$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/645c1218-41a2-352a-ab02-4467bc3eeefd.roa File: 645c1218-41a2-352a-ab02-4467bc3eeefd.roa (raw, json) Hash identifier: i6zQblWTbYKG8Os/gUquFh+vSS3DKqZ51A3jEL2TowA= Subject key identifier: 71:87:28:96:BE:2B:5E:B3:77:05:5D:78:0B:E0:C1:03:6C:31:41:24 Certificate issuer: /CN=e8f8c411-fa5c-428c-8ac1-e08e8a00ad15 Certificate serial: 010D0C9F4328584BBA10381CDFB6681A468706E0 Authority key identifier: DA:63:8F:4B:77:0D:71:EA:BA:22:00:39:B5:01:FF:B5:25:71:AB:5F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/645c1218-41a2-352a-ab02-4467bc3eeefd.roa Signing time: Sun 02 Nov 2025 14:00:38 +0000 ROA not before: Sun 02 Nov 2025 14:00:38 +0000 ROA not after: Sat 31 Jan 2026 14:00:38 +0000 asID: 55209 IP address blocks: 24.38.86.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ba:10:38:1c:df:b6:68:1a:46:87:06:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e8f8c411-fa5c-428c-8ac1-e08e8a00ad15 Validity Not Before: Nov 2 14:00:38 2025 GMT Not After : Jan 31 14:00:38 2026 GMT Subject: CN=86c71551-eb6c-4ff8-971e-b387ca1b8a50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:c8:db:2e:97:70:e8:15:11:82:0b:15:e7:d2: f2:d3:e6:31:2b:19:18:b0:d7:fb:11:a6:98:7e:11: 6e:20:f9:cf:00:6e:49:bc:2c:2f:ad:66:d7:c5:78: 61:5d:39:96:88:00:ab:b1:c0:f8:17:74:bb:fe:48: 12:d3:b2:cc:b0:f7:85:29:c4:37:dc:93:31:5d:8d: 9a:75:cd:0a:d7:d2:71:d8:da:08:6e:68:b5:52:b2: cb:33:c2:65:cb:58:5f:8b:fe:63:5e:6d:8a:e3:bd: 70:0c:69:11:92:69:0b:37:72:0f:54:96:9d:a7:63: 5f:6d:d5:a4:e2:d4:43:1d:bb:4c:8c:7e:c0:94:fe: 15:8a:64:c7:04:21:01:e3:63:e7:b3:0e:7c:f6:6e: 3a:33:11:af:0d:ae:32:c5:8f:dc:de:28:6c:71:d4: df:95:c4:72:1d:49:07:4f:d8:46:a7:8f:50:b1:ea: ec:f7:e5:37:f0:5a:d8:5d:da:46:04:06:9b:bd:83: 74:a3:ef:ac:9f:4a:2c:5c:eb:2b:da:4c:8a:c7:e2: 3e:89:3d:13:42:10:e8:a2:23:de:fb:69:73:dd:02: 84:23:bc:9f:db:0f:59:75:b1:ab:82:29:9e:0e:49: 12:cb:1b:36:43:9a:d5:d7:ce:7b:57:6f:59:76:e0: 7a:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:87:28:96:BE:2B:5E:B3:77:05:5D:78:0B:E0:C1:03:6C:31:41:24 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/645c1218-41a2-352a-ab02-4467bc3eeefd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.crl X509v3 Authority Key Identifier: keyid:DA:63:8F:4B:77:0D:71:EA:BA:22:00:39:B5:01:FF:B5:25:71:AB:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer sbgp-ipAddrBlock: critical IPv4: 24.38.86.