$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/64b38fb6-7e65-3d80-ba8e-62585efad38a.roa File: 64b38fb6-7e65-3d80-ba8e-62585efad38a.roa (raw, json) Hash identifier: 9532QNNm5HaMR2uIRP6+TVZU9r1Nw9rKJZR0xKO7ntU= Subject key identifier: 35:48:71:01:00:07:7B:4D:7B:8F:E8:B5:A3:B1:25:BE:88:B9:50:4F Certificate issuer: /CN=908791ae-8a38-4ae8-a4af-e3de68a5db10 Certificate serial: 010D0C9F4328584AE9F66AECD3F5A3215D28D580 Authority key identifier: A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/64b38fb6-7e65-3d80-ba8e-62585efad38a.roa Signing time: Wed 20 Aug 2025 01:00:33 +0000 ROA not before: Wed 20 Aug 2025 01:00:33 +0000 ROA not after: Tue 18 Nov 2025 02:00:33 +0000 asID: 13768 IP address blocks: 64.34.20.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 28 Oct 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e9:f6:6a:ec:d3:f5:a3:21:5d:28:d5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=908791ae-8a38-4ae8-a4af-e3de68a5db10 Validity Not Before: Aug 20 01:00:33 2025 GMT Not After : Nov 18 02:00:33 2025 GMT Subject: CN=84a12873-6d40-4231-9517-433e04e1b779 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:9d:93:2e:17:13:3c:48:ec:45:d3:a3:83:ee: 01:1f:bd:4c:15:c9:2e:ba:a5:bc:c8:2b:ea:b9:f2: 19:67:8a:87:d3:24:07:d1:e5:5c:fb:62:4d:40:e1: 1c:66:4e:4d:1d:88:6e:31:db:06:22:67:b8:d5:28: 58:9a:1b:b0:92:f7:52:3c:5d:37:d4:b0:11:0c:ba: 86:59:31:dd:c2:fc:d8:cd:5f:3b:bd:66:12:83:c6: 27:e4:11:79:42:21:db:94:22:a6:42:bb:7c:13:40: c0:76:69:0e:c1:46:bd:c1:69:2e:7b:fb:42:32:f1: f5:26:fd:59:70:3e:8d:62:4c:f1:a3:a7:8a:7d:a5: 60:d2:d0:62:de:27:76:39:14:22:1a:b7:f5:a3:ce: 30:85:00:c5:d1:e2:09:ea:a3:d0:2d:18:8d:24:4f: 8e:4f:b4:17:0c:a8:52:98:8b:27:d5:70:e8:05:76: a9:b8:d2:5b:20:8d:27:42:6e:2a:87:f8:12:b5:fd: 48:03:4d:ed:b0:43:74:28:fa:54:f8:8f:af:17:de: 9b:7e:2e:b4:10:df:61:80:e3:0c:1a:07:3b:a5:7e: 99:27:32:cb:96:12:3b:7f:c2:0a:2b:a4:d1:fc:6c: 8c:dc:fd:32:90:fd:b0:59:55:4f:1a:69:da:26:4e: 2f:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:48:71:01:00:07:7B:4D:7B:8F:E8:B5:A3:B1:25:BE:88:B9:50:4F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/64b38fb6-7e65-3d80-ba8e-62585efad38a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.crl X509v3 Authority Key Identifier: keyid:A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer sbgp-ipAddrBlock: critical IPv4: 64.34.20.