$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d882c9dd-3234-34a8-8cc4-0d6f9903b764.roa File: d882c9dd-3234-34a8-8cc4-0d6f9903b764.roa (raw, json) Hash identifier: RDLjJypQx/58zR7V7m3apWCnnAUHRfTOZtSaCVwvBq4= Subject key identifier: C4:5C:23:E0:6E:11:0A:0C:7C:A4:25:CA:6C:EF:A9:6B:FC:83:64:61 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285849A784DA37D544CF6CE2249E80 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d882c9dd-3234-34a8-8cc4-0d6f9903b764.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 15169 IP address blocks: 64.233.176.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 05 May 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:84:da:37:d5:44:cf:6c:e2:24:9e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=aa1f62b4-079d-4a61-9263-a8aaf1a9f832 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:83:e8:ba:84:ad:73:88:97:c1:17:db:cf:aa: 54:f5:57:8e:19:7e:17:65:35:a3:9f:17:75:d8:af: 17:60:f6:74:5c:c7:2f:a9:d3:78:93:0e:df:44:85: 9e:88:0d:57:f5:5b:05:16:14:5e:bb:fc:48:75:70: b3:c0:a8:14:46:e6:c3:fa:cd:0d:20:96:48:8d:b2: af:bd:73:5a:69:e5:13:48:81:bb:ca:61:5f:35:54: 5b:41:2e:1f:dd:a5:01:15:0e:3d:68:48:4f:91:64: 9b:1b:bc:d5:88:40:47:17:df:11:06:57:a7:d7:fd: 27:96:4c:e6:11:2f:54:6e:3a:c6:71:0c:36:b2:72: 13:35:88:9b:27:22:e9:0d:04:40:d0:c0:30:8d:81: 07:09:7c:b9:e8:91:3e:ba:8e:a0:d7:45:be:9e:d0: 2e:6b:d5:83:a3:c9:04:cf:ba:07:2f:d5:04:92:be: ea:ab:22:8d:d2:40:4c:e4:fe:db:b4:57:c0:c0:6f: b2:43:88:d3:29:ad:2d:5e:b8:4e:3b:3a:82:0d:61: 14:73:77:20:fe:ec:6c:c0:d4:27:a8:ef:b2:be:29: b8:fa:64:10:5a:45:c0:92:ca:e0:34:21:e9:17:a1: 4d:ae:b1:ff:ac:be:a8:93:54:1d:99:fb:3e:0d:2b: e9:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:5C:23:E0:6E:11:0A:0C:7C:A4:25:CA:6C:EF:A9:6B:FC:83:64:61 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d882c9dd-3234-34a8-8cc4-0d6f9903b764.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 64.233.176.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:9b:42:bf:1b:66:65:24:7f:48:d7:28:41:2c:23:0c:2b:fe: 8b:b0:88:03:3e:75:02:df:18:9f:12:37:8a:6d:de:12:b0:6f: 19:ad:ed:1f:1a:57:ef:43:0c:62:39:80:b2:d5:d2:39:36:a2: 9b:1f:37:2f:ae:f9:57:14:16:e4:3d:d6:e5:05:51:f7:cc:bd: 1b:f5:fc:d3:69:7e:7d:c7:a8:24:50:0b:e5:0f:64:f4:ad:cc: 13:93:a2:f4:9d:0c:31:cf:de:3a:68:44:94:b3:69:95:ab:3d: 79:9b:27:04:0e:db:d5:41:6e:49:af:b4:72:92:ad:23:9b:79: 17:e8:59:dc:fe:e1:8b:c7:5b:35:5c:d7:b9:52:c3:9e:76:77: c5:3c:6e:b2:5b:0b:7e:88:8c:f4:50:2b:23:f7:0f:c6:68:65: c4:cf:7f:b2:68:63:07:52:3a:1d:8a:fd:c0:cf:80:97:1c:81: c2:15:08:aa:a9:fb:82:1a:b7:c9:90:db:4c:d5:14:0f:35:fe: 2d:8e:96:80:01:e4:3e:91:4a:07:fc:97:4b:ce:b9:2c:20:a6: 64:2f:a1:96:0c:c0:74:cc:91:dd:6b:68:dc:5e:63:70:d3:ad: a3:08:b5:cb:b7:cc:3f:ea:03:06:ec:07:8f:ef:cb:6d:ec:7f: e1:0c:39:17 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhNo31UTPbOIknoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk YWExZjYyYjQtMDc5ZC00YTYxLTkyNjMtYThhYWYxYTlmODMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs4PouoStc4iXwRfbz6pU9VeOGX4XZTWjnxd1 2K8XYPZ0XMcvqdN4kw7fRIWeiA1X9VsFFhReu/xIdXCzwKgURubD+s0NIJZIjbKv vXNaaeUTSIG7ymFfNVRbQS4f3aUBFQ49aEhPkWSbG7zViEBHF98RBlen1/0nlkzm ES9UbjrGcQw2snITNYibJyLpDQRA0MAwjYEHCXy56JE+uo6g10W+ntAua9WDo8kE z7oHL9UEkr7qqyKN0kBM5P7btFfAwG+yQ4jTKa0tXrhOOzqCDWEUc3cg/uxswNQn qO+yvim4+mQQWkXAksrgNCHpF6FNrrH/rL6ok1Qdmfs+DSvprQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMRcI+BuEQoMfKQlymzvqWv8g2RhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZDg4MmM5ZGQtMzIzNC0z NGE4LThjYzQtMGQ2Zjk5MDNiNzY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQOmwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF6bQr8bZmUkf0jXKEEsIwwr/ouwiAM+dQLfGJ8SN4pt3hKwbxmt7R8a V+9DDGI5gLLV0jk2opsfNy+u+VcUFuQ91uUFUffMvRv1/NNpfn3HqCRQC+UPZPSt zBOTovSdDDHP3jpoRJSzaZWrPXmbJwQO29VBbkmvtHKSrSObeRfoWdz+4YvHWzVc 17lSw552d8U8brJbC36IjPRQKyP3D8ZoZcTPf7JoYwdSOh2K/cDPgJccgcIVCKqp +4Iat8mQ20zVFA81/i2OloAB5D6RSgf8l0vOuSwgpmQvoZYMwHTMkd1raNxeY3DT raMItcu3zD/qAwbsB4/vy23sf+EMORc= -----END CERTIFICATE-----Generated at Sun May 4 10:22:27 2025 by rpki-client