$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d1db2434-69a9-35fe-8c62-72431fa4b9bc.roa File: d1db2434-69a9-35fe-8c62-72431fa4b9bc.roa (raw, json) Hash identifier: RhODAWPcnh0ehfYcl9b2oEzAm33op65tIwr0VaiqI4M= Subject key identifier: E9:87:B7:A8:55:75:30:57:33:E3:13:23:06:73:EE:12:8D:B5:EE:A5 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584A86DBF0A22382065E8DDB53C0 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d1db2434-69a9-35fe-8c62-72431fa4b9bc.roa Signing time: Tue 15 Jul 2025 13:01:04 +0000 ROA not before: Tue 15 Jul 2025 13:01:04 +0000 ROA not after: Mon 13 Oct 2025 13:01:04 +0000 asID: 15169 IP address blocks: 64.233.188.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:86:db:f0:a2:23:82:06:5e:8d:db:53:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jul 15 13:01:04 2025 GMT Not After : Oct 13 13:01:04 2025 GMT Subject: CN=37246d52-4692-4df9-98d2-2668652845cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:da:e8:a1:ae:ec:68:b1:5e:d1:ca:84:1c:b7: d8:2a:66:2f:9b:0c:df:94:f8:1e:e2:81:4a:d4:2b: d1:1b:e2:99:05:7d:12:ac:24:2f:77:f3:f2:a1:cb: 15:01:5a:9d:dc:fa:6b:72:27:02:bc:db:26:3a:3e: 43:3a:bc:dd:a1:1e:b8:2e:01:44:e1:bb:26:2c:5e: 64:c0:f6:9b:20:fd:a7:b3:64:51:ab:04:2b:f0:16: 3c:ad:56:c3:90:e8:50:57:5c:86:c4:3b:a1:6b:03: b1:fe:65:21:09:e3:ed:01:72:7d:4c:7a:b3:57:ed: b5:19:a6:c4:4f:03:21:cb:48:b2:38:45:9c:69:1a: 1d:e1:82:23:1a:de:5d:b4:70:a7:c4:78:76:bf:53: e1:71:71:14:f1:7e:59:fa:b1:27:8b:e7:43:df:71: 3f:0e:d5:da:9a:7e:cf:8f:a1:49:3e:43:ea:0e:43: 52:b4:63:88:e1:2f:10:c5:a1:16:b3:c8:19:67:f4: 7f:5e:5f:cf:1d:9b:74:98:8e:13:bc:0b:26:cd:fd: 08:86:a6:7b:64:56:ba:25:d1:e3:6b:2e:0f:f9:51: e3:87:cf:25:0b:31:13:16:98:ff:0b:2a:0d:31:07: 41:68:22:17:a4:b9:94:0d:e4:0d:86:73:b4:25:cd: 1d:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:87:B7:A8:55:75:30:57:33:E3:13:23:06:73:EE:12:8D:B5:EE:A5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d1db2434-69a9-35fe-8c62-72431fa4b9bc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 64.233.188.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:5a:59:f1:28:3e:c5:b6:29:f6:71:01:b0:65:51:d3:3f:b9: b6:6f:4f:e1:61:8c:a5:b1:07:2f:7f:45:c2:dc:e9:8a:1b:6b: f6:9f:a1:8b:9c:97:3f:bd:55:be:ef:cd:fe:a2:de:9e:fb:91: 62:10:d9:fd:45:e5:4d:6b:f2:74:e2:cf:e3:7f:d8:05:35:ec: 06:38:c9:34:55:76:f6:33:20:59:c9:ca:d3:eb:45:56:56:74: 09:cc:44:cb:9e:6d:68:78:4c:02:3b:10:bd:67:15:d7:85:18: ef:0a:bb:23:8a:a8:8c:40:02:ff:ea:85:59:d3:91:6b:bb:5d: f7:70:7a:3a:b2:73:cf:8b:4f:7e:c2:93:08:31:7e:1a:34:ce: ea:4d:4f:69:bc:d4:ce:cb:99:e5:85:1d:ed:8c:19:ea:fd:54: 13:38:b6:6f:a6:b5:74:17:bc:b4:45:e5:b7:1d:6e:a8:32:2c: e5:72:6f:67:28:c4:ad:98:3a:09:04:df:22:6d:de:57:42:82: af:b4:c1:a3:e9:71:e8:9c:a1:3c:19:77:a9:8f:18:c2:7c:07: 32:96:c7:c6:ab:53:f0:ab:13:59:53:38:ab:4a:03:ab:db:61: 65:29:e9:bd:f6:fa:62:e8:ba:39:5f:fb:df:19:45:7a:03:75: c2:ad:ed:6f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqG2/CiI4IGXo3bU8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDcxNTEzMDEwNFoXDTI1MTAxMzEzMDEwNFowLzEtMCsGA1UEAxMk MzcyNDZkNTItNDY5Mi00ZGY5LTk4ZDItMjY2ODY1Mjg0NWNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvdrooa7saLFe0cqEHLfYKmYvmwzflPge4oFK 1CvRG+KZBX0SrCQvd/PyocsVAVqd3PprcicCvNsmOj5DOrzdoR64LgFE4bsmLF5k wPabIP2ns2RRqwQr8BY8rVbDkOhQV1yGxDuhawOx/mUhCePtAXJ9THqzV+21GabE TwMhy0iyOEWcaRod4YIjGt5dtHCnxHh2v1PhcXEU8X5Z+rEni+dD33E/DtXamn7P j6FJPkPqDkNStGOI4S8QxaEWs8gZZ/R/Xl/PHZt0mI4TvAsmzf0IhqZ7ZFa6JdHj ay4P+VHjh88lCzETFpj/CyoNMQdBaCIXpLmUDeQNhnO0Jc0dwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOmHt6hVdTBXM+MTIwZz7hKNte6lMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZDFkYjI0MzQtNjlhOS0z NWZlLThjNjItNzI0MzFmYTRiOWJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQOm8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD5aWfEoPsW2KfZxAbBlUdM/ubZvT+FhjKWxBy9/RcLc6Yoba/afoYuc lz+9Vb7vzf6i3p77kWIQ2f1F5U1r8nTiz+N/2AU17AY4yTRVdvYzIFnJytPrRVZW dAnMRMuebWh4TAI7EL1nFdeFGO8KuyOKqIxAAv/qhVnTkWu7Xfdwejqyc8+LT37C kwgxfho0zupNT2m81M7LmeWFHe2MGer9VBM4tm+mtXQXvLRF5bcdbqgyLOVyb2co xK2YOgkE3yJt3ldCgq+0waPpceicoTwZd6mPGMJ8BzKWx8arU/CrE1lTOKtKA6vb YWUp6b32+mLoujlf+98ZRXoDdcKt7W8= -----END CERTIFICATE-----Generated at Mon Aug 4 16:07:53 2025 by rpki-client