$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b86a4ec3-a3b5-4d72-bee2-f58c3cde01a1/e821c7f2-031f-3fe4-867d-a095b5a7eb0d.roa File: e821c7f2-031f-3fe4-867d-a095b5a7eb0d.roa (raw, json) Hash identifier: TjYcEV40ctvmBKhRRxC0x3Cm4siyxSd09cdYFbasQgw= Subject key identifier: A3:A8:5A:8D:CC:9B:DB:FF:27:82:F1:77:23:00:AD:A2:C1:AD:E0:07 Certificate issuer: /CN=b86a4ec3-a3b5-4d72-bee2-f58c3cde01a1 Certificate serial: 010D0C9F4328584B715CB12468852B343CF8CC00 Authority key identifier: DD:F6:09:95:17:8B:B7:4A:6E:9C:AA:DF:B0:69:85:38:26:70:0B:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b86a4ec3-a3b5-4d72-bee2-f58c3cde01a1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b86a4ec3-a3b5-4d72-bee2-f58c3cde01a1/e821c7f2-031f-3fe4-867d-a095b5a7eb0d.roa Signing time: Tue 07 Oct 2025 13:00:37 +0000 ROA not before: Tue 07 Oct 2025 13:00:37 +0000 ROA not after: Mon 05 Jan 2026 14:00:37 +0000 asID: 398203 IP address blocks: 142.202.164.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b86a4ec3-a3b5-4d72-bee2-f58c3cde01a1/b86a4ec3-a3b5-4d72-bee2-f58c3cde01a1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b86a4ec3-a3b5-4d72-bee2-f58c3cde01a1/b86a4ec3-a3b5-4d72-bee2-f58c3cde01a1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b86a4ec3-a3b5-4d72-bee2-f58c3cde01a1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:71:5c:b1:24:68:85:2b:34:3c:f8:cc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b86a4ec3-a3b5-4d72-bee2-f58c3cde01a1 Validity Not Before: Oct 7 13:00:37 2025 GMT Not After : Jan 5 14:00:37 2026 GMT Subject: CN=7827b9ae-5961-49a0-9d16-6df65972d13c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:10:3f:63:80:b2:70:3d:b5:4a:30:2d:07:96: a9:09:e7:de:78:75:60:db:8a:ab:4a:3f:64:a6:e0: 94:4d:e8:af:d4:38:72:49:fd:3f:b8:01:da:aa:17: 98:5a:62:86:c5:b0:30:04:38:d1:cd:8f:e9:c6:ef: 23:b9:9d:4f:0b:7c:1e:1d:d6:7a:70:c8:03:9b:98: 8e:08:66:43:45:b1:88:36:4d:e1:9d:84:0d:5b:95: 8a:14:4c:8c:e9:6f:81:25:eb:7d:30:7a:9d:8c:6b: e3:54:60:51:7b:d8:cc:c2:b0:a8:5a:17:61:78:9c: 0d:9f:5a:45:c1:22:8f:b8:3a:53:67:63:41:9c:a2: 4f:96:88:a4:80:eb:6f:89:4f:d8:fe:ea:0e:41:38: 81:fe:79:2b:15:37:d6:b2:0d:c3:1b:c4:50:59:93: b2:c3:1f:be:2c:dc:f7:15:46:33:dc:d4:46:4e:9b: 4e:b2:52:1e:3c:f9:06:63:e9:b5:f5:5d:41:35:bc: 74:99:c4:34:c5:ee:73:b8:14:ea:da:5e:d0:45:e1: 85:5d:64:04:17:c0:bd:48:1c:2e:db:50:bb:6a:21: 19:46:ca:83:44:8e:c7:5c:a5:ac:95:42:3f:19:2f: 41:0b:2d:ef:04:7a:3c:ca:bd:1e:7b:4b:42:63:f3: 60:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:A8:5A:8D:CC:9B:DB:FF:27:82:F1:77:23:00:AD:A2:C1:AD:E0:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b86a4ec3-a3b5-4d72-bee2-f58c3cde01a1/e821c7f2-031f-3fe4-867d-a095b5a7eb0d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b86a4ec3-a3b5-4d72-bee2-f58c3cde01a1/b86a4ec3-a3b5-4d72-bee2-f58c3cde01a1.crl X509v3 Authority Key Identifier: keyid:DD:F6:09:95:17:8B:B7:4A:6E:9C:AA:DF:B0:69:85:38:26:70:0B:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b86a4ec3-a3b5-4d72-bee2-f58c3cde01a1.cer sbgp-ipAddrBlock: critical IPv4: 142.202.164.