$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/f88daead-6cba-32df-a8f9-e16b4b2aba2d.roa File: f88daead-6cba-32df-a8f9-e16b4b2aba2d.roa (raw, json) Hash identifier: Z7OInUQAdDDUH5lRN5CucA2brG4q5RuMApRLPRxOXRg= Subject key identifier: 24:AA:38:C0:2D:FF:FB:2C:A0:0C:70:4E:B2:A1:8B:E5:90:CF:20:7F Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285849A78518F304A0A1D37301A540 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/f88daead-6cba-32df-a8f9-e16b4b2aba2d.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 15169 IP address blocks: 64.233.169.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 05 May 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:85:18:f3:04:a0:a1:d3:73:01:a5:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=9d33fe79-14b8-46d8-9db4-0619c4a713fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:f1:8d:9a:cd:97:83:e6:13:12:5b:9b:62:b5: 8e:fc:2b:ad:e4:38:d6:88:e9:67:b9:43:c8:57:45: 25:a9:91:7c:e5:bc:8b:f8:65:7d:41:e1:d9:5b:d6: 07:4b:83:85:0d:c3:3d:1b:f5:8e:37:fb:a1:80:ec: 39:e4:49:98:c0:21:82:ac:bf:52:64:15:0b:1a:4b: 13:16:4b:5f:8b:6c:3d:1f:07:de:2a:00:3d:5f:08: ed:6a:b2:a3:12:7c:b2:ae:d9:a6:e6:5f:cd:02:a2: 19:40:61:ff:8b:bd:d0:0b:0c:e4:ca:c5:e7:5f:e6: 25:3f:24:29:36:46:d4:43:a2:fd:54:de:be:33:64: ca:18:e0:dc:54:5f:b7:ee:e6:f7:e3:67:1c:a5:7b: 9b:f3:e4:bd:17:b9:72:04:be:fe:5f:e2:ca:31:e7: f4:cb:73:72:1a:8e:19:90:ee:e5:03:2b:ab:f1:42: 77:3f:d2:88:8b:96:7e:14:ee:3d:e2:f5:17:41:8a: 7f:06:39:f1:5d:8f:06:50:35:ed:32:2c:80:1d:d8: da:33:bc:54:cb:8d:c9:d7:cf:92:58:ad:30:26:65: 1e:14:5d:77:51:c5:97:44:89:9f:06:2e:6f:76:4a: 76:51:0a:9a:7e:7b:46:c3:0d:87:b5:93:48:25:94: 22:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:AA:38:C0:2D:FF:FB:2C:A0:0C:70:4E:B2:A1:8B:E5:90:CF:20:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/f88daead-6cba-32df-a8f9-e16b4b2aba2d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 64.233.169.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:35:64:31:47:f1:47:88:ed:ea:23:0b:08:82:e3:e7:2c:ab: b6:87:dc:d2:d6:0c:d3:80:98:a9:50:28:e9:23:21:5b:11:03: 60:19:e0:bc:78:29:02:bf:96:e1:59:12:ee:45:c7:35:00:14: 9f:4a:2f:f0:75:59:29:30:80:1b:39:0e:f6:2e:f6:ac:97:d7: b8:5d:f1:2c:60:a0:32:ed:3a:3e:89:28:e1:04:d4:6c:06:cf: 5c:06:2f:80:58:63:3a:d7:29:8e:97:e0:4a:b0:fb:60:3b:3d: a4:1a:4c:b2:58:aa:5b:eb:36:92:5a:74:7b:9f:12:22:1f:d4: f0:07:5f:fa:b5:e0:be:ff:dc:f5:4e:1c:ee:6c:70:51:c3:6f: 88:25:99:9a:e3:0b:86:a8:94:fd:7c:76:ba:05:dd:32:76:7a: 19:97:e5:67:91:fd:b2:4f:94:df:a4:9e:66:e4:dc:dd:e1:56: 23:e9:79:61:c3:1b:40:07:c4:33:79:ed:66:15:ca:cf:f3:65: f4:42:94:1c:55:5d:68:05:77:34:07:81:9e:bc:e4:2b:b6:c7: 1e:b9:ce:4f:36:e3:39:ac:0a:c7:24:fb:c6:59:1e:9c:2b:d3: a4:1d:a3:9b:bc:67:10:5d:c7:d5:95:15:25:11:c4:f9:bd:50: 84:6a:7a:1b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhRjzBKCh03MBpUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk OWQzM2ZlNzktMTRiOC00NmQ4LTlkYjQtMDYxOWM0YTcxM2ZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp/GNms2Xg+YTElubYrWO/Cut5DjWiOlnuUPI V0UlqZF85byL+GV9QeHZW9YHS4OFDcM9G/WON/uhgOw55EmYwCGCrL9SZBULGksT Fktfi2w9HwfeKgA9XwjtarKjEnyyrtmm5l/NAqIZQGH/i73QCwzkysXnX+YlPyQp NkbUQ6L9VN6+M2TKGODcVF+37ub342ccpXub8+S9F7lyBL7+X+LKMef0y3NyGo4Z kO7lAyur8UJ3P9KIi5Z+FO494vUXQYp/BjnxXY8GUDXtMiyAHdjaM7xUy43J18+S WK0wJmUeFF13UcWXRImfBi5vdkp2UQqafntGww2HtZNIJZQiDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCSqOMAt//ssoAxwTrKhi+WQzyB/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZjg4ZGFlYWQtNmNiYS0z MmRmLWE4ZjktZTE2YjRiMmFiYTJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQOmpMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADI1ZDFH8UeI7eojCwiC4+csq7aH3NLWDNOAmKlQKOkjIVsRA2AZ4Lx4 KQK/luFZEu5FxzUAFJ9KL/B1WSkwgBs5DvYu9qyX17hd8SxgoDLtOj6JKOEE1GwG z1wGL4BYYzrXKY6X4Eqw+2A7PaQaTLJYqlvrNpJadHufEiIf1PAHX/q14L7/3PVO HO5scFHDb4glmZrjC4aolP18droF3TJ2ehmX5WeR/bJPlN+knmbk3N3hViPpeWHD G0AHxDN57WYVys/zZfRClBxVXWgFdzQHgZ685Cu2xx65zk824zmsCsck+8ZZHpwr 06Qdo5u8ZxBdx9WVFSURxPm9UIRqehs= -----END CERTIFICATE-----Generated at Sun May 4 10:22:16 2025 by rpki-client