$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/33e552c1-7aab-3972-924b-9a4b94e54a0b.roa File: 33e552c1-7aab-3972-924b-9a4b94e54a0b.roa (raw, json) Hash identifier: BRLeNsY2POw4SRW3xyzwDd45SEMFWghHryktVufUXTI= Subject key identifier: 0A:3F:9D:0C:7C:55:10:11:34:F5:1B:7D:C6:78:32:F7:34:9B:3F:67 Certificate issuer: /CN=908791ae-8a38-4ae8-a4af-e3de68a5db10 Certificate serial: 010D0C9F4328584AE9F66F6989E6A898A2A0F640 Authority key identifier: A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/33e552c1-7aab-3972-924b-9a4b94e54a0b.roa Signing time: Wed 20 Aug 2025 01:00:33 +0000 ROA not before: Wed 20 Aug 2025 01:00:33 +0000 ROA not after: Tue 18 Nov 2025 02:00:33 +0000 asID: 13768 IP address blocks: 64.34.64.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e9:f6:6f:69:89:e6:a8:98:a2:a0:f6:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=908791ae-8a38-4ae8-a4af-e3de68a5db10 Validity Not Before: Aug 20 01:00:33 2025 GMT Not After : Nov 18 02:00:33 2025 GMT Subject: CN=5bad3d4e-708b-45fc-b8c2-d4feb3b0f0a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:6e:40:c8:18:a1:60:3d:ce:bd:20:cf:62:8c: 07:e7:ca:53:52:88:3e:f8:ee:be:ca:38:8e:d8:01: f1:88:63:b1:a3:c7:7e:aa:d9:c7:a8:49:f7:b6:73: c6:56:d7:60:7e:ad:ec:f5:17:7f:53:cd:80:e7:7b: 87:85:8c:50:4c:81:95:4c:fc:f1:96:e2:98:f4:b0: 61:2a:91:c8:25:cc:20:c3:7e:1c:88:b8:4b:ac:fc: 9d:cb:f8:3b:43:7d:72:7d:7f:15:91:94:2d:ae:ef: 62:38:15:16:d0:7b:bf:c8:83:25:49:9e:3f:b8:1d: 4d:82:10:bf:22:6b:f5:f0:1b:db:55:8e:ac:a2:cb: a5:84:a6:5e:37:76:04:44:fe:ad:68:d9:75:be:1d: 03:40:60:52:33:ee:0a:fd:68:a5:d0:f9:2f:cc:af: b5:89:c9:88:32:f4:0d:6b:ab:8c:77:81:d5:1a:48: 24:d2:f2:c9:c3:84:3f:95:7a:03:b8:37:17:c7:9b: bb:fa:3c:5c:f8:98:9c:38:28:53:59:91:a9:93:2c: 62:83:2c:6b:bf:0f:57:06:0e:3f:b7:0a:d5:48:5c: 27:e8:83:30:07:50:e9:e8:b0:ae:f4:59:a6:ba:0e: 4e:ec:22:d8:d2:8c:32:9a:83:0f:8f:d8:7e:2e:bd: 29:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:3F:9D:0C:7C:55:10:11:34:F5:1B:7D:C6:78:32:F7:34:9B:3F:67 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/33e552c1-7aab-3972-924b-9a4b94e54a0b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.crl X509v3 Authority Key Identifier: keyid:A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer sbgp-ipAddrBlock: critical IPv4: 64.34.64.