$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a302dc9c-12e9-4b66-8c6d-e2994a21a1bd/ec24fabd-de17-3231-b198-70f75562becc.roa File: ec24fabd-de17-3231-b198-70f75562becc.roa (raw, json) Hash identifier: Yw+LYFJmtp+vdrFYRgxI9W54Ox2+aTz1rDZiA0krq+s= Subject key identifier: BA:B1:AD:60:65:91:C8:09:F5:6F:43:02:CF:47:71:07:AC:CD:52:E4 Certificate issuer: /CN=a302dc9c-12e9-4b66-8c6d-e2994a21a1bd Certificate serial: 010D0C9F4328584E7634DCB1D75FD8B2C556E100 Authority key identifier: 0F:DC:2F:6E:33:64:5F:E3:7B:D2:58:C7:5E:84:68:D9:5C:1D:22:9B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a302dc9c-12e9-4b66-8c6d-e2994a21a1bd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a302dc9c-12e9-4b66-8c6d-e2994a21a1bd/ec24fabd-de17-3231-b198-70f75562becc.roa Signing time: Sat 11 Jul 2026 09:00:12 +0000 ROA not before: Sat 11 Jul 2026 09:00:12 +0000 ROA not after: Fri 09 Oct 2026 09:00:12 +0000 asID: 393474 IP address blocks: 64.90.129.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a302dc9c-12e9-4b66-8c6d-e2994a21a1bd/a302dc9c-12e9-4b66-8c6d-e2994a21a1bd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a302dc9c-12e9-4b66-8c6d-e2994a21a1bd/a302dc9c-12e9-4b66-8c6d-e2994a21a1bd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a302dc9c-12e9-4b66-8c6d-e2994a21a1bd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Jul 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:76:34:dc:b1:d7:5f:d8:b2:c5:56:e1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a302dc9c-12e9-4b66-8c6d-e2994a21a1bd Validity Not Before: Jul 11 09:00:12 2026 GMT Not After : Oct 9 09:00:12 2026 GMT Subject: CN=77b87de3-9be0-4203-9c09-11e4d279e7b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:71:bf:59:2b:ae:19:20:4a:f9:e8:2c:47:81: fc:55:54:db:7c:37:d3:af:4d:97:f2:8c:e7:fb:a9: e0:9e:7f:a7:e6:ba:71:2a:90:48:b5:7d:79:91:e9: ed:a2:73:ce:09:1f:06:ca:35:0f:8b:12:0f:a5:04: 80:e6:59:43:e8:90:b6:90:e1:d9:04:45:26:81:a0: b4:5d:4c:1b:de:83:fd:9e:f6:2c:e9:e5:aa:d6:bf: 80:7c:4d:22:dd:49:53:17:34:9f:92:79:6e:3f:1d: e4:fc:96:98:c6:6f:fc:2f:64:2f:57:94:4d:53:d9: f5:cf:b7:39:9c:ca:b1:e8:16:15:d7:4a:a2:d0:14: 04:41:f7:47:a8:c0:1f:11:a3:47:90:96:46:7b:d9: d4:bf:02:32:a2:07:c3:84:ff:3f:05:fc:02:8d:6e: f5:15:53:94:28:b0:f9:5f:7d:23:2b:ae:5e:18:b6: f5:24:43:28:a0:d2:17:01:61:ad:ed:ac:1e:b5:56: 71:c8:b3:1f:17:79:84:db:c3:5f:1b:c0:29:b1:77: 0e:2c:5f:36:98:7f:86:03:93:ff:de:0b:a0:2b:49: 4e:37:0d:49:91:98:de:64:10:87:d8:d9:80:8c:e3: f1:f5:2d:b5:72:d9:f9:93:37:df:3a:37:3c:3d:fd: a1:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:B1:AD:60:65:91:C8:09:F5:6F:43:02:CF:47:71:07:AC:CD:52:E4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a302dc9c-12e9-4b66-8c6d-e2994a21a1bd/ec24fabd-de17-3231-b198-70f75562becc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a302dc9c-12e9-4b66-8c6d-e2994a21a1bd/a302dc9c-12e9-4b66-8c6d-e2994a21a1bd.crl X509v3 Authority Key Identifier: keyid:0F:DC:2F:6E:33:64:5F:E3:7B:D2:58:C7:5E:84:68:D9:5C:1D:22:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a302dc9c-12e9-4b66-8c6d-e2994a21a1bd.cer sbgp-ipAddrBlock: critical IPv4: 64.90.129.