$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a302dc9c-12e9-4b66-8c6d-e2994a21a1bd/1f36c010-0da8-3095-9972-d65efcd1e1f1.roa File: 1f36c010-0da8-3095-9972-d65efcd1e1f1.roa (raw, json) Hash identifier: kjrmn+kdJcr6gmNmabiQHu60/6WBblRppv8DfOTpcQ0= Subject key identifier: CB:0A:E3:08:83:C9:8B:EE:12:8E:DD:E5:0A:DC:6E:D7:7C:B6:0F:1E Certificate issuer: /CN=a302dc9c-12e9-4b66-8c6d-e2994a21a1bd Certificate serial: 010D0C9F4328584D95F005EA78D40A8DB01ED100 Authority key identifier: 0F:DC:2F:6E:33:64:5F:E3:7B:D2:58:C7:5E:84:68:D9:5C:1D:22:9B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a302dc9c-12e9-4b66-8c6d-e2994a21a1bd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a302dc9c-12e9-4b66-8c6d-e2994a21a1bd/1f36c010-0da8-3095-9972-d65efcd1e1f1.roa Signing time: Wed 22 Apr 2026 01:00:23 +0000 ROA not before: Wed 22 Apr 2026 01:00:23 +0000 ROA not after: Tue 21 Jul 2026 01:00:23 +0000 asID: 393474 IP address blocks: 64.90.135.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a302dc9c-12e9-4b66-8c6d-e2994a21a1bd/a302dc9c-12e9-4b66-8c6d-e2994a21a1bd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a302dc9c-12e9-4b66-8c6d-e2994a21a1bd/a302dc9c-12e9-4b66-8c6d-e2994a21a1bd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a302dc9c-12e9-4b66-8c6d-e2994a21a1bd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 May 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:95:f0:05:ea:78:d4:0a:8d:b0:1e:d1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a302dc9c-12e9-4b66-8c6d-e2994a21a1bd Validity Not Before: Apr 22 01:00:23 2026 GMT Not After : Jul 21 01:00:23 2026 GMT Subject: CN=6c098093-c5ff-47c7-8b6b-567dcf7eca48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:38:99:41:5c:ae:85:61:6b:2e:b4:50:e9:04: 83:4a:2e:98:19:7d:22:33:22:ae:37:5e:b6:3a:93: f1:6b:ea:bc:d3:5c:25:bc:d9:83:8a:46:0c:aa:a4: 41:36:e5:5e:1e:c5:6e:6c:52:22:cc:1c:9b:c8:0c: 98:f2:28:d3:42:04:7e:e9:55:e9:6c:63:35:3e:fb: 8e:0a:40:75:ed:67:d1:00:87:d2:df:6a:33:f6:22: 96:11:6f:bb:bb:f5:01:50:c0:8c:ee:e0:42:dc:7a: 2c:05:38:1f:50:bc:a0:bd:b3:85:e0:a5:81:c1:00: e9:48:c6:f0:de:22:da:de:6d:5d:ad:a0:c6:eb:b3: f5:85:9d:c7:c2:8c:c3:1c:91:6a:ec:2d:20:cc:1f: c7:60:51:5f:03:cc:85:07:41:fe:45:b6:60:50:dc: 18:c4:e9:39:55:74:f4:c4:d1:52:3b:a7:6c:c4:0b: 9e:b2:5b:70:57:ac:22:59:20:3e:1f:aa:ed:ca:48: 02:63:52:b3:3f:27:7e:87:5c:7c:91:6a:07:ba:1f: d6:7b:d7:f6:a5:a7:d2:e3:5f:94:a2:d6:9a:1d:4f: 81:c9:dd:35:c6:52:f4:37:7b:b2:fa:f4:79:22:82: e3:95:4a:7d:91:76:29:29:c9:5f:99:41:a5:c9:a8: 8a:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:0A:E3:08:83:C9:8B:EE:12:8E:DD:E5:0A:DC:6E:D7:7C:B6:0F:1E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a302dc9c-12e9-4b66-8c6d-e2994a21a1bd/1f36c010-0da8-3095-9972-d65efcd1e1f1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a302dc9c-12e9-4b66-8c6d-e2994a21a1bd/a302dc9c-12e9-4b66-8c6d-e2994a21a1bd.crl X509v3 Authority Key Identifier: keyid:0F:DC:2F:6E:33:64:5F:E3:7B:D2:58:C7:5E:84:68:D9:5C:1D:22:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a302dc9c-12e9-4b66-8c6d-e2994a21a1bd.cer sbgp-ipAddrBlock: critical IPv4: 64.90.135.