$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/3576a8b7-6506-398c-8b78-2430a514e1f2.roa File: 3576a8b7-6506-398c-8b78-2430a514e1f2.roa (raw, json) Hash identifier: PNozZgyoDfAX4BGLZ3OArp6Lk7K6QRTnPfFV9DNUjVE= Subject key identifier: 8B:07:92:D6:6D:E0:5D:3E:7E:78:0D:87:C8:B0:CA:DE:82:CB:88:FE Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285849A7854068893EF6F35314FC80 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/3576a8b7-6506-398c-8b78-2430a514e1f2.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 15169 IP address blocks: 64.233.190.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 05 May 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:85:40:68:89:3e:f6:f3:53:14:fc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=31455ebf-41df-4987-9e2a-144296b7bc57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:fd:24:16:59:c6:77:fa:06:46:7a:df:dc:69: 57:d4:31:93:2b:5c:cd:44:e1:98:7d:cb:b2:4a:aa: 37:a6:c5:b8:74:e8:3a:9a:31:e0:36:05:c9:78:48: d9:33:e6:e1:f9:ab:22:ea:6b:c8:d3:7e:7e:60:3a: 81:bb:b2:eb:5c:88:d2:3e:7c:08:85:67:e1:2f:75: bf:a8:47:e1:dd:f3:d0:d5:30:8c:d5:f4:4a:27:79: 59:48:1b:e2:36:c9:14:ec:fe:a9:fd:4d:50:12:e8: 45:32:af:28:11:c0:99:82:87:e8:92:1b:d8:83:c1: fd:87:19:c5:2a:7b:68:75:29:c6:5d:d3:87:41:c6: 33:3c:05:ad:47:47:c2:e8:3f:69:23:35:f7:a8:05: 76:f7:c6:71:df:d1:62:a7:46:0c:a3:88:8d:eb:d1: 07:88:3e:61:15:65:bd:0e:fc:1f:45:d3:12:a0:92: 11:52:75:6f:25:c4:35:d7:c4:ec:96:73:7f:85:fa: 06:26:4e:6b:da:51:87:5a:db:c7:41:e9:9d:67:a2: 19:53:6a:e4:40:99:27:de:f3:bb:52:33:0f:f9:5c: 11:2d:fd:1c:97:65:a3:6c:66:59:cd:ff:fa:1d:71: c6:f2:12:1f:26:4e:7f:12:4b:85:73:35:78:4b:6a: e7:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:07:92:D6:6D:E0:5D:3E:7E:78:0D:87:C8:B0:CA:DE:82:CB:88:FE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/3576a8b7-6506-398c-8b78-2430a514e1f2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 64.233.190.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:46:fc:8b:31:82:80:eb:58:52:33:9c:c3:c2:e7:9f:bf:c7: 4e:cc:3d:3a:7a:88:4f:a0:95:29:cb:f7:00:03:ca:45:ed:e2: 6a:23:d1:0b:5d:4a:ff:7d:88:f7:2f:2e:01:51:ba:d9:40:1b: 50:7d:b7:59:86:3e:dc:21:1c:41:df:74:b9:54:f9:27:c1:d8: 1b:e4:4f:07:d1:0a:2e:b5:6b:9d:a1:b4:f9:71:ea:01:a7:6b: 28:d3:aa:b9:1f:33:ef:e2:50:94:bd:74:80:77:68:ae:32:55: 32:e6:56:7c:20:7b:a9:46:cd:ce:fa:8f:e9:a9:7e:69:c3:a0: f3:bd:cb:39:02:59:fe:b4:37:a6:92:ac:9b:46:47:ab:0a:b9: e6:bf:40:0b:59:e9:8a:61:08:7d:da:26:6f:f8:19:81:99:41: 04:1e:8f:68:fc:7f:30:80:6c:b4:d2:5d:81:9e:ad:18:42:85: 54:28:63:d5:e2:ef:87:ed:b6:06:bf:84:95:59:c3:a3:43:01: 20:0d:59:15:8f:0e:08:46:25:49:bd:89:5a:d7:9b:80:e8:8f: c8:c9:f4:42:c7:1f:b7:3c:9d:85:e8:48:66:b9:72:f0:51:45: 3c:b1:7f:ab:08:cb:32:25:5f:d7:d9:4c:d4:d0:a4:3a:99:e8: 31:74:9f:5d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhUBoiT7281MU/IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk MzE0NTVlYmYtNDFkZi00OTg3LTllMmEtMTQ0Mjk2YjdiYzU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm/0kFlnGd/oGRnrf3GlX1DGTK1zNROGYfcuy Sqo3psW4dOg6mjHgNgXJeEjZM+bh+asi6mvI035+YDqBu7LrXIjSPnwIhWfhL3W/ qEfh3fPQ1TCM1fRKJ3lZSBviNskU7P6p/U1QEuhFMq8oEcCZgofokhvYg8H9hxnF KntodSnGXdOHQcYzPAWtR0fC6D9pIzX3qAV298Zx39Fip0YMo4iN69EHiD5hFWW9 DvwfRdMSoJIRUnVvJcQ118TslnN/hfoGJk5r2lGHWtvHQemdZ6IZU2rkQJkn3vO7 UjMP+VwRLf0cl2WjbGZZzf/6HXHG8hIfJk5/EkuFczV4S2rnBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIsHktZt4F0+fngNh8iwyt6Cy4j+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMzU3NmE4YjctNjUwNi0z OThjLThiNzgtMjQzMGE1MTRlMWYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQOm+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJNG/IsxgoDrWFIznMPC55+/x07MPTp6iE+glSnL9wADykXt4moj0Qtd Sv99iPcvLgFRutlAG1B9t1mGPtwhHEHfdLlU+SfB2BvkTwfRCi61a52htPlx6gGn ayjTqrkfM+/iUJS9dIB3aK4yVTLmVnwge6lGzc76j+mpfmnDoPO9yzkCWf60N6aS rJtGR6sKuea/QAtZ6YphCH3aJm/4GYGZQQQej2j8fzCAbLTSXYGerRhChVQoY9Xi 74fttga/hJVZw6NDASANWRWPDghGJUm9iVrXm4Doj8jJ9ELHH7c8nYXoSGa5cvBR RTyxf6sIyzIlX9fZTNTQpDqZ6DF0n10= -----END CERTIFICATE-----Generated at Sun May 4 11:11:12 2025 by rpki-client