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:9c:54:01:0d:19:ea:13:08:1f:37:a5:19:6d:ce:22:dd:82: 0b:cd:a2:fc:0c:dd:74:59:9d:37:33:63:2f:a1:fa:df:e7:55: 22:fb:9b:b3:81:66:27:4c:4a:d4:a3:d5:51:ad:10:97:c4:f6: c7:51:db:40:09:d0:93:c1:27:d6:28:02:cd:8a:79:a8:7b:38: 4d:d5:ca:73:af:02:76:a1:aa:df:0c:33:3c:b1:63:07:cb:ce: 20:26:69:e6:90:03:b8:f8:44:ab:af:cc:29:70:9a:42:c5:67: 54:41:08:51:71:88:01:20:96:82:4e:47:83:7a:79:ff:ef:2c: 5d:5a:7c:39:4f:f6:19:ce:ae:c5:20:32:ae:ab:a3:8d:37:81: ab:72:8d:d8:ce:85:7a:64:ad:1b:70:f8:e3:f1:f3:88:7a:f5: a2:ef:f4:cd:97:d6:81:3d:31:b5:76:1c:31:26:3f:af:fb:af: 18:4a:3b:6a:90:e6:50:69:03:a7:23:43:76:d9:94:e0:d5:a3: 16:2b:78:36:ff:51:50:4c:03:e7:7b:87:bd:18:59:f9:08:50: e0:68:b0:0e:76:54:8c:73:18:a8:cf:ae:d9:21:87:76:9e:72: 52:41:0b:77:93:c5:0e:fe:74:07:1c:97:de:d7:4b:7b:1b:cd: 14:ae:47:be -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE52NNyx11/YssVW4QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTMwMmRjOWMtMTJlOS00YjY2LThjNmQtZTI5OTRhMjFh MWJkMB4XDTI2MDcxMTA5MDAxMloXDTI2MTAwOTA5MDAxMlowLzEtMCsGA1UEAxMk NzdiODdkZTMtOWJlMC00MjAzLTljMDktMTFlNGQyNzllN2I3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoXG/WSuuGSBK+egsR4H8VVTbfDfTr02X8ozn +6ngnn+n5rpxKpBItX15kentonPOCR8GyjUPixIPpQSA5llD6JC2kOHZBEUmgaC0 XUwb3oP9nvYs6eWq1r+AfE0i3UlTFzSfknluPx3k/JaYxm/8L2QvV5RNU9n1z7c5 nMqx6BYV10qi0BQEQfdHqMAfEaNHkJZGe9nUvwIyogfDhP8/BfwCjW71FVOUKLD5 X30jK65eGLb1JEMooNIXAWGt7awetVZxyLMfF3mE28NfG8ApsXcOLF82mH+GA5P/ 3gugK0lONw1JkZjeZBCH2NmAjOPx9S21ctn5kzffOjc8Pf2hFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLqxrWBlkcgJ9W9DAs9HcQeszVLkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9hMzAy ZGM5Yy0xMmU5LTRiNjYtOGM2ZC1lMjk5NGEyMWExYmQvZWMyNGZhYmQtZGUxNy0z MjMxLWIxOTgtNzBmNzU1NjJiZWNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYTMwMmRjOWMtMTJlOS00YjY2LThj NmQtZTI5OTRhMjFhMWJkL2EzMDJkYzljLTEyZTktNGI2Ni04YzZkLWUyOTk0YTIx YTFiZC5jcmwwHwYDVR0jBBgwFoAUD9wvbjNkX+N70ljHXoRo2VwdIpswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9hMzAyZGM5Yy0xMmU5LTRiNjYtOGM2ZC1lMjk5 NGEyMWExYmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQFqBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFicVAENGeoTCB83pRltziLdggvNovwM3XRZnTczYy+h+t/nVSL7m7OB ZidMStSj1VGtEJfE9sdR20AJ0JPBJ9YoAs2Keah7OE3VynOvAnahqt8MMzyxYwfL ziAmaeaQA7j4RKuvzClwmkLFZ1RBCFFxiAEgloJOR4N6ef/vLF1afDlP9hnOrsUg Mq6ro403gatyjdjOhXpkrRtw+OPx84h69aLv9M2X1oE9MbV2HDEmP6/7rxhKO2qQ 5lBpA6cjQ3bZlODVoxYreDb/UVBMA+d7h70YWfkIUOBosA52VIxzGKjPrtkhh3ae clJBC3eTxQ7+dAccl97XS3sbzRSuR74= -----END CERTIFICATE-----Generated at Thu Jul 23 19:10:50 2026 by rpki-client