$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/33e552c1-7aab-3972-924b-9a4b94e54a0b.roa File: 33e552c1-7aab-3972-924b-9a4b94e54a0b.roa (raw, json) Hash identifier: otcW0yD6to6ROUHgLX2A7bMbZ9CgjpNQ5w2lnF8mERE= Subject key identifier: BC:76:B3:9C:1E:C3:C7:9E:E7:B7:E0:0E:DB:2C:AD:F5:07:F7:9D:9A Certificate issuer: /CN=908791ae-8a38-4ae8-a4af-e3de68a5db10 Certificate serial: 010D0C9F4328584FB0BDECE9B5D8EF46EFAA1E40 Authority key identifier: A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/33e552c1-7aab-3972-924b-9a4b94e54a0b.roa Signing time: Sun 01 Nov 2026 01:00:13 +0000 ROA not before: Sun 01 Nov 2026 01:00:13 +0000 ROA not after: Sat 30 Jan 2027 02:00:13 +0000 asID: 13768 IP address blocks: 64.34.64.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Nov 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:b0:bd:ec:e9:b5:d8:ef:46:ef:aa:1e:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=908791ae-8a38-4ae8-a4af-e3de68a5db10 Validity Not Before: Nov 1 01:00:13 2026 GMT Not After : Jan 30 02:00:13 2027 GMT Subject: CN=174933d6-74ed-418f-a7b7-28e25b6f1481 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:76:e0:2b:31:a7:39:62:b9:c6:1b:8d:c2:c4: af:ea:5c:b3:ec:e1:42:7e:44:b0:28:4e:b9:89:04: ae:6d:b6:e9:be:81:a9:08:92:01:2c:3a:aa:2b:28: 0b:bf:0a:06:52:a8:6d:1d:a6:8f:a3:a1:c5:57:1f: ea:1e:f7:6b:dd:14:d9:4a:b8:2d:03:6a:2c:a5:5b: a6:b4:8b:bb:70:8d:02:0c:09:a1:af:8e:04:fc:fd: d5:58:2b:a8:cd:5b:2c:cb:36:f4:66:6e:57:7f:86: ae:db:e9:f7:70:33:c6:94:2a:57:99:bd:c5:88:4f: 29:8e:cd:5d:d6:62:56:8c:e3:7c:bf:6f:01:fe:d4: 7f:5d:7f:14:0b:e4:47:43:f3:3d:ee:ad:6c:ff:df: 1a:e9:25:3b:e2:60:05:fa:8b:be:ff:6b:42:59:03: a8:c6:00:98:60:77:11:78:94:95:7f:d5:43:c6:e3: cd:c9:94:db:4e:21:82:de:88:cc:3d:bc:77:ff:ee: 07:81:e7:7c:c2:e8:d6:d4:c7:a8:24:f5:2b:42:fc: 64:c1:d8:7b:cf:f6:df:58:7e:41:5f:97:d1:ce:6f: 73:30:2d:c1:5c:1a:5f:04:26:02:55:5b:a0:5d:87: 74:22:4b:ee:e5:c5:4f:97:cc:6b:49:25:4f:15:3e: 0a:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:76:B3:9C:1E:C3:C7:9E:E7:B7:E0:0E:DB:2C:AD:F5:07:F7:9D:9A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/33e552c1-7aab-3972-924b-9a4b94e54a0b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.crl X509v3 Authority Key Identifier: keyid:A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer sbgp-ipAddrBlock: critical IPv4: 64.34.64.