$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/AS64089.roa File: AS64089.roa (raw, json) Hash identifier: sCWcuGJ/sP03hmjQlhW5Rmik6vvMEZKdv4Ow7xFhsyo= Subject key identifier: A1:0B:FE:54:78:35:BD:71:A8:3B:0F:BE:E9:90:EB:69:80:B4:69:85 Certificate issuer: /CN=1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d Certificate serial: 03B59E9A0D03704DF04149413C585C7EFEF7E613 Authority key identifier: 00:99:DE:AB:07:3E:FD:74:C2:50:C0:A3:82:B2:50:12:B5:08:2A:EE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/AS64089.roa Signing time: Fri 02 Oct 2026 13:29:15 +0000 ROA not before: Fri 02 Oct 2026 13:24:15 +0000 ROA not after: Fri 01 Oct 2027 13:29:15 +0000 asID: 64089 IP address blocks: 45.54.28.0/24 maxlen: 24 45.54.84.0/24 maxlen: 24 45.54.85.0/24 maxlen: 24 2607:f740:e005::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/0099DEAB073EFD74C250C0A382B25012B5082AEE.crl rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/0099DEAB073EFD74C250C0A382B25012B5082AEE.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/30d422dc-98d1-4304-9f8a-097127e15d5e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/30d422dc-98d1-4304-9f8a-097127e15d5e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Nov 2026 01:43:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:b5:9e:9a:0d:03:70:4d:f0:41:49:41:3c:58:5c:7e:fe:f7:e6:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d Validity Not Before: Oct 2 13:24:15 2026 GMT Not After : Oct 1 13:29:15 2027 GMT Subject: CN=A10BFE547835BD71A83B0FBEE990EB6980B46985 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:f7:a8:ce:4a:7b:00:6f:3c:cc:18:fb:a7:59: f2:1e:aa:e9:b7:db:b7:31:85:a0:65:ee:94:b2:09: 62:7a:6a:c7:ea:1a:b1:9e:ca:bc:d3:41:00:60:ea: 96:c1:bc:d2:a0:35:8f:ee:72:c2:51:f8:4e:dc:b6: 4b:e8:c3:06:ae:fb:dd:f9:a7:1d:cf:60:f2:a4:1c: 9f:7d:7d:45:b2:c7:77:38:32:37:a4:bd:e0:c5:5a: 03:fe:03:bc:1b:6e:18:78:b1:de:8d:e3:6d:07:79: d7:74:0d:31:57:f4:1c:da:f0:b7:7b:72:83:dd:6e: 76:d8:fb:4e:e2:1e:ac:88:c0:e7:1e:34:9d:81:ae: 4d:66:54:08:b2:2f:c3:e7:2f:bc:71:7d:c1:5d:c4: cf:f3:dd:e3:5b:2e:cd:e0:b6:80:a7:8c:88:ae:a0: 0c:4c:32:97:8b:27:6c:6e:ec:e7:e5:f7:f0:10:6b: 5f:bc:a7:6a:1f:2c:34:08:26:df:94:c2:32:f3:92: 8f:05:b7:74:a2:77:17:e3:c2:9f:e8:a2:0f:56:83: 0e:4d:e2:4b:61:96:a4:94:b3:66:ff:52:54:4b:ad: 36:d3:0b:34:6b:f9:e6:52:e5:9e:eb:03:55:5d:ad: 16:b8:9c:5f:b8:65:81:21:92:64:50:6e:78:20:b9: a1:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:0B:FE:54:78:35:BD:71:A8:3B:0F:BE:E9:90:EB:69:80:B4:69:85 X509v3 Authority Key Identifier: keyid:00:99:DE:AB:07:3E:FD:74:C2:50:C0:A3:82:B2:50:12:B5:08:2A:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/0099DEAB073EFD74C250C0A382B25012B5082AEE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/AS64089.