$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/260d25bd-1f76-3742-a3b0-4b0de9146a4a.roa File: 260d25bd-1f76-3742-a3b0-4b0de9146a4a.roa (raw, json) Hash identifier: CvXOVcpw/2VROEhWbJkxGThI6umO7UUmY2Avg0SC9nE= Subject key identifier: 21:D6:27:EF:C5:23:78:F2:1C:66:9E:A4:44:F5:96:1F:73:17:48:36 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584B6797B999452256E71DF20D80 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/260d25bd-1f76-3742-a3b0-4b0de9146a4a.roa Signing time: Sat 04 Oct 2025 01:00:33 +0000 ROA not before: Sat 04 Oct 2025 01:00:33 +0000 ROA not after: Fri 02 Jan 2026 02:00:33 +0000 asID: 15169 IP address blocks: 64.233.168.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:67:97:b9:99:45:22:56:e7:1d:f2:0d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Oct 4 01:00:33 2025 GMT Not After : Jan 2 02:00:33 2026 GMT Subject: CN=94ce624a-36f9-4a8e-8be5-c21775e68bb5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:d0:26:34:01:62:c9:ca:1c:2c:0a:28:fb:70: 8b:67:8f:53:cb:80:f3:f9:7a:5f:ff:ae:89:24:bd: 6c:d8:d9:ac:ed:17:36:20:92:f0:75:70:93:3e:79: 84:37:de:cb:95:6b:73:73:80:77:f4:ef:69:4d:d5: 2d:67:02:b5:0a:b5:fd:dd:50:b5:89:00:24:cd:92: 35:ae:de:dd:b3:01:13:08:6c:74:e9:f6:1a:40:0a: 83:86:0a:c8:bb:1e:93:2d:30:f8:6f:c3:e2:cb:04: e1:d0:ce:f6:18:09:f2:17:06:34:c0:e5:ae:b5:b8: 79:04:de:93:29:d9:4d:cf:f7:e7:48:68:f3:5b:f9: 32:d8:34:f1:75:d5:7e:b6:cf:65:18:db:a4:45:5d: 4b:bd:c6:ad:54:a4:2e:ea:38:04:25:e4:11:59:1c: a1:23:cb:7c:89:ef:df:4a:cc:78:a7:1a:a8:4d:b0: ed:76:7e:49:d4:d5:d9:87:5d:6c:b5:df:44:92:fd: 10:28:0d:28:e2:74:8a:f1:ce:12:51:02:76:58:87: 8c:52:c1:93:2d:64:84:6f:4c:c4:ed:3a:f4:5b:30: 94:72:a7:4d:e7:81:4e:c4:88:45:fd:11:a9:f9:7e: 01:ac:94:e5:00:e2:9b:13:bb:95:06:cf:d3:ed:47: cd:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:D6:27:EF:C5:23:78:F2:1C:66:9E:A4:44:F5:96:1F:73:17:48:36 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/260d25bd-1f76-3742-a3b0-4b0de9146a4a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 64.233.168.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9d:94:54:29:2c:8a:72:d4:53:96:8e:05:9b:bd:c0:48:5c:80: 7d:0b:3e:9a:56:27:19:ed:f4:57:2a:7e:17:4c:1c:88:c3:46: de:bf:4a:95:fd:f9:26:3f:b5:e7:cc:11:47:9a:d0:78:e7:4b: da:e3:95:dc:9c:05:a8:75:97:d5:34:6a:5b:67:58:08:88:be: dc:3b:a0:52:10:49:4f:ba:33:f1:c0:0c:67:58:99:a9:c5:c6: 8e:85:f4:cf:31:b7:ba:ff:9d:6e:6b:e7:d2:cc:ce:95:04:71: 46:32:26:e1:ff:30:58:97:65:47:6f:5f:14:a0:f1:e8:94:2c: 79:93:09:23:42:06:ca:48:cf:ef:6b:56:e8:fe:e9:98:2e:b2: c0:19:09:2f:f5:ca:d7:b6:4a:76:d5:49:d2:ed:3b:da:ea:0d: 63:5e:c9:9b:0a:30:fa:32:c6:3d:47:7f:ed:9a:8a:e8:8b:1e: 63:93:c3:b5:40:87:c3:35:86:91:ed:ce:61:ae:46:44:08:79: e9:65:c0:ec:af:98:34:8d:d1:4d:61:1f:7f:b7:d5:f9:e3:f7: 3a:2f:9e:dd:59:72:43:d5:19:6c:4c:0d:bc:d2:05:41:03:6c: de:98:8d:59:65:d2:69:28:a9:e3:1f:54:20:9a:27:a7:e6:5d: dc:8c:dd:e9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtnl7mZRSJW5x3yDYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MTAwNDAxMDAzM1oXDTI2MDEwMjAyMDAzM1owLzEtMCsGA1UEAxMk OTRjZTYyNGEtMzZmOS00YThlLThiZTUtYzIxNzc1ZTY4YmI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr9AmNAFiycocLAoo+3CLZ49Ty4Dz+Xpf/66J JL1s2Nms7Rc2IJLwdXCTPnmEN97LlWtzc4B39O9pTdUtZwK1CrX93VC1iQAkzZI1 rt7dswETCGx06fYaQAqDhgrIux6TLTD4b8PiywTh0M72GAnyFwY0wOWutbh5BN6T KdlNz/fnSGjzW/ky2DTxddV+ts9lGNukRV1LvcatVKQu6jgEJeQRWRyhI8t8ie/f Ssx4pxqoTbDtdn5J1NXZh11std9Ekv0QKA0o4nSK8c4SUQJ2WIeMUsGTLWSEb0zE 7Tr0WzCUcqdN54FOxIhF/RGp+X4BrJTlAOKbE7uVBs/T7UfNhwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCHWJ+/FI3jyHGaepET1lh9zF0g2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMjYwZDI1YmQtMWY3Ni0z NzQyLWEzYjAtNGIwZGU5MTQ2YTRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQOmoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ2UVCksinLUU5aOBZu9wEhcgH0LPppWJxnt9FcqfhdMHIjDRt6/SpX9 +SY/tefMEUea0HjnS9rjldycBah1l9U0altnWAiIvtw7oFIQSU+6M/HADGdYmanF xo6F9M8xt7r/nW5r59LMzpUEcUYyJuH/MFiXZUdvXxSg8eiULHmTCSNCBspIz+9r Vuj+6ZgussAZCS/1yte2SnbVSdLtO9rqDWNeyZsKMPoyxj1Hf+2aiuiLHmOTw7VA h8M1hpHtzmGuRkQIeellwOyvmDSN0U1hH3+31fnj9zovnt1ZckPVGWxMDbzSBUED bN6YjVll0mkoqeMfVCCaJ6fmXdyM3ek= -----END CERTIFICATE-----Generated at Wed Nov 5 04:19:48 2025 by rpki-client