$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/9c0269b3-2815-3270-8720-d4f751b0b0e9.roa File: 9c0269b3-2815-3270-8720-d4f751b0b0e9.roa (raw, json) Hash identifier: 3lhE4s9Fsmr/EI+ahY7slTEe+n56ykE8uJj9tSSK5wg= Subject key identifier: 45:05:71:C5:B4:9B:6B:48:1E:C0:89:35:A9:68:94:FE:A6:5C:50:22 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285849A785186248A18A527E876E80 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/9c0269b3-2815-3270-8720-d4f751b0b0e9.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 15169 IP address blocks: 64.233.189.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 05 May 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:85:18:62:48:a1:8a:52:7e:87:6e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=957a37bd-edb4-454b-9116-617b86d32cf4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:41:ce:ab:cf:6f:c4:51:e4:10:ec:4a:ca:47: d2:d6:39:2b:f5:1b:e5:a5:ab:11:dd:1f:bd:b6:ca: c9:6e:8c:4d:df:e9:d8:04:0f:41:79:87:7a:d6:8f: 0f:79:bd:5c:c0:6c:d3:23:01:36:8b:5f:6f:57:60: d6:41:7c:bb:f4:e9:e6:17:37:e5:58:cf:e9:e1:3a: 70:22:13:1d:b5:ce:e0:83:bc:b7:d8:79:71:af:7c: 97:7a:a5:c0:97:99:33:52:55:c9:d7:2a:7b:40:08: a5:c4:43:a1:6e:7d:31:0c:b1:57:f1:35:68:ad:df: c9:12:fc:91:8d:2b:1c:93:60:b9:9e:c2:00:9e:9d: 6c:8e:c3:28:55:aa:25:0e:77:03:7c:e8:37:88:ec: 96:ce:8f:ac:76:61:44:74:39:33:ea:19:0c:87:f6: 3f:8b:ce:2e:54:86:90:59:74:a7:f6:c6:13:7e:04: a2:d7:cc:99:20:4f:47:1e:08:b4:fd:16:6a:fa:b2: 52:e5:ca:ae:78:0f:99:19:e8:f6:12:0c:fa:50:cc: 9a:bf:be:c1:45:a0:4e:10:a5:a1:06:59:77:0f:4a: a6:66:61:0d:59:4e:90:62:29:be:cc:f4:b1:4e:64: 9b:69:ca:bd:37:3f:d2:ee:bb:47:8e:5d:73:c3:98: a3:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:05:71:C5:B4:9B:6B:48:1E:C0:89:35:A9:68:94:FE:A6:5C:50:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/9c0269b3-2815-3270-8720-d4f751b0b0e9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 64.233.189.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:24:26:d3:cd:a6:1c:d8:94:2d:e7:60:0d:a7:ab:c8:ea:16: 05:62:de:a1:0a:ed:67:0f:a4:2f:0f:8b:ee:a6:e5:d8:a6:4e: 4f:aa:9c:b9:fa:d6:c1:63:96:20:83:90:ab:da:aa:01:0f:41: 9e:60:e1:6f:c5:64:60:ae:6d:8f:20:59:d6:66:d3:65:c2:6d: cb:5c:46:b6:d0:1c:f9:f1:87:c6:69:34:ce:a9:70:5e:14:48: 12:f1:b5:1a:68:45:7d:2a:03:55:2f:18:d0:e4:90:c9:1a:81: 6c:be:7c:b3:d4:cd:aa:dc:ba:fc:6d:66:54:6a:6c:f0:0b:c1: 8d:1f:78:96:d6:86:43:64:ce:94:f8:c6:c5:a7:c9:23:de:fa: cd:12:81:ce:ad:31:ce:9f:31:9e:64:3b:dc:06:af:70:ce:53: ad:fd:08:40:ec:1e:cd:be:8d:41:e2:c3:3a:36:d4:f7:63:33: 14:38:6d:59:e0:4c:25:27:88:a1:3b:57:2e:85:1b:61:a4:79: e2:08:e5:99:ed:7b:81:8c:2c:bc:70:15:cb:1b:b3:7f:7d:c8: 04:24:18:76:a6:5c:a7:35:da:a7:c5:b8:29:af:fe:a0:9c:e8: ea:1a:a1:4f:b2:ec:c4:aa:b1:39:48:b4:f9:c8:3c:86:a1:b7: 7b:b9:4f:d1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhRhiSKGKUn6HboAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk OTU3YTM3YmQtZWRiNC00NTRiLTkxMTYtNjE3Yjg2ZDMyY2Y0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsUHOq89vxFHkEOxKykfS1jkr9RvlpasR3R+9 tsrJboxN3+nYBA9BeYd61o8Peb1cwGzTIwE2i19vV2DWQXy79OnmFzflWM/p4Tpw IhMdtc7gg7y32Hlxr3yXeqXAl5kzUlXJ1yp7QAilxEOhbn0xDLFX8TVord/JEvyR jSsck2C5nsIAnp1sjsMoVaolDncDfOg3iOyWzo+sdmFEdDkz6hkMh/Y/i84uVIaQ WXSn9sYTfgSi18yZIE9HHgi0/RZq+rJS5cqueA+ZGej2Egz6UMyav77BRaBOEKWh Bll3D0qmZmENWU6QYim+zPSxTmSbacq9Nz/S7rtHjl1zw5ij8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEUFccW0m2tIHsCJNalolP6mXFAiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvOWMwMjY5YjMtMjgxNS0z MjcwLTg3MjAtZDRmNzUxYjBiMGU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQOm9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABIkJtPNphzYlC3nYA2nq8jqFgVi3qEK7WcPpC8Pi+6m5dimTk+qnLn6 1sFjliCDkKvaqgEPQZ5g4W/FZGCubY8gWdZm02XCbctcRrbQHPnxh8ZpNM6pcF4U SBLxtRpoRX0qA1UvGNDkkMkagWy+fLPUzarcuvxtZlRqbPALwY0feJbWhkNkzpT4 xsWnySPe+s0Sgc6tMc6fMZ5kO9wGr3DOU639CEDsHs2+jUHiwzo21PdjMxQ4bVng TCUniKE7Vy6FG2GkeeII5Znte4GMLLxwFcsbs399yAQkGHamXKc12qfFuCmv/qCc 6OoaoU+y7MSqsTlItPnIPIaht3u5T9E= -----END CERTIFICATE-----Generated at Sun May 4 11:30:51 2025 by rpki-client