$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a302dc9c-12e9-4b66-8c6d-e2994a21a1bd/0ba38926-bad3-374f-8c49-9231dc94f5e6.roa File: 0ba38926-bad3-374f-8c49-9231dc94f5e6.roa (raw, json) Hash identifier: 3Eju7NN77qhGDaOWuvzU57b59EJe53xkq7vcOqT6HqY= Subject key identifier: B9:73:9A:E9:24:DC:D3:3E:D2:91:A1:4E:79:0D:59:C6:43:E1:AC:10 Certificate issuer: /CN=a302dc9c-12e9-4b66-8c6d-e2994a21a1bd Certificate serial: 010D0C9F4328584AF52136D4B33110FDF7127300 Authority key identifier: 0F:DC:2F:6E:33:64:5F:E3:7B:D2:58:C7:5E:84:68:D9:5C:1D:22:9B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a302dc9c-12e9-4b66-8c6d-e2994a21a1bd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a302dc9c-12e9-4b66-8c6d-e2994a21a1bd/0ba38926-bad3-374f-8c49-9231dc94f5e6.roa Signing time: Sun 24 Aug 2025 01:00:33 +0000 ROA not before: Sun 24 Aug 2025 01:00:33 +0000 ROA not after: Sat 22 Nov 2025 02:00:33 +0000 asID: 393474 IP address blocks: 64.90.132.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a302dc9c-12e9-4b66-8c6d-e2994a21a1bd/a302dc9c-12e9-4b66-8c6d-e2994a21a1bd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a302dc9c-12e9-4b66-8c6d-e2994a21a1bd/a302dc9c-12e9-4b66-8c6d-e2994a21a1bd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a302dc9c-12e9-4b66-8c6d-e2994a21a1bd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f5:21:36:d4:b3:31:10:fd:f7:12:73:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a302dc9c-12e9-4b66-8c6d-e2994a21a1bd Validity Not Before: Aug 24 01:00:33 2025 GMT Not After : Nov 22 02:00:33 2025 GMT Subject: CN=bee41aab-f70f-4d36-b7c4-faf4177a3395 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:73:3b:19:2a:aa:c4:6f:8c:cc:24:ae:9b:ae: eb:59:d7:f0:c1:d3:61:8a:75:5a:93:23:75:92:55: 49:1d:5e:54:ef:cb:90:2d:55:c4:ec:c1:d9:d5:16: b8:57:2f:e6:6d:c3:fa:66:01:14:cb:12:f9:7a:09: eb:00:e1:a4:e6:f7:7d:b3:52:6c:bf:83:12:d1:84: 1a:28:89:f9:55:e7:d3:71:95:41:af:27:af:38:25: 15:3e:6b:c8:d0:d2:98:b2:81:ce:65:f4:39:c7:a0: 7c:61:0d:2f:b1:ab:6b:19:53:68:7e:4d:ca:82:df: 79:c6:c2:ee:92:64:cc:fa:34:e0:87:09:dd:7a:0a: b2:c0:a5:b4:4f:b7:fa:86:6f:b7:dc:e1:5f:2c:52: 10:88:85:d3:1c:c0:a0:4f:71:33:e1:7d:e4:07:7b: 1c:2d:82:85:a3:42:78:3b:e1:a4:2d:57:e9:a6:cd: a8:89:f0:7b:e8:8e:68:51:40:2e:2a:09:ba:e6:62: 3f:49:6c:d5:14:3f:26:49:be:ad:31:de:64:d9:3f: ca:04:11:52:67:a3:4e:b3:7a:5b:57:aa:9e:aa:76: e9:e5:ed:d8:82:71:ea:77:e7:c1:4f:7d:6c:4e:1e: 94:b2:fc:71:07:3a:26:a2:8e:8c:65:60:36:ce:5b: 8d:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:73:9A:E9:24:DC:D3:3E:D2:91:A1:4E:79:0D:59:C6:43:E1:AC:10 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a302dc9c-12e9-4b66-8c6d-e2994a21a1bd/0ba38926-bad3-374f-8c49-9231dc94f5e6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a302dc9c-12e9-4b66-8c6d-e2994a21a1bd/a302dc9c-12e9-4b66-8c6d-e2994a21a1bd.crl X509v3 Authority Key Identifier: keyid:0F:DC:2F:6E:33:64:5F:E3:7B:D2:58:C7:5E:84:68:D9:5C:1D:22:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a302dc9c-12e9-4b66-8c6d-e2994a21a1bd.cer sbgp-ipAddrBlock: critical IPv4: 64.90.132.