$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/3a362196-137e-3c83-b123-69013f57af7a.roa File: 3a362196-137e-3c83-b123-69013f57af7a.roa (raw, json) Hash identifier: Tt+QcAELB5Lo7AyCJw/bKPCYWVbCXd+RjgB/lHtWQAc= Subject key identifier: 63:CB:56:6E:F3:78:6F:E1:ED:9B:26:A5:1E:B3:13:E5:E0:33:73:06 Certificate issuer: /CN=908791ae-8a38-4ae8-a4af-e3de68a5db10 Certificate serial: 010D0C9F4328584FB3A6824903098D30C0D69400 Authority key identifier: A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/3a362196-137e-3c83-b123-69013f57af7a.roa Signing time: Mon 02 Nov 2026 02:00:13 +0000 ROA not before: Mon 02 Nov 2026 02:00:13 +0000 ROA not after: Sun 31 Jan 2027 02:00:13 +0000 asID: 13768 IP address blocks: 64.34.96.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:b3:a6:82:49:03:09:8d:30:c0:d6:94:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=908791ae-8a38-4ae8-a4af-e3de68a5db10 Validity Not Before: Nov 2 02:00:13 2026 GMT Not After : Jan 31 02:00:13 2027 GMT Subject: CN=8dfb9746-0616-412c-9ae5-b3e969deca8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:b7:c5:1f:65:50:e7:f4:e3:d7:aa:d8:26:b7: 29:50:25:fb:2e:bc:7b:84:40:1f:27:81:fc:38:bb: 9d:1f:97:70:16:b6:40:bd:df:89:40:92:08:f7:2e: df:fc:38:e7:d8:b2:4b:8c:29:b9:82:67:fa:54:ea: 41:29:92:54:f5:f8:b7:f4:1e:ba:c2:44:91:35:7a: 26:95:05:11:58:8b:be:c0:97:65:b6:09:a2:01:b8: 5b:2f:5c:30:61:d8:cf:05:28:9b:7a:04:a5:36:3e: 0e:65:84:5b:76:88:63:ba:24:f8:fd:9c:d0:e9:c3: 84:9f:77:32:22:53:55:62:cf:f6:f4:72:48:5b:74: 6e:5b:99:9e:a5:54:82:83:b8:e9:b1:cf:ff:e2:48: d2:21:22:e9:a9:1a:4b:eb:82:08:11:93:48:e8:cc: b9:15:80:37:f8:c0:e3:a4:79:02:35:50:23:f8:89: d7:73:71:ba:7f:4a:5b:52:d9:30:d6:84:87:29:d7: 1b:11:53:79:b5:40:c7:93:12:ee:77:2a:79:6c:d2: 08:4e:e8:33:9f:3c:ff:ae:64:33:c9:20:f0:f0:9b: 59:41:28:86:09:5c:b9:85:53:3a:08:ab:f0:5c:a6: 56:92:1d:7a:59:b9:3c:83:14:6f:80:52:90:7d:04: f5:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:CB:56:6E:F3:78:6F:E1:ED:9B:26:A5:1E:B3:13:E5:E0:33:73:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/3a362196-137e-3c83-b123-69013f57af7a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.crl X509v3 Authority Key Identifier: keyid:A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer sbgp-ipAddrBlock: critical IPv4: 64.34.96.