$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/9a03f21f-06de-30b1-9cf0-74ebd53f1fc2.roa File: 9a03f21f-06de-30b1-9cf0-74ebd53f1fc2.roa (raw, json) Hash identifier: MZAxiwEYFXLDMG8bVYOJXDu9Q7Q4+Waq91fsbhyje+M= Subject key identifier: 00:7E:EF:61:70:3E:B7:2E:42:73:D7:5F:FB:50:A4:AB:52:63:F2:25 Certificate issuer: /CN=908791ae-8a38-4ae8-a4af-e3de68a5db10 Certificate serial: 010D0C9F4328584FB3A69127A36639FBFB9E2600 Authority key identifier: A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/9a03f21f-06de-30b1-9cf0-74ebd53f1fc2.roa Signing time: Mon 02 Nov 2026 02:00:13 +0000 ROA not before: Mon 02 Nov 2026 02:00:13 +0000 ROA not after: Sun 31 Jan 2027 02:00:13 +0000 asID: 13768 IP address blocks: 64.34.152.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Nov 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:b3:a6:91:27:a3:66:39:fb:fb:9e:26:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=908791ae-8a38-4ae8-a4af-e3de68a5db10 Validity Not Before: Nov 2 02:00:13 2026 GMT Not After : Jan 31 02:00:13 2027 GMT Subject: CN=a67f0efa-7652-4ce8-b371-68acca3698e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:a4:ce:c8:73:be:36:c3:b5:a8:54:98:d2:e6: 11:34:8f:7d:cc:51:9a:9c:3b:4d:11:fb:a2:c2:3f: 14:88:16:ca:87:5f:ce:ff:26:2c:a4:b3:e5:89:7d: e6:04:bc:6a:7d:14:9a:1b:be:5f:62:56:21:b2:89: 95:96:1d:65:94:2f:ff:34:0d:05:35:5d:eb:69:87: 4a:7a:df:31:bc:f1:45:40:b8:f0:52:91:2c:a4:c1: cc:bb:35:ea:c1:65:77:fe:ea:1b:16:ab:04:6d:c7: ac:ee:f8:7f:ed:4e:e4:24:c1:40:95:21:ca:c9:31: 95:fa:e0:ff:bf:03:1a:7b:96:43:66:ba:e3:c8:4a: 06:8c:bb:04:df:3a:cd:17:05:56:fe:91:4b:da:06: a9:17:62:4f:8b:a5:85:20:0b:e7:50:52:ed:fc:fc: c1:ab:b9:f4:6b:82:9d:48:5d:ff:ac:91:36:55:0c: 23:a2:e3:6d:29:9b:cb:5b:bb:3a:cd:b5:95:60:34: 4b:7c:be:f5:6e:a5:87:23:36:76:11:9d:c6:06:7c: 77:68:8e:4f:28:da:ad:cc:43:1a:cf:28:4a:59:f6: c8:c0:6a:20:ff:5a:14:8b:93:0e:df:db:a4:b3:af: c7:1d:d1:5d:69:c7:ef:00:e6:c5:28:50:a3:aa:4b: 0e:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:7E:EF:61:70:3E:B7:2E:42:73:D7:5F:FB:50:A4:AB:52:63:F2:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/9a03f21f-06de-30b1-9cf0-74ebd53f1fc2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.crl X509v3 Authority Key Identifier: keyid:A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer sbgp-ipAddrBlock: critical IPv4: 64.34.152.