$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a302dc9c-12e9-4b66-8c6d-e2994a21a1bd/2afe2567-cab2-360c-8f03-dbb24ef04992.roa File: 2afe2567-cab2-360c-8f03-dbb24ef04992.roa (raw, json) Hash identifier: Igih/qhPyXMmiVoq9UP3xd9UvDSRtZJPr/+ru/NJzLY= Subject key identifier: 0B:4B:7D:67:24:70:D3:C9:EE:D7:16:00:0A:61:F5:8B:B7:72:E7:DB Certificate issuer: /CN=a302dc9c-12e9-4b66-8c6d-e2994a21a1bd Certificate serial: 010D0C9F4328584A8DD5FD13534AD7C6DAA5EB40 Authority key identifier: 0F:DC:2F:6E:33:64:5F:E3:7B:D2:58:C7:5E:84:68:D9:5C:1D:22:9B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a302dc9c-12e9-4b66-8c6d-e2994a21a1bd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a302dc9c-12e9-4b66-8c6d-e2994a21a1bd/2afe2567-cab2-360c-8f03-dbb24ef04992.roa Signing time: Fri 18 Jul 2025 01:00:48 +0000 ROA not before: Fri 18 Jul 2025 01:00:48 +0000 ROA not after: Thu 16 Oct 2025 01:00:48 +0000 asID: 393474 IP address blocks: 64.90.136.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a302dc9c-12e9-4b66-8c6d-e2994a21a1bd/a302dc9c-12e9-4b66-8c6d-e2994a21a1bd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a302dc9c-12e9-4b66-8c6d-e2994a21a1bd/a302dc9c-12e9-4b66-8c6d-e2994a21a1bd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a302dc9c-12e9-4b66-8c6d-e2994a21a1bd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:8d:d5:fd:13:53:4a:d7:c6:da:a5:eb:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a302dc9c-12e9-4b66-8c6d-e2994a21a1bd Validity Not Before: Jul 18 01:00:48 2025 GMT Not After : Oct 16 01:00:48 2025 GMT Subject: CN=06242d1b-289f-4033-9fc3-28492f12ed9e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:91:bb:2e:b5:1c:ea:cb:fa:05:52:7b:8a:1d: 6b:2a:0a:b1:cf:d9:e9:68:3b:a6:7d:b0:11:48:57: c3:55:e0:40:11:ec:c3:9c:2e:07:67:fe:b0:6f:5e: ca:ba:c4:75:ae:67:cf:61:fd:07:22:91:40:ae:0b: 72:49:a5:4d:98:77:9f:17:4e:ef:8a:aa:4e:18:ca: e5:de:92:69:60:d3:fb:f7:00:85:d9:86:0d:66:7f: 0f:42:55:7e:c3:69:87:45:59:7c:f5:a4:71:9e:0c: b0:f2:d5:aa:19:23:ec:db:10:8f:1e:8f:50:6f:58: da:32:5f:36:ba:b3:31:87:98:e8:c0:d4:bd:24:ea: bd:28:12:f8:c2:90:75:0b:40:0e:83:72:52:c2:48: ac:da:fe:b2:19:c7:4b:49:2b:b4:6d:46:d1:99:c6: 59:9d:c9:4d:cc:2f:33:92:11:a3:ac:22:99:4e:84: 21:38:82:2a:70:67:01:80:47:cf:05:bb:2d:ab:91: 4e:2f:0c:f6:9d:e5:56:bc:9f:d9:04:aa:91:94:62: d8:a9:1f:f7:1f:da:b1:b9:83:84:83:4f:84:bd:e0: 1f:96:d3:cf:39:18:d4:3d:de:b5:d7:4e:0d:c2:5e: e6:38:17:43:00:c9:8c:2f:7f:dc:81:2e:11:f5:cd: 98:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:4B:7D:67:24:70:D3:C9:EE:D7:16:00:0A:61:F5:8B:B7:72:E7:DB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a302dc9c-12e9-4b66-8c6d-e2994a21a1bd/2afe2567-cab2-360c-8f03-dbb24ef04992.