$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/8789b761-bc71-3c11-b18a-efee96fb1b2f.roa File: 8789b761-bc71-3c11-b18a-efee96fb1b2f.roa (raw, json) Hash identifier: DJHtH8Sg6TLym+rw/LimCOkR3Zuwexlh75g+KnXJbLk= Subject key identifier: 0E:6B:EA:C5:49:FC:86:76:E8:25:E8:F0:6A:32:93:B3:54:35:4F:9A Certificate issuer: /CN=908791ae-8a38-4ae8-a4af-e3de68a5db10 Certificate serial: 010D0C9F4328584FB0BDECDDC61DEE6CA86CF1E0 Authority key identifier: A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/8789b761-bc71-3c11-b18a-efee96fb1b2f.roa Signing time: Sun 01 Nov 2026 01:00:13 +0000 ROA not before: Sun 01 Nov 2026 01:00:13 +0000 ROA not after: Sat 30 Jan 2027 02:00:13 +0000 asID: 54643 IP address blocks: 64.34.70.0/24 maxlen: 24 64.34.72.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Nov 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:b0:bd:ec:dd:c6:1d:ee:6c:a8:6c:f1:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=908791ae-8a38-4ae8-a4af-e3de68a5db10 Validity Not Before: Nov 1 01:00:13 2026 GMT Not After : Jan 30 02:00:13 2027 GMT Subject: CN=b85ecb91-839e-4ced-b369-56b65267fe10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:97:fc:54:e0:87:c2:84:f5:c8:63:d2:29:bb: 96:3d:bd:6f:52:96:ef:35:06:da:1b:10:34:bf:d2: b4:8d:db:05:ee:e0:8c:ba:89:05:d5:d8:03:05:c4: b0:95:27:6e:78:59:dd:48:e9:78:2c:bf:5c:28:26: ab:9e:bc:2c:59:5d:77:0d:df:e1:17:79:8e:41:4f: 85:2e:79:d0:9a:e4:25:a9:ae:2f:44:67:2e:d8:0b: 81:1c:3a:b4:a8:78:2c:e7:06:a7:96:c9:51:02:48: 6b:c6:c6:d0:fe:fd:35:cc:65:a0:4d:ee:a8:38:9b: 13:88:22:5c:23:2e:d5:59:75:d8:9e:18:c8:60:28: c6:e9:de:a0:a2:da:02:21:3d:d8:0d:55:d8:19:be: af:72:45:64:d0:a5:57:a9:5d:a7:1e:94:93:69:fd: 14:e3:8f:39:f4:00:97:7c:54:8f:70:9f:ed:a0:68: 36:6c:42:6f:08:28:a2:61:9c:2f:25:8c:32:f7:df: b0:a7:8e:29:28:b1:1e:96:f0:41:40:4b:2b:49:1c: 19:cf:5d:96:2b:7a:ac:56:33:29:48:87:2f:99:e2: 81:a2:5f:d4:38:dd:66:51:89:cb:1e:06:53:c8:ea: aa:f1:91:5c:42:9f:b8:dc:d2:ba:a8:20:9f:04:1a: f2:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:6B:EA:C5:49:FC:86:76:E8:25:E8:F0:6A:32:93:B3:54:35:4F:9A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/8789b761-bc71-3c11-b18a-efee96fb1b2f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.crl X509v3 Authority Key Identifier: keyid:A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer sbgp-ipAddrBlock: critical IPv4: 64.34.70.0/24 64.34.72.