$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a302dc9c-12e9-4b66-8c6d-e2994a21a1bd/c9f55b10-d847-3053-8482-6552dbbdb29b.roa File: c9f55b10-d847-3053-8482-6552dbbdb29b.roa (raw, json) Hash identifier: YBZw7Z3FnLqnSlfUX/enegfpVzwnjV1bcn3eYMb0mBk= Subject key identifier: CD:F8:DB:CB:BE:82:03:36:8B:DC:D8:AE:5D:01:6B:62:06:0C:22:70 Certificate issuer: /CN=a302dc9c-12e9-4b66-8c6d-e2994a21a1bd Certificate serial: 010D0C9F4328584AF5214CE70677B43F2ED0C580 Authority key identifier: 0F:DC:2F:6E:33:64:5F:E3:7B:D2:58:C7:5E:84:68:D9:5C:1D:22:9B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a302dc9c-12e9-4b66-8c6d-e2994a21a1bd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a302dc9c-12e9-4b66-8c6d-e2994a21a1bd/c9f55b10-d847-3053-8482-6552dbbdb29b.roa Signing time: Sun 24 Aug 2025 01:00:33 +0000 ROA not before: Sun 24 Aug 2025 01:00:33 +0000 ROA not after: Sat 22 Nov 2025 02:00:33 +0000 asID: 393474 IP address blocks: 64.90.130.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a302dc9c-12e9-4b66-8c6d-e2994a21a1bd/a302dc9c-12e9-4b66-8c6d-e2994a21a1bd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a302dc9c-12e9-4b66-8c6d-e2994a21a1bd/a302dc9c-12e9-4b66-8c6d-e2994a21a1bd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a302dc9c-12e9-4b66-8c6d-e2994a21a1bd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f5:21:4c:e7:06:77:b4:3f:2e:d0:c5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a302dc9c-12e9-4b66-8c6d-e2994a21a1bd Validity Not Before: Aug 24 01:00:33 2025 GMT Not After : Nov 22 02:00:33 2025 GMT Subject: CN=9f188244-ce76-4d87-98f7-fb22db0abdb2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:89:ee:57:11:0c:fc:cc:10:34:5e:a9:8e:3a: b2:2c:71:33:0c:b1:93:11:43:17:e4:4c:43:ce:7c: 7b:94:b1:ee:71:6c:f0:29:49:26:9b:d7:90:2f:a5: 27:48:f2:48:93:63:8b:4d:e0:a5:a1:71:38:47:24: ab:0e:f1:bb:41:06:63:ae:96:d1:33:3b:b8:57:38: 03:d2:fe:6d:80:dd:42:02:88:6f:8c:78:83:b6:fa: 9d:a3:13:8c:7a:2d:68:ec:e1:9f:83:30:89:bd:14: 16:b5:f6:af:9c:fd:cb:7c:ec:9b:50:7d:42:ff:85: a7:84:3f:e9:46:33:07:b3:99:f5:61:1e:c8:43:02: 44:f5:9e:42:69:d4:5a:02:5c:16:f3:77:14:88:d7: 90:e1:d1:78:6c:2d:1c:ec:c8:7b:d3:63:67:89:1a: 37:0b:e8:64:c9:fb:04:49:b9:21:64:4e:af:8c:b0: 7a:10:ba:d8:b4:92:0a:c8:9d:63:03:3d:7f:73:0a: 96:c4:6a:82:2c:94:81:c6:14:51:15:c7:df:de:c8: 69:f2:86:74:5f:5b:3d:7f:f2:77:90:ad:90:53:9c: de:ca:91:3d:e3:58:6f:0e:69:df:e8:cb:6e:07:28: df:9c:a1:86:52:6c:8d:07:72:54:6d:80:bb:d2:49: 61:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:F8:DB:CB:BE:82:03:36:8B:DC:D8:AE:5D:01:6B:62:06:0C:22:70 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a302dc9c-12e9-4b66-8c6d-e2994a21a1bd/c9f55b10-d847-3053-8482-6552dbbdb29b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a302dc9c-12e9-4b66-8c6d-e2994a21a1bd/a302dc9c-12e9-4b66-8c6d-e2994a21a1bd.crl X509v3 Authority Key Identifier: keyid:0F:DC:2F:6E:33:64:5F:E3:7B:D2:58:C7:5E:84:68:D9:5C:1D:22:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a302dc9c-12e9-4b66-8c6d-e2994a21a1bd.cer sbgp-ipAddrBlock: critical IPv4: 64.90.130.