$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b86db4eb-4041-4af8-b64d-f2e8b7bc048b/f1662e56-e1d7-3c92-871a-ec745901c911.roa File: f1662e56-e1d7-3c92-871a-ec745901c911.roa (raw, json) Hash identifier: qpZ611LSpRnXLR4j3gK4TBnQBTrM9hsrGiMLqDjJlRY= Subject key identifier: 23:1E:0A:13:B7:0D:DC:25:50:6C:92:A5:E8:41:8E:4C:3C:3E:EE:D5 Certificate issuer: /CN=b86db4eb-4041-4af8-b64d-f2e8b7bc048b Certificate serial: 010D0C9F4328584BBB758942E198EB74194AC600 Authority key identifier: 6B:C2:13:50:EA:74:E5:66:96:4C:D4:4C:82:3C:A4:97:3E:A6:D5:D3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b86db4eb-4041-4af8-b64d-f2e8b7bc048b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b86db4eb-4041-4af8-b64d-f2e8b7bc048b/f1662e56-e1d7-3c92-871a-ec745901c911.roa Signing time: Mon 03 Nov 2025 02:00:31 +0000 ROA not before: Mon 03 Nov 2025 02:00:31 +0000 ROA not after: Sun 01 Feb 2026 02:00:31 +0000 asID: 14618 IP address blocks: 208.88.34.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b86db4eb-4041-4af8-b64d-f2e8b7bc048b/b86db4eb-4041-4af8-b64d-f2e8b7bc048b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b86db4eb-4041-4af8-b64d-f2e8b7bc048b/b86db4eb-4041-4af8-b64d-f2e8b7bc048b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b86db4eb-4041-4af8-b64d-f2e8b7bc048b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bb:75:89:42:e1:98:eb:74:19:4a:c6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b86db4eb-4041-4af8-b64d-f2e8b7bc048b Validity Not Before: Nov 3 02:00:31 2025 GMT Not After : Feb 1 02:00:31 2026 GMT Subject: CN=62caa41a-efb5-41cb-af55-00ec7e3e5456 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:ce:e9:00:3d:3e:cf:1e:3b:4c:d8:bc:ee:6e: ae:c4:bc:2c:a0:b8:bf:8d:29:09:02:40:02:ba:f3: d9:61:43:9d:bf:3b:a3:b7:70:17:10:99:29:d1:76: 8b:bb:42:06:6f:9c:2e:f8:dc:d4:fa:3a:c9:25:4d: a1:59:d2:c2:19:1d:a6:ab:42:c3:1d:ad:57:5c:15: 78:6c:61:a4:d3:1c:f9:2d:01:2d:b6:3e:a5:8f:2f: ca:4e:b1:ef:9c:a0:d9:0c:0e:22:ec:15:bb:3a:6b: 3a:e2:48:61:2b:47:29:62:81:2f:01:bd:a5:39:53: c1:ca:ff:3e:a1:50:83:e6:d6:c5:3f:a8:e4:32:57: 67:5c:62:a1:61:e5:e6:5b:86:44:ca:34:cf:b8:0b: 36:8e:6a:50:42:e5:7b:30:dd:95:7d:af:76:6e:c8: a2:a8:7a:45:4f:fb:63:bd:20:4e:92:40:3b:7c:58: b3:26:bf:15:38:11:7e:9e:17:1b:38:7e:d3:bc:c4: 83:45:dd:ad:c5:85:17:7f:b9:f8:46:29:b9:46:c0: d9:cf:bb:82:19:53:e5:d4:6f:9a:d5:a3:87:68:cd: 12:38:c5:b8:8b:7d:51:31:67:03:33:94:5d:47:a5: dd:f3:29:38:1a:67:b5:1a:6d:33:fd:e2:91:0e:97: d0:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:1E:0A:13:B7:0D:DC:25:50:6C:92:A5:E8:41:8E:4C:3C:3E:EE:D5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b86db4eb-4041-4af8-b64d-f2e8b7bc048b/f1662e56-e1d7-3c92-871a-ec745901c911.