$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/afce684f-83c8-353a-b590-2788d771b00b.roa File: afce684f-83c8-353a-b590-2788d771b00b.roa (raw, json) Hash identifier: KUEOLfcF+2Jyf8VvfWdOENUPs0KQRJOLFvkRO0fvLI8= Subject key identifier: A8:75:B9:FD:0C:D5:81:DE:C9:6C:88:3F:43:BA:A2:16:7B:B8:69:BA Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285849A784CE31C1355071D98E9DC0 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/afce684f-83c8-353a-b590-2788d771b00b.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 15169 IP address blocks: 64.233.187.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:84:ce:31:c1:35:50:71:d9:8e:9d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=c8326d0c-4483-41bc-920b-31f88fcb2a6f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:b0:d2:54:c2:3e:92:6c:d0:10:73:28:c7:f8: e2:89:04:de:19:94:c1:39:7e:5a:f2:47:72:36:cc: ff:1e:93:ad:18:6e:68:47:fa:df:4e:b5:e5:00:42: 36:e0:16:7e:6b:ce:ef:4e:d2:d1:46:a1:05:fd:b7: dc:6f:42:7d:bb:78:1b:16:47:66:d6:a0:cc:b6:20: 60:16:09:60:ce:9a:09:ad:6a:6c:b4:2b:2c:fe:f5: 18:21:fd:cb:f4:6e:d7:74:04:76:c8:25:c2:9c:7f: f1:e4:97:eb:38:64:51:78:26:78:63:06:91:d8:2a: e9:9b:ec:1e:48:39:63:23:e3:c6:53:63:00:a5:c1: 49:c0:1d:e3:da:83:73:a4:dd:45:c1:8f:13:52:ab: d2:e9:04:9f:0f:3f:64:26:d2:66:bf:e6:0c:48:58: 89:c5:e9:37:5b:dc:c3:e0:21:ae:5d:0d:24:80:77: f7:6e:26:9f:e7:d2:0d:8f:8c:c0:2f:59:18:de:57: 55:1b:a0:ef:47:d0:b1:d8:32:62:87:a3:b2:7f:38: 12:3a:0a:fe:6f:a2:8a:f4:f5:0b:f8:b1:02:a7:d0: a3:c0:da:e0:41:03:e0:a8:61:91:ac:36:84:2b:b2: 18:20:91:c4:42:e2:b4:82:9e:10:5a:6c:3a:d4:23: e1:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:75:B9:FD:0C:D5:81:DE:C9:6C:88:3F:43:BA:A2:16:7B:B8:69:BA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/afce684f-83c8-353a-b590-2788d771b00b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 64.233.187.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:57:e4:be:50:7e:ec:49:7f:4e:91:57:f8:06:ce:0f:14:64: 53:fb:a4:7d:be:6a:2a:51:44:e9:1a:01:86:ec:06:bc:11:88: 8f:c9:a3:79:0a:2e:03:79:91:38:9e:a0:83:65:d0:64:69:f2: c6:d4:3f:23:ae:51:ce:b0:f4:d4:cf:41:2e:18:2f:17:8c:a2: da:46:40:e1:da:b0:53:44:7d:c2:84:04:f0:cb:a5:6f:b7:72: a9:8a:53:59:e9:56:03:41:e8:45:ce:4c:c0:56:26:05:30:c0: 42:27:3a:f8:a9:5d:b6:d0:57:2d:36:57:0e:32:ab:1d:0a:c9: 3b:aa:de:85:ea:08:11:ff:d4:cc:5f:0e:9f:21:57:35:4a:50: da:ff:17:19:7b:6e:d6:83:fa:8b:92:37:b5:b3:83:73:d7:84: 6e:73:b3:0f:eb:22:49:a5:a5:c7:ef:90:5a:51:7c:e2:6b:b7: fe:01:e0:ae:4d:1f:1c:c2:f6:f0:04:e2:ed:54:fc:da:13:0c: c9:f9:eb:92:70:27:29:7b:79:a3:70:d8:3d:18:07:50:92:84: c7:13:8b:d0:4a:bc:e0:9d:93:1a:2b:cb:31:6b:ed:af:ce:cf: 23:c2:6a:fc:04:74:38:ff:e0:11:a2:ea:2e:05:9b:2c:63:44: 0c:44:1c:7e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhM4xwTVQcdmOncAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk YzgzMjZkMGMtNDQ4My00MWJjLTkyMGItMzFmODhmY2IyYTZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjrDSVMI+kmzQEHMox/jiiQTeGZTBOX5a8kdy Nsz/HpOtGG5oR/rfTrXlAEI24BZ+a87vTtLRRqEF/bfcb0J9u3gbFkdm1qDMtiBg FglgzpoJrWpstCss/vUYIf3L9G7XdAR2yCXCnH/x5JfrOGRReCZ4YwaR2Crpm+we SDljI+PGU2MApcFJwB3j2oNzpN1FwY8TUqvS6QSfDz9kJtJmv+YMSFiJxek3W9zD 4CGuXQ0kgHf3biaf59INj4zAL1kY3ldVG6DvR9Cx2DJih6OyfzgSOgr+b6KK9PUL +LECp9CjwNrgQQPgqGGRrDaEK7IYIJHEQuK0gp4QWmw61CPhZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKh1uf0M1YHeyWyIP0O6ohZ7uGm6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYWZjZTY4NGYtODNjOC0z NTNhLWI1OTAtMjc4OGQ3NzFiMDBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQOm7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADRX5L5QfuxJf06RV/gGzg8UZFP7pH2+aipRROkaAYbsBrwRiI/Jo3kK LgN5kTieoINl0GRp8sbUPyOuUc6w9NTPQS4YLxeMotpGQOHasFNEfcKEBPDLpW+3 cqmKU1npVgNB6EXOTMBWJgUwwEInOvipXbbQVy02Vw4yqx0KyTuq3oXqCBH/1Mxf Dp8hVzVKUNr/Fxl7btaD+ouSN7Wzg3PXhG5zsw/rIkmlpcfvkFpRfOJrt/4B4K5N HxzC9vAE4u1U/NoTDMn565JwJyl7eaNw2D0YB1CShMcTi9BKvOCdkxoryzFr7a/O zyPCavwEdDj/4BGi6i4FmyxjRAxEHH4= -----END CERTIFICATE-----Generated at Sat Apr 26 19:55:40 2025 by rpki-client