$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a302dc9c-12e9-4b66-8c6d-e2994a21a1bd/ec24fabd-de17-3231-b198-70f75562becc.roa File: ec24fabd-de17-3231-b198-70f75562becc.roa (raw, json) Hash identifier: wwp5qLJw/xyqM53xuwfrPOM3zjQ0kQhG6fQADjmTbcc= Subject key identifier: 2B:22:86:13:8B:BA:C9:7F:CA:68:4F:BA:A3:6F:9E:DC:20:5E:0D:43 Certificate issuer: /CN=a302dc9c-12e9-4b66-8c6d-e2994a21a1bd Certificate serial: 010D0C9F4328584AF5214CD5ADF436A7AE643B00 Authority key identifier: 0F:DC:2F:6E:33:64:5F:E3:7B:D2:58:C7:5E:84:68:D9:5C:1D:22:9B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a302dc9c-12e9-4b66-8c6d-e2994a21a1bd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a302dc9c-12e9-4b66-8c6d-e2994a21a1bd/ec24fabd-de17-3231-b198-70f75562becc.roa Signing time: Sun 24 Aug 2025 01:00:33 +0000 ROA not before: Sun 24 Aug 2025 01:00:33 +0000 ROA not after: Sat 22 Nov 2025 02:00:33 +0000 asID: 393474 IP address blocks: 64.90.129.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a302dc9c-12e9-4b66-8c6d-e2994a21a1bd/a302dc9c-12e9-4b66-8c6d-e2994a21a1bd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a302dc9c-12e9-4b66-8c6d-e2994a21a1bd/a302dc9c-12e9-4b66-8c6d-e2994a21a1bd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a302dc9c-12e9-4b66-8c6d-e2994a21a1bd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f5:21:4c:d5:ad:f4:36:a7:ae:64:3b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a302dc9c-12e9-4b66-8c6d-e2994a21a1bd Validity Not Before: Aug 24 01:00:33 2025 GMT Not After : Nov 22 02:00:33 2025 GMT Subject: CN=c13bf360-05eb-4cc2-b7b8-183a5c38bf88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:80:e6:37:7d:dc:a0:04:e0:d0:5d:4e:b5:4c: c7:e2:db:d2:41:24:b9:77:e5:ce:eb:3e:74:1a:15: 9f:57:a1:24:b8:17:9d:fa:fe:01:00:6b:5b:81:76: 80:d4:db:2c:6f:28:2a:59:20:83:4d:d4:6d:59:01: 7b:92:8c:48:42:8b:0b:de:29:81:89:89:01:7e:8d: e8:96:cb:01:2a:17:ba:ee:56:c9:11:97:9d:2e:df: d4:83:72:a2:db:fc:bf:98:33:82:ac:5f:98:94:a0: 6e:8f:3b:86:c7:ba:2f:86:02:27:7b:7d:1d:98:89: 25:e3:2d:b1:42:c5:c0:96:af:48:a1:44:66:bb:45: 93:5f:b5:9e:32:09:e4:f6:90:02:10:9b:96:42:de: e2:cd:5f:30:71:1c:f4:81:e3:cf:e3:1a:97:2d:00: 01:62:59:5e:40:1a:5d:0e:0a:b1:ed:96:ad:4a:da: 40:53:33:52:b5:55:78:cf:db:c9:1a:05:0e:1f:6e: 64:88:14:72:f1:ee:f4:3d:50:74:75:87:69:98:3a: 34:88:2e:97:b4:a7:91:15:f8:fa:bc:d5:e5:14:23: 7c:1f:82:bb:75:aa:b8:0e:86:33:26:6d:e9:f7:89: e5:8a:79:48:bb:6e:65:0e:28:4b:fb:ab:0d:ab:0c: 07:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:22:86:13:8B:BA:C9:7F:CA:68:4F:BA:A3:6F:9E:DC:20:5E:0D:43 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a302dc9c-12e9-4b66-8c6d-e2994a21a1bd/ec24fabd-de17-3231-b198-70f75562becc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a302dc9c-12e9-4b66-8c6d-e2994a21a1bd/a302dc9c-12e9-4b66-8c6d-e2994a21a1bd.crl X509v3 Authority Key Identifier: keyid:0F:DC:2F:6E:33:64:5F:E3:7B:D2:58:C7:5E:84:68:D9:5C:1D:22:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a302dc9c-12e9-4b66-8c6d-e2994a21a1bd.cer sbgp-ipAddrBlock: critical IPv4: 64.90.129.