$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a302dc9c-12e9-4b66-8c6d-e2994a21a1bd/0cd116cf-03c5-3e02-99d0-68d5022c0285.roa File: 0cd116cf-03c5-3e02-99d0-68d5022c0285.roa (raw, json) Hash identifier: oXTa51Ra3L/2uu+x4rq5iqcs8Ap9n3B5Ny7bdiBmA3Y= Subject key identifier: CC:E6:76:AA:39:52:68:B5:EA:A7:CB:CE:CE:1C:83:B4:EE:07:43:1F Certificate issuer: /CN=a302dc9c-12e9-4b66-8c6d-e2994a21a1bd Certificate serial: 010D0C9F4328584BAD628F38C55238614DAA20A0 Authority key identifier: 0F:DC:2F:6E:33:64:5F:E3:7B:D2:58:C7:5E:84:68:D9:5C:1D:22:9B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a302dc9c-12e9-4b66-8c6d-e2994a21a1bd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a302dc9c-12e9-4b66-8c6d-e2994a21a1bd/0cd116cf-03c5-3e02-99d0-68d5022c0285.roa Signing time: Wed 29 Oct 2025 01:00:31 +0000 ROA not before: Wed 29 Oct 2025 01:00:31 +0000 ROA not after: Tue 27 Jan 2026 02:00:31 +0000 asID: 393474 IP address blocks: 64.90.131.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a302dc9c-12e9-4b66-8c6d-e2994a21a1bd/a302dc9c-12e9-4b66-8c6d-e2994a21a1bd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a302dc9c-12e9-4b66-8c6d-e2994a21a1bd/a302dc9c-12e9-4b66-8c6d-e2994a21a1bd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a302dc9c-12e9-4b66-8c6d-e2994a21a1bd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ad:62:8f:38:c5:52:38:61:4d:aa:20:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a302dc9c-12e9-4b66-8c6d-e2994a21a1bd Validity Not Before: Oct 29 01:00:31 2025 GMT Not After : Jan 27 02:00:31 2026 GMT Subject: CN=4f9d687c-351d-40ef-aaf5-0205e981776f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:06:09:bd:18:14:ac:48:53:7e:db:72:a6:34: 04:17:e5:7b:15:38:34:74:75:c6:5a:8a:08:5c:e7: 45:66:96:8a:94:cd:70:c4:41:f3:63:7a:1c:0d:6a: ce:55:a2:15:67:5d:3a:10:9c:fc:e9:7a:90:f3:84: 33:73:0d:89:e5:bf:c2:0e:86:8d:b2:a5:83:49:6f: 37:93:8b:c1:84:c4:53:28:a1:51:12:ba:f6:3a:ac: 02:ab:c2:4a:df:df:4a:b6:2a:1c:ed:99:91:e8:b7: 9f:08:ee:52:21:19:8a:7a:eb:3b:a6:86:0f:62:71: 01:0c:d1:ac:8a:10:31:06:bd:e8:6d:28:41:ab:53: f9:b4:76:9c:58:2e:26:ac:4b:f7:18:a9:28:ae:08: ea:61:11:81:48:4d:25:99:71:d1:0c:7f:36:a2:40: 69:f1:25:01:a2:a1:23:f8:d4:5b:fd:a7:47:d1:4d: 39:2c:9c:85:53:56:49:48:d4:5b:87:a9:e8:78:73: d0:89:b2:8f:49:37:25:ab:04:62:59:7a:07:73:5b: f8:fa:4b:22:a1:ca:29:56:57:d2:83:32:f8:3a:6c: 3b:4a:5f:0c:04:08:f3:ec:47:bc:3f:16:52:75:eb: ce:83:77:08:ea:1f:f5:99:81:f0:4a:49:84:18:64: 61:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:E6:76:AA:39:52:68:B5:EA:A7:CB:CE:CE:1C:83:B4:EE:07:43:1F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a302dc9c-12e9-4b66-8c6d-e2994a21a1bd/0cd116cf-03c5-3e02-99d0-68d5022c0285.