$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a302dc9c-12e9-4b66-8c6d-e2994a21a1bd/2afe2567-cab2-360c-8f03-dbb24ef04992.roa File: 2afe2567-cab2-360c-8f03-dbb24ef04992.roa (raw, json) Hash identifier: nOq+DC6D1lW4jJcBM95ib8jjB7oaCIShaOtERSu0Y/k= Subject key identifier: 59:68:2C:39:33:06:44:42:A0:BC:F6:A0:D1:D6:FC:84:58:F4:AA:E3 Certificate issuer: /CN=a302dc9c-12e9-4b66-8c6d-e2994a21a1bd Certificate serial: 010D0C9F4328584B6E91FA6FA1E23B7E6C57FDC0 Authority key identifier: 0F:DC:2F:6E:33:64:5F:E3:7B:D2:58:C7:5E:84:68:D9:5C:1D:22:9B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a302dc9c-12e9-4b66-8c6d-e2994a21a1bd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a302dc9c-12e9-4b66-8c6d-e2994a21a1bd/2afe2567-cab2-360c-8f03-dbb24ef04992.roa Signing time: Mon 06 Oct 2025 13:00:41 +0000 ROA not before: Mon 06 Oct 2025 13:00:41 +0000 ROA not after: Sun 04 Jan 2026 14:00:41 +0000 asID: 393474 IP address blocks: 64.90.136.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a302dc9c-12e9-4b66-8c6d-e2994a21a1bd/a302dc9c-12e9-4b66-8c6d-e2994a21a1bd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a302dc9c-12e9-4b66-8c6d-e2994a21a1bd/a302dc9c-12e9-4b66-8c6d-e2994a21a1bd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a302dc9c-12e9-4b66-8c6d-e2994a21a1bd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6e:91:fa:6f:a1:e2:3b:7e:6c:57:fd:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a302dc9c-12e9-4b66-8c6d-e2994a21a1bd Validity Not Before: Oct 6 13:00:41 2025 GMT Not After : Jan 4 14:00:41 2026 GMT Subject: CN=a93bae19-7065-45c4-91c9-6284d2edca3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:5f:99:06:4f:de:b4:5b:c2:af:5c:cf:c0:fb: 28:32:da:ad:3a:70:b8:50:72:f2:08:03:c5:28:85: 7e:a7:41:6a:9a:c5:a9:4f:b8:0f:de:48:4f:e0:9b: 7e:fb:30:5f:12:6b:16:45:c0:29:8b:cb:ce:d5:20: ed:d1:ae:60:da:61:ec:58:15:b9:c4:6f:77:cf:8d: e7:21:b5:0e:3b:52:72:f2:c2:d4:51:60:df:74:5c: 9d:a3:28:35:71:11:9c:7b:a0:a6:23:14:f5:0b:c9: 94:ba:54:bd:b0:14:c9:c0:ee:54:49:21:59:a7:a1: 0d:a6:24:c5:70:d7:5b:64:48:4a:2c:dc:61:9a:a6: 63:08:9d:24:7b:ba:e9:96:5e:41:07:79:1b:38:65: b3:4a:29:61:4f:62:c3:0f:d2:65:ce:3a:db:aa:80: 85:7e:ab:bb:e7:99:a8:57:1e:d7:4f:01:be:88:29: c3:08:a0:20:59:89:fd:c4:de:f1:f5:c5:38:ab:7d: 76:e3:29:77:ce:2a:7d:c2:9d:0f:ef:23:40:7a:7b: d8:3d:18:b6:b5:9b:7b:56:c5:fb:0c:62:c6:49:0f: 4e:54:27:de:38:e7:56:47:06:b3:24:34:f4:d2:1c: 88:e5:b7:c7:49:41:ca:06:4c:2a:8f:cf:08:bc:7f: df:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:68:2C:39:33:06:44:42:A0:BC:F6:A0:D1:D6:FC:84:58:F4:AA:E3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a302dc9c-12e9-4b66-8c6d-e2994a21a1bd/2afe2567-cab2-360c-8f03-dbb24ef04992.