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a302dc9c-12e9-4b66-8c6d-e2994a21a1bd/a302dc9c-12e9-4b66-8c6d-e2994a21a1bd.crl X509v3 Authority Key Identifier: keyid:0F:DC:2F:6E:33:64:5F:E3:7B:D2:58:C7:5E:84:68:D9:5C:1D:22:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a302dc9c-12e9-4b66-8c6d-e2994a21a1bd.cer sbgp-ipAddrBlock: critical IPv4: 64.90.136.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:34:65:e5:04:53:a8:3b:3d:82:88:f8:9b:ce:ee:b6:1e:53: 0b:03:a6:8d:04:72:02:ef:98:07:d7:d4:d2:32:ec:34:ee:f8: 84:4f:79:fc:39:eb:09:59:7f:b1:be:9c:d5:e8:43:b6:27:44: c1:8a:0c:e3:4a:3a:66:f4:0a:51:9c:fc:98:6d:40:23:75:f5: 3d:2e:bf:57:86:08:08:c3:f9:7f:7e:9c:da:d8:ed:dc:19:4f: cb:7e:cc:db:49:2c:d2:48:5a:c2:ac:d6:10:29:2b:21:8a:e8: 22:b3:4f:58:d7:b0:38:89:2a:e2:e0:1d:33:94:71:47:2e:ee: 2f:6b:00:3b:25:36:15:a8:17:e7:ba:82:79:b7:79:62:90:c5: 7c:f8:c3:99:bb:38:d6:85:4f:e2:6a:42:6c:11:c6:2f:70:72: 30:1c:b9:72:54:17:3d:7f:86:66:77:7f:c2:1b:6b:71:bd:b8: 18:76:6e:b6:98:24:a8:1c:bf:71:b2:5a:23:5c:63:ed:c3:71: a8:2d:30:5f:f5:1a:8c:a1:32:e5:c3:1c:a9:a6:b5:8f:c7:1b: 53:de:ea:3e:6b:0d:b5:cd:d2:5a:b6:30:45:f9:71:df:a3:b1: 22:1b:7c:fd:2b:27:21:70:b2:b9:ae:8d:ab:05:61:f8:37:f0: 58:77:0a:70 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqN1f0TU0rXxtql60AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTMwMmRjOWMtMTJlOS00YjY2LThjNmQtZTI5OTRhMjFh MWJkMB4XDTI1MDcxODAxMDA0OFoXDTI1MTAxNjAxMDA0OFowLzEtMCsGA1UEAxMk MDYyNDJkMWItMjg5Zi00MDMzLTlmYzMtMjg0OTJmMTJlZDllMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4pG7LrUc6sv6BVJ7ih1rKgqxz9npaDumfbAR SFfDVeBAEezDnC4HZ/6wb17KusR1rmfPYf0HIpFArgtySaVNmHefF07viqpOGMrl 3pJpYNP79wCF2YYNZn8PQlV+w2mHRVl89aRxngyw8tWqGSPs2xCPHo9Qb1jaMl82 urMxh5jowNS9JOq9KBL4wpB1C0AOg3JSwkis2v6yGcdLSSu0bUbRmcZZnclNzC8z khGjrCKZToQhOIIqcGcBgEfPBbstq5FOLwz2neVWvJ/ZBKqRlGLYqR/3H9qxuYOE g0+EveAfltPPORjUPd61104Nwl7mOBdDAMmML3/cgS4R9c2YcQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAtLfWckcNPJ7tcWAAph9Yu3cufbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9hMzAy ZGM5Yy0xMmU5LTRiNjYtOGM2ZC1lMjk5NGEyMWExYmQvMmFmZTI1NjctY2FiMi0z NjBjLThmMDMtZGJiMjRlZjA0OTkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYTMwMmRjOWMtMTJlOS00YjY2LThj NmQtZTI5OTRhMjFhMWJkL2EzMDJkYzljLTEyZTktNGI2Ni04YzZkLWUyOTk0YTIx YTFiZC5jcmwwHwYDVR0jBBgwFoAUD9wvbjNkX+N70ljHXoRo2VwdIpswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9hMzAyZGM5Yy0xMmU5LTRiNjYtOGM2ZC1lMjk5 NGEyMWExYmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQFqIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEs0ZeUEU6g7PYKI+JvO7rYeUwsDpo0EcgLvmAfX1NIy7DTu+IRPefw5 6wlZf7G+nNXoQ7YnRMGKDONKOmb0ClGc/JhtQCN19T0uv1eGCAjD+X9+nNrY7dwZ T8t+zNtJLNJIWsKs1hApKyGK6CKzT1jXsDiJKuLgHTOUcUcu7i9rADslNhWoF+e6 gnm3eWKQxXz4w5m7ONaFT+JqQmwRxi9wcjAcuXJUFz1/hmZ3f8Iba3G9uBh2braY JKgcv3GyWiNcY+3DcagtMF/1GoyhMuXDHKmmtY/HG1Pe6j5rDbXN0lq2MEX5cd+j sSIbfP0rJyFwsrmujasFYfg38Fh3CnA= -----END CERTIFICATE-----Generated at Mon Aug 4 14:42:05 2025 by rpki-client