$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/954a6489-42f6-3808-b280-a76e596e6f06.roa File: 954a6489-42f6-3808-b280-a76e596e6f06.roa (raw, json) Hash identifier: ZTMvfrqHD2qt6v5wYZvNvn8A121A5JiGzb3DyY9+OTs= Subject key identifier: 22:A3:31:1C:C4:79:85:B6:01:BF:5E:CA:55:FE:FE:87:A5:5C:C8:00 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285849A784D3FA40821DDFC4042C00 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/954a6489-42f6-3808-b280-a76e596e6f06.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 15169 IP address blocks: 64.233.171.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 05 May 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:84:d3:fa:40:82:1d:df:c4:04:2c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=25239801-d3c3-4ddc-a255-a1dc28bb2d9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:c6:34:e6:32:de:22:b4:3f:3a:12:a4:e2:16: 5d:96:76:90:ba:bc:e5:13:c3:66:c5:90:95:f4:94: bb:26:56:d7:47:2b:c6:77:b2:00:c3:62:a7:e0:b7: 47:43:81:53:47:34:d5:4c:18:f2:f3:83:fe:e4:7d: 34:c3:82:b9:4e:a3:47:62:a7:74:80:c0:1c:e3:22: 32:e0:64:48:6d:f3:8a:2e:1c:ca:b4:6c:3f:a2:ae: b7:3c:4a:d9:95:e9:96:2d:7e:81:dd:2d:2f:a2:89: 39:d2:18:31:91:e4:cb:e1:ee:a3:86:0b:a1:6d:f5: 30:05:1b:3e:4d:0c:cc:4d:53:b7:3a:3c:97:74:51: 75:c8:04:60:c0:70:b2:2c:1c:cf:ef:1a:a2:22:19: f6:10:0e:fd:25:af:2a:d6:bf:06:45:be:2c:50:76: 96:f0:80:ed:d4:9a:09:03:05:39:4b:2e:45:11:03: a7:fe:f1:bc:28:dd:e1:b2:5f:34:7a:79:e8:1e:f1: 94:79:3d:94:d6:dd:b9:49:84:43:1c:bd:e8:ef:a5: 6c:03:66:0f:47:7b:62:2d:5f:a3:6b:c9:f3:03:ad: 9c:b9:94:db:b7:e6:2f:b0:b1:65:91:62:88:8f:f3: fb:c4:d2:b6:73:01:98:00:70:2b:83:be:55:5c:30: 3c:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:A3:31:1C:C4:79:85:B6:01:BF:5E:CA:55:FE:FE:87:A5:5C:C8:00 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/954a6489-42f6-3808-b280-a76e596e6f06.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 64.233.171.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ac:d7:34:09:6b:19:78:81:a5:fc:8b:34:dc:87:fc:e8:d1:8e: 8f:95:1d:53:51:da:fa:c8:8e:91:98:c2:aa:06:93:0a:a8:1e: bd:b6:44:6a:3b:0b:e3:02:43:8f:77:3b:42:a9:1f:04:13:7b: 91:64:c6:2d:ab:4b:7b:fd:17:be:7c:1d:fb:ba:0a:27:1e:23: 08:6b:c1:08:29:e2:19:3f:3e:f1:b7:bb:36:4e:3a:c3:d5:ae: 3a:6c:ed:a8:c7:1d:2e:6f:dd:75:fe:e4:82:29:e2:d8:4c:f7: 33:01:32:47:6e:1b:a9:4a:2f:73:da:a9:2e:70:36:9f:d2:6b: a3:98:10:52:50:79:f1:d3:cf:7c:1e:87:d9:f3:79:b0:2a:e2: a4:cf:6d:d4:14:7c:c3:be:3a:be:9e:1b:4b:f9:dd:72:cb:bb: 8f:c8:3c:be:0d:fe:5c:00:fe:ae:3e:37:ba:38:17:a5:c0:a2: e1:61:87:e9:ae:c6:e9:4b:e2:2a:6d:f0:0a:61:f3:3b:0a:0b: 15:e8:b8:da:89:2f:2b:e0:bd:dc:7a:45:39:55:18:02:f2:bd: 4a:53:a9:6b:cc:47:fc:f6:42:50:99:6b:3a:72:f2:42:d4:f9: 5c:fa:fc:8c:76:52:37:21:e7:17:db:de:a5:ef:1d:f1:04:05: 41:a8:c0:72 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhNP6QIId38QELAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk MjUyMzk4MDEtZDNjMy00ZGRjLWEyNTUtYTFkYzI4YmIyZDlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlcY05jLeIrQ/OhKk4hZdlnaQurzlE8NmxZCV 9JS7JlbXRyvGd7IAw2Kn4LdHQ4FTRzTVTBjy84P+5H00w4K5TqNHYqd0gMAc4yIy 4GRIbfOKLhzKtGw/oq63PErZlemWLX6B3S0vook50hgxkeTL4e6jhguhbfUwBRs+ TQzMTVO3OjyXdFF1yARgwHCyLBzP7xqiIhn2EA79Ja8q1r8GRb4sUHaW8IDt1JoJ AwU5Sy5FEQOn/vG8KN3hsl80ennoHvGUeT2U1t25SYRDHL3o76VsA2YPR3tiLV+j a8nzA62cuZTbt+YvsLFlkWKIj/P7xNK2cwGYAHArg75VXDA8sQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCKjMRzEeYW2Ab9eylX+/oelXMgAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvOTU0YTY0ODktNDJmNi0z ODA4LWIyODAtYTc2ZTU5NmU2ZjA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQOmrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKzXNAlrGXiBpfyLNNyH/OjRjo+VHVNR2vrIjpGYwqoGkwqoHr22RGo7 C+MCQ493O0KpHwQTe5Fkxi2rS3v9F758Hfu6CiceIwhrwQgp4hk/PvG3uzZOOsPV rjps7ajHHS5v3XX+5IIp4thM9zMBMkduG6lKL3PaqS5wNp/Sa6OYEFJQefHTz3we h9nzebAq4qTPbdQUfMO+Or6eG0v53XLLu4/IPL4N/lwA/q4+N7o4F6XAouFhh+mu xulL4ipt8Aph8zsKCxXouNqJLyvgvdx6RTlVGALyvUpTqWvMR/z2QlCZazpy8kLU +Vz6/Ix2Ujch5xfb3qXvHfEEBUGowHI= -----END CERTIFICATE-----Generated at Sun May 4 10:58:49 2025 by rpki-client