$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a302dc9c-12e9-4b66-8c6d-e2994a21a1bd/a1c7a418-62b9-3ee9-a73e-dabcc7a4645e.roa File: a1c7a418-62b9-3ee9-a73e-dabcc7a4645e.roa (raw, json) Hash identifier: xw7g2mgof8qlJ/uilWVpU6XI49zuQ8bTFNIq3y7uSrY= Subject key identifier: A2:57:79:5B:2D:37:6E:AB:A6:BA:A0:36:FD:0B:E7:76:80:22:D5:B8 Certificate issuer: /CN=a302dc9c-12e9-4b66-8c6d-e2994a21a1bd Certificate serial: 010D0C9F43285849AE7F41EBEF9C848593DBCB80 Authority key identifier: 0F:DC:2F:6E:33:64:5F:E3:7B:D2:58:C7:5E:84:68:D9:5C:1D:22:9B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a302dc9c-12e9-4b66-8c6d-e2994a21a1bd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a302dc9c-12e9-4b66-8c6d-e2994a21a1bd/a1c7a418-62b9-3ee9-a73e-dabcc7a4645e.roa Signing time: Tue 29 Apr 2025 01:00:47 +0000 ROA not before: Tue 29 Apr 2025 01:00:47 +0000 ROA not after: Mon 28 Jul 2025 01:00:47 +0000 asID: 393474 IP address blocks: 64.90.140.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a302dc9c-12e9-4b66-8c6d-e2994a21a1bd/a302dc9c-12e9-4b66-8c6d-e2994a21a1bd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a302dc9c-12e9-4b66-8c6d-e2994a21a1bd/a302dc9c-12e9-4b66-8c6d-e2994a21a1bd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a302dc9c-12e9-4b66-8c6d-e2994a21a1bd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ae:7f:41:eb:ef:9c:84:85:93:db:cb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a302dc9c-12e9-4b66-8c6d-e2994a21a1bd Validity Not Before: Apr 29 01:00:47 2025 GMT Not After : Jul 28 01:00:47 2025 GMT Subject: CN=0cb2958e-e226-49e5-b297-80d40e23eedd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:01:04:b8:94:1b:fe:c0:e6:1d:00:2f:16:17: c0:0b:ae:c6:4b:dd:85:b2:06:8b:83:7f:58:6b:ef: 63:12:8c:aa:c6:22:85:d9:84:17:f2:53:87:19:e2: a9:84:84:f8:a6:86:cd:d5:97:fd:1b:47:9e:10:63: d5:ff:75:e0:95:54:c1:86:48:f0:a0:78:a3:f6:70: 0c:54:1a:9b:c1:f8:6c:d5:7e:eb:ea:04:97:f6:3b: 9f:1a:bb:ab:99:4e:3c:46:94:e6:ce:69:9a:eb:fa: 83:44:c5:2d:cf:57:03:4b:7a:59:bc:94:60:b1:43: a2:9e:37:82:33:38:05:15:87:b3:9e:8e:c1:7e:21: a7:40:c4:89:ac:9a:36:f4:42:85:cc:49:a2:aa:15: f1:c3:c5:32:99:7d:96:31:69:8b:52:e6:9b:76:3b: fc:5f:a3:72:9a:ef:95:4f:c1:d2:fe:8e:d5:77:96: f5:34:d5:43:6e:0c:5f:16:fa:ef:66:cb:03:5b:7e: b3:7a:9a:79:d0:d6:bd:64:69:e8:58:53:83:5a:e3: 6c:e7:23:9d:bc:a3:32:2d:19:be:02:70:bf:69:d1: 5b:dc:02:d6:fc:d6:c1:b8:b2:cf:5f:32:d9:8c:a9: 07:9e:b3:44:17:0f:08:02:11:f9:57:ba:f7:cb:f3: 0f:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:57:79:5B:2D:37:6E:AB:A6:BA:A0:36:FD:0B:E7:76:80:22:D5:B8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a302dc9c-12e9-4b66-8c6d-e2994a21a1bd/a1c7a418-62b9-3ee9-a73e-dabcc7a4645e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a302dc9c-12e9-4b66-8c6d-e2994a21a1bd/a302dc9c-12e9-4b66-8c6d-e2994a21a1bd.crl X509v3 Authority Key Identifier: keyid:0F:DC:2F:6E:33:64:5F:E3:7B:D2:58:C7:5E:84:68:D9:5C:1D:22:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a302dc9c-12e9-4b66-8c6d-e2994a21a1bd.cer sbgp-ipAddrBlock: critical IPv4: 64.90.140.