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:a7:57:5c:af:d5:39:6c:23:d9:f2:d4:c6:a2:bf:83:98:f2: 73:82:ff:98:d7:f2:45:42:19:ef:30:b7:85:70:b2:ed:e0:db: 03:a3:53:11:f1:52:4a:fd:62:76:66:a3:fd:b0:a8:be:c3:a4: 2f:5c:a2:5c:27:a8:4f:84:78:20:d2:6d:12:aa:43:21:21:90: 8c:c6:89:77:30:82:0e:40:55:5a:01:66:b5:9e:30:d0:86:e9: 82:6c:43:58:e0:5c:75:17:36:59:3f:5f:47:ad:0d:65:98:5c: 70:9b:48:6e:26:b5:76:a9:9f:b9:c7:e6:ad:65:66:dd:87:6f: 50:23:28:35:29:9f:77:67:57:12:39:3d:46:c2:78:94:c0:fe: e1:a1:8f:89:8c:df:19:b3:6e:78:28:58:53:3c:bc:22:87:13: 31:17:7b:e5:aa:42:90:73:fa:37:9c:19:1b:66:f5:ff:b9:5e: 37:d6:79:0f:e1:a2:91:bd:95:da:88:7d:79:07:56:98:08:38: b8:26:ba:18:04:e2:22:c4:c3:83:f7:68:b2:71:76:3e:c1:f0: 58:46:fe:38:6b:ed:29:c9:1f:62:1e:ff:5a:7f:6a:e4:bd:72: 29:28:cd:65:9e:f1:f6:8f:ba:7a:54:56:0e:0d:75:fa:cb:51: 6b:f7:67:23 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErp9m9pieaomKKg9kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTA4NzkxYWUtOGEzOC00YWU4LWE0YWYtZTNkZTY4YTVk YjEwMB4XDTI1MDgyMDAxMDAzM1oXDTI1MTExODAyMDAzM1owLzEtMCsGA1UEAxMk NWJhZDNkNGUtNzA4Yi00NWZjLWI4YzItZDRmZWIzYjBmMGE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo25AyBihYD3OvSDPYowH58pTUog++O6+yjiO 2AHxiGOxo8d+qtnHqEn3tnPGVtdgfq3s9Rd/U82A53uHhYxQTIGVTPzxluKY9LBh KpHIJcwgw34ciLhLrPydy/g7Q31yfX8VkZQtru9iOBUW0Hu/yIMlSZ4/uB1NghC/ Imv18BvbVY6sosulhKZeN3YERP6taNl1vh0DQGBSM+4K/Wil0PkvzK+1icmIMvQN a6uMd4HVGkgk0vLJw4Q/lXoDuDcXx5u7+jxc+JicOChTWZGpkyxigyxrvw9XBg4/ twrVSFwn6IMwB1Dp6LCu9Fmmug5O7CLY0owymoMPj9h+Lr0pGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAo/nQx8VRARNPUbfcZ4Mvc0mz9nMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85MDg3 OTFhZS04YTM4LTRhZTgtYTRhZi1lM2RlNjhhNWRiMTAvMzNlNTUyYzEtN2FhYi0z OTcyLTkyNGItOWE0Yjk0ZTU0YTBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTA4NzkxYWUtOGEzOC00YWU4LWE0 YWYtZTNkZTY4YTVkYjEwLzkwODc5MWFlLThhMzgtNGFlOC1hNGFmLWUzZGU2OGE1 ZGIxMC5jcmwwHwYDVR0jBBgwFoAUoALXGqDwH66plsLfMD3KFCsXjvYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85MDg3OTFhZS04YTM4LTRhZTgtYTRhZi1lM2Rl NjhhNWRiMTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQCJAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFKnV1yv1TlsI9ny1Maiv4OY8nOC/5jX8kVCGe8wt4Vwsu3g2wOjUxHx Ukr9YnZmo/2wqL7DpC9colwnqE+EeCDSbRKqQyEhkIzGiXcwgg5AVVoBZrWeMNCG 6YJsQ1jgXHUXNlk/X0etDWWYXHCbSG4mtXapn7nH5q1lZt2Hb1AjKDUpn3dnVxI5 PUbCeJTA/uGhj4mM3xmzbngoWFM8vCKHEzEXe+WqQpBz+jecGRtm9f+5XjfWeQ/h opG9ldqIfXkHVpgIOLgmuhgE4iLEw4P3aLJxdj7B8FhG/jhr7SnJH2Ie/1p/auS9 cikozWWe8faPunpUVg4NdfrLUWv3ZyM= -----END CERTIFICATE-----Generated at Sat Aug 23 23:09:48 2025 by rpki-client