$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/260d25bd-1f76-3742-a3b0-4b0de9146a4a.roa File: 260d25bd-1f76-3742-a3b0-4b0de9146a4a.roa (raw, json) Hash identifier: C0/LNQ53GIrNDdi8HrDgFXbx43wLq7Ju6BaNdoq8s90= Subject key identifier: 81:9F:E8:A2:33:02:F2:F9:FB:3A:C7:D1:60:84:15:D3:01:65:56:52 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285849A7851E2D7A986B48B9879800 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/260d25bd-1f76-3742-a3b0-4b0de9146a4a.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 15169 IP address blocks: 64.233.168.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 05 May 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:85:1e:2d:7a:98:6b:48:b9:87:98:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=e9e425a8-d1bd-493f-aa53-ba48bca3f820 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:0e:0a:ab:1f:37:68:2e:80:c2:77:35:ab:e4: 05:f7:e0:2b:ec:51:d8:db:d5:15:aa:52:32:1b:62: ca:66:50:98:de:5d:7f:b3:77:77:fb:70:08:61:c6: b0:6a:49:4c:80:47:e1:1f:db:ab:17:0d:85:30:1f: 6a:c2:ca:fe:55:36:39:2d:14:91:d7:9b:c3:99:c0: d5:b5:e2:03:83:37:46:d4:7f:40:84:2d:4f:5e:8d: 34:7f:be:90:07:07:a2:27:7f:50:61:c5:39:56:00: b9:b8:92:ab:a3:31:14:96:09:e4:26:aa:5f:60:e2: f9:65:e6:6c:06:a5:de:9a:97:75:1e:39:df:86:46: bc:84:8a:05:88:2a:7c:91:83:4f:ee:8b:b5:ca:9e: a8:d8:01:14:41:33:d0:6e:7c:60:08:1b:f9:05:ff: ff:fd:0e:ad:d7:47:f0:90:49:4c:cb:13:20:02:42: 9e:f7:70:d8:69:37:de:c2:a9:8d:7a:1a:58:68:52: c8:6c:95:a6:c5:38:36:73:db:86:d1:ba:41:14:51: 4d:ce:6d:72:ac:16:94:17:93:8f:94:6a:d5:8a:96: aa:60:f6:e3:cb:24:9a:ae:88:5f:f1:87:0c:42:7d: ba:69:08:4b:03:00:fe:51:15:b5:f6:22:0c:66:b1: ec:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:9F:E8:A2:33:02:F2:F9:FB:3A:C7:D1:60:84:15:D3:01:65:56:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/260d25bd-1f76-3742-a3b0-4b0de9146a4a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 64.233.168.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:b6:aa:e4:1f:56:38:f0:66:3b:7c:7f:bc:53:8e:ae:32:97: 52:d3:f8:6f:97:0d:f6:c5:db:67:bd:ca:ce:9d:45:d1:9f:77: 67:d5:cb:30:eb:9b:c5:dc:4a:a0:65:ff:6f:b6:02:75:84:7c: ec:5f:c1:2f:c6:8c:a1:4d:b9:a6:a5:3e:1a:39:54:0d:a7:05: e0:2b:cf:d7:e5:6f:6b:f1:8b:2f:5a:ad:78:fa:05:91:f5:a4: 17:8f:52:22:04:58:ca:35:44:63:7a:f5:71:65:00:ff:58:ff: 1f:6d:7a:e3:e4:b9:98:30:7f:8f:ad:3b:8d:73:dc:09:8d:ec: be:b4:48:5f:f5:1d:62:d0:21:31:63:6c:3a:33:6e:b1:32:95: 61:01:e1:93:99:4e:b6:c3:35:f0:ca:f2:91:87:63:81:bc:b1: 65:28:e2:07:d2:0c:8a:6f:d5:76:62:5c:e1:42:62:ae:0c:57: d5:c2:8c:4d:aa:b7:7f:03:f3:f7:e7:a0:94:4e:41:f8:e9:1e: 85:a7:07:ec:15:6a:35:a7:0b:00:69:2a:ae:3a:ab:92:4f:f2: ec:d7:fe:27:25:c0:f9:dd:94:53:92:5d:b0:57:a4:06:a9:5f: f6:27:e1:e8:96:a9:85:cc:1d:08:27:df:33:0e:8f:cf:35:85: 98:ee:19:a1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhR4tephrSLmHmAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk ZTllNDI1YTgtZDFiZC00OTNmLWFhNTMtYmE0OGJjYTNmODIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArw4Kqx83aC6Awnc1q+QF9+Ar7FHY29UVqlIy G2LKZlCY3l1/s3d3+3AIYcawaklMgEfhH9urFw2FMB9qwsr+VTY5LRSR15vDmcDV teIDgzdG1H9AhC1PXo00f76QBweiJ39QYcU5VgC5uJKrozEUlgnkJqpfYOL5ZeZs BqXempd1Hjnfhka8hIoFiCp8kYNP7ou1yp6o2AEUQTPQbnxgCBv5Bf///Q6t10fw kElMyxMgAkKe93DYaTfewqmNehpYaFLIbJWmxTg2c9uG0bpBFFFNzm1yrBaUF5OP lGrVipaqYPbjyySarohf8YcMQn26aQhLAwD+URW19iIMZrHsywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIGf6KIzAvL5+zrH0WCEFdMBZVZSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMjYwZDI1YmQtMWY3Ni0z NzQyLWEzYjAtNGIwZGU5MTQ2YTRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQOmoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE22quQfVjjwZjt8f7xTjq4yl1LT+G+XDfbF22e9ys6dRdGfd2fVyzDr m8XcSqBl/2+2AnWEfOxfwS/GjKFNuaalPho5VA2nBeArz9flb2vxiy9arXj6BZH1 pBePUiIEWMo1RGN69XFlAP9Y/x9teuPkuZgwf4+tO41z3AmN7L60SF/1HWLQITFj bDozbrEylWEB4ZOZTrbDNfDK8pGHY4G8sWUo4gfSDIpv1XZiXOFCYq4MV9XCjE2q t38D8/fnoJROQfjpHoWnB+wVajWnCwBpKq46q5JP8uzX/iclwPndlFOSXbBXpAap X/Yn4eiWqYXMHQgn3zMOj881hZjuGaE= -----END CERTIFICATE-----Generated at Sun May 4 10:29:20 2025 by rpki-client