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:f0:f0:b7:dd:88:c0:93:34:40:78:b1:cc:e6:1d:82:a9:7f: 72:0d:1d:ae:44:63:4f:75:a0:c5:85:a1:e8:06:0b:3c:20:ae: 4e:e8:d8:3b:ff:2e:88:18:96:d9:7a:8c:bf:e4:75:cb:90:b1: 6e:75:f8:92:55:11:87:d0:d7:db:1c:59:73:84:43:3c:3c:fb: 8f:01:9a:f5:f6:97:f8:fa:9f:65:dd:04:3d:5a:47:82:e4:52: 2c:b2:6f:91:bf:6a:f7:a6:a8:87:59:e8:a3:bb:7a:4a:b9:36: 00:9e:83:90:c6:dd:a0:73:28:d8:af:e2:05:00:4f:46:2a:f5: 00:fd:f1:fb:62:76:ae:fc:1e:7e:f6:3e:c4:48:49:46:aa:c8: f4:b8:21:61:04:88:b5:23:63:75:f4:35:dc:d5:4d:fb:72:b0: e4:74:a6:92:16:93:84:43:29:17:d5:9b:4a:c7:df:cb:1b:20: 78:a9:fb:be:79:13:c4:9e:39:56:1c:09:d1:fd:bf:c7:80:38: ac:81:1e:01:4d:25:68:40:87:d1:18:8d:c2:2f:a4:f5:62:e4: 3b:d9:42:43:ce:2a:e9:a0:e2:ea:d2:bd:4a:07:0e:49:56:b7: df:6f:04:d7:ce:80:ce:ba:67:b8:f8:5a:77:a4:ff:70:ca:39: 47:8b:c8:4c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmuf0Hr75yEhZPby4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTMwMmRjOWMtMTJlOS00YjY2LThjNmQtZTI5OTRhMjFh MWJkMB4XDTI1MDQyOTAxMDA0N1oXDTI1MDcyODAxMDA0N1owLzEtMCsGA1UEAxMk MGNiMjk1OGUtZTIyNi00OWU1LWIyOTctODBkNDBlMjNlZWRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoAEEuJQb/sDmHQAvFhfAC67GS92FsgaLg39Y a+9jEoyqxiKF2YQX8lOHGeKphIT4pobN1Zf9G0eeEGPV/3XglVTBhkjwoHij9nAM VBqbwfhs1X7r6gSX9jufGrurmU48RpTmzmma6/qDRMUtz1cDS3pZvJRgsUOinjeC MzgFFYezno7BfiGnQMSJrJo29EKFzEmiqhXxw8UymX2WMWmLUuabdjv8X6Nymu+V T8HS/o7Vd5b1NNVDbgxfFvrvZssDW36zepp50Na9ZGnoWFODWuNs5yOdvKMyLRm+ AnC/adFb3ALW/NbBuLLPXzLZjKkHnrNEFw8IAhH5V7r3y/MPkwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKJXeVstN26rprqgNv0L53aAItW4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9hMzAy ZGM5Yy0xMmU5LTRiNjYtOGM2ZC1lMjk5NGEyMWExYmQvYTFjN2E0MTgtNjJiOS0z ZWU5LWE3M2UtZGFiY2M3YTQ2NDVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYTMwMmRjOWMtMTJlOS00YjY2LThj NmQtZTI5OTRhMjFhMWJkL2EzMDJkYzljLTEyZTktNGI2Ni04YzZkLWUyOTk0YTIx YTFiZC5jcmwwHwYDVR0jBBgwFoAUD9wvbjNkX+N70ljHXoRo2VwdIpswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9hMzAyZGM5Yy0xMmU5LTRiNjYtOGM2ZC1lMjk5 NGEyMWExYmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQFqMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACrw8LfdiMCTNEB4sczmHYKpf3INHa5EY091oMWFoegGCzwgrk7o2Dv/ LogYltl6jL/kdcuQsW51+JJVEYfQ19scWXOEQzw8+48BmvX2l/j6n2XdBD1aR4Lk Uiyyb5G/avemqIdZ6KO7ekq5NgCeg5DG3aBzKNiv4gUAT0Yq9QD98ftidq78Hn72 PsRISUaqyPS4IWEEiLUjY3X0NdzVTftysOR0ppIWk4RDKRfVm0rH38sbIHip+755 E8SeOVYcCdH9v8eAOKyBHgFNJWhAh9EYjcIvpPVi5DvZQkPOKumg4urSvUoHDklW t99vBNfOgM66Z7j4Wnek/3DKOUeLyEw= -----END CERTIFICATE-----Generated at Mon Jun 16 03:28:18 2025 by rpki-client