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:c9:59:6f:81:60:32:54:51:ca:7b:2a:dc:85:84:c6:4f:d7: a8:c4:d3:a5:fd:05:83:12:8b:d9:b6:1e:cc:96:be:a1:03:17: 5c:f2:2f:3c:05:ef:c5:62:50:47:5e:57:61:53:6e:11:0e:78: bb:56:16:4f:62:eb:39:36:e5:45:e3:a4:bf:04:10:54:ef:76: 77:4e:30:7d:78:45:7c:b3:96:5f:4a:8b:f6:5a:c0:b5:59:ff: 44:fa:69:69:4d:cf:42:53:4e:d0:55:f2:6a:51:70:6c:43:56: e3:38:0e:2b:ea:1a:a4:21:8d:ec:e7:b3:2e:6b:e1:87:62:35: 35:38:1e:c7:94:10:f5:00:cb:11:f9:3c:53:4a:c7:e9:e0:b0: d4:ee:d5:ef:51:e8:1a:96:18:16:57:42:2c:ab:a9:f6:40:94: e9:70:fa:1f:98:ef:b4:41:c5:58:ed:d8:51:c9:bd:cc:59:ac: 3a:b5:f6:bc:7d:09:2a:b9:8e:98:32:f9:6b:2b:e4:5e:13:8a: c8:4b:f6:23:a3:9b:11:3a:83:94:23:48:c9:a9:07:7c:a8:d3: c6:e7:b1:12:ce:a8:04:85:1f:38:37:30:a4:19:a8:c7:be:9a: f4:62:eb:4e:46:73:e1:5f:82:c5:c5:fd:7a:11:81:0d:e6:11: 8d:7d:10:20 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr1IUzVrfQ2p65kOwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTMwMmRjOWMtMTJlOS00YjY2LThjNmQtZTI5OTRhMjFh MWJkMB4XDTI1MDgyNDAxMDAzM1oXDTI1MTEyMjAyMDAzM1owLzEtMCsGA1UEAxMk YzEzYmYzNjAtMDVlYi00Y2MyLWI3YjgtMTgzYTVjMzhiZjg4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiYDmN33coATg0F1OtUzH4tvSQSS5d+XO6z50 GhWfV6EkuBed+v4BAGtbgXaA1NssbygqWSCDTdRtWQF7koxIQosL3imBiYkBfo3o lssBKhe67lbJEZedLt/Ug3Ki2/y/mDOCrF+YlKBujzuGx7ovhgIne30dmIkl4y2x QsXAlq9IoURmu0WTX7WeMgnk9pACEJuWQt7izV8wcRz0gePP4xqXLQABYlleQBpd Dgqx7ZatStpAUzNStVV4z9vJGgUOH25kiBRy8e70PVB0dYdpmDo0iC6XtKeRFfj6 vNXlFCN8H4K7daq4DoYzJm3p94nlinlIu25lDihL+6sNqwwHQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCsihhOLusl/ymhPuqNvntwgXg1DMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9hMzAy ZGM5Yy0xMmU5LTRiNjYtOGM2ZC1lMjk5NGEyMWExYmQvZWMyNGZhYmQtZGUxNy0z MjMxLWIxOTgtNzBmNzU1NjJiZWNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYTMwMmRjOWMtMTJlOS00YjY2LThj NmQtZTI5OTRhMjFhMWJkL2EzMDJkYzljLTEyZTktNGI2Ni04YzZkLWUyOTk0YTIx YTFiZC5jcmwwHwYDVR0jBBgwFoAUD9wvbjNkX+N70ljHXoRo2VwdIpswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9hMzAyZGM5Yy0xMmU5LTRiNjYtOGM2ZC1lMjk5 NGEyMWExYmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQFqBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHnJWW+BYDJUUcp7KtyFhMZP16jE06X9BYMSi9m2HsyWvqEDF1zyLzwF 78ViUEdeV2FTbhEOeLtWFk9i6zk25UXjpL8EEFTvdndOMH14RXyzll9Ki/ZawLVZ /0T6aWlNz0JTTtBV8mpRcGxDVuM4DivqGqQhjeznsy5r4YdiNTU4HseUEPUAyxH5 PFNKx+ngsNTu1e9R6BqWGBZXQiyrqfZAlOlw+h+Y77RBxVjt2FHJvcxZrDq19rx9 CSq5jpgy+Wsr5F4TishL9iOjmxE6g5QjSMmpB3yo08bnsRLOqASFHzg3MKQZqMe+ mvRi605Gc+FfgsXF/XoRgQ3mEY19ECA= -----END CERTIFICATE-----Generated at Sun Aug 24 04:51:59 2025 by rpki-client