$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/86bcda68-15fd-4c7d-9887-d9d67f2ca969/a0e9f1ad-89ec-3b41-a12c-8832a4094045.roa File: a0e9f1ad-89ec-3b41-a12c-8832a4094045.roa (raw, json) Hash identifier: uWPZbV73bipsjl1RE5YsvZ4lQZfWDZ5WeD+G+pBXg3s= Subject key identifier: 0A:40:EE:C6:76:08:FA:AB:FF:1C:D5:E8:31:AA:99:D8:D6:80:8B:21 Certificate issuer: /CN=86bcda68-15fd-4c7d-9887-d9d67f2ca969 Certificate serial: 010D0C9F4328584BA9324FF601092825C025D280 Authority key identifier: DD:A3:C4:F9:8B:14:A0:E9:BE:AA:4F:47:A9:DD:16:AE:3A:F7:FE:31 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/86bcda68-15fd-4c7d-9887-d9d67f2ca969.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/86bcda68-15fd-4c7d-9887-d9d67f2ca969/a0e9f1ad-89ec-3b41-a12c-8832a4094045.roa Signing time: Mon 27 Oct 2025 13:00:38 +0000 ROA not before: Mon 27 Oct 2025 13:00:38 +0000 ROA not after: Sun 25 Jan 2026 14:00:38 +0000 asID: 14618 IP address blocks: 45.42.136.0/24 maxlen: 24 45.42.137.0/24 maxlen: 24 45.42.138.0/24 maxlen: 24 45.42.139.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/86bcda68-15fd-4c7d-9887-d9d67f2ca969/86bcda68-15fd-4c7d-9887-d9d67f2ca969.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/86bcda68-15fd-4c7d-9887-d9d67f2ca969/86bcda68-15fd-4c7d-9887-d9d67f2ca969.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/86bcda68-15fd-4c7d-9887-d9d67f2ca969.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a9:32:4f:f6:01:09:28:25:c0:25:d2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86bcda68-15fd-4c7d-9887-d9d67f2ca969 Validity Not Before: Oct 27 13:00:38 2025 GMT Not After : Jan 25 14:00:38 2026 GMT Subject: CN=4cc06e2d-c412-46b2-b50e-25de571d6b82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:3b:87:68:1a:bf:a9:31:34:e7:13:00:94:87: db:d6:7b:ac:7b:17:5c:fc:fc:db:c5:be:81:f3:36: e1:ea:90:ff:6a:86:6c:c8:51:f2:5d:48:69:ea:67: e5:e8:9f:70:7c:7f:99:d9:1a:33:7d:6a:50:ca:c5: 1f:3b:49:8b:bf:1e:61:72:d5:dc:43:e0:4a:9e:b1: 84:d9:48:cb:1d:22:0f:60:dd:11:24:af:2f:3e:3e: b1:35:46:e4:8b:97:8f:0c:37:00:6c:4c:ac:de:52: ab:1b:5d:94:a3:4e:49:c4:e4:47:65:86:17:d9:42: f8:20:60:41:03:9c:58:3d:09:ab:64:7c:f6:7f:0f: 33:cc:2b:1c:88:6e:87:2b:f0:23:e3:28:67:60:1c: ad:4b:0e:ea:84:65:8a:c4:6d:d7:2f:a0:0a:6b:4f: 45:97:6a:b6:8c:cd:26:ea:63:00:50:09:88:66:d5: 5c:77:ca:fc:93:37:d6:50:c0:c7:24:c9:03:87:80: c7:d7:c2:9b:c2:f7:ce:f9:c2:c9:9f:08:6c:25:60: 8c:1a:87:f8:bd:6a:6d:b4:89:5e:95:5d:b1:69:e4: e7:ea:f5:09:3b:23:19:80:f2:95:d7:40:37:b6:d5: bc:5a:7a:e3:af:49:e2:bf:79:9c:79:47:28:cc:1d: da:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:40:EE:C6:76:08:FA:AB:FF:1C:D5:E8:31:AA:99:D8:D6:80:8B:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/86bcda68-15fd-4c7d-9887-d9d67f2ca969/a0e9f1ad-89ec-3b41-a12c-8832a4094045.