$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/9724846a-3c03-3ffa-8769-f69c1f9565ec.roa File: 9724846a-3c03-3ffa-8769-f69c1f9565ec.roa (raw, json) Hash identifier: KW1p2rOYwPTar9XnBPOGCpkLOGtm8BNr/T11h4c5/EQ= Subject key identifier: F5:A3:EA:F0:94:14:6B:65:BC:8E:70:44:19:0D:7A:67:9E:4D:8A:87 Certificate issuer: /CN=86b35f71-51ac-43ff-b604-cba3552c4c8c Certificate serial: 010D0C9F4328584B2A2C2D5CB502D0BE8307CE80 Authority key identifier: 64:9C:3D:FE:D3:DF:3D:6B:67:BC:6D:BC:E9:05:BC:C0:6C:E6:1C:D7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/9724846a-3c03-3ffa-8769-f69c1f9565ec.roa Signing time: Fri 12 Sep 2025 01:00:32 +0000 ROA not before: Fri 12 Sep 2025 01:00:32 +0000 ROA not after: Thu 11 Dec 2025 02:00:32 +0000 asID: 54098 IP address blocks: 162.218.65.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/86b35f71-51ac-43ff-b604-cba3552c4c8c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/86b35f71-51ac-43ff-b604-cba3552c4c8c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2a:2c:2d:5c:b5:02:d0:be:83:07:ce:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86b35f71-51ac-43ff-b604-cba3552c4c8c Validity Not Before: Sep 12 01:00:32 2025 GMT Not After : Dec 11 02:00:32 2025 GMT Subject: CN=3e950bfc-8f24-45df-8936-cbfa64544b58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:7a:06:48:2c:3b:2e:40:ea:f5:a2:61:54:c3: 59:e4:3e:74:7b:fd:3d:e9:fc:90:c7:cf:35:8c:71: 33:55:4c:ac:bf:5b:4c:92:28:9c:60:ab:9f:3f:ac: 90:e2:42:b5:d8:d8:b8:24:63:56:56:5a:96:55:98: 5b:27:8c:6c:30:7e:73:ea:f8:f1:71:f7:d2:f4:e0: a9:50:00:ac:6e:6b:28:ca:21:f0:f3:af:2a:d6:93: 31:64:60:59:10:ae:89:50:2e:ec:27:d8:90:dd:4b: 90:1e:8f:9a:d0:f8:0f:5d:da:80:13:d7:73:1b:0c: be:54:29:eb:15:3c:23:37:70:b8:80:6d:5b:e3:eb: 5e:07:f0:6d:f9:99:8a:4b:bb:b3:d6:a1:62:60:e7: be:50:9f:9c:ca:c4:49:a1:f0:67:3b:39:f1:b2:0c: ae:f3:6e:67:f6:81:cf:fc:c7:e9:a0:2a:9b:34:0c: 92:db:cc:05:dd:2c:b5:19:dc:2c:f1:42:95:d1:c2: 9b:1d:62:bc:c0:c1:f3:a3:53:20:c4:7b:f3:c2:b3: 9b:d0:2c:82:ba:87:7f:30:d7:c7:b0:0f:f9:db:21: b0:b1:43:a0:93:fd:c1:97:96:86:37:d9:1e:2d:67: b1:bb:84:a6:31:9f:94:86:4b:0a:2e:78:05:72:07: a0:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:A3:EA:F0:94:14:6B:65:BC:8E:70:44:19:0D:7A:67:9E:4D:8A:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/9724846a-3c03-3ffa-8769-f69c1f9565ec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/86b35f71-51ac-43ff-b604-cba3552c4c8c.crl X509v3 Authority Key Identifier: keyid:64:9C:3D:FE:D3:DF:3D:6B:67:BC:6D:BC:E9:05:BC:C0:6C:E6:1C:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c.cer sbgp-ipAddrBlock: critical IPv4: 162.218.65.