$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/5384f320-755f-39d6-bdac-b69645a25ee8.roa File: 5384f320-755f-39d6-bdac-b69645a25ee8.roa (raw, json) Hash identifier: 3fx3Qia2YGmX8e7N/duX/zwBTWTnoxkfQsZSLtbdicA= Subject key identifier: E0:F0:08:22:9B:C5:E5:60:5E:F0:2F:21:29:00:EB:6E:2C:9A:20:69 Certificate issuer: /CN=86b35f71-51ac-43ff-b604-cba3552c4c8c Certificate serial: 010D0C9F4328584BAA97A40F181B92D13A764A60 Authority key identifier: 64:9C:3D:FE:D3:DF:3D:6B:67:BC:6D:BC:E9:05:BC:C0:6C:E6:1C:D7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/5384f320-755f-39d6-bdac-b69645a25ee8.roa Signing time: Tue 28 Oct 2025 01:00:31 +0000 ROA not before: Tue 28 Oct 2025 01:00:31 +0000 ROA not after: Mon 26 Jan 2026 02:00:31 +0000 asID: 26241 IP address blocks: 100.42.17.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/86b35f71-51ac-43ff-b604-cba3552c4c8c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/86b35f71-51ac-43ff-b604-cba3552c4c8c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:aa:97:a4:0f:18:1b:92:d1:3a:76:4a:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86b35f71-51ac-43ff-b604-cba3552c4c8c Validity Not Before: Oct 28 01:00:31 2025 GMT Not After : Jan 26 02:00:31 2026 GMT Subject: CN=321eacfb-a8ad-4f2e-9fa9-288e240ebc8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:a3:44:d8:91:ce:28:ac:cb:b7:87:d7:75:f3: 06:82:c5:59:bb:3f:bc:47:d5:86:67:40:a5:43:d2: 41:ca:2b:35:67:de:86:23:52:f2:ae:cb:b1:25:cf: 6e:cf:53:4c:88:b7:61:c9:5e:b2:6c:c6:b4:43:be: df:4b:b5:2e:6e:20:2f:a0:79:33:0f:08:4a:b2:9c: 52:22:ae:ea:3a:31:1b:da:31:6a:52:cf:76:22:bf: c2:6a:33:55:a4:98:c1:ae:6c:b5:39:dd:a8:2b:09: 11:76:0d:31:07:dc:4c:22:0d:11:55:80:df:43:1d: 0d:b6:5a:9b:74:1a:6a:23:a1:03:cb:8e:6d:2f:6a: a9:5a:77:b6:48:ec:42:82:c4:e1:6c:e2:1b:0f:57: 60:19:d2:dd:3f:19:7d:7f:59:4d:ef:ba:a7:fc:cb: 47:c0:4e:b2:53:99:06:4c:70:84:14:45:5c:4f:13: 55:23:a3:90:90:77:40:77:5d:63:ff:8c:1b:0a:1d: c9:2f:31:b7:99:cf:d5:15:8f:6e:f7:5d:2c:82:72: b6:b0:50:c7:d3:09:3c:43:c4:56:be:79:c6:20:e5: 07:d1:d4:8c:dd:f0:94:b9:53:f7:14:21:3f:98:e6: f5:f9:51:0e:17:20:c1:c4:91:3e:a4:d7:2e:05:b8: ec:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:F0:08:22:9B:C5:E5:60:5E:F0:2F:21:29:00:EB:6E:2C:9A:20:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/5384f320-755f-39d6-bdac-b69645a25ee8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/86b35f71-51ac-43ff-b604-cba3552c4c8c.crl X509v3 Authority Key Identifier: keyid:64:9C:3D:FE:D3:DF:3D:6B:67:BC:6D:BC:E9:05:BC:C0:6C:E6:1C:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c.cer sbgp-ipAddrBlock: critical IPv4: 100.42.17.