$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/e836d0a7-8196-3fd1-98dc-d4a2a10dec14.roa File: e836d0a7-8196-3fd1-98dc-d4a2a10dec14.roa (raw, json) Hash identifier: 6bSbVhQtwkonKLSZ+23Gm6UvqNOvpm8Qg552RvPf0QM= Subject key identifier: 02:CE:F2:8E:DA:8F:A5:23:39:B2:5E:9D:48:5D:C0:95:42:DE:CD:AE Certificate issuer: /CN=286639fc-94c4-4d6a-9de1-f1b3ebb5f758 Certificate serial: 010D0C9F4328584F7782DCC1AC597761B7B8FF00 Authority key identifier: 63:C7:11:22:88:E9:0B:38:04:E5:58:20:EC:45:6D:8A:6F:96:C0:01 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/e836d0a7-8196-3fd1-98dc-d4a2a10dec14.roa Signing time: Sun 11 Oct 2026 13:00:12 +0000 ROA not before: Sun 11 Oct 2026 13:00:12 +0000 ROA not after: Sat 09 Jan 2027 14:00:12 +0000 asID: 40009 IP address blocks: 64.86.232.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 15 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:77:82:dc:c1:ac:59:77:61:b7:b8:ff:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=286639fc-94c4-4d6a-9de1-f1b3ebb5f758 Validity Not Before: Oct 11 13:00:12 2026 GMT Not After : Jan 9 14:00:12 2027 GMT Subject: CN=e57c1bd7-a97b-4e16-8a77-d8f9ce6c5732 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:f5:57:41:ca:b4:aa:aa:eb:9a:89:59:8a:83: a7:06:5b:5f:30:e1:1c:9b:5e:39:5e:0d:c8:19:bc: f3:c1:dd:b9:c4:83:14:2c:23:ea:f2:35:b8:1d:1c: ec:86:f8:49:88:28:b4:ac:e2:9e:36:20:a5:42:a3: ea:36:6f:7f:e3:d6:13:83:39:84:3e:7f:0d:f9:a5: 3e:53:30:a5:a8:52:70:d4:50:00:2e:be:4d:9a:ee: 84:b8:24:9f:25:65:49:73:45:13:10:bf:5d:7e:05: d6:59:34:cd:4f:72:81:f7:f0:a2:3f:85:71:0b:fb: 82:ad:4d:1c:a2:96:96:f5:6f:eb:68:a1:87:92:33: 4d:c8:3f:6b:02:e1:3f:81:88:ea:14:8c:a7:30:2d: c6:9d:99:68:da:0a:8c:68:a7:53:79:bc:ac:69:73: 24:66:a2:f4:9d:05:3b:d4:3d:cc:9d:86:de:fa:e8: be:84:0f:ec:c7:ae:b2:52:69:04:e9:a7:a1:a2:7f: ee:74:08:1f:c1:24:77:60:39:c3:e0:eb:74:32:87: 69:8e:ae:08:1c:88:0b:da:be:14:b7:23:61:c9:9f: 48:ab:0a:72:2f:42:ac:42:f0:1d:a3:e3:e9:3a:7e: 07:20:5b:0d:95:46:19:ae:96:48:4d:71:51:27:19: 3d:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:CE:F2:8E:DA:8F:A5:23:39:B2:5E:9D:48:5D:C0:95:42:DE:CD:AE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/e836d0a7-8196-3fd1-98dc-d4a2a10dec14.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.crl X509v3 Authority Key Identifier: keyid:63:C7:11:22:88:E9:0B:38:04:E5:58:20:EC:45:6D:8A:6F:96:C0:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.cer sbgp-ipAddrBlock: critical IPv4: 64.86.232.