$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/954a6489-42f6-3808-b280-a76e596e6f06.roa File: 954a6489-42f6-3808-b280-a76e596e6f06.roa (raw, json) Hash identifier: OF1w6BAjao8iaSGziBJQGaZvyepBiB11WlvRpm4gtiY= Subject key identifier: F9:EA:3D:10:F7:BC:CF:1B:54:F3:70:3A:5B:E5:13:B8:99:2E:4C:E6 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584A86DB87D6A46CD1EE355FE040 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/954a6489-42f6-3808-b280-a76e596e6f06.roa Signing time: Tue 15 Jul 2025 13:01:04 +0000 ROA not before: Tue 15 Jul 2025 13:01:04 +0000 ROA not after: Mon 13 Oct 2025 13:01:04 +0000 asID: 15169 IP address blocks: 64.233.171.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:86:db:87:d6:a4:6c:d1:ee:35:5f:e0:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jul 15 13:01:04 2025 GMT Not After : Oct 13 13:01:04 2025 GMT Subject: CN=07606c53-1ada-4112-9bce-8c7a4c1b2773 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:b4:8f:bc:5e:28:d4:a2:87:89:3e:78:73:47: c6:b7:a4:1e:9e:23:35:82:a2:9e:b0:2e:a6:a1:79: bd:75:9f:92:be:e4:21:58:7b:70:77:42:0f:7d:48: 4b:dd:e8:68:36:82:98:6e:01:54:dc:63:b1:b5:05: 4a:02:aa:c5:4d:bb:bc:35:bf:f4:e9:1f:b1:d1:e1: e2:b5:2a:8e:fe:55:57:56:ee:c6:bd:09:5c:13:40: 2b:a1:ea:e1:9e:1a:8c:2e:57:e8:6e:1c:80:82:bf: a1:9f:64:b0:c7:f8:4f:f4:ca:e2:63:37:01:c5:3e: 38:e8:e2:37:89:c2:4d:0d:43:d5:7a:2f:28:51:26: ae:27:49:81:30:90:30:e2:b2:db:dc:2e:d8:2c:f6: 40:33:1b:95:fa:a7:42:4c:ab:35:53:a6:2b:2f:b6: 79:ae:41:ee:16:0e:0a:22:07:3c:ec:ee:ca:0b:20: 6a:3e:c4:49:4c:80:20:48:ca:83:f9:42:c1:32:c2: e9:dd:80:03:f7:0b:69:6d:fa:21:6c:61:5a:3e:5a: 8f:b3:e8:26:a4:9f:ba:c2:03:d4:75:f9:44:cf:2d: 31:93:e1:fb:09:ff:a5:cc:55:50:cd:75:0d:15:ec: 76:44:29:0f:aa:f3:5e:fa:8a:f2:0a:52:5e:ec:2c: cc:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:EA:3D:10:F7:BC:CF:1B:54:F3:70:3A:5B:E5:13:B8:99:2E:4C:E6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/954a6489-42f6-3808-b280-a76e596e6f06.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 64.233.171.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:4b:0d:6d:0b:a9:c3:45:9a:43:74:1f:e0:59:58:ee:65:08: b7:c7:fc:76:ab:82:f5:1d:d9:f8:90:24:31:30:2d:b6:ff:6a: b5:46:8b:e2:a6:56:1e:3d:a4:8f:90:b6:07:f7:03:53:21:8b: 43:7b:2e:8a:27:19:aa:46:9a:ff:91:19:0c:ba:27:85:d9:62: 5e:21:19:58:d3:07:d6:98:14:c3:f8:5a:01:e0:ff:36:92:29: aa:14:f4:c4:16:61:d9:4a:2d:ea:eb:3c:e7:50:86:42:a7:60: 1e:17:75:a1:34:17:98:d6:c0:3f:34:b1:aa:86:78:f3:d1:7b: 8e:6a:15:a4:ec:1c:28:a3:f6:45:cb:60:43:2a:fa:01:ca:2e: 34:c6:c3:00:68:b0:ea:aa:b0:e9:d1:ae:34:0a:91:c4:d6:83: 47:55:ef:20:79:d6:ff:ce:1f:cb:38:da:69:cb:44:bf:2a:6a: b3:fd:a8:c1:24:13:a4:6e:a7:2c:ef:a7:65:2d:23:84:5d:3c: 28:22:55:b3:94:46:06:8e:51:53:94:b7:fa:9e:d8:2f:8a:38: 80:c4:0a:dd:39:4e:d1:34:d2:b3:1e:f7:7f:c9:c6:3d:09:ce: a9:83:d0:20:b6:da:c7:91:07:cb:01:60:2e:60:e1:ea:22:59: b6:f7:ad:33 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqG24fWpGzR7jVf4EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDcxNTEzMDEwNFoXDTI1MTAxMzEzMDEwNFowLzEtMCsGA1UEAxMk MDc2MDZjNTMtMWFkYS00MTEyLTliY2UtOGM3YTRjMWIyNzczMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAorSPvF4o1KKHiT54c0fGt6QeniM1gqKesC6m oXm9dZ+SvuQhWHtwd0IPfUhL3ehoNoKYbgFU3GOxtQVKAqrFTbu8Nb/06R+x0eHi tSqO/lVXVu7GvQlcE0AroerhnhqMLlfobhyAgr+hn2Swx/hP9MriYzcBxT446OI3 icJNDUPVei8oUSauJ0mBMJAw4rLb3C7YLPZAMxuV+qdCTKs1U6YrL7Z5rkHuFg4K Igc87O7KCyBqPsRJTIAgSMqD+ULBMsLp3YAD9wtpbfohbGFaPlqPs+gmpJ+6wgPU dflEzy0xk+H7Cf+lzFVQzXUNFex2RCkPqvNe+oryClJe7CzMKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPnqPRD3vM8bVPNwOlvlE7iZLkzmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvOTU0YTY0ODktNDJmNi0z ODA4LWIyODAtYTc2ZTU5NmU2ZjA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQOmrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEpLDW0LqcNFmkN0H+BZWO5lCLfH/HargvUd2fiQJDEwLbb/arVGi+Km Vh49pI+Qtgf3A1Mhi0N7LoonGapGmv+RGQy6J4XZYl4hGVjTB9aYFMP4WgHg/zaS KaoU9MQWYdlKLerrPOdQhkKnYB4XdaE0F5jWwD80saqGePPRe45qFaTsHCij9kXL YEMq+gHKLjTGwwBosOqqsOnRrjQKkcTWg0dV7yB51v/OH8s42mnLRL8qarP9qMEk E6Rupyzvp2UtI4RdPCgiVbOURgaOUVOUt/qe2C+KOIDECt05TtE00rMe93/Jxj0J zqmD0CC22seRB8sBYC5g4eoiWbb3rTM= -----END CERTIFICATE-----Generated at Mon Aug 4 15:27:45 2025 by rpki-client