$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a302dc9c-12e9-4b66-8c6d-e2994a21a1bd/2afe2567-cab2-360c-8f03-dbb24ef04992.roa File: 2afe2567-cab2-360c-8f03-dbb24ef04992.roa (raw, json) Hash identifier: zlU0OpAsP/v24jw1f6jaSNgxCepKf2yuEyo2kE28/cA= Subject key identifier: 7F:CB:06:82:31:FB:96:AA:60:49:16:9B:A5:FB:77:E0:73:2A:CE:E0 Certificate issuer: /CN=a302dc9c-12e9-4b66-8c6d-e2994a21a1bd Certificate serial: 010D0C9F43285849AE7F435BFC51F92FF36513A0 Authority key identifier: 0F:DC:2F:6E:33:64:5F:E3:7B:D2:58:C7:5E:84:68:D9:5C:1D:22:9B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a302dc9c-12e9-4b66-8c6d-e2994a21a1bd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a302dc9c-12e9-4b66-8c6d-e2994a21a1bd/2afe2567-cab2-360c-8f03-dbb24ef04992.roa Signing time: Tue 29 Apr 2025 01:00:47 +0000 ROA not before: Tue 29 Apr 2025 01:00:47 +0000 ROA not after: Mon 28 Jul 2025 01:00:47 +0000 asID: 393474 IP address blocks: 64.90.136.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a302dc9c-12e9-4b66-8c6d-e2994a21a1bd/a302dc9c-12e9-4b66-8c6d-e2994a21a1bd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a302dc9c-12e9-4b66-8c6d-e2994a21a1bd/a302dc9c-12e9-4b66-8c6d-e2994a21a1bd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a302dc9c-12e9-4b66-8c6d-e2994a21a1bd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ae:7f:43:5b:fc:51:f9:2f:f3:65:13:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a302dc9c-12e9-4b66-8c6d-e2994a21a1bd Validity Not Before: Apr 29 01:00:47 2025 GMT Not After : Jul 28 01:00:47 2025 GMT Subject: CN=e69000cb-1286-4a66-ad1f-e7943a772f5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:97:57:a3:31:4d:64:4c:06:b9:d6:f9:4d:34: e3:39:92:92:ca:9e:eb:ec:c6:ab:49:25:3b:54:e8: eb:6a:aa:94:28:8d:5d:e6:dc:6d:d6:57:f8:1d:98: b0:e3:76:35:d1:ca:b3:54:45:b1:10:73:f5:e4:49: 82:f9:a4:a9:79:a3:9a:57:2b:e9:aa:f9:b6:34:de: b6:91:0b:7d:0e:b0:6a:0c:e2:75:27:93:cd:e9:cf: 61:5f:6e:4d:e7:2d:65:2b:8b:58:91:8a:34:6d:ac: d6:e7:8b:2b:c3:54:4a:19:b5:03:16:2a:cf:79:c9: e1:ed:93:9a:5f:ae:7a:e3:49:71:31:9e:4f:d0:bc: 3a:5f:26:43:99:24:e3:93:ef:49:98:54:2d:5b:4a: ca:33:25:0a:b5:f7:dd:a7:f7:71:e3:1b:1b:1c:af: 47:06:3f:d9:4e:08:88:18:8c:63:26:e3:6a:0c:4b: 5c:80:0b:00:55:9b:9b:ca:99:70:e9:62:ad:3c:20: 24:3e:69:1f:cd:b2:74:fd:41:0b:a0:72:76:b8:68: 75:84:f7:72:b6:91:58:67:3f:2b:db:df:98:43:08: a8:b7:81:65:ab:cb:bd:5f:3a:ae:6e:8b:0b:b4:67: 77:dd:27:af:c2:57:42:87:d9:22:5f:a3:59:38:94: 10:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:CB:06:82:31:FB:96:AA:60:49:16:9B:A5:FB:77:E0:73:2A:CE:E0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a302dc9c-12e9-4b66-8c6d-e2994a21a1bd/2afe2567-cab2-360c-8f03-dbb24ef04992.