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:a7:0d:5d:b3:c1:a0:6c:31:7d:ed:c8:cf:10:cb:f0:2e:b2: 60:83:f1:2b:02:00:00:da:e2:93:e3:15:4e:96:42:52:76:07: e8:22:a4:af:41:81:c8:a9:c3:83:24:02:79:fd:bd:00:f2:dc: af:73:bb:63:98:bc:f1:85:0f:10:14:7d:5e:ad:52:f8:9c:2a: 2c:71:d1:5e:70:4b:17:56:7f:45:50:a3:a6:12:79:2c:57:d9: 56:77:40:43:d3:4e:19:77:c4:f1:7a:7e:77:df:15:e7:4a:71: e7:f8:97:b2:4b:88:c8:21:fd:8b:ea:fe:46:9a:2f:8e:a1:67: 95:57:7a:42:69:1a:89:f2:b3:c4:10:a1:9a:d8:06:f2:b4:d1: d9:ec:9d:00:ae:95:51:b2:57:4f:60:d7:e4:ed:c3:b5:75:86: cc:1c:ab:03:07:3e:65:3b:b6:b8:b0:6a:01:83:63:af:88:20: 22:55:64:0e:6e:e2:0a:9b:35:1a:c3:f5:3d:3e:b1:4d:06:18: bf:48:a4:74:3e:7e:99:f2:3c:bb:a5:82:7c:53:20:90:b2:5e: 3e:ed:f5:a3:8f:29:35:a8:56:6d:5e:b7:21:9c:82:fe:62:4e: d9:81:67:10:33:aa:9a:c2:51:0a:19:16:3e:8f:32:37:8e:14: 58:ce:32:f8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+wvezptdjvRu+qHkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTA4NzkxYWUtOGEzOC00YWU4LWE0YWYtZTNkZTY4YTVk YjEwMB4XDTI2MTEwMTAxMDAxM1oXDTI3MDEzMDAyMDAxM1owLzEtMCsGA1UEAxMk MTc0OTMzZDYtNzRlZC00MThmLWE3YjctMjhlMjViNmYxNDgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6HbgKzGnOWK5xhuNwsSv6lyz7OFCfkSwKE65 iQSubbbpvoGpCJIBLDqqKygLvwoGUqhtHaaPo6HFVx/qHvdr3RTZSrgtA2ospVum tIu7cI0CDAmhr44E/P3VWCuozVssyzb0Zm5Xf4au2+n3cDPGlCpXmb3FiE8pjs1d 1mJWjON8v28B/tR/XX8UC+RHQ/M97q1s/98a6SU74mAF+ou+/2tCWQOoxgCYYHcR eJSVf9VDxuPNyZTbTiGC3ojMPbx3/+4Hged8wujW1MeoJPUrQvxkwdh7z/bfWH5B X5fRzm9zMC3BXBpfBCYCVVugXYd0Ikvu5cVPl8xrSSVPFT4KuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLx2s5wew8ee57fgDtssrfUH952aMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85MDg3 OTFhZS04YTM4LTRhZTgtYTRhZi1lM2RlNjhhNWRiMTAvMzNlNTUyYzEtN2FhYi0z OTcyLTkyNGItOWE0Yjk0ZTU0YTBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTA4NzkxYWUtOGEzOC00YWU4LWE0 YWYtZTNkZTY4YTVkYjEwLzkwODc5MWFlLThhMzgtNGFlOC1hNGFmLWUzZGU2OGE1 ZGIxMC5jcmwwHwYDVR0jBBgwFoAUoALXGqDwH66plsLfMD3KFCsXjvYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85MDg3OTFhZS04YTM4LTRhZTgtYTRhZi1lM2Rl NjhhNWRiMTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQCJAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFinDV2zwaBsMX3tyM8Qy/AusmCD8SsCAADa4pPjFU6WQlJ2B+gipK9B gcipw4MkAnn9vQDy3K9zu2OYvPGFDxAUfV6tUvicKixx0V5wSxdWf0VQo6YSeSxX 2VZ3QEPTThl3xPF6fnffFedKcef4l7JLiMgh/Yvq/kaaL46hZ5VXekJpGonys8QQ oZrYBvK00dnsnQCulVGyV09g1+Ttw7V1hswcqwMHPmU7triwagGDY6+IICJVZA5u 4gqbNRrD9T0+sU0GGL9IpHQ+fpnyPLulgnxTIJCyXj7t9aOPKTWoVm1etyGcgv5i TtmBZxAzqprCUQoZFj6PMjeOFFjOMvg= -----END CERTIFICATE-----Generated at Sun Nov 15 15:35:24 2026 by rpki-client