$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/0a937c6f-24b6-3c6a-9f0f-3a16a439b5a5.roa File: 0a937c6f-24b6-3c6a-9f0f-3a16a439b5a5.roa (raw, json) Hash identifier: FxkUUPsZbvRtDk7P0uVMAH+hkSJnGK5rfR3j9PgXLB8= Subject key identifier: 9A:2B:8D:69:2F:17:3C:BA:C5:CE:46:2B:B5:A5:AC:1A:90:4A:9E:31 Certificate issuer: /CN=908791ae-8a38-4ae8-a4af-e3de68a5db10 Certificate serial: 010D0C9F4328584AECC139DA25F858669FC44480 Authority key identifier: A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/0a937c6f-24b6-3c6a-9f0f-3a16a439b5a5.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 13768 IP address blocks: 64.34.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c1:39:da:25:f8:58:66:9f:c4:44:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=908791ae-8a38-4ae8-a4af-e3de68a5db10 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=c91ff92f-830b-4726-ab6a-ba374e304d2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:be:3a:7d:39:f7:a1:b3:27:e7:d0:a2:e3:32: 98:8a:00:32:d8:90:b4:15:ed:fd:5f:84:c1:30:2f: 56:74:a5:68:89:56:dd:fe:58:a2:8a:83:1a:f7:cc: 43:f7:c4:7a:b2:48:44:3f:68:50:1b:09:0c:86:fc: 90:c6:c5:d1:1f:6e:ff:42:61:b4:3f:11:6b:5c:59: 5f:0b:c3:b3:f1:9c:b8:d8:3b:58:9e:bc:69:ba:5c: a4:2e:eb:3d:15:28:29:8f:1d:3c:c2:62:51:47:7d: d9:65:64:f0:21:9e:26:58:42:74:6f:93:1a:ac:00: 2f:85:a5:34:aa:4c:6f:6f:bb:1c:99:f4:f3:5d:ce: c9:16:4f:11:fe:84:81:b8:fd:bb:ae:19:28:a0:aa: 77:13:26:f8:aa:10:eb:de:29:c4:8c:65:17:2a:09: 9d:6f:e2:16:1b:8a:85:9b:61:1d:26:c3:7d:92:70: ba:ed:34:cb:bc:b7:cc:57:4a:27:6c:7b:91:a3:77: 9b:22:9d:b5:48:55:a5:e1:72:c1:df:16:09:08:00: 0f:68:7e:92:ec:1d:3c:48:06:04:a3:25:ee:2a:98: 30:53:ad:75:84:b8:75:a4:93:c7:60:81:9e:e7:d2: 77:c2:18:8c:97:dc:6e:9c:c3:54:66:6c:fc:56:01: 18:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:2B:8D:69:2F:17:3C:BA:C5:CE:46:2B:B5:A5:AC:1A:90:4A:9E:31 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/0a937c6f-24b6-3c6a-9f0f-3a16a439b5a5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.crl X509v3 Authority Key Identifier: keyid:A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer sbgp-ipAddrBlock: critical IPv4: 64.34.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:8e:fe:d3:d6:57:28:9f:9d:38:a3:23:b0:d9:80:c5:80:8a: a3:63:5a:dc:9e:c4:6c:c7:23:7d:22:c6:f6:73:f8:dc:26:ad: 6b:a4:cc:36:98:0e:e8:39:ff:64:f3:55:be:ea:4d:28:3c:23: 85:b8:77:63:fd:fd:3c:bd:27:2a:02:d9:ac:db:cb:35:98:70: fb:d6:4c:6b:99:c2:8e:4b:c1:1f:89:dc:fe:05:0a:d4:b2:f6: 87:ba:23:67:e1:66:75:a6:59:14:3a:fb:80:17:c4:2d:d3:3b: 41:9b:ea:8a:e1:c8:6f:f4:ab:b5:fd:63:3a:d5:e7:c2:f4:d6: 62:44:31:26:16:b9:a9:22:80:c9:78:59:77:0b:96:dd:35:50: d4:0b:6d:8b:db:3b:df:b0:ce:cc:35:74:28:26:db:6e:2f:40: a1:1c:d1:eb:14:8d:91:f0:2b:1f:98:12:4d:fb:22:cc:fb:62: 3d:7b:97:d2:4a:17:5f:ae:60:7b:4b:44:79:16:ae:6c:80:56: fd:d9:62:99:44:0a:d4:43:f0:5e:59:a5:8c:6b:04:8e:e6:fe: 2f:5c:af:5f:66:0d:b0:71:4b:93:6e:5b:40:71:5b:f7:81:f2: ba:76:df:66:02:13:c5:41:47:a3:18:b4:ac:c4:a3:bd:f0:29: 20:ac:e2:10 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErswTnaJfhYZp/ERIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTA4NzkxYWUtOGEzOC00YWU4LWE0YWYtZTNkZTY4YTVk YjEwMB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk YzkxZmY5MmYtODMwYi00NzI2LWFiNmEtYmEzNzRlMzA0ZDJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqr46fTn3obMn59Ci4zKYigAy2JC0Fe39X4TB MC9WdKVoiVbd/liiioMa98xD98R6skhEP2hQGwkMhvyQxsXRH27/QmG0PxFrXFlf C8Oz8Zy42DtYnrxpulykLus9FSgpjx08wmJRR33ZZWTwIZ4mWEJ0b5MarAAvhaU0 qkxvb7scmfTzXc7JFk8R/oSBuP27rhkooKp3Eyb4qhDr3inEjGUXKgmdb+IWG4qF m2EdJsN9knC67TTLvLfMV0onbHuRo3ebIp21SFWl4XLB3xYJCAAPaH6S7B08SAYE oyXuKpgwU611hLh1pJPHYIGe59J3whiMl9xunMNUZmz8VgEYdwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJorjWkvFzy6xc5GK7WlrBqQSp4xMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85MDg3 OTFhZS04YTM4LTRhZTgtYTRhZi1lM2RlNjhhNWRiMTAvMGE5MzdjNmYtMjRiNi0z YzZhLTlmMGYtM2ExNmE0MzliNWE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTA4NzkxYWUtOGEzOC00YWU4LWE0 YWYtZTNkZTY4YTVkYjEwLzkwODc5MWFlLThhMzgtNGFlOC1hNGFmLWUzZGU2OGE1 ZGIxMC5jcmwwHwYDVR0jBBgwFoAUoALXGqDwH66plsLfMD3KFCsXjvYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85MDg3OTFhZS04YTM4LTRhZTgtYTRhZi1lM2Rl NjhhNWRiMTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQCKAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH+O/tPWVyifnTijI7DZgMWAiqNjWtyexGzHI30ixvZz+NwmrWukzDaY Dug5/2TzVb7qTSg8I4W4d2P9/Ty9JyoC2azbyzWYcPvWTGuZwo5LwR+J3P4FCtSy 9oe6I2fhZnWmWRQ6+4AXxC3TO0Gb6orhyG/0q7X9YzrV58L01mJEMSYWuakigMl4 WXcLlt01UNQLbYvbO9+wzsw1dCgm224vQKEc0esUjZHwKx+YEk37Isz7Yj17l9JK F1+uYHtLRHkWrmyAVv3ZYplECtRD8F5ZpYxrBI7m/i9cr19mDbBxS5NuW0BxW/eB 8rp232YCE8VBR6MYtKzEo73wKSCs4hA= -----END CERTIFICATE-----Generated at Sat Aug 23 20:57:05 2025 by rpki-client