$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/7764a768-c407-399d-b6f1-33df2f0ec718.roa File: 7764a768-c407-399d-b6f1-33df2f0ec718.roa (raw, json) Hash identifier: a2ketRQLCWcXcWDbHpGabYzYCH3LA453RwJKgS6HvN0= Subject key identifier: B7:75:C1:5E:28:E3:14:64:35:AA:D2:2C:12:08:42:40:ED:A8:8F:C0 Certificate issuer: /CN=908791ae-8a38-4ae8-a4af-e3de68a5db10 Certificate serial: 010D0C9F4328584FB0BDECA8A604446788AB0F80 Authority key identifier: A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/7764a768-c407-399d-b6f1-33df2f0ec718.roa Signing time: Sun 01 Nov 2026 01:00:13 +0000 ROA not before: Sun 01 Nov 2026 01:00:13 +0000 ROA not after: Sat 30 Jan 2027 02:00:13 +0000 asID: 13768 IP address blocks: 64.34.32.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Nov 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:b0:bd:ec:a8:a6:04:44:67:88:ab:0f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=908791ae-8a38-4ae8-a4af-e3de68a5db10 Validity Not Before: Nov 1 01:00:13 2026 GMT Not After : Jan 30 02:00:13 2027 GMT Subject: CN=ef87bc8f-3bfc-4743-9e8a-95fae7ca859d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:eb:6b:c6:59:5f:28:f9:2f:e4:04:82:dd:4a: fd:36:6e:a0:97:9d:aa:3d:84:a9:59:2e:17:6c:3d: 5f:06:92:22:9f:59:5e:98:f2:25:06:9b:52:70:16: cd:b3:19:76:ac:47:9a:fa:08:3a:7b:e3:c2:ea:26: e1:b2:32:b3:de:dc:0e:da:d5:cd:2d:02:a8:fa:a3: f3:7f:ea:85:38:13:fc:42:e8:3b:02:dd:49:84:5e: 10:e2:e7:f8:1d:95:c5:61:9b:aa:41:5e:5a:3d:3f: 94:66:78:b9:05:2e:f9:c6:e5:c7:fa:d1:d7:4e:4f: 75:e3:29:28:64:ab:ae:aa:2f:9f:55:24:1e:72:6e: b0:aa:e5:43:d3:48:1f:6e:0a:e2:49:b7:cb:b8:fa: a1:a4:b3:29:de:6d:57:c5:bb:36:00:1c:ce:37:bc: 93:ca:41:64:5a:78:72:b2:40:4c:58:7c:5f:0d:01: 9c:3f:7f:27:16:45:89:2e:85:b6:85:ad:73:ca:c2: fc:20:1e:74:ab:c7:a5:e1:82:99:6f:7c:ae:fa:6c: e1:66:90:58:da:32:76:a2:5e:e9:68:a5:21:7b:ad: 74:93:c7:35:d2:de:cb:83:4f:e9:92:96:79:e5:9c: a0:50:b2:48:04:22:5d:12:39:35:48:f8:60:3f:01: e1:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:75:C1:5E:28:E3:14:64:35:AA:D2:2C:12:08:42:40:ED:A8:8F:C0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/7764a768-c407-399d-b6f1-33df2f0ec718.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.crl X509v3 Authority Key Identifier: keyid:A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer sbgp-ipAddrBlock: critical IPv4: 64.34.32.