$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a302dc9c-12e9-4b66-8c6d-e2994a21a1bd/1f36c010-0da8-3095-9972-d65efcd1e1f1.roa File: 1f36c010-0da8-3095-9972-d65efcd1e1f1.roa (raw, json) Hash identifier: 7l5qkMoOCJDSjL7LUcbVifwWA2OCu4LScI+sySmOxgM= Subject key identifier: 59:AA:47:B5:50:8E:C4:2C:06:58:3D:7E:33:A6:AA:DC:78:95:A0:AB Certificate issuer: /CN=a302dc9c-12e9-4b66-8c6d-e2994a21a1bd Certificate serial: 010D0C9F4328584AF5214D103626E2AE81C09100 Authority key identifier: 0F:DC:2F:6E:33:64:5F:E3:7B:D2:58:C7:5E:84:68:D9:5C:1D:22:9B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a302dc9c-12e9-4b66-8c6d-e2994a21a1bd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a302dc9c-12e9-4b66-8c6d-e2994a21a1bd/1f36c010-0da8-3095-9972-d65efcd1e1f1.roa Signing time: Sun 24 Aug 2025 01:00:33 +0000 ROA not before: Sun 24 Aug 2025 01:00:33 +0000 ROA not after: Sat 22 Nov 2025 02:00:33 +0000 asID: 393474 IP address blocks: 64.90.135.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a302dc9c-12e9-4b66-8c6d-e2994a21a1bd/a302dc9c-12e9-4b66-8c6d-e2994a21a1bd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a302dc9c-12e9-4b66-8c6d-e2994a21a1bd/a302dc9c-12e9-4b66-8c6d-e2994a21a1bd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a302dc9c-12e9-4b66-8c6d-e2994a21a1bd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f5:21:4d:10:36:26:e2:ae:81:c0:91:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a302dc9c-12e9-4b66-8c6d-e2994a21a1bd Validity Not Before: Aug 24 01:00:33 2025 GMT Not After : Nov 22 02:00:33 2025 GMT Subject: CN=9151becf-cf7e-434a-b734-43fee2bc76be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:2d:0d:1e:5b:86:7f:40:6a:b7:46:b0:99:20: 3b:65:ad:34:6e:f9:89:b8:a1:62:40:0a:6a:69:84: cf:82:f4:0b:a2:9b:2b:91:65:8b:0a:15:5b:4c:3d: 2f:ae:86:57:20:20:c5:73:f1:53:6e:0c:c6:07:6e: b7:13:35:7b:f6:ad:f0:a8:3a:3c:d5:45:5c:d6:c2: 02:22:bc:47:26:eb:b7:8d:68:69:04:18:d4:fc:55: bb:43:60:d9:cb:65:a3:6a:a4:5e:85:47:ca:aa:a9: 7a:0b:c7:d6:7b:df:04:9b:7c:0e:c3:d1:66:0c:64: fc:ba:81:70:16:c3:c0:f3:96:79:07:cb:03:b1:38: 77:ce:87:79:bf:b5:9e:b8:3a:ed:09:9d:2b:89:fa: 12:3a:4b:ef:32:26:01:77:89:76:c5:97:aa:62:40: 42:9d:d5:50:58:b9:40:86:15:a9:bd:b4:2e:14:e0: 5d:46:46:ac:5d:87:39:af:07:d5:47:76:24:39:9b: 90:d1:0e:17:d7:01:72:4f:f8:96:ad:76:09:86:d0: fe:22:7f:41:37:ed:65:08:a0:ea:aa:e6:46:45:84: 97:f1:fb:34:d0:c1:47:e0:0c:05:7c:70:17:04:7a: a4:32:95:f7:8c:d5:08:4a:4e:7e:a6:76:6d:01:7d: 06:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:AA:47:B5:50:8E:C4:2C:06:58:3D:7E:33:A6:AA:DC:78:95:A0:AB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a302dc9c-12e9-4b66-8c6d-e2994a21a1bd/1f36c010-0da8-3095-9972-d65efcd1e1f1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a302dc9c-12e9-4b66-8c6d-e2994a21a1bd/a302dc9c-12e9-4b66-8c6d-e2994a21a1bd.crl X509v3 Authority Key Identifier: keyid:0F:DC:2F:6E:33:64:5F:E3:7B:D2:58:C7:5E:84:68:D9:5C:1D:22:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a302dc9c-12e9-4b66-8c6d-e2994a21a1bd.cer sbgp-ipAddrBlock: critical IPv4: 64.90.135.