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:1b:cc:83:81:36:0e:57:98:21:7e:18:35:7b:28:5c:7e:a1: f6:93:e2:7d:fc:84:9e:03:ca:f2:65:69:fa:e2:a5:0a:0c:f3: c1:27:d3:c2:b7:7f:73:a4:25:48:d4:8a:16:c2:21:7b:97:84: bb:2a:02:36:57:d4:f2:30:66:43:d7:c8:a9:fb:4c:d9:5b:c2: 54:06:ae:db:fa:7f:a5:2e:11:39:c8:e6:5d:41:e7:40:87:33: be:c1:93:29:d9:24:eb:eb:c5:94:7f:6c:4c:9f:25:ce:46:a3: 7d:4d:ca:37:2c:60:1f:eb:50:fc:fa:8f:87:73:37:5c:e0:e9: 88:61:15:da:55:6f:19:f0:13:9c:df:07:22:46:af:a2:32:df: 3f:cc:b7:21:c8:51:97:a3:3a:d2:ba:ca:64:f8:0b:d8:02:89: 34:26:be:f9:3a:8b:df:db:3b:4b:85:42:1e:38:d0:04:a3:d1: a0:50:55:91:c9:6e:2c:94:c8:89:4c:d4:3c:bd:72:ce:2e:5e: cc:78:5f:9f:df:63:bc:19:33:f6:b6:a4:53:76:24:d5:7c:02: 6d:fd:f5:94:e3:67:f7:e1:e1:e1:dd:88:fb:27:17:55:30:d5: aa:f5:c1:36:49:e6:08:dc:3a:91:0d:13:47:12:9b:38:89:1a: 3a:92:37:f8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErp9mrs0/WjIV0o1YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTA4NzkxYWUtOGEzOC00YWU4LWE0YWYtZTNkZTY4YTVk YjEwMB4XDTI1MDgyMDAxMDAzM1oXDTI1MTExODAyMDAzM1owLzEtMCsGA1UEAxMk ODRhMTI4NzMtNmQ0MC00MjMxLTk1MTctNDMzZTA0ZTFiNzc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq52TLhcTPEjsRdOjg+4BH71MFckuuqW8yCvq ufIZZ4qH0yQH0eVc+2JNQOEcZk5NHYhuMdsGIme41ShYmhuwkvdSPF031LARDLqG WTHdwvzYzV87vWYSg8Yn5BF5QiHblCKmQrt8E0DAdmkOwUa9wWkue/tCMvH1Jv1Z cD6NYkzxo6eKfaVg0tBi3id2ORQiGrf1o84whQDF0eIJ6qPQLRiNJE+OT7QXDKhS mIsn1XDoBXapuNJbII0nQm4qh/gStf1IA03tsEN0KPpU+I+vF96bfi60EN9hgOMM Ggc7pX6ZJzLLlhI7f8IKK6TR/GyM3P0ykP2wWVVPGmnaJk4vfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDVIcQEAB3tNe4/otaOxJb6IuVBPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85MDg3 OTFhZS04YTM4LTRhZTgtYTRhZi1lM2RlNjhhNWRiMTAvNjRiMzhmYjYtN2U2NS0z ZDgwLWJhOGUtNjI1ODVlZmFkMzhhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTA4NzkxYWUtOGEzOC00YWU4LWE0 YWYtZTNkZTY4YTVkYjEwLzkwODc5MWFlLThhMzgtNGFlOC1hNGFmLWUzZGU2OGE1 ZGIxMC5jcmwwHwYDVR0jBBgwFoAUoALXGqDwH66plsLfMD3KFCsXjvYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85MDg3OTFhZS04YTM4LTRhZTgtYTRhZi1lM2Rl NjhhNWRiMTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQCIUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH4bzIOBNg5XmCF+GDV7KFx+ofaT4n38hJ4DyvJlafripQoM88En08K3 f3OkJUjUihbCIXuXhLsqAjZX1PIwZkPXyKn7TNlbwlQGrtv6f6UuETnI5l1B50CH M77BkynZJOvrxZR/bEyfJc5Go31NyjcsYB/rUPz6j4dzN1zg6YhhFdpVbxnwE5zf ByJGr6Iy3z/MtyHIUZejOtK6ymT4C9gCiTQmvvk6i9/bO0uFQh440ASj0aBQVZHJ biyUyIlM1Dy9cs4uXsx4X5/fY7wZM/a2pFN2JNV8Am399ZTjZ/fh4eHdiPsnF1Uw 1ar1wTZJ5gjcOpENE0cSmziJGjqSN/g= -----END CERTIFICATE-----Generated at Mon Oct 27 10:02:24 2025 by rpki-client