$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/89ff9dac-df0a-3835-aa2c-bd3d94b98b8b.roa File: 89ff9dac-df0a-3835-aa2c-bd3d94b98b8b.roa (raw, json) Hash identifier: b4S52ifKFTfof5ibh4+EjNzAWeKx+x9WyIQZ4T7NKrY= Subject key identifier: BE:62:E7:3D:68:F6:CA:97:FC:B9:76:14:84:03:A7:48:88:3A:E0:D5 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584A86DB986AC80E88A6D2DDEE80 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/89ff9dac-df0a-3835-aa2c-bd3d94b98b8b.roa Signing time: Tue 15 Jul 2025 13:01:04 +0000 ROA not before: Tue 15 Jul 2025 13:01:04 +0000 ROA not after: Mon 13 Oct 2025 13:01:04 +0000 asID: 15169 IP address blocks: 64.233.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:86:db:98:6a:c8:0e:88:a6:d2:dd:ee:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jul 15 13:01:04 2025 GMT Not After : Oct 13 13:01:04 2025 GMT Subject: CN=8977275e-6c2b-4a4b-8e01-8ac725382a36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:5d:e9:2a:a9:7b:18:69:bd:66:5c:fd:4d:46: 6b:0f:27:d9:9f:5a:29:dc:be:d8:13:bc:df:e0:1d: 5c:75:a1:bd:8e:40:bb:84:06:be:86:9a:8e:82:12: 8c:a8:f9:77:60:a4:09:66:b1:4c:20:3d:3e:b9:49: 61:8b:6e:fc:f0:89:45:79:27:17:79:c0:11:fd:59: 90:40:df:ad:27:58:19:df:ba:57:9a:9c:52:63:db: 96:da:d8:59:25:7c:e8:d6:96:89:11:4e:20:57:9a: 73:a0:cf:56:35:b7:59:40:ca:59:39:a9:29:b9:9a: e0:7e:ee:e9:59:82:7c:1b:82:77:87:2e:a6:1c:72: bf:3f:72:86:f6:1c:b6:d2:9a:27:e2:66:10:11:fc: 4e:e1:89:54:dc:b1:e3:2a:70:b2:3b:b4:2f:0c:ff: a4:b8:80:68:a9:56:3f:2c:06:61:d9:aa:ba:b6:f5: 0b:93:c0:e9:13:d4:5a:90:70:6a:f6:42:9f:de:4d: 5a:d2:e9:c7:98:bd:40:2a:a9:45:ac:56:23:ca:02: d0:10:16:e6:11:07:b1:5a:b4:13:79:01:4a:1e:5f: 9a:6d:5f:c4:59:b8:cb:d5:c3:d6:34:97:06:b3:e3: b9:1c:74:37:ca:1a:94:e0:34:37:80:99:7c:ab:ab: d3:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:62:E7:3D:68:F6:CA:97:FC:B9:76:14:84:03:A7:48:88:3A:E0:D5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/89ff9dac-df0a-3835-aa2c-bd3d94b98b8b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 64.233.191.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:7d:92:24:11:33:01:8a:85:b6:f9:8d:70:eb:e0:db:94:dc: df:ab:40:72:ba:3c:a1:92:71:43:24:63:b0:5a:e2:20:25:63: 0f:30:fc:8a:39:f6:2f:6b:a0:42:48:da:07:c9:c3:40:f2:dd: e3:04:68:62:6f:ba:1a:80:4f:fb:74:73:ce:9a:22:4a:11:8c: 7c:2e:c8:26:2c:90:d1:b8:10:c5:fc:72:d0:da:77:7c:ad:97: ba:68:e5:f2:d4:f2:3f:6b:83:32:f0:42:ae:29:f7:0f:60:01: f0:bf:f7:6d:1d:80:41:5c:d7:14:ea:57:47:f0:82:6e:92:fa: 79:ed:4e:8a:07:18:7a:43:82:c0:69:0d:1a:b3:4f:de:79:ae: 1b:2e:55:e5:85:33:b5:39:bc:99:28:52:37:27:d1:28:81:d7: 35:9f:02:72:54:e6:82:67:81:aa:81:0f:86:c6:bb:47:8f:2a: be:82:bc:46:e9:24:38:d7:e6:15:98:4b:b8:85:7b:c0:93:06: 01:af:77:7e:0a:1e:96:20:96:ff:b2:9a:67:d9:de:a1:d6:d8: cb:16:9f:5b:09:22:5c:63:2d:59:b1:eb:c8:5f:5c:b9:19:f1: 6c:9b:03:b1:4b:98:91:de:67:26:c0:e3:cf:91:78:81:53:88: 5d:91:54:88 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqG25hqyA6IptLd7oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDcxNTEzMDEwNFoXDTI1MTAxMzEzMDEwNFowLzEtMCsGA1UEAxMk ODk3NzI3NWUtNmMyYi00YTRiLThlMDEtOGFjNzI1MzgyYTM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg13pKql7GGm9Zlz9TUZrDyfZn1op3L7YE7zf 4B1cdaG9jkC7hAa+hpqOghKMqPl3YKQJZrFMID0+uUlhi2788IlFeScXecAR/VmQ QN+tJ1gZ37pXmpxSY9uW2thZJXzo1paJEU4gV5pzoM9WNbdZQMpZOakpuZrgfu7p WYJ8G4J3hy6mHHK/P3KG9hy20pon4mYQEfxO4YlU3LHjKnCyO7QvDP+kuIBoqVY/ LAZh2aq6tvULk8DpE9RakHBq9kKf3k1a0unHmL1AKqlFrFYjygLQEBbmEQexWrQT eQFKHl+abV/EWbjL1cPWNJcGs+O5HHQ3yhqU4DQ3gJl8q6vTEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL5i5z1o9sqX/Ll2FIQDp0iIOuDVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvODlmZjlkYWMtZGYwYS0z ODM1LWFhMmMtYmQzZDk0Yjk4YjhiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQOm/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJZ9kiQRMwGKhbb5jXDr4NuU3N+rQHK6PKGScUMkY7Ba4iAlYw8w/Io5 9i9roEJI2gfJw0Dy3eMEaGJvuhqAT/t0c86aIkoRjHwuyCYskNG4EMX8ctDad3yt l7po5fLU8j9rgzLwQq4p9w9gAfC/920dgEFc1xTqV0fwgm6S+nntTooHGHpDgsBp DRqzT955rhsuVeWFM7U5vJkoUjcn0SiB1zWfAnJU5oJngaqBD4bGu0ePKr6CvEbp JDjX5hWYS7iFe8CTBgGvd34KHpYglv+ymmfZ3qHW2MsWn1sJIlxjLVmx68hfXLkZ 8WybA7FLmJHeZybA48+ReIFTiF2RVIg= -----END CERTIFICATE-----Generated at Mon Aug 4 14:42:35 2025 by rpki-client