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:9d:24:ed:51:d4:2c:91:99:16:e2:ac:76:ff:1c:c9:26:7c: fd:f0:4c:c0:7f:68:56:85:13:a9:b2:9a:c6:c4:22:89:84:ee: 9d:a7:5d:b2:0c:47:53:83:10:44:69:bb:c8:d0:af:0e:bf:07: 18:46:67:bf:31:bc:94:fe:fb:f7:58:e8:63:a8:e8:f4:ee:ca: 48:7c:0d:31:c6:60:8f:4d:9e:78:7f:ab:b2:73:23:a6:d7:92: 73:05:0d:3b:7c:ff:9a:37:03:dc:69:4c:11:31:68:27:6d:a1: ff:6c:df:ff:40:8b:e3:13:c4:39:d3:bd:42:ad:84:4c:d8:bc: 4b:27:d7:f1:df:8c:cf:30:d8:14:55:11:7d:3b:ff:09:27:85: bc:59:63:67:61:94:79:58:e0:1e:62:0b:54:1a:04:e0:0c:e7: fe:97:68:da:3f:be:40:eb:fe:9a:e7:e6:3d:8e:f8:08:a9:02: 7a:04:38:39:6d:f6:a8:52:44:8a:a8:4d:8e:ec:57:7e:1d:33: 3f:29:27:92:e5:a7:d0:9a:fd:66:94:d7:a8:5a:4c:3b:bf:1d: 03:7e:8b:b5:63:6e:f4:db:0c:7f:57:2d:ee:27:6c:01:e3:b2: a1:a7:fb:b4:79:8e:51:07:83:55:10:3d:88:6e:8d:53:61:35: 41:50:a2:d4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+zppEno2Y5+/ueJgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTA4NzkxYWUtOGEzOC00YWU4LWE0YWYtZTNkZTY4YTVk YjEwMB4XDTI2MTEwMjAyMDAxM1oXDTI3MDEzMTAyMDAxM1owLzEtMCsGA1UEAxMk YTY3ZjBlZmEtNzY1Mi00Y2U4LWIzNzEtNjhhY2NhMzY5OGU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzaTOyHO+NsO1qFSY0uYRNI99zFGanDtNEfui wj8UiBbKh1/O/yYspLPliX3mBLxqfRSaG75fYlYhsomVlh1llC//NA0FNV3raYdK et8xvPFFQLjwUpEspMHMuzXqwWV3/uobFqsEbces7vh/7U7kJMFAlSHKyTGV+uD/ vwMae5ZDZrrjyEoGjLsE3zrNFwVW/pFL2gapF2JPi6WFIAvnUFLt/PzBq7n0a4Kd SF3/rJE2VQwjouNtKZvLW7s6zbWVYDRLfL71bqWHIzZ2EZ3GBnx3aI5PKNqtzEMa zyhKWfbIwGog/1oUi5MO39uks6/HHdFdacfvAObFKFCjqksOsQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAB+72FwPrcuQnPXX/tQpKtSY/IlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85MDg3 OTFhZS04YTM4LTRhZTgtYTRhZi1lM2RlNjhhNWRiMTAvOWEwM2YyMWYtMDZkZS0z MGIxLTljZjAtNzRlYmQ1M2YxZmMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTA4NzkxYWUtOGEzOC00YWU4LWE0 YWYtZTNkZTY4YTVkYjEwLzkwODc5MWFlLThhMzgtNGFlOC1hNGFmLWUzZGU2OGE1 ZGIxMC5jcmwwHwYDVR0jBBgwFoAUoALXGqDwH66plsLfMD3KFCsXjvYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85MDg3OTFhZS04YTM4LTRhZTgtYTRhZi1lM2Rl NjhhNWRiMTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQCKYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAACdJO1R1CyRmRbirHb/HMkmfP3wTMB/aFaFE6mymsbEIomE7p2nXbIM R1ODEERpu8jQrw6/BxhGZ78xvJT++/dY6GOo6PTuykh8DTHGYI9Nnnh/q7JzI6bX knMFDTt8/5o3A9xpTBExaCdtof9s3/9Ai+MTxDnTvUKthEzYvEsn1/HfjM8w2BRV EX07/wknhbxZY2dhlHlY4B5iC1QaBOAM5/6XaNo/vkDr/prn5j2O+AipAnoEODlt 9qhSRIqoTY7sV34dMz8pJ5Llp9Ca/WaU16haTDu/HQN+i7VjbvTbDH9XLe4nbAHj sqGn+7R5jlEHg1UQPYhujVNhNUFQotQ= -----END CERTIFICATE-----Generated at Sun Nov 15 11:27:17 2026 by rpki-client