$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/c43a7a77-2533-3db9-8bef-1b34f492b3e2.roa File: c43a7a77-2533-3db9-8bef-1b34f492b3e2.roa (raw, json) Hash identifier: 0bPzy9T+ok4TjflzfmBaFt5j+CzkgVVUaiOtH4P7xZE= Subject key identifier: 91:55:6B:84:58:FD:56:9A:64:16:88:A9:5E:AA:F9:9E:47:9E:E0:4F Certificate issuer: /CN=908791ae-8a38-4ae8-a4af-e3de68a5db10 Certificate serial: 010D0C9F4328584AECC14D041F13C1A5D2C1C840 Authority key identifier: A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/c43a7a77-2533-3db9-8bef-1b34f492b3e2.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 13768 IP address blocks: 64.34.190.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c1:4d:04:1f:13:c1:a5:d2:c1:c8:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=908791ae-8a38-4ae8-a4af-e3de68a5db10 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=8d403e9c-98d3-458e-8c4b-81584179395d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:c8:8e:fc:b3:61:49:03:0d:41:15:b5:8f:bf: 43:84:e1:d3:f8:ab:2c:b4:8d:07:21:a1:b5:ff:69: 71:ae:57:f4:15:5f:91:6d:19:09:49:e7:c7:0d:42: 14:bf:5d:70:91:8f:8d:3a:25:b7:2c:78:02:f4:d2: 1f:07:51:c9:48:fe:e6:50:f3:9d:fc:29:c6:59:ff: 2f:d8:2b:99:7a:7f:c1:7c:97:65:f7:b1:ab:9e:6a: c4:68:42:96:14:a1:68:c1:ef:6a:fd:57:1c:5b:59: c3:a9:31:c1:a6:a5:fb:03:83:da:47:82:32:ce:30: 9a:76:13:0c:40:37:3d:59:3c:80:5f:1d:38:30:4f: ff:db:cc:27:44:f6:8e:b5:4b:ab:af:39:b1:03:0e: 68:8c:b8:c9:06:27:b2:a1:82:af:a1:c4:5f:ff:ad: 7f:4a:bd:2b:1c:fe:19:1b:f4:7e:a8:4d:6c:5c:fa: 6d:25:20:c2:f3:67:e9:98:1c:cd:55:f9:72:75:2e: b8:4b:eb:ae:85:8c:7d:e5:aa:02:9c:ce:30:de:04: 2e:35:ce:55:f3:bb:be:79:9a:e5:87:ec:d5:4f:c7: 33:2b:d5:94:aa:f9:51:b0:4b:05:ae:50:35:19:ff: 45:46:32:c8:7e:93:7b:9e:e0:9a:68:64:24:96:68: 67:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:55:6B:84:58:FD:56:9A:64:16:88:A9:5E:AA:F9:9E:47:9E:E0:4F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/c43a7a77-2533-3db9-8bef-1b34f492b3e2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.crl X509v3 Authority Key Identifier: keyid:A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer sbgp-ipAddrBlock: critical IPv4: 64.34.190.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:25:75:0f:42:8e:14:2c:78:6f:ea:21:a2:28:a4:2c:2e:58: fb:3b:36:53:12:99:7a:8b:ab:98:c7:d5:0e:a1:ee:de:fc:19: ce:19:be:44:35:c8:03:cf:76:2c:c6:fa:4a:63:d4:7d:8b:9e: 23:18:50:ae:86:9c:f4:08:42:95:65:72:d2:5a:b6:55:4e:ac: 16:86:c7:e1:0f:c8:ff:4b:19:3a:61:46:22:77:c5:a0:3b:26: 49:26:9a:40:e7:d0:50:75:69:27:02:11:6a:68:26:15:8f:cb: 85:38:1c:60:13:0a:83:3c:7c:ec:14:23:4c:69:0a:56:6f:eb: e1:7c:d8:8f:54:42:65:59:08:4e:d4:12:b8:fd:28:22:bd:4b: 4d:c6:30:a9:44:85:05:3c:e6:72:27:29:d3:df:36:bb:3e:49: f0:32:2d:79:b5:fe:06:fe:3c:60:4d:d1:e7:31:03:7f:83:fb: b0:d4:b7:af:4d:4e:44:db:70:fb:31:79:0f:70:7f:8e:a0:5c: 91:f9:3a:d9:42:b4:5e:71:ca:17:f0:60:d7:d5:25:38:6a:ef: 04:82:21:8f:94:4c:73:cc:44:48:fa:fc:3f:94:6f:69:48:b9: 6c:88:cc:a4:f9:5e:9c:12:31:fb:b5:32:2f:ae:97:b7:a0:43: 3d:44:e9:06 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErswU0EHxPBpdLByEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTA4NzkxYWUtOGEzOC00YWU4LWE0YWYtZTNkZTY4YTVk YjEwMB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk OGQ0MDNlOWMtOThkMy00NThlLThjNGItODE1ODQxNzkzOTVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs8iO/LNhSQMNQRW1j79DhOHT+KsstI0HIaG1 /2lxrlf0FV+RbRkJSefHDUIUv11wkY+NOiW3LHgC9NIfB1HJSP7mUPOd/CnGWf8v 2CuZen/BfJdl97GrnmrEaEKWFKFowe9q/VccW1nDqTHBpqX7A4PaR4IyzjCadhMM QDc9WTyAXx04ME//28wnRPaOtUurrzmxAw5ojLjJBieyoYKvocRf/61/Sr0rHP4Z G/R+qE1sXPptJSDC82fpmBzNVflydS64S+uuhYx95aoCnM4w3gQuNc5V87u+eZrl h+zVT8czK9WUqvlRsEsFrlA1Gf9FRjLIfpN7nuCaaGQklmhngwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJFVa4RY/VaaZBaIqV6q+Z5HnuBPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85MDg3 OTFhZS04YTM4LTRhZTgtYTRhZi1lM2RlNjhhNWRiMTAvYzQzYTdhNzctMjUzMy0z ZGI5LThiZWYtMWIzNGY0OTJiM2UyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTA4NzkxYWUtOGEzOC00YWU4LWE0 YWYtZTNkZTY4YTVkYjEwLzkwODc5MWFlLThhMzgtNGFlOC1hNGFmLWUzZGU2OGE1 ZGIxMC5jcmwwHwYDVR0jBBgwFoAUoALXGqDwH66plsLfMD3KFCsXjvYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85MDg3OTFhZS04YTM4LTRhZTgtYTRhZi1lM2Rl NjhhNWRiMTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQCK+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACUldQ9CjhQseG/qIaIopCwuWPs7NlMSmXqLq5jH1Q6h7t78Gc4ZvkQ1 yAPPdizG+kpj1H2LniMYUK6GnPQIQpVlctJatlVOrBaGx+EPyP9LGTphRiJ3xaA7 JkkmmkDn0FB1aScCEWpoJhWPy4U4HGATCoM8fOwUI0xpClZv6+F82I9UQmVZCE7U Erj9KCK9S03GMKlEhQU85nInKdPfNrs+SfAyLXm1/gb+PGBN0ecxA3+D+7DUt69N TkTbcPsxeQ9wf46gXJH5OtlCtF5xyhfwYNfVJThq7wSCIY+UTHPMREj6/D+Ub2lI uWyIzKT5XpwSMfu1Mi+ul7egQz1E6QY= -----END CERTIFICATE-----Generated at Sun Aug 24 03:58:48 2025 by rpki-client