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.54.28.0/24 45.54.84.0/23 IPv6: 2607:f740:e005::/48 Signature Algorithm: sha256WithRSAEncryption 29:6c:d3:91:7b:ed:80:78:a4:88:30:90:b9:a4:f7:1c:01:46: 46:6c:ad:24:55:67:94:71:b5:e9:14:b5:53:fb:71:b3:64:4d: a4:32:e8:0d:d3:e5:56:b9:28:49:a6:f1:6e:73:2b:a9:a6:ef: d9:71:46:4d:f9:bd:a1:48:f1:4d:48:e1:e7:94:62:e7:33:89: 5f:7f:e0:d9:b2:e0:2d:c3:41:bf:18:5d:78:5c:ca:5a:ee:4d: d6:7d:9f:ce:0f:57:f5:29:c6:5a:71:e6:b5:53:6f:28:6c:4f: 10:1b:d6:f0:6b:05:f8:41:42:a3:d7:4d:5a:e4:d0:f0:91:2f: e0:f8:15:be:36:c5:cf:e0:e2:7d:f9:70:79:76:f1:a0:0d:97: 1f:e0:40:79:e9:4e:a9:a3:d1:77:97:d1:66:56:79:be:99:4d: 6e:ea:4b:ff:d8:b8:ee:7e:1f:e3:38:f0:a6:ad:bb:e4:c9:dd: 19:7f:b8:6c:69:7e:59:69:9f:23:70:6a:c0:2b:3a:03:6b:63: c5:91:ab:82:cb:88:b4:d2:a0:92:d7:07:1b:18:5f:fa:59:d9: 47:c7:95:00:ee:e7:43:0b:a3:fb:ec:ce:88:f6:a4:4e:d0:ad: 34:87:20:e9:e3:6b:74:b2:6c:e0:5c:6f:5c:4d:41:d2:fa:d2: 10:83:35:c7 -----BEGIN CERTIFICATE----- MIIFlTCCBH2gAwIBAgIUA7Wemg0DcE3wQUlBPFhcfv735hMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyMWZmNGUyNWM0NThlNDRlMjUyOTIyZGNmNTEyYTU2OGRm ZTA5ODI0MmQwMGNiNjVhM2QwHhcNMjYxMDAyMTMyNDE1WhcNMjcxMDAxMTMyOTE1 WjAzMTEwLwYDVQQDEyhBMTBCRkU1NDc4MzVCRDcxQTgzQjBGQkVFOTkwRUI2OTgw QjQ2OTg1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6veozkp7AG88 zBj7p1nyHqrpt9u3MYWgZe6UsgliemrH6hqxnsq800EAYOqWwbzSoDWP7nLCUfhO 3LZL6MMGrvvd+acdz2DypByffX1Fssd3ODI3pL3gxVoD/gO8G24YeLHejeNtB3nX dA0xV/Qc2vC3e3KD3W522PtO4h6siMDnHjSdga5NZlQIsi/D5y+8cX3BXcTP893j Wy7N4LaAp4yIrqAMTDKXiydsbuzn5ffwEGtfvKdqHyw0CCbflMIy85KPBbd0oncX 48Kf6KIPVoMOTeJLYZaklLNm/1JUS6020ws0a/nmUuWe6wNVXa0WuJxfuGWBIZJk UG54ILmhqQIDAQABo4IClTCCApEwHQYDVR0OBBYEFKEL/lR4Nb1xqDsPvumQ62mA tGmFMB8GA1UdIwQYMBaAFACZ3qsHPv10wlDAo4KyUBK1CCruMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRlODJkNWRlNDEwMTgzZjY4NjYxMDg0Yjg2LzAv MDA5OURFQUIwNzNFRkQ3NEMyNTBDMEEzODJCMjUwMTJCNTA4MkFFRS5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEz YjAyZTI5LzMwZDQyMmRjLTk4ZDEtNDMwNC05ZjhhLTA5NzEyN2UxNWQ1ZS8xZmY0 ZTI1YzQ1OGU0NGUyNTI5MjJkY2Y1MTJhNTY4ZGZlMDk4MjQyZDAwY2I2NWEzZC5j ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4MmQ1ZGU0MTAxODNmNjg2NjEw ODRiODYvMC9BUzY0MDg5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDYG CCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQALTYcAwQBLTZUMA8EAgACMAkDBwAm B/dA4AUwDQYJKoZIhvcNAQELBQADggEBACls05F77YB4pIgwkLmk9xwBRkZsrSRV Z5RxtekUtVP7cbNkTaQy6A3T5Va5KEmm8W5zK6mm79lxRk35vaFI8U1I4eeUYucz iV9/4Nmy4C3DQb8YXXhcylruTdZ9n84PV/Upxlpx5rVTbyhsTxAb1vBrBfhBQqPX TVrk0PCRL+D4Fb42xc/g4n35cHl28aANlx/gQHnpTqmj0XeX0WZWeb6ZTW7qS//Y uO5+H+M48Katu+TJ3Rl/uGxpfllpnyNwasArOgNrY8WRq4LLiLTSoJLXBxsYX/pZ 2UfHlQDu50MLo/vszoj2pE7QrTSHIOnja3SybOBcb1xNQdL60hCDNcc= -----END CERTIFICATE-----Generated at Sun Nov 1 08:32:41 2026 by rpki-client