$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a302dc9c-12e9-4b66-8c6d-e2994a21a1bd/ec24fabd-de17-3231-b198-70f75562becc.roa File: ec24fabd-de17-3231-b198-70f75562becc.roa (raw, json) Hash identifier: bfvqWsk2lq5Qxq1H15EaFirECBd89wVVNEnOLnSpr58= Subject key identifier: B2:40:F1:36:A9:6C:B0:B9:D5:AB:58:8E:51:93:10:F7:04:EC:55:52 Certificate issuer: /CN=a302dc9c-12e9-4b66-8c6d-e2994a21a1bd Certificate serial: 010D0C9F4328584D95F005BF1186489C2171E260 Authority key identifier: 0F:DC:2F:6E:33:64:5F:E3:7B:D2:58:C7:5E:84:68:D9:5C:1D:22:9B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a302dc9c-12e9-4b66-8c6d-e2994a21a1bd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a302dc9c-12e9-4b66-8c6d-e2994a21a1bd/ec24fabd-de17-3231-b198-70f75562becc.roa Signing time: Wed 22 Apr 2026 01:00:23 +0000 ROA not before: Wed 22 Apr 2026 01:00:23 +0000 ROA not after: Tue 21 Jul 2026 01:00:23 +0000 asID: 393474 IP address blocks: 64.90.129.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a302dc9c-12e9-4b66-8c6d-e2994a21a1bd/a302dc9c-12e9-4b66-8c6d-e2994a21a1bd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a302dc9c-12e9-4b66-8c6d-e2994a21a1bd/a302dc9c-12e9-4b66-8c6d-e2994a21a1bd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a302dc9c-12e9-4b66-8c6d-e2994a21a1bd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 May 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:95:f0:05:bf:11:86:48:9c:21:71:e2:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a302dc9c-12e9-4b66-8c6d-e2994a21a1bd Validity Not Before: Apr 22 01:00:23 2026 GMT Not After : Jul 21 01:00:23 2026 GMT Subject: CN=53d6c81c-0d22-4f56-a7a7-6d57f858f3fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:bf:d1:15:ef:16:c7:63:7c:24:bc:cc:3f:94: 83:a7:05:e4:5b:d0:74:84:8e:43:ea:bc:0f:10:30: 72:e0:1b:aa:a9:43:9b:d5:35:45:a0:b1:c3:26:5a: b6:d5:59:57:1b:e3:a9:4a:76:10:0c:1d:43:9e:a7: cd:7d:6e:1c:71:4d:ba:e5:45:df:eb:96:27:df:11: 6e:66:5a:ef:64:65:a1:8f:b4:6d:0c:e6:99:e5:d5: 01:83:bd:6f:03:68:00:ef:da:9d:3f:07:11:19:92: d2:32:92:3e:c7:9c:14:39:8b:97:72:e3:7b:28:e3: 13:2a:6f:6c:d5:80:a9:98:f5:5d:b8:d3:72:e7:46: e4:9b:06:d2:7f:cf:b9:db:03:8b:6f:30:de:d6:00: 46:82:45:e4:18:ab:9a:a8:f1:02:ee:49:83:7f:b3: 62:f2:5f:5a:b1:63:71:5a:b3:59:96:62:65:a3:69: 42:6b:d5:39:4a:03:09:fb:00:fd:97:03:c4:23:4a: 45:10:29:77:e1:a0:e1:82:6d:bf:19:61:de:80:e2: 73:db:ac:dc:7a:08:0c:f6:6f:8f:22:1b:a5:ce:49: b2:7d:1c:5e:00:c6:8f:cd:d9:7c:06:bb:bc:e1:ef: c9:b8:ba:27:6f:86:e4:f0:41:ae:5a:00:b3:5f:fb: fb:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:40:F1:36:A9:6C:B0:B9:D5:AB:58:8E:51:93:10:F7:04:EC:55:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a302dc9c-12e9-4b66-8c6d-e2994a21a1bd/ec24fabd-de17-3231-b198-70f75562becc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a302dc9c-12e9-4b66-8c6d-e2994a21a1bd/a302dc9c-12e9-4b66-8c6d-e2994a21a1bd.crl X509v3 Authority Key Identifier: keyid:0F:DC:2F:6E:33:64:5F:E3:7B:D2:58:C7:5E:84:68:D9:5C:1D:22:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a302dc9c-12e9-4b66-8c6d-e2994a21a1bd.cer sbgp-ipAddrBlock: critical IPv4: 64.90.129.