$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/ad69bafa-d28f-3f1b-b6b1-599322ce9e98.roa File: ad69bafa-d28f-3f1b-b6b1-599322ce9e98.roa (raw, json) Hash identifier: 2ImcvqFfJOz5qRnPEGd8tI1sElkpnm33/TwpVmEw+rk= Subject key identifier: 4A:91:4E:05:0A:95:00:C0:52:BF:83:92:26:87:EC:58:9D:39:CA:07 Certificate issuer: /CN=908791ae-8a38-4ae8-a4af-e3de68a5db10 Certificate serial: 010D0C9F4328584AE9F66B2E7045367753DDEC00 Authority key identifier: A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/ad69bafa-d28f-3f1b-b6b1-599322ce9e98.roa Signing time: Wed 20 Aug 2025 01:00:33 +0000 ROA not before: Wed 20 Aug 2025 01:00:33 +0000 ROA not after: Tue 18 Nov 2025 02:00:33 +0000 asID: 13768 IP address blocks: 64.34.52.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 28 Oct 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e9:f6:6b:2e:70:45:36:77:53:dd:ec:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=908791ae-8a38-4ae8-a4af-e3de68a5db10 Validity Not Before: Aug 20 01:00:33 2025 GMT Not After : Nov 18 02:00:33 2025 GMT Subject: CN=be975ce8-8df0-42c4-be1e-8ea98b17330b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:71:97:f5:7a:b8:25:fe:ca:89:e0:e6:59:09: 69:07:83:31:91:8d:8e:8a:de:6f:fd:91:bb:fe:bf: d3:11:75:b7:26:d2:b0:b6:18:89:8c:fc:69:8d:cb: 91:e5:5a:5c:02:08:e1:3c:11:77:e3:b7:1b:07:45: 2b:b5:0f:34:88:9e:b9:5f:45:e8:3d:02:d0:aa:41: 73:c7:4d:1a:bd:84:b9:ed:2f:2f:e2:1b:29:66:1c: 68:94:be:a8:b1:9f:67:8f:0d:f8:f3:6d:de:b4:4a: 69:4c:d6:01:5c:b4:39:30:df:b0:b8:b5:25:39:b3: 1a:62:2b:8d:96:77:92:9e:5f:62:d4:57:6c:61:3e: c4:cf:ff:c2:b8:f0:5a:f1:6e:34:2a:8e:48:6a:43: 91:d9:a6:28:92:b7:d8:2f:4a:31:f1:3d:14:c6:9a: 86:45:19:b3:e8:6d:15:55:7f:88:10:8e:bb:6c:64: 8c:7d:64:4e:44:e1:f4:5b:9c:07:86:2b:7a:f4:68: 3a:65:75:90:02:ca:75:d6:c7:6e:4f:82:17:b5:bc: 24:ea:20:cc:3b:76:b1:b2:32:cc:26:f6:ac:d7:2c: 35:30:35:93:f9:54:9b:48:e1:ca:91:7a:0f:ac:a0: c8:99:81:2f:8f:9c:75:df:b6:af:17:22:7e:d0:b7: 4f:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:91:4E:05:0A:95:00:C0:52:BF:83:92:26:87:EC:58:9D:39:CA:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/ad69bafa-d28f-3f1b-b6b1-599322ce9e98.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.crl X509v3 Authority Key Identifier: keyid:A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer sbgp-ipAddrBlock: critical IPv4: 64.34.52.