$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/64b38fb6-7e65-3d80-ba8e-62585efad38a.roa File: 64b38fb6-7e65-3d80-ba8e-62585efad38a.roa (raw, json) Hash identifier: VP46R15F39kJIHc6/kZ23JOc3VN7MWhtVXkm+Az+tcI= Subject key identifier: AB:9C:93:22:D6:32:83:B4:1B:8C:10:36:2C:A1:30:24:8F:48:23:E7 Certificate issuer: /CN=908791ae-8a38-4ae8-a4af-e3de68a5db10 Certificate serial: 010D0C9F4328584A093A9F0D67B6543C6559AA80 Authority key identifier: A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/64b38fb6-7e65-3d80-ba8e-62585efad38a.roa Signing time: Sat 31 May 2025 13:01:03 +0000 ROA not before: Sat 31 May 2025 13:01:03 +0000 ROA not after: Fri 29 Aug 2025 13:01:03 +0000 asID: 13768 IP address blocks: 64.34.20.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:09:3a:9f:0d:67:b6:54:3c:65:59:aa:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=908791ae-8a38-4ae8-a4af-e3de68a5db10 Validity Not Before: May 31 13:01:03 2025 GMT Not After : Aug 29 13:01:03 2025 GMT Subject: CN=46029fa7-c641-4a93-a70a-6a5dcfc2efb1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:04:62:01:9a:ab:6f:70:9e:e7:17:5d:05:c6: 41:c3:d0:ab:dd:c9:10:36:15:13:66:1a:af:d5:fb: 54:0d:e2:c1:00:dc:b1:d2:6b:6c:87:bb:04:03:5e: d9:77:19:31:fe:80:94:25:86:97:60:4e:2b:cf:14: 8d:c6:ef:9e:09:5e:12:e6:66:8d:41:d7:01:58:1f: 45:44:f8:e4:c2:ba:07:fc:38:33:7e:24:c1:b3:50: c9:f3:37:8f:96:60:ed:d8:0d:3c:62:7b:ed:54:c4: 95:4f:85:f8:cd:98:d0:ef:86:01:21:d4:11:a9:cb: bb:f8:be:a7:c1:ee:9f:6d:86:06:52:2c:2a:a3:ce: 11:de:f4:c9:ba:af:0b:5e:a2:53:b5:27:ac:a7:92: 3b:d5:7d:b4:4a:68:cc:d5:ef:fa:54:cf:0f:bf:f4: 0c:89:9b:08:d9:68:3c:9a:b4:18:f5:97:a4:9e:02: 6e:46:98:3c:f7:70:d3:d9:56:6c:cf:58:c3:a2:97: 84:36:84:6f:d5:fc:02:15:92:e2:a0:66:83:ce:ac: e0:d1:35:57:dd:5c:39:49:95:c9:94:46:71:0c:0f: d3:52:d0:e2:ed:77:4f:e6:fd:19:88:fc:b9:51:ea: 65:f8:b0:6e:6c:a5:15:ac:3f:17:d1:bc:3e:5a:00: e6:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:9C:93:22:D6:32:83:B4:1B:8C:10:36:2C:A1:30:24:8F:48:23:E7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/64b38fb6-7e65-3d80-ba8e-62585efad38a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.crl X509v3 Authority Key Identifier: keyid:A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer sbgp-ipAddrBlock: critical IPv4: 64.34.20.