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:ed:c8:cd:7c:7d:d5:6f:4e:70:14:63:ef:b0:f6:ef:9b:f3: 8c:5c:f9:97:b8:ae:d8:c8:bd:c9:57:6a:61:c5:94:60:be:0f: 44:71:b5:ee:d5:90:80:7a:34:8f:5e:b8:db:10:f2:c3:9e:3f: d4:0a:12:20:52:f3:54:1c:ce:ed:a5:89:e9:0e:1a:21:e5:79: df:4f:ce:11:b3:73:7b:f2:8d:42:8c:8e:a2:26:58:b6:af:c4: 43:6b:6b:70:70:f8:64:f9:4e:9d:b8:25:18:6a:0e:79:81:9a: e4:64:c7:4e:d2:9f:ff:59:9c:e7:3c:81:bd:1f:90:b4:39:28: ab:c7:f7:56:ff:88:14:f8:bb:e2:a8:8c:ee:a4:36:5e:95:5d: 17:b4:5d:6d:74:b4:39:54:0d:c9:a1:4f:3c:98:a0:c0:15:17: c8:b8:48:ad:98:2e:57:e4:1d:16:6a:b2:e4:69:e1:7b:60:86: f7:50:ce:6e:f9:7b:7c:a2:8e:06:43:54:e5:a7:86:df:02:0b: 72:65:a4:26:4c:7c:67:17:26:74:75:77:56:63:f8:71:b1:d4: da:c9:01:c6:7c:7d:5c:8b:d3:48:c7:2a:20:9e:dc:5d:96:c3: d9:ab:d9:c6:06:81:1d:e2:27:7b:3c:52:1a:c7:b4:bd:46:cd: 67:54:3c:54 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2V8AXqeNQKjbAe0QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTMwMmRjOWMtMTJlOS00YjY2LThjNmQtZTI5OTRhMjFh MWJkMB4XDTI2MDQyMjAxMDAyM1oXDTI2MDcyMTAxMDAyM1owLzEtMCsGA1UEAxMk NmMwOTgwOTMtYzVmZi00N2M3LThiNmItNTY3ZGNmN2VjYTQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3TiZQVyuhWFrLrRQ6QSDSi6YGX0iMyKuN162 OpPxa+q801wlvNmDikYMqqRBNuVeHsVubFIizBybyAyY8ijTQgR+6VXpbGM1PvuO CkB17WfRAIfS32oz9iKWEW+7u/UBUMCM7uBC3HosBTgfULygvbOF4KWBwQDpSMbw 3iLa3m1draDG67P1hZ3HwozDHJFq7C0gzB/HYFFfA8yFB0H+RbZgUNwYxOk5VXT0 xNFSO6dsxAuesltwV6wiWSA+H6rtykgCY1KzPyd+h1x8kWoHuh/We9f2pafS41+U otaaHU+Byd01xlL0N3uy+vR5IoLjlUp9kXYpKclfmUGlyaiKBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMsK4wiDyYvuEo7d5Qrcbtd8tg8eMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9hMzAy ZGM5Yy0xMmU5LTRiNjYtOGM2ZC1lMjk5NGEyMWExYmQvMWYzNmMwMTAtMGRhOC0z MDk1LTk5NzItZDY1ZWZjZDFlMWYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYTMwMmRjOWMtMTJlOS00YjY2LThj NmQtZTI5OTRhMjFhMWJkL2EzMDJkYzljLTEyZTktNGI2Ni04YzZkLWUyOTk0YTIx YTFiZC5jcmwwHwYDVR0jBBgwFoAUD9wvbjNkX+N70ljHXoRo2VwdIpswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9hMzAyZGM5Yy0xMmU5LTRiNjYtOGM2ZC1lMjk5 NGEyMWExYmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQFqHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADXtyM18fdVvTnAUY++w9u+b84xc+Ze4rtjIvclXamHFlGC+D0Rxte7V kIB6NI9euNsQ8sOeP9QKEiBS81Qczu2liekOGiHled9PzhGzc3vyjUKMjqImWLav xENra3Bw+GT5Tp24JRhqDnmBmuRkx07Sn/9ZnOc8gb0fkLQ5KKvH91b/iBT4u+Ko jO6kNl6VXRe0XW10tDlUDcmhTzyYoMAVF8i4SK2YLlfkHRZqsuRp4XtghvdQzm75 e3yijgZDVOWnht8CC3JlpCZMfGcXJnR1d1Zj+HGx1NrJAcZ8fVyL00jHKiCe3F2W w9mr2cYGgR3iJ3s8UhrHtL1GzWdUPFQ= -----END CERTIFICATE-----Generated at Sun May 3 22:22:25 2026 by rpki-client