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ca:08:03:32:3a:30:ed:7c:df:2f:46:4c:8c:38:66:0c:f1:47: 83:fd:da:1f:8f:a2:32:ce:45:1b:cb:57:91:9e:e9:3b:63:29: f6:73:06:8e:cd:68:6a:e0:22:ae:04:6d:b0:fe:e9:3d:dc:68: 54:95:e3:59:60:e3:a8:a2:b4:4b:b0:61:f5:a7:a5:0c:a0:39: 49:9c:a5:ee:ca:30:0c:24:a3:b3:d9:8b:05:4d:b7:df:71:e9: c0:a2:23:1a:b1:23:d9:e9:e6:dd:52:97:65:bd:10:1a:14:3d: 9d:64:ba:89:15:00:fb:3d:b6:19:32:88:c6:ce:cd:2e:64:69: ca:11:8f:d6:69:ea:ae:56:ed:d8:9d:e1:25:50:c2:94:24:1c: a4:33:d8:b3:66:52:4c:31:78:4a:79:32:5a:37:41:7b:b9:67: e0:cd:33:27:68:e6:a8:c1:cc:95:f8:52:cb:5f:77:1a:ea:81: 99:28:16:29:8f:32:00:91:52:de:93:7e:97:c6:eb:94:04:ac: 37:96:3e:64:78:f0:75:54:f6:47:e0:5c:55:60:14:0f:d9:8e: 00:93:e8:78:7b:ed:93:9c:a4:99:c8:ee:d0:8b:98:24:29:77: 4b:a1:c2:84:e7:83:1f:cc:5b:ab:01:9f:b7:6a:46:14:b7:0f: 5d:69:cb:b9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsqLC1ctQLQvoMHzoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODZiMzVmNzEtNTFhYy00M2ZmLWI2MDQtY2JhMzU1MmM0 YzhjMB4XDTI1MDkxMjAxMDAzMloXDTI1MTIxMTAyMDAzMlowLzEtMCsGA1UEAxMk M2U5NTBiZmMtOGYyNC00NWRmLTg5MzYtY2JmYTY0NTQ0YjU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtXoGSCw7LkDq9aJhVMNZ5D50e/096fyQx881 jHEzVUysv1tMkiicYKufP6yQ4kK12Ni4JGNWVlqWVZhbJ4xsMH5z6vjxcffS9OCp UACsbmsoyiHw868q1pMxZGBZEK6JUC7sJ9iQ3UuQHo+a0PgPXdqAE9dzGwy+VCnr FTwjN3C4gG1b4+teB/Bt+ZmKS7uz1qFiYOe+UJ+cysRJofBnOznxsgyu825n9oHP /MfpoCqbNAyS28wF3Sy1Gdws8UKV0cKbHWK8wMHzo1MgxHvzwrOb0CyCuod/MNfH sA/52yGwsUOgk/3Bl5aGN9keLWexu4SmMZ+UhksKLngFcgegiwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPWj6vCUFGtlvI5wRBkNemeeTYqHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84NmIz NWY3MS01MWFjLTQzZmYtYjYwNC1jYmEzNTUyYzRjOGMvOTcyNDg0NmEtM2MwMy0z ZmZhLTg3NjktZjY5YzFmOTU2NWVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvODZiMzVmNzEtNTFhYy00M2ZmLWI2 MDQtY2JhMzU1MmM0YzhjLzg2YjM1ZjcxLTUxYWMtNDNmZi1iNjA0LWNiYTM1NTJj NGM4Yy5jcmwwHwYDVR0jBBgwFoAUZJw9/tPfPWtnvG286QW8wGzmHNcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS84NmIzNWY3MS01MWFjLTQzZmYtYjYwNC1jYmEz NTUyYzRjOGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAotpBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMoIAzI6MO183y9GTIw4ZgzxR4P92h+PojLORRvLV5Ge6TtjKfZzBo7N aGrgIq4EbbD+6T3caFSV41lg46iitEuwYfWnpQygOUmcpe7KMAwko7PZiwVNt99x 6cCiIxqxI9np5t1Sl2W9EBoUPZ1kuokVAPs9thkyiMbOzS5kacoRj9Zp6q5W7did 4SVQwpQkHKQz2LNmUkwxeEp5Mlo3QXu5Z+DNMydo5qjBzJX4UstfdxrqgZkoFimP MgCRUt6TfpfG65QErDeWPmR48HVU9kfgXFVgFA/ZjgCT6Hh77ZOcpJnI7tCLmCQp d0uhwoTngx/MW6sBn7dqRhS3D11py7k= -----END CERTIFICATE-----Generated at Tue Nov 4 22:05:21 2025 by rpki-client