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a302dc9c-12e9-4b66-8c6d-e2994a21a1bd/a302dc9c-12e9-4b66-8c6d-e2994a21a1bd.crl X509v3 Authority Key Identifier: keyid:0F:DC:2F:6E:33:64:5F:E3:7B:D2:58:C7:5E:84:68:D9:5C:1D:22:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a302dc9c-12e9-4b66-8c6d-e2994a21a1bd.cer sbgp-ipAddrBlock: critical IPv4: 64.90.136.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:0b:c0:b9:f6:b2:7b:94:b2:b6:e8:1d:08:35:22:51:36:71: 75:85:95:64:54:29:49:2b:eb:e5:2c:e8:79:1b:ed:6b:a6:82: d0:90:c6:f9:42:f0:60:5e:96:4e:e7:97:1c:34:12:a2:f3:f6: 3e:9f:ae:41:55:02:46:1c:be:87:64:b7:f3:7a:27:19:67:b1: a9:39:9f:35:06:6f:7d:7f:05:1c:4f:86:bb:ed:31:12:49:90: 4b:44:ee:3f:b2:d1:61:b6:05:33:cc:00:aa:b9:e2:16:86:f7: a7:9f:40:19:70:eb:51:92:bc:c4:6c:f6:ec:86:3f:b6:75:4d: f8:5f:21:8e:97:f2:e0:b7:19:2a:8c:01:0a:4c:87:d7:4b:e6: 62:58:98:58:eb:a5:4e:f2:fd:70:9c:a1:65:21:a2:fd:45:00: 3d:20:3c:df:b7:38:f8:75:82:c1:c6:0f:b6:e6:ea:53:ae:06: fe:3b:98:26:4b:5b:18:b4:0b:09:8c:10:84:2a:88:95:b9:7d: 72:c0:0f:b2:52:0d:b0:f3:3a:07:59:04:1e:08:12:e8:1d:30: 40:e2:ce:c7:04:1a:bb:8f:a0:3e:d2:a3:f9:56:3b:98:0e:59: ab:e4:55:3a:01:54:b1:18:ba:52:37:58:c2:ed:5f:e0:1b:25: 3f:c2:5b:4f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmuf0Nb/FH5L/NlE6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTMwMmRjOWMtMTJlOS00YjY2LThjNmQtZTI5OTRhMjFh MWJkMB4XDTI1MDQyOTAxMDA0N1oXDTI1MDcyODAxMDA0N1owLzEtMCsGA1UEAxMk ZTY5MDAwY2ItMTI4Ni00YTY2LWFkMWYtZTc5NDNhNzcyZjVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0pdXozFNZEwGudb5TTTjOZKSyp7r7MarSSU7 VOjraqqUKI1d5txt1lf4HZiw43Y10cqzVEWxEHP15EmC+aSpeaOaVyvpqvm2NN62 kQt9DrBqDOJ1J5PN6c9hX25N5y1lK4tYkYo0bazW54srw1RKGbUDFirPecnh7ZOa X65640lxMZ5P0Lw6XyZDmSTjk+9JmFQtW0rKMyUKtffdp/dx4xsbHK9HBj/ZTgiI GIxjJuNqDEtcgAsAVZubyplw6WKtPCAkPmkfzbJ0/UELoHJ2uGh1hPdytpFYZz8r 29+YQwiot4Flq8u9XzqubosLtGd33SevwldCh9kiX6NZOJQQRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH/LBoIx+5aqYEkWm6X7d+BzKs7gMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9hMzAy ZGM5Yy0xMmU5LTRiNjYtOGM2ZC1lMjk5NGEyMWExYmQvMmFmZTI1NjctY2FiMi0z NjBjLThmMDMtZGJiMjRlZjA0OTkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYTMwMmRjOWMtMTJlOS00YjY2LThj NmQtZTI5OTRhMjFhMWJkL2EzMDJkYzljLTEyZTktNGI2Ni04YzZkLWUyOTk0YTIx YTFiZC5jcmwwHwYDVR0jBBgwFoAUD9wvbjNkX+N70ljHXoRo2VwdIpswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9hMzAyZGM5Yy0xMmU5LTRiNjYtOGM2ZC1lMjk5 NGEyMWExYmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQFqIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGMLwLn2snuUsrboHQg1IlE2cXWFlWRUKUkr6+Us6Hkb7WumgtCQxvlC 8GBelk7nlxw0EqLz9j6frkFVAkYcvodkt/N6Jxlnsak5nzUGb31/BRxPhrvtMRJJ kEtE7j+y0WG2BTPMAKq54haG96efQBlw61GSvMRs9uyGP7Z1TfhfIY6X8uC3GSqM AQpMh9dL5mJYmFjrpU7y/XCcoWUhov1FAD0gPN+3OPh1gsHGD7bm6lOuBv47mCZL Wxi0CwmMEIQqiJW5fXLAD7JSDbDzOgdZBB4IEugdMEDizscEGruPoD7So/lWO5gO WavkVToBVLEYulI3WMLtX+AbJT/CW08= -----END CERTIFICATE-----Generated at Mon May 5 17:15:44 2025 by rpki-client