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:e4:a0:af:e8:42:7e:a5:32:5d:5a:e0:3b:12:60:e5:0f:39: b6:28:70:c4:c7:7a:4c:f3:b5:0f:cd:3a:29:3d:d5:44:a0:a6: a3:f6:db:c8:3a:db:7d:39:c8:d1:98:72:95:24:88:93:38:ce: df:e8:6e:9c:83:7f:79:de:15:fb:2e:c6:2a:b2:01:c5:f6:9a: 9b:44:7e:48:3f:1d:8d:54:3f:fb:0d:db:ff:eb:92:18:a6:69: 7e:29:09:f6:de:86:1a:41:6f:83:67:62:cd:5b:38:be:0e:0b: 14:ae:30:ad:b7:f9:f8:23:f1:3e:b9:f7:34:45:9d:25:86:25: 86:54:42:ee:12:52:58:36:bb:cf:b3:a7:4c:f6:58:1c:2a:9c: fc:98:af:6d:f5:75:d6:45:d8:5f:d2:63:bb:03:fe:61:36:f5: 8b:bd:3c:f6:15:44:24:c7:51:e5:9c:81:d1:66:45:1c:c7:de: c2:c2:5a:ce:9f:b3:3e:07:77:62:5a:94:88:08:2c:17:8b:88: f0:fa:e4:45:6e:48:9d:c4:e2:3f:b6:e9:1f:32:18:9e:bc:5e: e0:cb:06:e7:bc:59:32:49:fc:dd:a0:97:14:93:f7:15:25:2a: 18:c8:de:6f:53:41:77:a5:99:40:12:b9:84:a5:d6:fe:7b:d3: f3:2f:33:59 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+zpoJJAwmNMMDWlAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTA4NzkxYWUtOGEzOC00YWU4LWE0YWYtZTNkZTY4YTVk YjEwMB4XDTI2MTEwMjAyMDAxM1oXDTI3MDEzMTAyMDAxM1owLzEtMCsGA1UEAxMk OGRmYjk3NDYtMDYxNi00MTJjLTlhZTUtYjNlOTY5ZGVjYThkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr7fFH2VQ5/Tj16rYJrcpUCX7Lrx7hEAfJ4H8 OLudH5dwFrZAvd+JQJII9y7f/Djn2LJLjCm5gmf6VOpBKZJU9fi39B66wkSRNXom lQURWIu+wJdltgmiAbhbL1wwYdjPBSibegSlNj4OZYRbdohjuiT4/ZzQ6cOEn3cy IlNVYs/29HJIW3RuW5mepVSCg7jpsc//4kjSISLpqRpL64IIEZNI6My5FYA3+MDj pHkCNVAj+InXc3G6f0pbUtkw1oSHKdcbEVN5tUDHkxLudyp5bNIITugznzz/rmQz ySDw8JtZQSiGCVy5hVM6CKvwXKZWkh16Wbk8gxRvgFKQfQT1BQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGPLVm7zeG/h7ZsmpR6zE+XgM3MGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85MDg3 OTFhZS04YTM4LTRhZTgtYTRhZi1lM2RlNjhhNWRiMTAvM2EzNjIxOTYtMTM3ZS0z YzgzLWIxMjMtNjkwMTNmNTdhZjdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTA4NzkxYWUtOGEzOC00YWU4LWE0 YWYtZTNkZTY4YTVkYjEwLzkwODc5MWFlLThhMzgtNGFlOC1hNGFmLWUzZGU2OGE1 ZGIxMC5jcmwwHwYDVR0jBBgwFoAUoALXGqDwH66plsLfMD3KFCsXjvYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85MDg3OTFhZS04YTM4LTRhZTgtYTRhZi1lM2Rl NjhhNWRiMTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQCJgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIzkoK/oQn6lMl1a4DsSYOUPObYocMTHekzztQ/NOik91USgpqP228g6 2305yNGYcpUkiJM4zt/obpyDf3neFfsuxiqyAcX2mptEfkg/HY1UP/sN2//rkhim aX4pCfbehhpBb4NnYs1bOL4OCxSuMK23+fgj8T659zRFnSWGJYZUQu4SUlg2u8+z p0z2WBwqnPyYr231ddZF2F/SY7sD/mE29Yu9PPYVRCTHUeWcgdFmRRzH3sLCWs6f sz4Hd2JalIgILBeLiPD65EVuSJ3E4j+26R8yGJ68XuDLBue8WTJJ/N2glxST9xUl KhjI3m9TQXelmUASuYSl1v570/MvM1k= -----END CERTIFICATE-----Generated at Sun Nov 15 21:28:08 2026 by rpki-client