$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/9242d4d2-ae71-3199-b005-7f03715ae415.roa File: 9242d4d2-ae71-3199-b005-7f03715ae415.roa (raw, json) Hash identifier: xWiieuBlhk5rrXGP/r6epJEGoU7A+mPxSdihwyNe60w= Subject key identifier: 31:CE:59:94:60:8D:F5:A8:29:E8:B5:F1:09:2B:01:E6:02:A2:20:0C Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584A86DBCD8B8209E9BA4687A200 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/9242d4d2-ae71-3199-b005-7f03715ae415.roa Signing time: Tue 15 Jul 2025 13:01:04 +0000 ROA not before: Tue 15 Jul 2025 13:01:04 +0000 ROA not after: Mon 13 Oct 2025 13:01:04 +0000 asID: 15169 IP address blocks: 64.233.172.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:86:db:cd:8b:82:09:e9:ba:46:87:a2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jul 15 13:01:04 2025 GMT Not After : Oct 13 13:01:04 2025 GMT Subject: CN=60f3c33a-159f-4fbe-9ed4-5de74b3813c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:d4:64:08:dc:37:fe:ae:b5:62:d2:70:75:a6: e9:7f:78:aa:36:c4:3e:29:be:fa:1e:69:75:46:fd: c8:c7:a8:c1:6b:36:4c:c5:19:a4:8c:e6:93:e6:dc: 78:92:95:98:f5:b1:f4:7e:5d:ef:5a:07:e6:7c:16: 1f:c9:89:56:d4:a9:fa:00:8b:ff:4b:32:bc:b6:fa: 49:f9:8f:07:81:0b:ee:1d:9d:99:7c:4f:11:53:1f: 3c:01:ac:12:e4:b8:09:e5:d3:09:ff:42:d3:c3:ec: b2:e2:5d:f8:e4:f7:1b:31:e9:8a:4a:85:b1:4e:28: 22:96:25:59:75:0b:d6:a2:2f:bd:a5:92:b8:f0:e9: d2:6d:ce:8a:04:69:24:a3:09:2e:b4:f8:19:de:4a: ec:ea:02:8f:5c:45:87:73:1b:24:ec:6a:32:4d:0d: 68:b6:5c:c1:df:e9:eb:3f:f2:a9:34:01:05:c1:4a: 94:79:fe:45:08:48:8c:5e:f6:86:64:b9:ac:a7:cf: 30:62:2c:a5:38:75:91:5d:b2:0a:72:c3:f3:30:75: be:fe:cf:7e:e0:10:00:08:1b:fd:92:eb:89:d0:66: df:0c:53:2b:fc:3c:e1:46:1e:ba:f2:3f:2b:44:a6: a2:db:a3:20:eb:e6:f7:ef:ea:65:ff:2d:0c:3b:03: e9:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:CE:59:94:60:8D:F5:A8:29:E8:B5:F1:09:2B:01:E6:02:A2:20:0C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/9242d4d2-ae71-3199-b005-7f03715ae415.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 64.233.172.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:4b:12:03:ab:56:10:ed:99:f6:6d:dd:b5:f2:61:25:6e:2f: a3:05:c4:0a:1f:bf:14:e1:c3:13:33:07:ec:b7:b2:aa:96:1e: 1d:52:e7:55:2f:f8:e2:d5:f1:5b:db:33:6f:4f:67:a1:4b:3e: c4:52:60:15:5b:45:45:8e:0d:33:c2:5e:e0:ae:83:2a:e5:8f: 70:c2:f9:d4:9d:b2:8c:c3:54:2a:0f:48:74:b8:ba:80:b5:57: 4d:45:b4:a7:5f:04:fa:0a:0c:9b:03:b3:ce:ce:26:96:84:41: 48:64:c9:c6:f3:27:10:27:86:e7:84:28:6a:79:51:12:76:d3: 77:44:9d:6f:89:6a:a7:ec:74:5d:07:1a:d7:03:4f:ae:94:13: 1c:cb:63:1a:b8:6e:77:d3:14:7d:e9:c1:c1:df:05:bc:66:1d: e3:75:38:75:20:1d:60:5f:2f:1b:09:4b:4a:7e:9b:b8:6f:51: 4d:74:ca:3a:13:b9:50:61:10:dc:6e:b9:76:15:7a:99:ed:9f: d1:88:5d:c7:d1:8a:8d:c5:db:70:08:4c:25:31:ba:22:84:40: f6:ef:5f:35:e3:ba:e9:47:6e:3c:83:6d:02:18:24:6e:1c:21: 57:33:43:9d:55:6e:a2:62:e8:be:c0:ec:40:b5:ca:54:e8:88: ad:67:0e:bb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqG282LggnpukaHogAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDcxNTEzMDEwNFoXDTI1MTAxMzEzMDEwNFowLzEtMCsGA1UEAxMk NjBmM2MzM2EtMTU5Zi00ZmJlLTllZDQtNWRlNzRiMzgxM2M4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAldRkCNw3/q61YtJwdabpf3iqNsQ+Kb76Hml1 Rv3Ix6jBazZMxRmkjOaT5tx4kpWY9bH0fl3vWgfmfBYfyYlW1Kn6AIv/SzK8tvpJ +Y8HgQvuHZ2ZfE8RUx88AawS5LgJ5dMJ/0LTw+yy4l345PcbMemKSoWxTigiliVZ dQvWoi+9pZK48OnSbc6KBGkkowkutPgZ3krs6gKPXEWHcxsk7GoyTQ1otlzB3+nr P/KpNAEFwUqUef5FCEiMXvaGZLmsp88wYiylOHWRXbIKcsPzMHW+/s9+4BAACBv9 kuuJ0GbfDFMr/DzhRh668j8rRKai26Mg6+b37+pl/y0MOwPpbQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDHOWZRgjfWoKei18QkrAeYCoiAMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvOTI0MmQ0ZDItYWU3MS0z MTk5LWIwMDUtN2YwMzcxNWFlNDE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQOmsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEtLEgOrVhDtmfZt3bXyYSVuL6MFxAofvxThwxMzB+y3sqqWHh1S51Uv +OLV8VvbM29PZ6FLPsRSYBVbRUWODTPCXuCugyrlj3DC+dSdsozDVCoPSHS4uoC1 V01FtKdfBPoKDJsDs87OJpaEQUhkycbzJxAnhueEKGp5URJ203dEnW+JaqfsdF0H GtcDT66UExzLYxq4bnfTFH3pwcHfBbxmHeN1OHUgHWBfLxsJS0p+m7hvUU10yjoT uVBhENxuuXYVepntn9GIXcfRio3F23AITCUxuiKEQPbvXzXjuulHbjyDbQIYJG4c IVczQ51VbqJi6L7A7EC1ylToiK1nDrs= -----END CERTIFICATE-----Generated at Wed Aug 6 10:06:22 2025 by rpki-client