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:b8:c8:17:3c:52:27:b3:97:3a:db:8d:f6:d0:de:20:9d:2b: 7c:e6:ed:e5:0c:98:69:5b:be:b2:cb:6f:04:28:78:08:27:dd: a2:66:17:6e:e5:1f:d7:81:8f:ca:32:ed:c5:17:ff:2d:17:0b: 9f:71:3b:cb:1b:74:f0:8f:a3:5f:89:41:10:20:af:81:a4:7f: 2f:7a:42:d0:c2:58:a8:b0:86:35:f3:36:79:22:e8:bf:78:c9: e1:00:6a:c3:25:48:16:c3:0b:57:13:c5:1f:cf:ac:f2:29:a8: 1c:9f:11:3a:f2:f8:8a:86:84:5b:14:d2:f8:13:48:07:72:fc: bd:82:bf:79:2f:36:41:42:1a:29:45:3c:7e:8c:30:a1:3d:77: b4:81:cd:cd:6d:97:4c:08:d5:bf:4c:d8:4c:56:9d:61:3c:81: dc:80:d9:94:e7:22:97:75:71:34:4c:b1:ed:7b:1c:8a:12:0b: 51:b5:43:34:45:e6:c1:7f:f4:71:04:9b:53:eb:bf:3a:e7:64: 93:a8:39:52:e6:c7:f0:8e:11:bf:0f:49:05:b9:26:b1:40:98: fa:f8:b3:4f:e4:0f:68:87:85:06:3d:e3:18:f7:d7:55:5f:7b: db:82:ae:9c:3c:73:72:3d:07:e3:50:2b:51:52:c0:17:3f:64: f0:1c:9b:0c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoJOp8NZ7ZUPGVZqoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTA4NzkxYWUtOGEzOC00YWU4LWE0YWYtZTNkZTY4YTVk YjEwMB4XDTI1MDUzMTEzMDEwM1oXDTI1MDgyOTEzMDEwM1owLzEtMCsGA1UEAxMk NDYwMjlmYTctYzY0MS00YTkzLWE3MGEtNmE1ZGNmYzJlZmIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjARiAZqrb3Ce5xddBcZBw9Cr3ckQNhUTZhqv 1ftUDeLBANyx0mtsh7sEA17Zdxkx/oCUJYaXYE4rzxSNxu+eCV4S5maNQdcBWB9F RPjkwroH/DgzfiTBs1DJ8zePlmDt2A08YnvtVMSVT4X4zZjQ74YBIdQRqcu7+L6n we6fbYYGUiwqo84R3vTJuq8LXqJTtSesp5I71X20SmjM1e/6VM8Pv/QMiZsI2Wg8 mrQY9ZekngJuRpg893DT2VZsz1jDopeENoRv1fwCFZLioGaDzqzg0TVX3Vw5SZXJ lEZxDA/TUtDi7XdP5v0ZiPy5Uepl+LBubKUVrD8X0bw+WgDmRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKuckyLWMoO0G4wQNiyhMCSPSCPnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85MDg3 OTFhZS04YTM4LTRhZTgtYTRhZi1lM2RlNjhhNWRiMTAvNjRiMzhmYjYtN2U2NS0z ZDgwLWJhOGUtNjI1ODVlZmFkMzhhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTA4NzkxYWUtOGEzOC00YWU4LWE0 YWYtZTNkZTY4YTVkYjEwLzkwODc5MWFlLThhMzgtNGFlOC1hNGFmLWUzZGU2OGE1 ZGIxMC5jcmwwHwYDVR0jBBgwFoAUoALXGqDwH66plsLfMD3KFCsXjvYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85MDg3OTFhZS04YTM4LTRhZTgtYTRhZi1lM2Rl NjhhNWRiMTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQCIUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIu4yBc8UiezlzrbjfbQ3iCdK3zm7eUMmGlbvrLLbwQoeAgn3aJmF27l H9eBj8oy7cUX/y0XC59xO8sbdPCPo1+JQRAgr4Gkfy96QtDCWKiwhjXzNnki6L94 yeEAasMlSBbDC1cTxR/PrPIpqByfETry+IqGhFsU0vgTSAdy/L2Cv3kvNkFCGilF PH6MMKE9d7SBzc1tl0wI1b9M2ExWnWE8gdyA2ZTnIpd1cTRMse17HIoSC1G1QzRF 5sF/9HEEm1PrvzrnZJOoOVLmx/COEb8PSQW5JrFAmPr4s0/kD2iHhQY94xj311Vf e9uCrpw8c3I9B+NQK1FSwBc/ZPAcmww= -----END CERTIFICATE-----Generated at Mon Jun 30 19:48:29 2025 by rpki-client