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:ef:98:7e:bc:df:40:ea:b7:2a:bc:18:07:a9:42:9b:44:ad: ab:0f:21:88:bb:33:9b:83:22:73:4b:2b:ba:aa:50:1a:a5:f1: 34:44:f2:37:22:86:60:2a:14:b7:69:ed:f5:d3:ae:0d:e3:d3: 72:80:cb:62:ae:05:9c:57:a3:32:06:80:ba:54:49:ea:1d:1a: 38:06:bb:5d:34:5e:1a:95:7c:3d:f1:e3:d7:5d:ee:7d:2a:fa: 99:7d:ac:67:32:16:fd:c8:85:bb:e1:d1:9c:b0:01:da:90:df: 67:8e:a6:de:2b:87:6d:1f:09:47:e0:83:7b:c8:ca:ce:01:6a: 02:81:63:b4:e7:e1:7a:5a:4c:3d:e6:2e:a9:88:ba:cf:c5:b8: 47:dd:7c:59:d6:63:16:9b:64:21:35:b0:1b:57:6f:db:a2:91: 9e:e3:43:92:de:b5:76:c8:ef:a3:2c:36:46:52:e3:2b:f8:ca: ad:3a:fb:84:9f:54:35:d8:dc:b9:7c:1a:0f:6a:5e:eb:d5:3c: 70:8f:f1:43:fb:1b:94:e5:56:41:ca:8d:f3:86:35:58:7b:9b: 1f:a6:56:90:08:8e:51:18:39:dc:98:39:9d:54:bf:28:9a:8f: 8c:da:80:a1:3d:48:77:d5:ee:33:05:76:90:e0:6a:86:e0:44: 6f:b1:f4:78 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtxXLEkaIUrNDz4zAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjg2YTRlYzMtYTNiNS00ZDcyLWJlZTItZjU4YzNjZGUw MWExMB4XDTI1MTAwNzEzMDAzN1oXDTI2MDEwNTE0MDAzN1owLzEtMCsGA1UEAxMk NzgyN2I5YWUtNTk2MS00OWEwLTlkMTYtNmRmNjU5NzJkMTNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnRA/Y4CycD21SjAtB5apCefeeHVg24qrSj9k puCUTeiv1DhySf0/uAHaqheYWmKGxbAwBDjRzY/pxu8juZ1PC3weHdZ6cMgDm5iO CGZDRbGINk3hnYQNW5WKFEyM6W+BJet9MHqdjGvjVGBRe9jMwrCoWhdheJwNn1pF wSKPuDpTZ2NBnKJPloikgOtviU/Y/uoOQTiB/nkrFTfWsg3DG8RQWZOywx++LNz3 FUYz3NRGTptOslIePPkGY+m19V1BNbx0mcQ0xe5zuBTq2l7QReGFXWQEF8C9SBwu 21C7aiEZRsqDRI7HXKWslUI/GS9BCy3vBHo8yr0ee0tCY/NgiQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKOoWo3Mm9v/J4LxdyMAraLBreAHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iODZh NGVjMy1hM2I1LTRkNzItYmVlMi1mNThjM2NkZTAxYTEvZTgyMWM3ZjItMDMxZi0z ZmU0LTg2N2QtYTA5NWI1YTdlYjBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjg2YTRlYzMtYTNiNS00ZDcyLWJl ZTItZjU4YzNjZGUwMWExL2I4NmE0ZWMzLWEzYjUtNGQ3Mi1iZWUyLWY1OGMzY2Rl MDFhMS5jcmwwHwYDVR0jBBgwFoAU3fYJlReLt0punKrfsGmFOCZwCxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iODZhNGVjMy1hM2I1LTRkNzItYmVlMi1mNThj M2NkZTAxYTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCjsqkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADfvmH6830Dqtyq8GAepQptErasPIYi7M5uDInNLK7qqUBql8TRE8jci hmAqFLdp7fXTrg3j03KAy2KuBZxXozIGgLpUSeodGjgGu100XhqVfD3x49dd7n0q +pl9rGcyFv3Ihbvh0ZywAdqQ32eOpt4rh20fCUfgg3vIys4BagKBY7Tn4XpaTD3m LqmIus/FuEfdfFnWYxabZCE1sBtXb9uikZ7jQ5LetXbI76MsNkZS4yv4yq06+4Sf VDXY3Ll8Gg9qXuvVPHCP8UP7G5TlVkHKjfOGNVh7mx+mVpAIjlEYOdyYOZ1Uvyia j4zagKE9SHfV7jMFdpDgaobgRG+x9Hg= -----END CERTIFICATE-----Generated at Thu Nov 6 00:36:38 2025 by rpki-client