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a302dc9c-12e9-4b66-8c6d-e2994a21a1bd/a302dc9c-12e9-4b66-8c6d-e2994a21a1bd.crl X509v3 Authority Key Identifier: keyid:0F:DC:2F:6E:33:64:5F:E3:7B:D2:58:C7:5E:84:68:D9:5C:1D:22:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a302dc9c-12e9-4b66-8c6d-e2994a21a1bd.cer sbgp-ipAddrBlock: critical IPv4: 64.90.131.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:99:46:8e:57:7b:ce:a0:65:cf:18:fb:18:1b:3c:ec:92:bb: 54:7e:e5:39:3a:f8:0d:65:06:3f:5f:a9:ac:be:51:e3:da:a5: 3c:3c:9f:dd:91:a5:9d:68:d6:b0:fb:d8:90:db:6d:03:6a:f7: 25:25:9d:95:68:8c:ee:e6:01:b2:1e:e1:6b:af:a2:09:3b:02: a0:ca:fb:66:9d:70:c2:61:55:69:3e:e4:4e:02:28:4d:5e:11: 37:28:90:dd:15:ee:98:c0:45:0a:56:d0:a7:a0:ed:c5:08:26: 84:6e:0c:2e:ee:eb:ec:98:f9:bb:5f:28:bf:b6:38:e1:02:69: a4:52:db:bc:6b:7d:7c:dc:c9:0d:6b:50:3d:75:78:c2:e8:ef: 24:e0:27:36:12:d2:b7:1d:b8:e9:d1:b4:21:f1:3c:a2:2f:69: f6:4c:68:fe:47:e0:59:d6:c9:4c:e4:e5:9a:94:72:69:06:ce: af:1d:ad:cd:87:c0:52:ad:bd:de:4e:2e:60:6a:71:4b:a1:ef: 80:ce:12:07:72:83:f7:7d:c2:6b:51:b3:a4:1f:5b:13:09:86: 34:75:ef:52:aa:85:2d:02:98:c1:d5:4e:bf:29:94:50:99:af: 34:55:75:3e:73:31:61:a2:93:b8:be:7e:f3:95:bc:d6:b4:24: 92:5e:1b:e4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEutYo84xVI4YU2qIKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTMwMmRjOWMtMTJlOS00YjY2LThjNmQtZTI5OTRhMjFh MWJkMB4XDTI1MTAyOTAxMDAzMVoXDTI2MDEyNzAyMDAzMVowLzEtMCsGA1UEAxMk NGY5ZDY4N2MtMzUxZC00MGVmLWFhZjUtMDIwNWU5ODE3NzZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4QYJvRgUrEhTfttypjQEF+V7FTg0dHXGWooI XOdFZpaKlM1wxEHzY3ocDWrOVaIVZ106EJz86XqQ84Qzcw2J5b/CDoaNsqWDSW83 k4vBhMRTKKFRErr2OqwCq8JK399Ktioc7ZmR6LefCO5SIRmKeus7poYPYnEBDNGs ihAxBr3obShBq1P5tHacWC4mrEv3GKkorgjqYRGBSE0lmXHRDH82okBp8SUBoqEj +NRb/adH0U05LJyFU1ZJSNRbh6noeHPQibKPSTclqwRiWXoHc1v4+ksiocopVlfS gzL4Omw7Sl8MBAjz7Ee8PxZSdevOg3cI6h/1mYHwSkmEGGRhEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMzmdqo5Umi16qfLzs4cg7TuB0MfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9hMzAy ZGM5Yy0xMmU5LTRiNjYtOGM2ZC1lMjk5NGEyMWExYmQvMGNkMTE2Y2YtMDNjNS0z ZTAyLTk5ZDAtNjhkNTAyMmMwMjg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYTMwMmRjOWMtMTJlOS00YjY2LThj NmQtZTI5OTRhMjFhMWJkL2EzMDJkYzljLTEyZTktNGI2Ni04YzZkLWUyOTk0YTIx YTFiZC5jcmwwHwYDVR0jBBgwFoAUD9wvbjNkX+N70ljHXoRo2VwdIpswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9hMzAyZGM5Yy0xMmU5LTRiNjYtOGM2ZC1lMjk5 NGEyMWExYmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQFqDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGqZRo5Xe86gZc8Y+xgbPOySu1R+5Tk6+A1lBj9fqay+UePapTw8n92R pZ1o1rD72JDbbQNq9yUlnZVojO7mAbIe4Wuvogk7AqDK+2adcMJhVWk+5E4CKE1e ETcokN0V7pjARQpW0Keg7cUIJoRuDC7u6+yY+btfKL+2OOECaaRS27xrfXzcyQ1r UD11eMLo7yTgJzYS0rcduOnRtCHxPKIvafZMaP5H4FnWyUzk5ZqUcmkGzq8drc2H wFKtvd5OLmBqcUuh74DOEgdyg/d9wmtRs6QfWxMJhjR171KqhS0CmMHVTr8plFCZ rzRVdT5zMWGik7i+fvOVvNa0JJJeG+Q= -----END CERTIFICATE-----Generated at Wed Nov 5 10:18:49 2025 by rpki-client