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:39:b6:d8:bd:f7:a9:d1:1b:54:47:ed:ed:dc:fd:fd:05:c6: 41:be:96:ed:d6:94:4f:4b:9f:fb:14:4d:90:77:d0:31:99:8a: 3a:0e:31:f3:fa:ea:3a:5d:ae:1a:30:6e:d8:7e:35:46:a9:c7: 56:c8:db:76:9e:f2:4c:ea:4c:97:5c:d7:42:5e:08:c9:9e:38: a4:16:46:a4:1d:3d:69:a1:8e:e6:91:0e:a0:f6:12:66:46:6d: 61:60:13:94:58:02:34:92:70:cd:a9:06:b1:f0:7c:03:8c:d7: 72:a3:d7:60:7c:ab:f9:4b:f6:03:0c:69:d3:6e:c2:f2:a5:31: 8c:af:7d:1a:74:75:35:26:0d:74:97:d9:38:ef:7a:c1:7d:45: f0:66:da:09:73:df:06:0c:b4:0c:c4:6e:9d:18:e7:7c:b8:8d: 88:5c:9d:97:c5:92:4a:e4:94:6f:f0:2b:75:3f:a9:a5:1b:12: 6e:93:83:1b:c6:f3:ed:f2:7f:29:09:c7:8f:b6:b8:24:ec:e1: 21:e5:13:ab:a4:2f:d0:be:1d:8b:d4:3a:10:7d:d4:e8:42:99: 0b:c3:16:f9:06:65:a9:96:eb:fb:42:07:2b:5e:1a:9e:0e:ed: 58:b7:04:57:b9:bb:08:8e:a6:bf:72:64:50:3f:3f:9f:f8:59: 80:a4:23:18 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr1IU0QNibiroHAkQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTMwMmRjOWMtMTJlOS00YjY2LThjNmQtZTI5OTRhMjFh MWJkMB4XDTI1MDgyNDAxMDAzM1oXDTI1MTEyMjAyMDAzM1owLzEtMCsGA1UEAxMk OTE1MWJlY2YtY2Y3ZS00MzRhLWI3MzQtNDNmZWUyYmM3NmJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAui0NHluGf0Bqt0awmSA7Za00bvmJuKFiQApq aYTPgvQLopsrkWWLChVbTD0vroZXICDFc/FTbgzGB263EzV79q3wqDo81UVc1sIC IrxHJuu3jWhpBBjU/FW7Q2DZy2WjaqRehUfKqql6C8fWe98Em3wOw9FmDGT8uoFw FsPA85Z5B8sDsTh3zod5v7WeuDrtCZ0rifoSOkvvMiYBd4l2xZeqYkBCndVQWLlA hhWpvbQuFOBdRkasXYc5rwfVR3YkOZuQ0Q4X1wFyT/iWrXYJhtD+In9BN+1lCKDq quZGRYSX8fs00MFH4AwFfHAXBHqkMpX3jNUISk5+pnZtAX0GhwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFmqR7VQjsQsBlg9fjOmqtx4laCrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9hMzAy ZGM5Yy0xMmU5LTRiNjYtOGM2ZC1lMjk5NGEyMWExYmQvMWYzNmMwMTAtMGRhOC0z MDk1LTk5NzItZDY1ZWZjZDFlMWYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYTMwMmRjOWMtMTJlOS00YjY2LThj NmQtZTI5OTRhMjFhMWJkL2EzMDJkYzljLTEyZTktNGI2Ni04YzZkLWUyOTk0YTIx YTFiZC5jcmwwHwYDVR0jBBgwFoAUD9wvbjNkX+N70ljHXoRo2VwdIpswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9hMzAyZGM5Yy0xMmU5LTRiNjYtOGM2ZC1lMjk5 NGEyMWExYmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQFqHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFI5tti996nRG1RH7e3c/f0FxkG+lu3WlE9Ln/sUTZB30DGZijoOMfP6 6jpdrhowbth+NUapx1bI23ae8kzqTJdc10JeCMmeOKQWRqQdPWmhjuaRDqD2EmZG bWFgE5RYAjSScM2pBrHwfAOM13Kj12B8q/lL9gMMadNuwvKlMYyvfRp0dTUmDXSX 2TjvesF9RfBm2glz3wYMtAzEbp0Y53y4jYhcnZfFkkrklG/wK3U/qaUbEm6TgxvG 8+3yfykJx4+2uCTs4SHlE6ukL9C+HYvUOhB91OhCmQvDFvkGZamW6/tCByteGp4O 7Vi3BFe5uwiOpr9yZFA/P5/4WYCkIxg= -----END CERTIFICATE-----Generated at Sun Aug 24 02:56:37 2025 by rpki-client