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:99:30:48:db:22:28:79:52:b3:22:65:d4:30:8d:b0:4f:57: 50:ee:ee:cb:d3:ce:a9:3b:0a:32:e3:ad:3d:fb:96:93:36:0c: 47:98:85:d5:cf:41:61:f8:10:bf:34:90:ca:97:23:31:08:c6: 2f:38:a6:5a:d1:7a:04:18:90:f1:a7:60:2b:7c:d9:8f:a3:b8: 79:4a:f1:72:91:c6:bb:ae:73:02:d0:66:e9:09:83:bf:c9:1b: 06:f6:de:ac:23:a6:d8:e2:c5:cd:a6:83:e4:22:3c:c6:62:48: 25:fe:18:d5:1f:f9:f1:d6:2c:38:45:6b:2c:50:18:6b:16:cc: 20:f2:6c:4c:a3:a5:06:10:65:2b:08:5d:12:c3:22:f5:2b:f0: 7c:53:75:a5:ed:38:9e:d4:c3:c7:c0:17:d9:b5:68:32:12:9e: 83:f8:e9:33:8f:fe:30:76:2b:58:25:5b:a0:4c:c2:6c:60:18: 37:95:7a:74:18:85:0d:a4:1c:45:62:c3:6e:f8:d4:d0:98:bd: 77:9f:14:10:2e:5e:e5:c9:ac:58:af:4f:d4:ed:b9:41:89:25: c5:18:37:20:59:1b:de:c7:2c:5d:2e:e5:ce:f0:97:14:cd:8d: 41:3b:79:33:45:ad:4e:ca:e2:44:23:73:63:6b:1c:47:57:64: 9a:12:2a:2e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2V8AW/EYZInCFx4mAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTMwMmRjOWMtMTJlOS00YjY2LThjNmQtZTI5OTRhMjFh MWJkMB4XDTI2MDQyMjAxMDAyM1oXDTI2MDcyMTAxMDAyM1owLzEtMCsGA1UEAxMk NTNkNmM4MWMtMGQyMi00ZjU2LWE3YTctNmQ1N2Y4NThmM2ZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhb/RFe8Wx2N8JLzMP5SDpwXkW9B0hI5D6rwP EDBy4BuqqUOb1TVFoLHDJlq21VlXG+OpSnYQDB1DnqfNfW4ccU265UXf65Yn3xFu ZlrvZGWhj7RtDOaZ5dUBg71vA2gA79qdPwcRGZLSMpI+x5wUOYuXcuN7KOMTKm9s 1YCpmPVduNNy50bkmwbSf8+52wOLbzDe1gBGgkXkGKuaqPEC7kmDf7Ni8l9asWNx WrNZlmJlo2lCa9U5SgMJ+wD9lwPEI0pFECl34aDhgm2/GWHegOJz26zceggM9m+P IhulzkmyfRxeAMaPzdl8Bru84e/JuLonb4bk8EGuWgCzX/v77QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLJA8TapbLC51atYjlGTEPcE7FVSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9hMzAy ZGM5Yy0xMmU5LTRiNjYtOGM2ZC1lMjk5NGEyMWExYmQvZWMyNGZhYmQtZGUxNy0z MjMxLWIxOTgtNzBmNzU1NjJiZWNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYTMwMmRjOWMtMTJlOS00YjY2LThj NmQtZTI5OTRhMjFhMWJkL2EzMDJkYzljLTEyZTktNGI2Ni04YzZkLWUyOTk0YTIx YTFiZC5jcmwwHwYDVR0jBBgwFoAUD9wvbjNkX+N70ljHXoRo2VwdIpswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9hMzAyZGM5Yy0xMmU5LTRiNjYtOGM2ZC1lMjk5 NGEyMWExYmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQFqBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHqZMEjbIih5UrMiZdQwjbBPV1Du7svTzqk7CjLjrT37lpM2DEeYhdXP QWH4EL80kMqXIzEIxi84plrRegQYkPGnYCt82Y+juHlK8XKRxruucwLQZukJg7/J Gwb23qwjptjixc2mg+QiPMZiSCX+GNUf+fHWLDhFayxQGGsWzCDybEyjpQYQZSsI XRLDIvUr8HxTdaXtOJ7Uw8fAF9m1aDISnoP46TOP/jB2K1glW6BMwmxgGDeVenQY hQ2kHEViw2741NCYvXefFBAuXuXJrFivT9TtuUGJJcUYNyBZG97HLF0u5c7wlxTN jUE7eTNFrU7K4kQjc2NrHEdXZJoSKi4= -----END CERTIFICATE-----Generated at Sun May 3 22:22:24 2026 by rpki-client