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 98:f2:c4:0a:4c:8c:6a:b3:d6:4c:59:4f:e6:41:0e:f0:31:2f: 11:0e:b8:99:c1:66:f7:d6:fc:cd:db:4f:49:db:0d:44:a4:bf: 71:33:e5:e1:bd:5a:21:54:48:1a:4a:d1:d2:98:28:ab:c4:dd: e0:6a:36:8b:79:ac:02:91:10:d0:28:86:14:6c:46:91:60:e0: 56:a3:4b:ab:f1:f8:06:48:c6:c0:07:01:a7:21:26:6b:5c:7a: 1f:81:68:42:66:c4:27:14:b2:6c:fd:e4:77:1e:ed:fd:f4:83: dc:6e:6c:1b:e2:ad:e1:19:7d:cc:d5:89:be:d2:a2:1b:f4:de: b7:78:65:3c:f9:4b:c9:a4:16:98:77:7a:fe:55:f1:b2:3d:a5: 71:ef:f8:ae:91:c3:3e:2e:b8:7a:36:ad:f4:8a:8e:2d:b5:89: d4:73:2c:ee:35:98:e9:b9:d0:cc:47:81:2f:db:48:a7:41:17: db:0b:0a:2e:b9:30:ef:b2:f8:d6:e1:71:49:8a:8c:82:87:c3: 88:4f:f9:6b:af:43:4d:fd:30:e9:c9:ee:24:23:57:a4:10:70: d5:4e:29:47:d1:6b:5d:c7:51:68:f6:2b:5c:45:aa:41:a0:d8: 5e:05:c5:a5:1d:3f:92:c6:c0:60:2d:8f:e3:aa:0b:f3:3c:4c: 18:11:17:a7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+wveyopgREZ4irD4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTA4NzkxYWUtOGEzOC00YWU4LWE0YWYtZTNkZTY4YTVk YjEwMB4XDTI2MTEwMTAxMDAxM1oXDTI3MDEzMDAyMDAxM1owLzEtMCsGA1UEAxMk ZWY4N2JjOGYtM2JmYy00NzQzLTllOGEtOTVmYWU3Y2E4NTlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2etrxllfKPkv5ASC3Ur9Nm6gl52qPYSpWS4X bD1fBpIin1lemPIlBptScBbNsxl2rEea+gg6e+PC6ibhsjKz3twO2tXNLQKo+qPz f+qFOBP8Qug7At1JhF4Q4uf4HZXFYZuqQV5aPT+UZni5BS75xuXH+tHXTk914yko ZKuuqi+fVSQecm6wquVD00gfbgriSbfLuPqhpLMp3m1Xxbs2ABzON7yTykFkWnhy skBMWHxfDQGcP38nFkWJLoW2ha1zysL8IB50q8el4YKZb3yu+mzhZpBY2jJ2ol7p aKUhe610k8c10t7Lg0/pkpZ55ZygULJIBCJdEjk1SPhgPwHhJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLd1wV4o4xRkNarSLBIIQkDtqI/AMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85MDg3 OTFhZS04YTM4LTRhZTgtYTRhZi1lM2RlNjhhNWRiMTAvNzc2NGE3NjgtYzQwNy0z OTlkLWI2ZjEtMzNkZjJmMGVjNzE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTA4NzkxYWUtOGEzOC00YWU4LWE0 YWYtZTNkZTY4YTVkYjEwLzkwODc5MWFlLThhMzgtNGFlOC1hNGFmLWUzZGU2OGE1 ZGIxMC5jcmwwHwYDVR0jBBgwFoAUoALXGqDwH66plsLfMD3KFCsXjvYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85MDg3OTFhZS04YTM4LTRhZTgtYTRhZi1lM2Rl NjhhNWRiMTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDQCIgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJjyxApMjGqz1kxZT+ZBDvAxLxEOuJnBZvfW/M3bT0nbDUSkv3Ez5eG9 WiFUSBpK0dKYKKvE3eBqNot5rAKRENAohhRsRpFg4FajS6vx+AZIxsAHAachJmtc eh+BaEJmxCcUsmz95Hce7f30g9xubBvireEZfczVib7Sohv03rd4ZTz5S8mkFph3 ev5V8bI9pXHv+K6Rwz4uuHo2rfSKji21idRzLO41mOm50MxHgS/bSKdBF9sLCi65 MO+y+NbhcUmKjIKHw4hP+WuvQ039MOnJ7iQjV6QQcNVOKUfRa13HUWj2K1xFqkGg 2F4FxaUdP5LGwGAtj+OqC/M8TBgRF6c= -----END CERTIFICATE-----Generated at Sun Nov 15 17:13:04 2026 by rpki-client