$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/cfa03d6e-9ab4-34e6-87ed-f9a29f9f369b.roa File: cfa03d6e-9ab4-34e6-87ed-f9a29f9f369b.roa (raw, json) Hash identifier: BM2NVLuCdNeKf+gEj9pQFg+ZjlQQ94pejSFjtFWxZNk= Subject key identifier: 92:E0:46:78:D2:94:0C:97:26:8E:8F:16:6E:80:09:B5:96:BC:71:1E Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584A86DBC9D7F12A5E7623FDA000 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/cfa03d6e-9ab4-34e6-87ed-f9a29f9f369b.roa Signing time: Tue 15 Jul 2025 13:01:04 +0000 ROA not before: Tue 15 Jul 2025 13:01:04 +0000 ROA not after: Mon 13 Oct 2025 13:01:04 +0000 asID: 15169 IP address blocks: 64.233.160.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:86:db:c9:d7:f1:2a:5e:76:23:fd:a0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jul 15 13:01:04 2025 GMT Not After : Oct 13 13:01:04 2025 GMT Subject: CN=a34a8290-1721-41b8-ac61-2bca52dc8bd3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:ee:e4:24:32:9b:1b:eb:d0:7f:c7:71:44:94: e1:38:72:a3:17:22:b3:e6:95:1d:04:97:4b:8f:99: 1b:b6:ee:c9:e1:76:39:6f:c4:d0:5f:1e:4b:d5:b4: 31:d4:a4:f6:0c:a3:bd:43:d9:03:a3:b5:b4:72:07: 41:28:56:ed:ff:67:ce:4b:ec:3c:f6:e1:98:74:f4: 1b:bc:12:26:61:ad:ac:e4:b3:94:0e:2a:5f:e0:1d: 13:7a:20:4c:7c:4d:23:d2:a2:31:2f:7d:c5:e0:16: 75:f4:85:d2:fd:89:3c:c7:8b:a2:07:30:76:b3:e1: 2d:97:b9:cc:7f:7e:b5:78:ed:30:c9:69:fe:c7:7b: 7d:c3:ab:cc:2b:80:f2:88:3a:bb:4c:d6:4a:58:ef: fa:4a:6d:9d:03:05:8f:59:42:e2:ed:be:4d:2a:36: 8a:72:6f:79:b6:7f:16:a0:43:93:27:ef:1e:51:c4: 63:b6:a8:67:a8:9b:6a:2b:5b:25:ce:25:1b:11:1e: 58:94:1e:f5:5c:fc:0b:fe:95:80:a1:a4:3d:90:36: b3:dd:af:d9:98:78:1d:21:eb:1c:57:3a:7c:72:1a: 52:25:2c:e9:08:ae:d5:36:3e:74:3a:36:ee:b7:3a: 9f:27:a2:71:f3:b7:4f:c3:6c:c6:0c:98:68:de:e3: a1:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:E0:46:78:D2:94:0C:97:26:8E:8F:16:6E:80:09:B5:96:BC:71:1E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/cfa03d6e-9ab4-34e6-87ed-f9a29f9f369b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 64.233.160.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:fa:9b:5d:0d:51:c0:ae:5c:31:5d:fd:5e:6d:63:79:90:96: 1a:c1:cb:71:1e:c7:39:b7:cc:a1:35:3f:e8:3d:ed:a9:df:5c: 8e:e1:22:ab:9c:19:61:dc:61:59:7f:fb:10:91:65:dd:dd:1b: f5:ff:e5:ed:df:54:3e:ac:eb:03:86:ed:5e:2f:1a:79:e5:00: 4f:3e:77:d3:5b:39:0b:63:09:b2:b9:a1:04:09:32:8a:66:5c: f7:0a:0a:77:a2:01:5d:28:75:ca:9f:6b:e6:fd:bc:57:fb:18: 8f:b5:30:38:8e:29:cd:26:6a:e9:a0:fb:4b:1c:77:aa:b1:19: 26:cb:c3:fb:bd:b7:c4:18:b0:d6:62:e6:8d:01:00:5c:7b:ca: 69:10:db:e2:ab:2e:36:ca:3a:2a:2c:f6:e6:ca:47:c3:47:e7: 5d:d4:88:7a:71:3c:38:30:d0:69:b3:9d:ab:fb:1a:ee:7d:e9: a6:5a:33:5b:eb:2f:51:ad:16:bc:83:57:11:23:06:5f:c7:19: 4e:4e:ab:ed:1c:d3:28:40:24:bc:2f:9b:25:79:0a:42:fe:f9: 25:5d:43:be:ad:2c:1c:26:1a:fa:0a:f6:30:29:3d:f0:66:2a: 15:02:2d:f3:fa:84:74:bc:23:61:5d:cd:ab:f9:92:9a:a6:bb: 28:3c:73:bf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqG28nX8SpediP9oAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDcxNTEzMDEwNFoXDTI1MTAxMzEzMDEwNFowLzEtMCsGA1UEAxMk YTM0YTgyOTAtMTcyMS00MWI4LWFjNjEtMmJjYTUyZGM4YmQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApO7kJDKbG+vQf8dxRJThOHKjFyKz5pUdBJdL j5kbtu7J4XY5b8TQXx5L1bQx1KT2DKO9Q9kDo7W0cgdBKFbt/2fOS+w89uGYdPQb vBImYa2s5LOUDipf4B0TeiBMfE0j0qIxL33F4BZ19IXS/Yk8x4uiBzB2s+Etl7nM f361eO0wyWn+x3t9w6vMK4DyiDq7TNZKWO/6Sm2dAwWPWULi7b5NKjaKcm95tn8W oEOTJ+8eUcRjtqhnqJtqK1slziUbER5YlB71XPwL/pWAoaQ9kDaz3a/ZmHgdIesc Vzp8chpSJSzpCK7VNj50OjbutzqfJ6Jx87dPw2zGDJho3uOhZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJLgRnjSlAyXJo6PFm6ACbWWvHEeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvY2ZhMDNkNmUtOWFiNC0z NGU2LTg3ZWQtZjlhMjlmOWYzNjliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFQOmgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADD6m10NUcCuXDFd/V5tY3mQlhrBy3Eexzm3zKE1P+g97anfXI7hIquc GWHcYVl/+xCRZd3dG/X/5e3fVD6s6wOG7V4vGnnlAE8+d9NbOQtjCbK5oQQJMopm XPcKCneiAV0odcqfa+b9vFf7GI+1MDiOKc0maumg+0scd6qxGSbLw/u9t8QYsNZi 5o0BAFx7ymkQ2+KrLjbKOios9ubKR8NH513UiHpxPDgw0Gmznav7Gu596aZaM1vr L1GtFryDVxEjBl/HGU5Oq+0c0yhAJLwvmyV5CkL++SVdQ76tLBwmGvoK9jApPfBm KhUCLfP6hHS8I2Fdzav5kpqmuyg8c78= -----END CERTIFICATE-----Generated at Mon Aug 4 14:42:08 2025 by rpki-client