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:85:cb:8d:e3:ce:12:32:8c:f5:88:fc:7f:a7:0b:3d:71:b9: 21:86:66:6e:9d:16:04:c4:b4:3c:18:f3:93:ed:58:d8:67:2e: d0:c1:98:a8:94:7d:6d:98:38:70:a0:5a:4e:f1:c4:0d:79:7b: a0:10:35:16:6c:58:58:08:e5:34:5f:24:43:67:29:11:48:f3: 16:f1:12:31:53:ec:cc:e8:38:d1:b1:de:b9:f3:b5:62:43:af: 5b:c1:e9:4d:13:2a:8e:a3:ee:e3:c1:d7:c6:ea:c0:99:a4:24: e8:3d:c5:2b:12:64:3d:c7:de:95:b4:d1:a8:90:1f:59:11:c6: 69:72:42:1b:bb:da:44:11:e1:8e:d5:89:32:b3:fd:ec:92:de: f4:43:20:a4:0a:23:9f:26:55:c6:20:6a:72:17:7f:27:82:08: 3d:68:b4:f0:34:1e:d9:8f:18:3e:3e:57:e9:2c:bf:bb:8f:73: 93:39:44:d2:18:18:4c:ef:a7:9a:e2:2a:f0:97:43:a3:00:e9: 6b:63:6f:f1:e3:85:d8:59:8c:64:59:51:e5:ba:2f:45:1b:48: 82:85:7b:57:3f:d8:c0:7b:1c:81:8a:cc:a6:e0:58:df:85:fe: 09:aa:94:ee:3b:6a:b4:79:73:ce:29:04:b0:02:5b:08:d3:4b: 0f:6a:ad:93 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE93gtzBrFl3Ybe4/wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjg2NjM5ZmMtOTRjNC00ZDZhLTlkZTEtZjFiM2ViYjVm NzU4MB4XDTI2MTAxMTEzMDAxMloXDTI3MDEwOTE0MDAxMlowLzEtMCsGA1UEAxMk ZTU3YzFiZDctYTk3Yi00ZTE2LThhNzctZDhmOWNlNmM1NzMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAivVXQcq0qqrrmolZioOnBltfMOEcm145Xg3I Gbzzwd25xIMULCPq8jW4HRzshvhJiCi0rOKeNiClQqPqNm9/49YTgzmEPn8N+aU+ UzClqFJw1FAALr5Nmu6EuCSfJWVJc0UTEL9dfgXWWTTNT3KB9/CiP4VxC/uCrU0c opaW9W/raKGHkjNNyD9rAuE/gYjqFIynMC3GnZlo2gqMaKdTebysaXMkZqL0nQU7 1D3MnYbe+ui+hA/sx66yUmkE6aehon/udAgfwSR3YDnD4Ot0Modpjq4IHIgL2r4U tyNhyZ9IqwpyL0KsQvAdo+PpOn4HIFsNlUYZrpZITXFRJxk9/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFALO8o7aj6UjObJenUhdwJVC3s2uMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODY2 MzlmYy05NGM0LTRkNmEtOWRlMS1mMWIzZWJiNWY3NTgvZTgzNmQwYTctODE5Ni0z ZmQxLTk4ZGMtZDRhMmExMGRlYzE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjg2NjM5ZmMtOTRjNC00ZDZhLTlk ZTEtZjFiM2ViYjVmNzU4LzI4NjYzOWZjLTk0YzQtNGQ2YS05ZGUxLWYxYjNlYmI1 Zjc1OC5jcmwwHwYDVR0jBBgwFoAUY8cRIojpCzgE5Vgg7EVtim+WwAEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODY2MzlmYy05NGM0LTRkNmEtOWRlMS1mMWIz ZWJiNWY3NTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDQFboMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGGFy43jzhIyjPWI/H+nCz1xuSGGZm6dFgTEtDwY85PtWNhnLtDBmKiU fW2YOHCgWk7xxA15e6AQNRZsWFgI5TRfJENnKRFI8xbxEjFT7MzoONGx3rnztWJD r1vB6U0TKo6j7uPB18bqwJmkJOg9xSsSZD3H3pW00aiQH1kRxmlyQhu72kQR4Y7V iTKz/eyS3vRDIKQKI58mVcYganIXfyeCCD1otPA0HtmPGD4+V+ksv7uPc5M5RNIY GEzvp5riKvCXQ6MA6Wtjb/HjhdhZjGRZUeW6L0UbSIKFe1c/2MB7HIGKzKbgWN+F /gmqlO47arR5c84pBLACWwjTSw9qrZM= -----END CERTIFICATE-----Generated at Tue Oct 13 17:07:59 2026 by rpki-client