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:15:a9:db:87:41:63:a8:ad:9f:39:e7:31:a7:b9:e7:56:1c: fa:af:41:b5:65:ca:c3:9d:c5:70:7b:8f:bc:ad:98:22:dd:b5: 72:2d:fe:1d:95:82:c1:a1:16:d6:1f:92:93:08:cb:0a:72:a4: e8:c6:b0:1c:3e:e9:1d:13:79:18:d1:45:46:85:9f:51:9b:5a: 27:2c:15:1a:0b:45:38:c5:21:74:76:a9:5b:79:71:da:c1:85: 0e:79:4f:e4:d3:94:b8:74:4c:ec:a0:22:a9:ba:78:80:b9:2b: 38:7c:46:03:6f:4a:f1:a0:31:89:40:01:8c:af:bb:18:44:c1: b0:47:04:45:db:6c:e1:3e:c7:86:eb:b1:3b:78:fd:2a:09:fe: c7:f4:11:59:3f:46:19:c0:28:8d:6a:73:2c:5b:32:1c:f1:b8: 7d:15:66:a0:0c:b1:0f:d5:34:ec:5f:6e:fc:a3:0a:a8:0f:73: e7:e5:b3:18:2b:bd:8c:1d:6f:40:e0:9d:ff:48:e7:d4:ed:22: 6a:da:8b:67:19:67:57:8c:6b:f9:dd:ff:7c:84:c2:6c:f0:29: 1a:df:4e:c9:d3:37:09:6c:9e:d1:94:82:89:8c:3b:22:d1:3c: 4d:6f:db:4f:8b:8d:9f:b8:06:22:85:a3:43:a4:a1:03:63:59: 2e:e0:3a:35 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr1IUznBne0Py7QxYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTMwMmRjOWMtMTJlOS00YjY2LThjNmQtZTI5OTRhMjFh MWJkMB4XDTI1MDgyNDAxMDAzM1oXDTI1MTEyMjAyMDAzM1owLzEtMCsGA1UEAxMk OWYxODgyNDQtY2U3Ni00ZDg3LTk4ZjctZmIyMmRiMGFiZGIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgonuVxEM/MwQNF6pjjqyLHEzDLGTEUMX5ExD znx7lLHucWzwKUkmm9eQL6UnSPJIk2OLTeCloXE4RySrDvG7QQZjrpbRMzu4VzgD 0v5tgN1CAohvjHiDtvqdoxOMei1o7OGfgzCJvRQWtfavnP3LfOybUH1C/4WnhD/p RjMHs5n1YR7IQwJE9Z5CadRaAlwW83cUiNeQ4dF4bC0c7Mh702NniRo3C+hkyfsE SbkhZE6vjLB6ELrYtJIKyJ1jAz1/cwqWxGqCLJSBxhRRFcff3shp8oZ0X1s9f/J3 kK2QU5zeypE941hvDmnf6MtuByjfnKGGUmyNB3JUbYC70klhFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM3428u+ggM2i9zYrl0Ba2IGDCJwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9hMzAy ZGM5Yy0xMmU5LTRiNjYtOGM2ZC1lMjk5NGEyMWExYmQvYzlmNTViMTAtZDg0Ny0z MDUzLTg0ODItNjU1MmRiYmRiMjliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYTMwMmRjOWMtMTJlOS00YjY2LThj NmQtZTI5OTRhMjFhMWJkL2EzMDJkYzljLTEyZTktNGI2Ni04YzZkLWUyOTk0YTIx YTFiZC5jcmwwHwYDVR0jBBgwFoAUD9wvbjNkX+N70ljHXoRo2VwdIpswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9hMzAyZGM5Yy0xMmU5LTRiNjYtOGM2ZC1lMjk5 NGEyMWExYmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQFqCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGUVqduHQWOorZ855zGnuedWHPqvQbVlysOdxXB7j7ytmCLdtXIt/h2V gsGhFtYfkpMIywpypOjGsBw+6R0TeRjRRUaFn1GbWicsFRoLRTjFIXR2qVt5cdrB hQ55T+TTlLh0TOygIqm6eIC5Kzh8RgNvSvGgMYlAAYyvuxhEwbBHBEXbbOE+x4br sTt4/SoJ/sf0EVk/RhnAKI1qcyxbMhzxuH0VZqAMsQ/VNOxfbvyjCqgPc+flsxgr vYwdb0Dgnf9I59TtImrai2cZZ1eMa/nd/3yEwmzwKRrfTsnTNwlsntGUgomMOyLR PE1v20+LjZ+4BiKFo0OkoQNjWS7gOjU= -----END CERTIFICATE-----Generated at Sun Aug 24 02:57:10 2025 by rpki-client