$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/8789b761-bc71-3c11-b18a-efee96fb1b2f.roa File: 8789b761-bc71-3c11-b18a-efee96fb1b2f.roa (raw, json) Hash identifier: 8IOHUSmelvXjTR15H9lyiX2lQLR8GgDAmfRD826B8T0= Subject key identifier: EC:62:DE:91:39:EC:54:BD:70:E1:41:C0:B7:EE:C0:C7:AB:A2:70:66 Certificate issuer: /CN=908791ae-8a38-4ae8-a4af-e3de68a5db10 Certificate serial: 010D0C9F4328584AE9F66F546554BE83BC5E3BC0 Authority key identifier: A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/8789b761-bc71-3c11-b18a-efee96fb1b2f.roa Signing time: Wed 20 Aug 2025 01:00:33 +0000 ROA not before: Wed 20 Aug 2025 01:00:33 +0000 ROA not after: Tue 18 Nov 2025 02:00:33 +0000 asID: 54643 IP address blocks: 64.34.70.0/24 maxlen: 24 64.34.72.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e9:f6:6f:54:65:54:be:83:bc:5e:3b:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=908791ae-8a38-4ae8-a4af-e3de68a5db10 Validity Not Before: Aug 20 01:00:33 2025 GMT Not After : Nov 18 02:00:33 2025 GMT Subject: CN=893f745d-3616-4fc6-9667-fa8a49d1ba81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:03:48:37:95:6d:21:ad:be:da:38:f6:3f:b7: 5b:bf:bd:aa:b5:e5:04:99:63:56:2b:83:71:e5:eb: 21:6d:41:73:3a:95:9b:f1:f8:6c:87:84:b1:8b:14: 5d:ec:1c:fb:a6:08:01:2e:93:ee:a4:fd:35:88:6f: 12:4e:1a:4c:c7:b0:0e:dd:b3:1a:84:b1:1a:d4:3f: 01:e5:d2:ed:9b:c0:0a:a4:21:7c:1e:72:73:21:5b: 24:1e:e0:19:5b:85:94:a6:e8:30:5f:e5:22:1e:e3: a2:a9:d6:25:23:9d:3a:ef:94:ef:43:94:e0:89:41: 0f:47:8c:c8:7a:0a:a9:31:d2:62:d3:b0:d8:31:1f: f0:9b:88:28:f7:fb:72:e7:86:b3:19:8c:53:f6:17: 51:f6:68:13:f3:cb:67:da:19:50:46:03:82:18:1a: 83:34:73:bb:80:ab:ea:72:5c:a8:ec:c9:44:95:13: d6:a0:8e:36:9e:10:c9:99:b3:f9:a3:de:b0:97:51: 14:08:66:78:8b:82:fb:97:c8:8b:71:56:e7:ae:d5: 4c:9e:00:ff:1a:49:5d:aa:ce:61:b1:a9:38:48:44: 6d:84:b1:5d:34:a6:e8:42:07:2b:90:c3:9a:1c:8f: 00:6c:70:87:93:94:f2:20:75:8e:5e:fa:74:24:d9: b6:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:62:DE:91:39:EC:54:BD:70:E1:41:C0:B7:EE:C0:C7:AB:A2:70:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/8789b761-bc71-3c11-b18a-efee96fb1b2f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.crl X509v3 Authority Key Identifier: keyid:A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer sbgp-ipAddrBlock: critical IPv4: 64.34.70.0/24 64.34.72.