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a302dc9c-12e9-4b66-8c6d-e2994a21a1bd/a302dc9c-12e9-4b66-8c6d-e2994a21a1bd.crl X509v3 Authority Key Identifier: keyid:0F:DC:2F:6E:33:64:5F:E3:7B:D2:58:C7:5E:84:68:D9:5C:1D:22:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a302dc9c-12e9-4b66-8c6d-e2994a21a1bd.cer sbgp-ipAddrBlock: critical IPv4: 64.90.136.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:f5:53:c9:d6:0c:47:36:62:f5:6d:ee:76:2b:d1:3f:5b:8f: 76:26:ef:ac:5a:80:3d:4e:41:9a:bf:45:dc:28:7c:74:f2:6b: 3e:85:a5:f7:97:ca:16:06:7d:0d:da:ce:85:e9:2c:54:d3:4f: b3:fe:11:59:78:cb:cc:8a:be:8c:13:62:27:3b:13:e6:af:50: 9b:d3:c8:db:c8:20:df:27:c9:13:c4:23:fc:97:c0:27:93:ec: f6:2c:7f:b6:0e:c5:d5:e0:26:4d:79:6c:37:e2:26:a7:c2:54: f3:7e:2b:90:8e:7d:07:ed:47:cb:22:d1:1a:fb:68:30:c1:c7: b4:c3:66:14:1f:4c:0a:e4:14:b3:2d:a3:ac:00:d1:8d:8a:68: 30:54:a9:40:4f:3c:63:88:1b:9a:95:3a:b1:6d:b9:48:3e:77: c7:78:7a:8f:f3:32:5c:4e:fb:1e:1d:d4:cb:14:b4:8e:6f:e4: bc:a1:e4:95:13:e0:29:85:1e:30:cc:2c:1b:18:fe:be:e6:03: 10:a7:29:0f:11:2e:48:f6:96:6d:4c:12:a5:6f:32:06:8c:b9: 7d:a6:e6:23:3e:9a:28:28:6f:60:48:1b:c7:7a:53:45:58:59: 71:b6:b6:23:03:5d:03:cd:d1:35:69:33:0d:28:44:f7:39:c5: 0a:02:8c:f4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtukfpvoeI7fmxX/cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTMwMmRjOWMtMTJlOS00YjY2LThjNmQtZTI5OTRhMjFh MWJkMB4XDTI1MTAwNjEzMDA0MVoXDTI2MDEwNDE0MDA0MVowLzEtMCsGA1UEAxMk YTkzYmFlMTktNzA2NS00NWM0LTkxYzktNjI4NGQyZWRjYTNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5l+ZBk/etFvCr1zPwPsoMtqtOnC4UHLyCAPF KIV+p0FqmsWpT7gP3khP4Jt++zBfEmsWRcApi8vO1SDt0a5g2mHsWBW5xG93z43n IbUOO1Jy8sLUUWDfdFydoyg1cRGce6CmIxT1C8mUulS9sBTJwO5USSFZp6ENpiTF cNdbZEhKLNxhmqZjCJ0ke7rpll5BB3kbOGWzSilhT2LDD9JlzjrbqoCFfqu755mo Vx7XTwG+iCnDCKAgWYn9xN7x9cU4q3124yl3zip9wp0P7yNAenvYPRi2tZt7VsX7 DGLGSQ9OVCfeOOdWRwazJDT00hyI5bfHSUHKBkwqj88IvH/fjwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFloLDkzBkRCoLz2oNHW/IRY9KrjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9hMzAy ZGM5Yy0xMmU5LTRiNjYtOGM2ZC1lMjk5NGEyMWExYmQvMmFmZTI1NjctY2FiMi0z NjBjLThmMDMtZGJiMjRlZjA0OTkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYTMwMmRjOWMtMTJlOS00YjY2LThj NmQtZTI5OTRhMjFhMWJkL2EzMDJkYzljLTEyZTktNGI2Ni04YzZkLWUyOTk0YTIx YTFiZC5jcmwwHwYDVR0jBBgwFoAUD9wvbjNkX+N70ljHXoRo2VwdIpswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9hMzAyZGM5Yy0xMmU5LTRiNjYtOGM2ZC1lMjk5 NGEyMWExYmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQFqIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA71U8nWDEc2YvVt7nYr0T9bj3Ym76xagD1OQZq/RdwofHTyaz6FpfeX yhYGfQ3azoXpLFTTT7P+EVl4y8yKvowTYic7E+avUJvTyNvIIN8nyRPEI/yXwCeT 7PYsf7YOxdXgJk15bDfiJqfCVPN+K5COfQftR8si0Rr7aDDBx7TDZhQfTArkFLMt o6wA0Y2KaDBUqUBPPGOIG5qVOrFtuUg+d8d4eo/zMlxO+x4d1MsUtI5v5Lyh5JUT 4CmFHjDMLBsY/r7mAxCnKQ8RLkj2lm1MEqVvMgaMuX2m5iM+migob2BIG8d6U0VY WXG2tiMDXQPN0TVpMw0oRPc5xQoCjPQ= -----END CERTIFICATE-----Generated at Thu Oct 9 20:04:29 2025 by rpki-client