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/86bcda68-15fd-4c7d-9887-d9d67f2ca969/86bcda68-15fd-4c7d-9887-d9d67f2ca969.crl X509v3 Authority Key Identifier: keyid:DD:A3:C4:F9:8B:14:A0:E9:BE:AA:4F:47:A9:DD:16:AE:3A:F7:FE:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/86bcda68-15fd-4c7d-9887-d9d67f2ca969.cer sbgp-ipAddrBlock: critical IPv4: 45.42.136.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:65:84:18:8f:5a:32:fe:1e:68:73:52:83:b1:00:94:92:a4: cb:fb:b7:b5:9a:33:f4:b7:7c:5e:12:5c:a1:90:bb:bd:30:2d: 99:17:f3:da:90:18:59:20:c0:46:1f:7c:1f:68:1a:45:bc:7c: dc:ea:5c:ac:df:83:6a:76:aa:a3:97:3f:57:2c:43:e1:f7:f9: 6d:91:2c:de:5d:02:62:0e:30:34:23:15:00:a5:ad:50:42:59: 4b:7e:18:8f:b6:f9:18:e5:ab:07:f7:86:e0:02:23:10:3a:88: 68:1c:e2:90:ea:95:09:37:7d:16:9d:8c:83:60:eb:f0:3a:3e: 63:4b:72:19:79:d8:4b:38:f1:5c:3a:f3:86:17:b7:d7:d3:c0: 36:82:56:c6:4c:5c:8c:df:21:b7:35:7f:a5:5f:47:aa:53:aa: 38:c3:38:33:1e:fe:d0:78:8c:d5:4f:29:8e:69:48:51:c9:d0: d2:a6:bb:89:cd:39:a2:71:54:ae:89:6f:0d:36:84:c2:6c:bd: cd:21:6c:ec:c7:d0:02:1f:22:32:82:2a:a4:03:1e:8f:7f:38: b4:4f:87:6a:68:e6:f5:c9:e8:2d:c8:e6:2f:c1:91:73:b8:28: c1:a8:20:a8:95:c6:92:de:41:3f:ae:32:fd:cc:ff:a6:3f:65: a2:36:70:0c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEupMk/2AQkoJcAl0oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODZiY2RhNjgtMTVmZC00YzdkLTk4ODctZDlkNjdmMmNh OTY5MB4XDTI1MTAyNzEzMDAzOFoXDTI2MDEyNTE0MDAzOFowLzEtMCsGA1UEAxMk NGNjMDZlMmQtYzQxMi00NmIyLWI1MGUtMjVkZTU3MWQ2YjgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgjuHaBq/qTE05xMAlIfb1nusexdc/Pzbxb6B 8zbh6pD/aoZsyFHyXUhp6mfl6J9wfH+Z2RozfWpQysUfO0mLvx5hctXcQ+BKnrGE 2UjLHSIPYN0RJK8vPj6xNUbki5ePDDcAbEys3lKrG12Uo05JxORHZYYX2UL4IGBB A5xYPQmrZHz2fw8zzCsciG6HK/Aj4yhnYBytSw7qhGWKxG3XL6AKa09Fl2q2jM0m 6mMAUAmIZtVcd8r8kzfWUMDHJMkDh4DH18KbwvfO+cLJnwhsJWCMGof4vWpttIle lV2xaeTn6vUJOyMZgPKV10A3ttW8Wnrjr0niv3mceUcozB3ahwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFApA7sZ2CPqr/xzV6DGqmdjWgIshMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84NmJj ZGE2OC0xNWZkLTRjN2QtOTg4Ny1kOWQ2N2YyY2E5NjkvYTBlOWYxYWQtODllYy0z YjQxLWExMmMtODgzMmE0MDk0MDQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvODZiY2RhNjgtMTVmZC00YzdkLTk4 ODctZDlkNjdmMmNhOTY5Lzg2YmNkYTY4LTE1ZmQtNGM3ZC05ODg3LWQ5ZDY3ZjJj YTk2OS5jcmwwHwYDVR0jBBgwFoAU3aPE+YsUoOm+qk9Hqd0Wrjr3/jEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84NmJjZGE2OC0xNWZkLTRjN2QtOTg4Ny1kOWQ2 N2YyY2E5NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLSqIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACtlhBiPWjL+HmhzUoOxAJSSpMv7t7WaM/S3fF4SXKGQu70wLZkX89qQ GFkgwEYffB9oGkW8fNzqXKzfg2p2qqOXP1csQ+H3+W2RLN5dAmIOMDQjFQClrVBC WUt+GI+2+Rjlqwf3huACIxA6iGgc4pDqlQk3fRadjINg6/A6PmNLchl52Es48Vw6 84YXt9fTwDaCVsZMXIzfIbc1f6VfR6pTqjjDODMe/tB4jNVPKY5pSFHJ0NKmu4nN OaJxVK6Jbw02hMJsvc0hbOzH0AIfIjKCKqQDHo9/OLRPh2po5vXJ6C3I5i/BkXO4 KMGoIKiVxpLeQT+uMv3M/6Y/ZaI2cAw= -----END CERTIFICATE-----Generated at Wed Nov 5 05:45:20 2025 by rpki-client