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:2a:a8:dc:90:e7:62:9c:3d:fe:34:e0:b9:44:bf:7f:f7:76: ea:e7:3f:18:b5:e3:ba:28:d3:24:6f:4c:7f:ad:0b:49:46:ab: a3:16:42:c1:db:32:e2:fd:5c:d2:24:56:a1:36:94:8a:28:8f: 7d:69:13:7c:b8:af:97:32:aa:cb:59:07:5f:7e:9c:c9:e2:21: b7:39:24:d8:94:fb:73:9b:42:45:fb:13:95:44:b6:6a:44:6f: c9:82:33:b9:a0:32:f0:86:25:27:b6:91:5c:5f:f0:4e:bd:13: db:37:a5:d4:9e:0d:87:65:19:62:ff:4f:6f:9a:40:68:c2:e0: 82:d5:29:e1:83:79:e9:04:ac:d6:73:51:41:51:f9:ca:2a:8d: 4b:9e:fe:0b:27:f1:ce:8c:b4:16:a7:47:f6:e3:02:a6:dc:3e: c8:0e:69:9c:10:8a:28:c8:77:09:92:86:d1:fd:29:86:51:f2: 3d:d9:58:7d:69:72:8c:52:bb:2d:d9:03:a5:4a:86:37:f0:5c: 92:01:2d:5a:7c:8a:26:d4:10:51:f4:23:79:fb:0d:6d:d1:79: e8:69:5b:1b:ae:fc:4b:ea:31:a8:8d:85:e8:a3:a2:1a:a7:fa: 13:0e:69:d5:92:86:83:30:15:77:b1:8a:73:46:f0:42:83:ce: fd:db:34:3e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuql6QPGBuS0Tp2SmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODZiMzVmNzEtNTFhYy00M2ZmLWI2MDQtY2JhMzU1MmM0 YzhjMB4XDTI1MTAyODAxMDAzMVoXDTI2MDEyNjAyMDAzMVowLzEtMCsGA1UEAxMk MzIxZWFjZmItYThhZC00ZjJlLTlmYTktMjg4ZTI0MGViYzhlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj6NE2JHOKKzLt4fXdfMGgsVZuz+8R9WGZ0Cl Q9JByis1Z96GI1LyrsuxJc9uz1NMiLdhyV6ybMa0Q77fS7UubiAvoHkzDwhKspxS Iq7qOjEb2jFqUs92Ir/CajNVpJjBrmy1Od2oKwkRdg0xB9xMIg0RVYDfQx0Ntlqb dBpqI6EDy45tL2qpWne2SOxCgsThbOIbD1dgGdLdPxl9f1lN77qn/MtHwE6yU5kG THCEFEVcTxNVI6OQkHdAd11j/4wbCh3JLzG3mc/VFY9u910sgnK2sFDH0wk8Q8RW vnnGIOUH0dSM3fCUuVP3FCE/mOb1+VEOFyDBxJE+pNcuBbjsewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFODwCCKbxeVgXvAvISkA624smiBpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84NmIz NWY3MS01MWFjLTQzZmYtYjYwNC1jYmEzNTUyYzRjOGMvNTM4NGYzMjAtNzU1Zi0z OWQ2LWJkYWMtYjY5NjQ1YTI1ZWU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvODZiMzVmNzEtNTFhYy00M2ZmLWI2 MDQtY2JhMzU1MmM0YzhjLzg2YjM1ZjcxLTUxYWMtNDNmZi1iNjA0LWNiYTM1NTJj NGM4Yy5jcmwwHwYDVR0jBBgwFoAUZJw9/tPfPWtnvG286QW8wGzmHNcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS84NmIzNWY3MS01MWFjLTQzZmYtYjYwNC1jYmEz NTUyYzRjOGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZCoRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAUqqNyQ52KcPf404LlEv3/3durnPxi147oo0yRvTH+tC0lGq6MWQsHb MuL9XNIkVqE2lIooj31pE3y4r5cyqstZB19+nMniIbc5JNiU+3ObQkX7E5VEtmpE b8mCM7mgMvCGJSe2kVxf8E69E9s3pdSeDYdlGWL/T2+aQGjC4ILVKeGDeekErNZz UUFR+coqjUue/gsn8c6MtBanR/bjAqbcPsgOaZwQiijIdwmShtH9KYZR8j3ZWH1p coxSuy3ZA6VKhjfwXJIBLVp8iibUEFH0I3n7DW3ReehpWxuu/EvqMaiNheijohqn +hMOadWShoMwFXexinNG8EKDzv3bND4= -----END CERTIFICATE-----Generated at Wed Nov 5 05:04:28 2025 by rpki-client