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:9b:88:bd:52:03:88:59:48:07:51:8f:01:65:bc:cc:8b:9e: 81:57:c1:dd:96:89:d0:bf:28:34:c8:19:6d:9c:98:14:28:93: 4d:28:3a:ed:75:2b:5a:4b:4c:d8:04:16:be:e2:9c:dd:ae:12: cc:2a:cc:d9:6f:cd:2d:e0:6a:98:e6:ff:ec:fa:ee:d2:64:63: 3c:e7:09:a1:f4:db:7a:55:77:eb:81:03:c2:c3:04:5f:b0:0e: b9:34:e5:09:b0:ae:e7:00:bd:f9:ac:6a:9e:b7:bd:fd:b5:ad: 92:1f:01:74:27:13:21:41:22:29:12:ec:cf:0c:59:c5:e6:59: af:40:67:2f:c5:35:01:61:47:54:f5:dc:7f:a3:21:cc:d6:0a: 94:cc:a8:a4:0d:8d:3e:1f:d9:24:23:ad:2c:74:a0:7d:84:45: 35:a2:ef:54:90:31:c5:6c:a3:c9:70:4a:bc:68:1d:3e:28:58: 53:67:29:a4:97:2e:54:4d:1d:cf:5f:74:dc:e1:a5:44:c2:26: 63:8f:eb:45:32:ca:30:e5:48:ad:8f:91:18:df:81:dc:56:81: 4d:4c:00:0f:d1:4b:e3:90:9c:b3:93:73:57:95:0c:eb:ae:13: 25:3d:92:d6:6b:c3:62:dc:45:7c:57:36:74:db:7e:e8:43:c7: 80:64:57:90 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWErp9m9UZVS+g7xeO8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTA4NzkxYWUtOGEzOC00YWU4LWE0YWYtZTNkZTY4YTVk YjEwMB4XDTI1MDgyMDAxMDAzM1oXDTI1MTExODAyMDAzM1owLzEtMCsGA1UEAxMk ODkzZjc0NWQtMzYxNi00ZmM2LTk2NjctZmE4YTQ5ZDFiYTgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsgNIN5VtIa2+2jj2P7dbv72qteUEmWNWK4Nx 5eshbUFzOpWb8fhsh4SxixRd7Bz7pggBLpPupP01iG8SThpMx7AO3bMahLEa1D8B 5dLtm8AKpCF8HnJzIVskHuAZW4WUpugwX+UiHuOiqdYlI50675TvQ5TgiUEPR4zI egqpMdJi07DYMR/wm4go9/ty54azGYxT9hdR9mgT88tn2hlQRgOCGBqDNHO7gKvq clyo7MlElRPWoI42nhDJmbP5o96wl1EUCGZ4i4L7l8iLcVbnrtVMngD/Gkldqs5h sak4SERthLFdNKboQgcrkMOaHI8AbHCHk5TyIHWOXvp0JNm2fQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFOxi3pE57FS9cOFBwLfuwMeronBmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85MDg3 OTFhZS04YTM4LTRhZTgtYTRhZi1lM2RlNjhhNWRiMTAvODc4OWI3NjEtYmM3MS0z YzExLWIxOGEtZWZlZTk2ZmIxYjJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTA4NzkxYWUtOGEzOC00YWU4LWE0 YWYtZTNkZTY4YTVkYjEwLzkwODc5MWFlLThhMzgtNGFlOC1hNGFmLWUzZGU2OGE1 ZGIxMC5jcmwwHwYDVR0jBBgwFoAUoALXGqDwH66plsLfMD3KFCsXjvYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85MDg3OTFhZS04YTM4LTRhZTgtYTRhZi1lM2Rl NjhhNWRiMTAuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAQCJGAwQA QCJIMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAGSbiL1SA4hZSAdRjwFlvMyLnoFXwd2WidC/KDTIGW2cmBQo k00oOu11K1pLTNgEFr7inN2uEswqzNlvzS3gapjm/+z67tJkYzznCaH023pVd+uB A8LDBF+wDrk05QmwrucAvfmsap63vf21rZIfAXQnEyFBIikS7M8MWcXmWa9AZy/F NQFhR1T13H+jIczWCpTMqKQNjT4f2SQjrSx0oH2ERTWi71SQMcVso8lwSrxoHT4o WFNnKaSXLlRNHc9fdNzhpUTCJmOP60UyyjDlSK2PkRjfgdxWgU1MAA/RS+OQnLOT c1eVDOuuEyU9ktZrw2LcRXxXNnTbfuhDx4BkV5A= -----END CERTIFICATE-----Generated at Wed Nov 5 17:51:47 2025 by rpki-client