$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/1c64bc7d-a302-3320-bca5-35577df76424.roa File: 1c64bc7d-a302-3320-bca5-35577df76424.roa (raw, json) Hash identifier: Th+Hr4rE6DKSDaW88wvrzsgg5lQeGqWgYhML2Sz+yGw= Subject key identifier: 35:00:52:CF:82:88:63:24:EF:B6:2E:59:48:95:D9:3E:55:9B:B4:65 Certificate issuer: /CN=908791ae-8a38-4ae8-a4af-e3de68a5db10 Certificate serial: 010D0C9F4328584AECC14CDF4BF63AF20D434A80 Authority key identifier: A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/1c64bc7d-a302-3320-bca5-35577df76424.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 13768 IP address blocks: 64.34.176.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c1:4c:df:4b:f6:3a:f2:0d:43:4a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=908791ae-8a38-4ae8-a4af-e3de68a5db10 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=73f840ee-9e62-4af2-931d-64ea3cb12084 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:97:53:12:8e:0a:79:cf:67:72:f4:88:8e:ca: 90:c4:09:e4:87:34:10:cf:3f:82:ac:90:f9:ca:ac: 5b:22:4c:12:26:46:9d:b3:9b:0b:79:7c:e0:ad:0b: f3:46:34:a5:a5:8a:0a:fb:ca:29:7c:a1:38:0a:9c: 97:c7:a0:f1:b7:cc:10:7e:97:8d:7f:0b:aa:a7:c5: a2:22:50:5a:4b:eb:01:ff:ba:63:cb:eb:38:52:3e: 0b:da:cb:db:e9:f3:5e:b4:25:8c:99:c1:52:f7:9b: 23:28:ec:82:0c:c1:66:12:4f:ff:1a:3d:c5:46:a6: 61:fe:b4:01:02:81:ae:99:41:e3:d3:5d:b0:e9:db: ef:24:31:99:c8:d7:1b:13:cd:9d:01:88:1f:4b:45: db:41:31:5a:e7:b2:96:71:a8:04:9c:fb:c2:94:54: 40:98:e4:7a:40:af:15:23:ee:be:7b:42:f1:7d:24: cb:a5:66:a8:ad:10:e8:99:6e:94:25:10:94:04:e3: 81:39:63:7e:5f:fd:d8:70:5f:6b:e5:c8:dd:07:4f: 49:6a:3c:48:bd:2f:ba:9d:41:cf:11:5a:cd:88:5c: e4:a8:72:79:48:22:a8:2b:fb:8f:63:ac:ec:1d:12: 45:32:e3:b3:70:49:9c:5f:3e:02:99:b4:67:03:eb: 3d:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:00:52:CF:82:88:63:24:EF:B6:2E:59:48:95:D9:3E:55:9B:B4:65 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/1c64bc7d-a302-3320-bca5-35577df76424.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.crl X509v3 Authority Key Identifier: keyid:A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer sbgp-ipAddrBlock: critical IPv4: 64.34.176.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:ba:9d:c3:ed:21:b6:9b:94:bb:88:df:22:cc:09:76:b6:c8: 8d:aa:6a:62:ae:64:30:84:9c:6a:a3:88:2a:c3:b2:a1:bd:ac: 99:01:f2:1b:e2:47:66:49:15:98:b0:a4:c8:7c:7e:71:dc:8a: 1c:68:3d:ea:0c:89:e9:d4:6d:8f:05:a0:12:7a:24:e3:46:39: 66:24:38:6b:ec:b4:81:59:59:63:1e:0c:df:fd:90:fd:a8:f4: 5e:3d:50:2e:27:c6:76:1a:7a:6f:cb:b2:da:44:60:22:2f:e8: 86:b0:51:70:e8:43:e7:44:4f:59:72:68:d1:63:04:6e:f8:25: c2:c7:c3:17:b4:2a:27:38:36:7a:21:bf:99:c2:e1:76:16:4b: 46:29:48:1d:30:03:39:32:09:be:38:a3:88:09:a1:ee:2b:05: c5:c4:16:bb:34:5a:f7:80:81:6e:7a:92:e4:c5:74:06:77:8c: 6a:27:74:6e:b5:60:b3:a4:5a:7a:26:e6:cc:fa:91:60:79:54: c7:7a:e2:5d:73:56:d6:f0:cd:56:fb:a8:0e:31:9e:b5:08:12: 48:f1:35:04:b7:fe:3c:5e:d4:86:20:ab:34:66:75:7d:45:90: e0:a2:af:e2:ea:75:13:dd:59:e3:95:a0:ae:94:76:7d:12:89: cd:16:5e:c1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErswUzfS/Y68g1DSoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTA4NzkxYWUtOGEzOC00YWU4LWE0YWYtZTNkZTY4YTVk YjEwMB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk NzNmODQwZWUtOWU2Mi00YWYyLTkzMWQtNjRlYTNjYjEyMDg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlpdTEo4Kec9ncvSIjsqQxAnkhzQQzz+CrJD5 yqxbIkwSJkads5sLeXzgrQvzRjSlpYoK+8opfKE4CpyXx6Dxt8wQfpeNfwuqp8Wi IlBaS+sB/7pjy+s4Uj4L2svb6fNetCWMmcFS95sjKOyCDMFmEk//Gj3FRqZh/rQB AoGumUHj012w6dvvJDGZyNcbE82dAYgfS0XbQTFa57KWcagEnPvClFRAmOR6QK8V I+6+e0LxfSTLpWaorRDomW6UJRCUBOOBOWN+X/3YcF9r5cjdB09JajxIvS+6nUHP EVrNiFzkqHJ5SCKoK/uPY6zsHRJFMuOzcEmcXz4CmbRnA+s9DwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDUAUs+CiGMk77YuWUiV2T5Vm7RlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85MDg3 OTFhZS04YTM4LTRhZTgtYTRhZi1lM2RlNjhhNWRiMTAvMWM2NGJjN2QtYTMwMi0z MzIwLWJjYTUtMzU1NzdkZjc2NDI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTA4NzkxYWUtOGEzOC00YWU4LWE0 YWYtZTNkZTY4YTVkYjEwLzkwODc5MWFlLThhMzgtNGFlOC1hNGFmLWUzZGU2OGE1 ZGIxMC5jcmwwHwYDVR0jBBgwFoAUoALXGqDwH66plsLfMD3KFCsXjvYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85MDg3OTFhZS04YTM4LTRhZTgtYTRhZi1lM2Rl NjhhNWRiMTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDQCKwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFq6ncPtIbablLuI3yLMCXa2yI2qamKuZDCEnGqjiCrDsqG9rJkB8hvi R2ZJFZiwpMh8fnHcihxoPeoMienUbY8FoBJ6JONGOWYkOGvstIFZWWMeDN/9kP2o 9F49UC4nxnYaem/LstpEYCIv6IawUXDoQ+dET1lyaNFjBG74JcLHwxe0Kic4Nnoh v5nC4XYWS0YpSB0wAzkyCb44o4gJoe4rBcXEFrs0WveAgW56kuTFdAZ3jGondG61 YLOkWnom5sz6kWB5VMd64l1zVtbwzVb7qA4xnrUIEkjxNQS3/jxe1IYgqzRmdX1F kOCir+LqdRPdWeOVoK6Udn0Sic0WXsE= -----END CERTIFICATE-----Generated at Tue Nov 4 22:48:44 2025 by rpki-client