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b86db4eb-4041-4af8-b64d-f2e8b7bc048b/b86db4eb-4041-4af8-b64d-f2e8b7bc048b.crl X509v3 Authority Key Identifier: keyid:6B:C2:13:50:EA:74:E5:66:96:4C:D4:4C:82:3C:A4:97:3E:A6:D5:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b86db4eb-4041-4af8-b64d-f2e8b7bc048b.cer sbgp-ipAddrBlock: critical IPv4: 208.88.34.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:82:23:ff:78:b8:63:7a:ce:14:09:6a:12:82:b7:ac:d8:2a: 33:6e:2e:79:4b:c5:15:b6:9c:66:f1:e5:13:b3:cd:a9:85:44: b4:d2:8a:da:45:f5:22:ca:b5:cc:6b:62:3b:71:be:7f:e9:d2: 47:58:d9:0a:e4:84:d4:56:6f:d2:f2:a7:d9:d4:41:40:d1:49: 49:67:80:8b:4d:b5:8d:fb:a0:07:76:90:63:ae:bc:52:bc:23: 21:f3:b6:10:a7:0f:1d:7a:73:a2:01:e2:1b:f8:66:08:b4:8e: dd:bf:8e:60:7b:4d:9c:2a:8d:5f:6f:c7:ea:53:32:10:14:eb: 9e:d4:80:2d:27:92:73:69:66:7a:a9:b8:f3:44:cd:b6:73:09: 7b:e3:2f:9c:f3:50:de:a2:70:9b:14:f8:a7:b9:a1:bf:59:5f: 1c:ab:6b:46:8c:2c:0e:26:4c:16:29:cf:50:bf:f0:d4:13:2d: 65:2d:8d:ec:b0:29:50:1e:d2:3c:e0:a9:18:e2:b1:7d:e9:2e: 27:30:e1:c3:7c:df:dd:8d:b6:96:c0:26:59:e0:07:43:07:9a: c8:b6:63:3d:e3:80:cc:3b:bc:92:05:2f:31:4f:e4:f5:3c:34: 20:d0:dc:af:bf:37:64:19:ab:a8:22:22:a0:9c:93:d8:0d:5a: 4e:4c:05:d9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu7dYlC4ZjrdBlKxgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjg2ZGI0ZWItNDA0MS00YWY4LWI2NGQtZjJlOGI3YmMw NDhiMB4XDTI1MTEwMzAyMDAzMVoXDTI2MDIwMTAyMDAzMVowLzEtMCsGA1UEAxMk NjJjYWE0MWEtZWZiNS00MWNiLWFmNTUtMDBlYzdlM2U1NDU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjM7pAD0+zx47TNi87m6uxLwsoLi/jSkJAkAC uvPZYUOdvzujt3AXEJkp0XaLu0IGb5wu+NzU+jrJJU2hWdLCGR2mq0LDHa1XXBV4 bGGk0xz5LQEttj6ljy/KTrHvnKDZDA4i7BW7Oms64khhK0cpYoEvAb2lOVPByv8+ oVCD5tbFP6jkMldnXGKhYeXmW4ZEyjTPuAs2jmpQQuV7MN2Vfa92bsiiqHpFT/tj vSBOkkA7fFizJr8VOBF+nhcbOH7TvMSDRd2txYUXf7n4Rim5RsDZz7uCGVPl1G+a 1aOHaM0SOMW4i31RMWcDM5RdR6Xd8yk4Gme1Gm0z/eKRDpfQwwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCMeChO3DdwlUGySpehBjkw8Pu7VMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9iODZk YjRlYi00MDQxLTRhZjgtYjY0ZC1mMmU4YjdiYzA0OGIvZjE2NjJlNTYtZTFkNy0z YzkyLTg3MWEtZWM3NDU5MDFjOTExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYjg2ZGI0ZWItNDA0MS00YWY4LWI2 NGQtZjJlOGI3YmMwNDhiL2I4NmRiNGViLTQwNDEtNGFmOC1iNjRkLWYyZThiN2Jj MDQ4Yi5jcmwwHwYDVR0jBBgwFoAUa8ITUOp05WaWTNRMgjyklz6m1dMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9iODZkYjRlYi00MDQxLTRhZjgtYjY0ZC1mMmU4 YjdiYzA0OGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0FgiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFSCI/94uGN6zhQJahKCt6zYKjNuLnlLxRW2nGbx5ROzzamFRLTSitpF 9SLKtcxrYjtxvn/p0kdY2QrkhNRWb9Lyp9nUQUDRSUlngItNtY37oAd2kGOuvFK8 IyHzthCnDx16c6IB4hv4Zgi0jt2/jmB7TZwqjV9vx+pTMhAU657UgC0nknNpZnqp uPNEzbZzCXvjL5zzUN6icJsU+Ke5ob9ZXxyra0aMLA4mTBYpz1C/8NQTLWUtjeyw KVAe0jzgqRjisX3pLicw4cN8392NtpbAJlngB0MHmsi2Yz3jgMw7vJIFLzFP5PU8 NCDQ3K+/N2QZq6giIqCck9gNWk5MBdk= -----END CERTIFICATE-----Generated at Wed Nov 5 09:33:38 2025 by rpki-client