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:c2:ba:1d:bb:bb:6e:64:48:e3:c8:af:6e:cc:6b:84:e2:fb: 62:4c:7f:5e:bc:b7:43:63:0e:14:1f:26:d9:81:df:b1:61:6b: ea:51:43:4c:5c:63:ee:86:88:fe:b3:18:75:ec:fb:2f:be:6a: 50:7e:b3:63:0e:39:cf:14:50:06:2a:09:3b:71:c2:74:73:81: 89:70:c6:82:63:a6:fd:b5:ce:d9:e7:a1:76:e3:50:72:6b:6c: 35:d6:7c:76:ea:64:62:bc:46:c6:e0:ea:2d:32:1f:ee:28:35: 23:ab:96:2e:65:f5:ea:c4:cf:60:ee:45:73:f5:fb:6f:70:c0: ef:b4:1f:27:53:96:cb:fa:8d:24:d8:af:37:fb:53:9c:aa:56: 82:81:f4:98:ab:92:69:85:29:f5:2e:7e:75:af:ae:ac:73:06: e2:a1:a7:6b:36:14:7c:54:b0:df:3b:c7:d6:12:47:03:42:72: 89:db:04:1a:59:8b:7c:97:6c:6b:a7:7c:40:37:44:3b:2d:30: 5d:f5:f9:24:2e:44:f4:74:d9:3a:81:cc:86:db:f6:44:ff:1e: c2:1b:07:4a:21:b3:f5:5d:a9:71:35:be:11:d2:ae:71:e4:54: f7:16:08:e1:99:24:0d:e9:e9:63:7b:ee:bc:f8:ec:b7:9b:99: ee:ad:b2:86 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE+wvezdxh3ubKhs8eAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTA4NzkxYWUtOGEzOC00YWU4LWE0YWYtZTNkZTY4YTVk YjEwMB4XDTI2MTEwMTAxMDAxM1oXDTI3MDEzMDAyMDAxM1owLzEtMCsGA1UEAxMk Yjg1ZWNiOTEtODM5ZS00Y2VkLWIzNjktNTZiNjUyNjdmZTEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi5f8VOCHwoT1yGPSKbuWPb1vUpbvNQbaGxA0 v9K0jdsF7uCMuokF1dgDBcSwlSdueFndSOl4LL9cKCarnrwsWV13Dd/hF3mOQU+F LnnQmuQlqa4vRGcu2AuBHDq0qHgs5wanlslRAkhrxsbQ/v01zGWgTe6oOJsTiCJc Iy7VWXXYnhjIYCjG6d6gotoCIT3YDVXYGb6vckVk0KVXqV2nHpSTaf0U44859ACX fFSPcJ/toGg2bEJvCCiiYZwvJYwy99+wp44pKLEelvBBQEsrSRwZz12WK3qsVjMp SIcvmeKBol/UON1mUYnLHgZTyOqq8ZFcQp+43NK6qCCfBBry2QIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFA5r6sVJ/IZ26CXo8Goyk7NUNU+aMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85MDg3 OTFhZS04YTM4LTRhZTgtYTRhZi1lM2RlNjhhNWRiMTAvODc4OWI3NjEtYmM3MS0z YzExLWIxOGEtZWZlZTk2ZmIxYjJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTA4NzkxYWUtOGEzOC00YWU4LWE0 YWYtZTNkZTY4YTVkYjEwLzkwODc5MWFlLThhMzgtNGFlOC1hNGFmLWUzZGU2OGE1 ZGIxMC5jcmwwHwYDVR0jBBgwFoAUoALXGqDwH66plsLfMD3KFCsXjvYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85MDg3OTFhZS04YTM4LTRhZTgtYTRhZi1lM2Rl NjhhNWRiMTAuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAQCJGAwQA QCJIMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAALCuh27u25kSOPIr27Ma4Ti+2JMf168t0NjDhQfJtmB37Fh a+pRQ0xcY+6GiP6zGHXs+y++alB+s2MOOc8UUAYqCTtxwnRzgYlwxoJjpv21ztnn oXbjUHJrbDXWfHbqZGK8Rsbg6i0yH+4oNSOrli5l9erEz2DuRXP1+29wwO+0HydT lsv6jSTYrzf7U5yqVoKB9JirkmmFKfUufnWvrqxzBuKhp2s2FHxUsN87x9YSRwNC conbBBpZi3yXbGunfEA3RDstMF31+SQuRPR02TqBzIbb9kT/HsIbB0ohs/VdqXE1 vhHSrnHkVPcWCOGZJA3p6WN77rz47Lebme6tsoY= -----END CERTIFICATE-----Generated at Sun Nov 15 10:08:35 2026 by rpki-client