a:f8:0b:cc:c6:05:2b:c9:05:39: bf:bc:71:e9:7a:64:81:96:c1:e4:52:e7:d9:cc:8b: 70:7e:a4:63:48:9a:44:50:41:1d:be:a6:d5:8b:44: 40:54:22:a5:23:06:ab:eb:95:66:72:74:07:5b:fc: 84:f6:46:e6:d7:13:d0:d9:5f:f8:3f:8e:66:46:a7: 66:5b:f3:1a:02:d8:a0:9e:76:d0:e4:f8:41:9e:bd: d2:06:10:c3:4f:5e:71:3d:62:19:63:91:8c:52:f3: e0:30:20:8a:df:b6:24:4e:65:b5:ff:d2:0a:b9:1a: fc:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:45:D2:E9:36:A8:B6:B3:1F:AC:EC:76:E2:1B:C8:56:1C:C3:FB:8C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/bcbb36b3-d8e7-31a4-a360-085363e54218.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.crl X509v3 Authority Key Identifier: keyid:63:C7:11:22:88:E9:0B:38:04:E5:58:20:EC:45:6D:8A:6F:96:C0:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.cer sbgp-ipAddrBlock: critical IPv4: 64.86.205.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:09:69:e6:08:91:3f:84:5f:6a:52:1f:63:6c:53:4b:cd:46: 17:b3:40:0b:de:98:b9:19:64:b2:f2:e1:53:31:7b:8c:39:84: af:cd:ae:08:c0:40:29:80:76:2d:c9:e8:89:a0:57:d0:0d:6c: cc:02:77:ab:25:bc:79:55:19:e4:08:eb:53:82:bf:78:f3:c8: 6d:a5:c9:25:cf:a3:ec:8a:e2:42:58:c7:0f:b6:99:6d:57:63: 1d:ba:38:0b:5e:ba:85:c2:35:76:5b:ef:f8:19:76:1d:ff:78: 3e:49:07:c5:2b:39:4b:a5:1b:36:aa:77:cb:6e:f8:8c:f6:23: ba:09:3d:f4:b7:58:b4:67:96:b2:4d:3b:54:8d:be:4a:cd:91: 0a:80:7e:14:21:18:1f:5c:99:a8:6a:14:01:95:b8:bf:6d:64: 52:e4:14:af:1d:d5:09:e9:25:cc:d7:0b:46:74:e1:eb:32:c2: bb:25:46:cd:50:50:09:ba:58:c5:38:3a:1b:3a:d3:91:a6:83: 20:17:7b:6a:5a:43:b0:b6:38:b4:ce:54:b6:72:a7:c9:5c:a0: 5f:95:92:c3:f8:cb:4e:a6:1e:71:e7:75:65:2c:fd:ea:a6:a0: da:2b:b0:63:37:20:33:cb:44:76:2c:a9:d9:b7:5f:78:9c:c5: db:10:9b:34 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq9S3ZqqjYwEXrwXgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjg2NjM5ZmMtOTRjNC00ZDZhLTlkZTEtZjFiM2ViYjVm NzU4MB4XDTI1MDgwNDAxMDAzMloXDTI1MTEwMjAxMDAzMlowLzEtMCsGA1UEAxMk ZTAyYzk0NzItMGQyOC00ODRkLTk3M2ItOWFhOTFmYWQ0NzU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArJEz3Qxpnx6n0+nWsDqIOFSJGlRkPkppCDLV xWXbzowKkI5mIUcgc6zuGWcDqUiKsofx2TTdSiZGLEcz2pxOLPDnPAoehup5Oeq7 KGK8D776N7X06tveomdE3XC6sYp3COasFeSo30fml5lUmEL4Cqxx6Fe85PtuMS6M dboQCz7HybAQ15ramiZOFFr4C8zGBSvJBTm/vHHpemSBlsHkUufZzItwfqRjSJpE UEEdvqbVi0RAVCKlIwar65VmcnQHW/yE9kbm1xPQ2V/4P45mRqdmW/MaAtignnbQ 5PhBnr3SBhDDT15xPWIZY5GMUvPgMCCK37YkTmW1/9IKuRr8BwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO9F0uk2qLazH6zsduIbyFYcw/uMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODY2 MzlmYy05NGM0LTRkNmEtOWRlMS1mMWIzZWJiNWY3NTgvYmNiYjM2YjMtZDhlNy0z MWE0LWEzNjAtMDg1MzYzZTU0MjE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjg2NjM5ZmMtOTRjNC00ZDZhLTlk ZTEtZjFiM2ViYjVmNzU4LzI4NjYzOWZjLTk0YzQtNGQ2YS05ZGUxLWYxYjNlYmI1 Zjc1OC5jcmwwHwYDVR0jBBgwFoAUY8cRIojpCzgE5Vgg7EVtim+WwAEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODY2MzlmYy05NGM0LTRkNmEtOWRlMS1mMWIz ZWJiNWY3NTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQFbNMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHkJaeYIkT+EX2pSH2NsU0vNRhezQAvemLkZZLLy4VMxe4w5hK/NrgjA QCmAdi3J6ImgV9ANbMwCd6slvHlVGeQI61OCv3jzyG2lySXPo+yK4kJYxw+2mW1X Yx26OAteuoXCNXZb7/gZdh3/eD5JB8UrOUulGzaqd8tu+Iz2I7oJPfS3WLRnlrJN O1SNvkrNkQqAfhQhGB9cmahqFAGVuL9tZFLkFK8d1QnpJczXC0Z04esywrslRs1Q UAm6WMU4Ohs605GmgyAXe2paQ7C2OLTOVLZyp8lcoF+VksP4y06mHnHndWUs/eqm oNorsGM3IDPLRHYsqdm3X3icxdsQmzQ= -----END CERTIFICATE-----Generated at Mon Aug 4 15:38:04 2025 by rpki-client