$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/AS64089.roa File: AS64089.roa (raw, json) Hash identifier: qeDe4h5rdrLAtWBfcMKQQ2QySEh8zqQWTWDhnhh8Op8= Subject key identifier: 68:D4:49:E2:10:A2:E1:85:7A:93:67:38:FB:43:FC:4E:27:0B:5D:C6 Certificate issuer: /CN=1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d Certificate serial: 01D2B03014D05AF90678DB24765A376B78C74FD4 Authority key identifier: 00:99:DE:AB:07:3E:FD:74:C2:50:C0:A3:82:B2:50:12:B5:08:2A:EE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/AS64089.roa Signing time: Fri 31 Oct 2025 13:14:31 +0000 ROA not before: Fri 31 Oct 2025 13:09:31 +0000 ROA not after: Fri 30 Oct 2026 13:14:31 +0000 asID: 64089 IP address blocks: 45.54.28.0/24 maxlen: 24 45.54.84.0/24 maxlen: 24 45.54.85.0/24 maxlen: 24 2607:f740:e005::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/0099DEAB073EFD74C250C0A382B25012B5082AEE.crl rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/0099DEAB073EFD74C250C0A382B25012B5082AEE.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/30d422dc-98d1-4304-9f8a-097127e15d5e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/30d422dc-98d1-4304-9f8a-097127e15d5e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 19:23:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:d2:b0:30:14:d0:5a:f9:06:78:db:24:76:5a:37:6b:78:c7:4f:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d Validity Not Before: Oct 31 13:09:31 2025 GMT Not After : Oct 30 13:14:31 2026 GMT Subject: CN=68D449E210A2E1857A936738FB43FC4E270B5DC6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:d9:3c:15:ff:ee:d7:fb:dd:95:9d:6e:c2:69: 7a:1f:6f:f8:54:51:06:3c:36:2b:bb:04:89:68:dd: 3c:0e:fc:d8:c0:61:71:34:d7:8a:ba:ec:e2:21:29: e0:bc:b9:e2:77:0f:ed:62:c6:35:7d:83:c4:92:8b: b6:0e:00:f3:bb:42:ae:c6:44:40:c5:72:ce:4b:e7: 37:09:29:e1:8b:74:6b:da:0d:33:c9:a1:be:9a:ea: a7:b1:98:7b:ae:15:41:88:d0:30:a9:93:5e:8a:3f: c3:65:10:3e:a8:02:10:af:a5:8b:f1:9a:d9:18:f1: b9:c1:0f:62:e3:17:6d:eb:7f:34:b1:1c:c5:c5:30: 7a:58:14:df:e8:0c:35:8b:e2:c6:21:42:e3:bf:04: 96:f8:73:2a:d6:a9:31:8e:85:ad:b5:e0:8b:77:6a: 92:51:94:92:4c:90:c3:d7:2a:35:0d:18:a6:26:7b: 6c:16:1f:ac:8a:8b:70:b9:3b:0f:6b:c1:02:0f:8b: 4c:2c:5d:f0:9f:09:66:c4:1e:2a:79:c2:37:c2:ed: 34:48:79:a2:d0:c5:62:e7:c1:05:e6:71:a1:4b:ba: 93:e3:91:c3:4c:48:7f:2d:ba:fd:de:13:7b:1c:69: 41:63:73:d0:66:de:46:50:3d:34:03:3e:e0:4b:01: d7:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:D4:49:E2:10:A2:E1:85:7A:93:67:38:FB:43:FC:4E:27:0B:5D:C6 X509v3 Authority Key Identifier: keyid:00:99:DE:AB:07:3E:FD:74:C2:50:C0:A3:82:B2:50:12:B5:08:2A:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/0099DEAB073EFD74C250C0A382B25012B5082AEE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/AS64089.