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:a3:ed:9e:31:db:45:40:7e:ac:ab:85:69:b7:92:96:31:80: d7:3b:a4:fb:1b:a5:6f:27:c1:5c:e1:83:bf:06:0e:35:13:b6: d9:99:29:a7:89:e4:c1:bf:11:a9:3d:e9:8d:0c:1c:53:7e:59: 5a:d5:e8:d9:1a:37:6f:be:f3:3c:3d:6f:a9:44:ff:e0:8e:5d: 05:3b:8c:60:2f:fc:bb:bd:99:95:26:31:63:a6:d2:f4:2a:27: e5:43:86:12:fc:2c:97:e9:a4:b2:0a:3b:62:37:aa:ab:08:6f: 74:5b:bd:6b:74:b6:36:75:90:a9:b0:e8:4b:ba:09:2d:5e:4d: 70:06:9c:3f:a2:d0:fe:bb:52:ed:33:eb:b0:dc:c2:a2:53:09: dc:e9:5b:b4:9d:c7:df:e5:0f:a3:53:72:e7:14:22:83:40:f4: 2b:fa:13:e1:f3:fb:b6:d5:1e:25:e5:ba:5c:ec:3b:19:1c:f6: ee:9f:64:43:e4:00:ff:fa:ae:7e:02:cf:5e:57:be:0d:72:2f: c7:65:36:77:e4:92:85:e1:0e:a8:7f:10:6d:ef:8d:02:ea:95: 4d:db:c2:5f:b5:5a:83:50:be:a6:48:d5:d4:47:45:93:27:ba: 73:e0:58:02:e3:03:ac:32:f7:70:d2:a9:2a:f2:fa:f3:eb:2b: 6f:e8:7d:5f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu6EDgc37ZoGkaHBuAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZThmOGM0MTEtZmE1Yy00MjhjLThhYzEtZTA4ZThhMDBh ZDE1MB4XDTI1MTEwMjE0MDAzOFoXDTI2MDEzMTE0MDAzOFowLzEtMCsGA1UEAxMk ODZjNzE1NTEtZWI2Yy00ZmY4LTk3MWUtYjM4N2NhMWI4YTUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3MjbLpdw6BURggsV59Ly0+YxKxkYsNf7EaaY fhFuIPnPAG5JvCwvrWbXxXhhXTmWiACrscD4F3S7/kgS07LMsPeFKcQ33JMxXY2a dc0K19Jx2NoIbmi1UrLLM8Jly1hfi/5jXm2K471wDGkRkmkLN3IPVJadp2NfbdWk 4tRDHbtMjH7AlP4VimTHBCEB42Pnsw589m46MxGvDa4yxY/c3ihscdTflcRyHUkH T9hGp49Qsers9+U38FrYXdpGBAabvYN0o++sn0osXOsr2kyKx+I+iT0TQhDooiPe +2lz3QKEI7yf2w9ZdbGrgimeDkkSyxs2Q5rV1857V29ZduB6ywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHGHKJa+K16zdwVdeAvgwQNsMUEkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lOGY4 YzQxMS1mYTVjLTQyOGMtOGFjMS1lMDhlOGEwMGFkMTUvNjQ1YzEyMTgtNDFhMi0z NTJhLWFiMDItNDQ2N2JjM2VlZWZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZThmOGM0MTEtZmE1Yy00MjhjLThh YzEtZTA4ZThhMDBhZDE1L2U4ZjhjNDExLWZhNWMtNDI4Yy04YWMxLWUwOGU4YTAw YWQxNS5jcmwwHwYDVR0jBBgwFoAU2mOPS3cNceq6IgA5tQH/tSVxq18wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9lOGY4YzQxMS1mYTVjLTQyOGMtOGFjMS1lMDhl OGEwMGFkMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAGCZWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFuj7Z4x20VAfqyrhWm3kpYxgNc7pPsbpW8nwVzhg78GDjUTttmZKaeJ 5MG/Eak96Y0MHFN+WVrV6NkaN2++8zw9b6lE/+COXQU7jGAv/Lu9mZUmMWOm0vQq J+VDhhL8LJfppLIKO2I3qqsIb3RbvWt0tjZ1kKmw6Eu6CS1eTXAGnD+i0P67Uu0z 67DcwqJTCdzpW7Sdx9/lD6NTcucUIoNA9Cv6E+Hz+7bVHiXlulzsOxkc9u6fZEPk AP/6rn4Cz15Xvg1yL8dlNnfkkoXhDqh/EG3vjQLqlU3bwl+1WoNQvqZI1dRHRZMn unPgWALjA6wy93DSqSry+vPrK2/ofV8= -----END CERTIFICATE-----Generated at Wed Nov 5 02:54:49 2025 by rpki-client