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:0e:7f:8f:98:bc:e0:40:e0:5a:6c:c8:bf:d0:99:b3:6b:2a: ca:4e:0e:a2:4a:a4:f2:5f:c4:a7:a3:84:60:8a:95:d9:53:2a: f1:b9:93:92:db:17:13:67:b6:31:fa:4e:22:0e:07:c3:9d:b9: df:e4:df:ea:fb:96:29:f5:05:b0:8b:f0:86:30:9a:c9:30:c8: fe:9b:8f:c2:79:2b:5d:1f:b7:1f:24:3c:18:d2:69:f7:a5:d9: b5:07:d0:4a:a3:78:9f:b4:61:a4:2b:cb:d3:cf:67:50:2a:a7: 13:e6:f0:70:8b:6f:eb:ba:d1:81:8f:a5:79:d8:5e:48:b0:eb: db:9e:fb:97:53:10:0f:89:d3:07:2a:72:c5:de:fe:d9:33:da: ed:a7:4d:a0:38:d5:fb:17:c3:61:98:2d:b0:ee:c6:3c:96:9b: 92:28:35:84:8c:73:e3:03:3c:e1:62:6c:94:51:bf:c1:92:5d: c0:cb:c6:85:47:ae:13:b5:8c:76:4f:81:4a:30:e9:e4:46:e4: 03:5e:4c:47:79:43:c0:a3:25:ca:4c:a7:e8:b0:b5:fc:63:b0: 71:7c:69:40:8d:98:e8:b1:4a:56:9b:43:82:53:bb:17:0f:20: 74:93:4f:31:59:59:f9:46:43:58:c3:e2:cf:76:56:0b:4c:63: 7d:a9:35:72 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErp9msucEU2d1Pd7AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTA4NzkxYWUtOGEzOC00YWU4LWE0YWYtZTNkZTY4YTVk YjEwMB4XDTI1MDgyMDAxMDAzM1oXDTI1MTExODAyMDAzM1owLzEtMCsGA1UEAxMk YmU5NzVjZTgtOGRmMC00MmM0LWJlMWUtOGVhOThiMTczMzBiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoXGX9Xq4Jf7KieDmWQlpB4MxkY2Oit5v/ZG7 /r/TEXW3JtKwthiJjPxpjcuR5VpcAgjhPBF347cbB0UrtQ80iJ65X0XoPQLQqkFz x00avYS57S8v4hspZhxolL6osZ9njw34823etEppTNYBXLQ5MN+wuLUlObMaYiuN lneSnl9i1FdsYT7Ez//CuPBa8W40Ko5IakOR2aYokrfYL0ox8T0UxpqGRRmz6G0V VX+IEI67bGSMfWROROH0W5wHhit69Gg6ZXWQAsp11sduT4IXtbwk6iDMO3axsjLM Jvas1yw1MDWT+VSbSOHKkXoPrKDImYEvj5x137avFyJ+0LdPpwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEqRTgUKlQDAUr+DkiaH7FidOcoHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85MDg3 OTFhZS04YTM4LTRhZTgtYTRhZi1lM2RlNjhhNWRiMTAvYWQ2OWJhZmEtZDI4Zi0z ZjFiLWI2YjEtNTk5MzIyY2U5ZTk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTA4NzkxYWUtOGEzOC00YWU4LWE0 YWYtZTNkZTY4YTVkYjEwLzkwODc5MWFlLThhMzgtNGFlOC1hNGFmLWUzZGU2OGE1 ZGIxMC5jcmwwHwYDVR0jBBgwFoAUoALXGqDwH66plsLfMD3KFCsXjvYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85MDg3OTFhZS04YTM4LTRhZTgtYTRhZi1lM2Rl NjhhNWRiMTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQCI0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGoOf4+YvOBA4FpsyL/QmbNrKspODqJKpPJfxKejhGCKldlTKvG5k5Lb FxNntjH6TiIOB8Odud/k3+r7lin1BbCL8IYwmskwyP6bj8J5K10ftx8kPBjSafel 2bUH0EqjeJ+0YaQry9PPZ1AqpxPm8HCLb+u60YGPpXnYXkiw69ue+5dTEA+J0wcq csXe/tkz2u2nTaA41fsXw2GYLbDuxjyWm5IoNYSMc+MDPOFibJRRv8GSXcDLxoVH rhO1jHZPgUow6eRG5ANeTEd5Q8CjJcpMp+iwtfxjsHF8aUCNmOixSlabQ4JTuxcP IHSTTzFZWflGQ1jD4s92VgtMY32pNXI= -----END CERTIFICATE-----Generated at Mon Oct 27 10:01:02 2025 by rpki-client