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:ba:97:11:c6:f8:66:63:7c:9b:6a:e5:7f:ee:d1:75:e3:97: ce:84:56:ef:2b:2b:ae:ef:04:2c:0a:11:33:5b:39:85:99:bb: b7:a6:aa:d2:82:90:91:59:a6:9c:2f:1c:64:48:c4:2e:ed:08: 62:89:a3:53:93:a5:99:d6:ed:2e:3f:76:2e:73:e4:b3:cb:8c: 4e:ec:91:0b:37:9c:97:22:ce:3f:32:68:b4:5f:60:50:83:85: 72:e1:a1:0b:a6:aa:91:5b:e7:40:c6:f2:b2:e9:79:01:0d:28: 35:e0:82:c6:44:fc:24:83:f7:bd:99:12:1b:19:1b:77:2e:30: af:77:ba:dd:7c:37:7e:2a:a8:07:d5:18:9d:f0:c1:f3:2b:25: b8:6a:d6:da:9e:1a:b4:a9:a9:ac:50:ba:8d:76:36:66:e4:ef: 63:b0:75:9d:1e:37:ba:02:5d:86:18:50:77:4d:0e:81:c1:b8: 87:93:06:e0:39:27:9d:45:4b:f3:d5:5c:04:47:bc:a8:c5:bb: 38:9d:1b:75:96:df:67:9e:76:5b:8e:c0:de:b6:90:82:e4:7b: f1:2f:c6:3e:78:0f:f1:80:ff:0d:5a:71:e0:5a:3c:a5:a5:5a: 6d:92:a7:8d:74:2c:cb:b2:17:b4:21:e9:da:5b:59:c6:88:c5: 2c:04:d1:df -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr1ITbUszEQ/fcScwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTMwMmRjOWMtMTJlOS00YjY2LThjNmQtZTI5OTRhMjFh MWJkMB4XDTI1MDgyNDAxMDAzM1oXDTI1MTEyMjAyMDAzM1owLzEtMCsGA1UEAxMk YmVlNDFhYWItZjcwZi00ZDM2LWI3YzQtZmFmNDE3N2EzMzk1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu3M7GSqqxG+MzCSum67rWdfwwdNhinVakyN1 klVJHV5U78uQLVXE7MHZ1Ra4Vy/mbcP6ZgEUyxL5egnrAOGk5vd9s1Jsv4MS0YQa KIn5VefTcZVBryevOCUVPmvI0NKYsoHOZfQ5x6B8YQ0vsatrGVNofk3Kgt95xsLu kmTM+jTghwndegqywKW0T7f6hm+33OFfLFIQiIXTHMCgT3Ez4X3kB3scLYKFo0J4 O+GkLVfpps2oifB76I5oUUAuKgm65mI/SWzVFD8mSb6tMd5k2T/KBBFSZ6NOs3pb V6qeqnbp5e3YgnHqd+fBT31sTh6UsvxxBzomoo6MZWA2zluNFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLlzmukk3NM+0pGhTnkNWcZD4awQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9hMzAy ZGM5Yy0xMmU5LTRiNjYtOGM2ZC1lMjk5NGEyMWExYmQvMGJhMzg5MjYtYmFkMy0z NzRmLThjNDktOTIzMWRjOTRmNWU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYTMwMmRjOWMtMTJlOS00YjY2LThj NmQtZTI5OTRhMjFhMWJkL2EzMDJkYzljLTEyZTktNGI2Ni04YzZkLWUyOTk0YTIx YTFiZC5jcmwwHwYDVR0jBBgwFoAUD9wvbjNkX+N70ljHXoRo2VwdIpswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9hMzAyZGM5Yy0xMmU5LTRiNjYtOGM2ZC1lMjk5 NGEyMWExYmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQFqEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF66lxHG+GZjfJtq5X/u0XXjl86EVu8rK67vBCwKETNbOYWZu7emqtKC kJFZppwvHGRIxC7tCGKJo1OTpZnW7S4/di5z5LPLjE7skQs3nJcizj8yaLRfYFCD hXLhoQumqpFb50DG8rLpeQENKDXggsZE/CSD972ZEhsZG3cuMK93ut18N34qqAfV GJ3wwfMrJbhq1tqeGrSpqaxQuo12Nmbk72OwdZ0eN7oCXYYYUHdNDoHBuIeTBuA5 J51FS/PVXARHvKjFuzidG3WW32eedluOwN62kILke/Evxj54D/GA/w1aceBaPKWl Wm2Sp410LMuyF7Qh6dpbWcaIxSwE0d8= -----END CERTIFICATE-----Generated at Sun Aug 24 02:56:19 2025 by rpki-client