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.54.28.0/24 45.54.84.0/23 IPv6: 2607:f740:e005::/48 Signature Algorithm: sha256WithRSAEncryption 84:f0:81:02:4a:1e:f3:f5:5c:1c:f2:28:61:5b:4f:20:9c:20: a6:22:87:7b:a5:40:a0:b5:54:e5:1f:c4:65:ae:b9:0d:b4:35: 3c:c1:e6:32:bf:3c:bf:1e:6f:47:3c:93:63:e4:fd:cf:72:1f: 60:94:a2:76:b2:82:ea:d2:08:55:06:36:cc:df:ef:cb:fb:34: 20:94:3d:ba:8c:22:11:76:8b:d1:b1:31:c8:9c:d1:fa:1f:03: b3:44:f6:1a:cc:9c:fe:bd:ed:67:83:95:a9:d0:30:60:ce:ab: 21:84:38:61:36:ca:f7:18:78:2a:91:e2:ca:69:91:c9:61:b7: 60:7b:3f:dc:01:10:d6:6d:84:24:5b:46:28:63:1c:3d:8e:13: af:df:e1:c4:cf:b1:7b:7d:01:3e:96:3f:64:d3:fa:08:58:03: ab:80:42:1d:95:b9:00:93:b5:9f:e9:b9:e1:56:cc:c1:a8:e6: dc:6d:ca:6d:0a:2d:ea:40:1d:e9:39:6a:ce:2d:dd:ac:0c:ed: 30:b8:64:fd:95:3b:72:32:e9:13:e9:02:9f:a1:a3:86:a9:54: e6:fb:5f:6d:3c:cc:53:a2:00:f8:f8:58:87:f1:3a:0c:8b:fd: e8:f3:8c:62:d9:41:f5:2d:40:7b:29:c3:87:95:91:50:47:e0: 7b:46:59:fb -----BEGIN CERTIFICATE----- MIIFlTCCBH2gAwIBAgIUAdKwMBTQWvkGeNskdlo3a3jHT9QwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyMWZmNGUyNWM0NThlNDRlMjUyOTIyZGNmNTEyYTU2OGRm ZTA5ODI0MmQwMGNiNjVhM2QwHhcNMjUxMDMxMTMwOTMxWhcNMjYxMDMwMTMxNDMx WjAzMTEwLwYDVQQDEyg2OEQ0NDlFMjEwQTJFMTg1N0E5MzY3MzhGQjQzRkM0RTI3 MEI1REM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAttk8Ff/u1/vd lZ1uwml6H2/4VFEGPDYruwSJaN08DvzYwGFxNNeKuuziISngvLnidw/tYsY1fYPE kou2DgDzu0KuxkRAxXLOS+c3CSnhi3Rr2g0zyaG+muqnsZh7rhVBiNAwqZNeij/D ZRA+qAIQr6WL8ZrZGPG5wQ9i4xdt6380sRzFxTB6WBTf6Aw1i+LGIULjvwSW+HMq 1qkxjoWtteCLd2qSUZSSTJDD1yo1DRimJntsFh+siotwuTsPa8ECD4tMLF3wnwlm xB4qecI3wu00SHmi0MVi58EF5nGhS7qT45HDTEh/Lbr93hN7HGlBY3PQZt5GUD00 Az7gSwHXcQIDAQABo4IClTCCApEwHQYDVR0OBBYEFGjUSeIQouGFepNnOPtD/E4n C13GMB8GA1UdIwQYMBaAFACZ3qsHPv10wlDAo4KyUBK1CCruMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRlODJkNWRlNDEwMTgzZjY4NjYxMDg0Yjg2LzAv MDA5OURFQUIwNzNFRkQ3NEMyNTBDMEEzODJCMjUwMTJCNTA4MkFFRS5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEz YjAyZTI5LzMwZDQyMmRjLTk4ZDEtNDMwNC05ZjhhLTA5NzEyN2UxNWQ1ZS8xZmY0 ZTI1YzQ1OGU0NGUyNTI5MjJkY2Y1MTJhNTY4ZGZlMDk4MjQyZDAwY2I2NWEzZC5j ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4MmQ1ZGU0MTAxODNmNjg2NjEw ODRiODYvMC9BUzY0MDg5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDYG CCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQALTYcAwQBLTZUMA8EAgACMAkDBwAm B/dA4AUwDQYJKoZIhvcNAQELBQADggEBAITwgQJKHvP1XBzyKGFbTyCcIKYih3ul QKC1VOUfxGWuuQ20NTzB5jK/PL8eb0c8k2Pk/c9yH2CUonaygurSCFUGNszf78v7 NCCUPbqMIhF2i9GxMcic0fofA7NE9hrMnP697WeDlanQMGDOqyGEOGE2yvcYeCqR 4sppkclht2B7P9wBENZthCRbRihjHD2OE6/f4cTPsXt9AT6WP2TT+ghYA6uAQh2V uQCTtZ/pueFWzMGo5txtym0KLepAHek5as4t3awM7TC4ZP2VO3Iy6RPpAp+ho4ap VOb7X208zFOiAPj4WIfxOgyL/ejzjGLZQfUtQHspw4eVkVBH4HtGWfs= -----END CERTIFICATE-----Generated at Wed Nov 5 20:00:18 2025 by rpki-client