$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/89ff9dac-df0a-3835-aa2c-bd3d94b98b8b.roa File: 89ff9dac-df0a-3835-aa2c-bd3d94b98b8b.roa (raw, json) Hash identifier: zzmKTu56tkyCKvzDDh9bbmzSoaTYGzdZh70d1PcMksg= Subject key identifier: DF:C8:7D:99:51:15:8F:EE:AD:CE:AA:27:42:D7:F6:8A:9E:41:39:D9 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285849A784E58364DB030C21C61E00 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/89ff9dac-df0a-3835-aa2c-bd3d94b98b8b.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 15169 IP address blocks: 64.233.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 05 May 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:84:e5:83:64:db:03:0c:21:c6:1e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=625b4d47-616b-4e9e-8511-671348f0a9e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:61:32:23:15:6b:64:18:7b:9e:b1:10:be:1f: 9c:27:b3:0f:94:42:3a:61:56:f6:f0:76:61:b9:18: 95:4d:fb:60:3f:1c:b2:1d:8c:67:41:52:7d:dc:01: 26:0e:a2:cd:2a:cc:70:64:6e:14:f1:e1:82:de:1a: e8:26:c3:66:2e:e1:aa:82:a2:e0:8f:93:0a:38:2f: ce:b0:7f:fe:89:e1:91:fb:7a:9f:41:27:1e:b7:61: 9b:9f:8b:1a:0a:2d:5a:2d:7f:f9:57:a5:c8:d2:a9: 21:06:5b:ba:65:de:91:f7:07:b4:7d:fd:0c:7f:02: 8c:94:74:bf:85:68:d5:be:ec:74:1c:46:dd:ce:3d: 68:ac:01:92:a9:bf:d0:d1:bd:3f:dc:6b:9e:92:9a: a0:23:e1:14:e7:29:a0:1d:e8:8c:63:93:7e:3e:b2: b7:66:e3:27:8c:94:f7:0a:32:ca:4d:c2:ba:4a:69: 07:82:cc:3f:91:f0:b4:8b:6c:2e:20:c4:ee:9d:26: 26:31:18:f7:44:21:d0:33:04:be:c2:09:03:14:a0: e8:b8:ed:0d:aa:a7:f7:4c:80:f0:cd:23:e2:88:15: 90:77:74:8d:e8:b9:54:81:63:ea:00:aa:a6:2e:93: 08:fc:8b:52:38:53:71:00:26:85:ae:9f:56:4e:f6: 21:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:C8:7D:99:51:15:8F:EE:AD:CE:AA:27:42:D7:F6:8A:9E:41:39:D9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/89ff9dac-df0a-3835-aa2c-bd3d94b98b8b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 64.233.191.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:3e:0b:71:14:81:08:31:4a:da:4d:d6:18:38:da:d2:4e:67: 93:67:1e:a6:3c:07:f9:e7:4b:47:57:ac:e5:c6:6c:f9:78:c8: 26:75:0d:7b:00:f5:51:5e:4f:cb:fb:bc:a1:75:3b:76:3d:14: c5:c3:e5:fb:09:92:de:ec:48:f0:e0:54:40:3f:df:c1:66:db: 0a:b1:18:80:6d:15:a6:6c:2c:b9:bc:37:e6:f4:6b:b2:47:58: 1c:6e:3a:ca:4d:38:ad:76:ae:37:82:27:a4:d3:4e:ef:a4:16: f8:ac:48:d0:26:b1:d3:2b:bd:10:0a:a6:42:ee:5a:47:b7:24: 09:b6:fd:2e:e4:a2:aa:62:5f:ff:0f:91:b7:85:e1:f7:b2:c7: 4a:c7:20:eb:be:fe:fd:6d:4b:7f:62:bb:db:8a:0e:10:8f:75: 7f:65:d8:bb:ab:a7:9d:f7:fc:25:32:aa:ae:73:aa:d0:d5:ad: f5:6c:82:15:49:df:78:46:32:8f:b7:a2:18:6e:3a:16:2a:35: 7e:9a:fd:b2:17:93:81:a7:d6:56:e7:99:7e:bb:29:36:d7:e4: a4:6c:96:bc:0c:a0:e4:45:1a:fc:f6:4f:76:bb:72:3a:c5:25: 6b:c3:6a:70:cc:52:dd:84:c1:77:00:08:51:92:40:b2:0e:21: 38:87:60:41 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhOWDZNsDDCHGHgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk NjI1YjRkNDctNjE2Yi00ZTllLTg1MTEtNjcxMzQ4ZjBhOWUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoGEyIxVrZBh7nrEQvh+cJ7MPlEI6YVb28HZh uRiVTftgPxyyHYxnQVJ93AEmDqLNKsxwZG4U8eGC3hroJsNmLuGqgqLgj5MKOC/O sH/+ieGR+3qfQScet2Gbn4saCi1aLX/5V6XI0qkhBlu6Zd6R9we0ff0MfwKMlHS/ hWjVvux0HEbdzj1orAGSqb/Q0b0/3GuekpqgI+EU5ymgHeiMY5N+PrK3ZuMnjJT3 CjLKTcK6SmkHgsw/kfC0i2wuIMTunSYmMRj3RCHQMwS+wgkDFKDouO0Nqqf3TIDw zSPiiBWQd3SN6LlUgWPqAKqmLpMI/ItSOFNxACaFrp9WTvYhiQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN/IfZlRFY/urc6qJ0LX9oqeQTnZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvODlmZjlkYWMtZGYwYS0z ODM1LWFhMmMtYmQzZDk0Yjk4YjhiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQOm/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACw+C3EUgQgxStpN1hg42tJOZ5NnHqY8B/nnS0dXrOXGbPl4yCZ1DXsA 9VFeT8v7vKF1O3Y9FMXD5fsJkt7sSPDgVEA/38Fm2wqxGIBtFaZsLLm8N+b0a7JH WBxuOspNOK12rjeCJ6TTTu+kFvisSNAmsdMrvRAKpkLuWke3JAm2/S7koqpiX/8P kbeF4feyx0rHIOu+/v1tS39iu9uKDhCPdX9l2Lurp533/CUyqq5zqtDVrfVsghVJ 33hGMo+3ohhuOhYqNX6a/bIXk4Gn1lbnmX67KTbX5KRslrwMoORFGvz2T3a7cjrF JWvDanDMUt2EwXcACFGSQLIOITiHYEE= -----END CERTIFICATE-----Generated at Sun May 4 12:14:46 2025 by rpki-client