$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d1db2434-69a9-35fe-8c62-72431fa4b9bc.roa File: d1db2434-69a9-35fe-8c62-72431fa4b9bc.roa (raw, json) Hash identifier: aYJk7NQ9LFhWbHABzzq2NMhcKUn9hBVE0er3b+Zhyd0= Subject key identifier: B5:39:BD:18:44:2F:01:17:7A:26:30:18:ED:7A:8B:82:52:02:C3:36 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285849A785381E2FEE389B4BD1EF00 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d1db2434-69a9-35fe-8c62-72431fa4b9bc.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 15169 IP address blocks: 64.233.188.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:85:38:1e:2f:ee:38:9b:4b:d1:ef:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=4e0b78e8-48bc-4c12-b031-3e346c414ca9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:1f:47:e7:2b:10:c5:23:9a:a7:53:f2:ad:d0: e5:7a:2b:d5:28:0d:37:1b:2a:09:41:6d:3c:ca:cf: b1:b2:48:78:f3:a9:fe:98:cf:bd:04:ce:ef:21:32: 8d:b1:5b:79:4b:98:94:56:ef:5c:5c:01:0a:b4:9f: 98:06:fb:e4:68:19:98:4b:fa:90:4e:f6:35:8c:64: ed:c8:ba:4f:94:42:4e:01:03:df:d1:2b:d8:20:d2: df:15:46:17:8b:ab:62:e1:bb:8f:df:57:c4:af:04: fb:52:05:44:86:e4:3c:5f:2e:47:22:01:55:50:5c: 2c:86:bb:d0:ae:48:2c:5c:89:be:ac:7c:05:1c:1a: 85:a9:22:5c:49:a7:b9:6c:d3:5c:8c:c0:a9:2c:5f: 03:3b:44:3a:70:a9:98:0f:6d:01:16:e4:28:f2:47: 69:37:9e:f9:e9:c1:7c:ea:b9:38:fe:19:a7:86:00: 67:74:2a:7c:57:89:49:ad:c9:cf:36:43:13:aa:02: 21:00:7b:97:2a:83:41:1f:cf:2e:dd:ae:e5:e5:11: 93:f9:4e:74:9c:49:e5:ff:47:de:45:3d:95:29:89: ed:0c:39:4f:aa:39:f0:c3:a7:e2:16:46:3b:1a:b9: a3:2b:f2:e1:8d:98:f6:5e:e3:bb:84:95:5b:9f:e6: 3a:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:39:BD:18:44:2F:01:17:7A:26:30:18:ED:7A:8B:82:52:02:C3:36 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d1db2434-69a9-35fe-8c62-72431fa4b9bc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 64.233.188.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:75:09:c9:c5:46:dc:59:ed:e6:a8:ad:fa:a2:79:a6:00:05: 60:22:a7:45:3a:8e:0f:4f:e0:db:7c:ad:5c:84:53:ff:0c:1a: 37:70:a1:0d:65:9f:f4:9b:1e:46:ca:22:4c:d8:97:71:75:34: 71:72:d7:e3:3e:65:64:19:67:60:80:b2:c1:68:8b:19:5d:91: 93:5d:90:2b:3d:62:7e:65:39:46:b6:9c:43:fa:7c:1e:f9:f4: 1e:67:a8:06:92:6b:19:d9:39:80:13:93:ef:48:7c:98:a2:50: 47:8e:15:17:5e:64:94:4f:ca:f8:c9:31:e4:1f:7c:66:61:be: 61:2f:5c:00:63:a0:5a:5f:7c:21:a5:3b:2e:a8:f3:13:b1:b4: cf:ec:ba:a7:f1:d8:81:d3:fb:90:32:a1:ba:a5:c2:74:c2:7c: 23:2f:67:8b:c9:ed:35:5b:83:32:ad:86:d0:6d:72:70:60:56: e6:b0:df:e0:23:d9:cf:f0:d6:b0:0c:fc:24:08:1e:d6:29:81: b3:79:f5:54:cf:fb:1d:40:34:13:40:17:e6:a4:cc:58:ba:05: cc:35:1a:5a:3f:76:57:99:3f:1b:57:9d:5b:b1:4d:60:68:6c: 3a:17:53:1b:c7:b8:92:26:a8:51:d6:d7:b1:2c:32:52:6b:f6: 1b:5b:52:17 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhTgeL+44m0vR7wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk NGUwYjc4ZTgtNDhiYy00YzEyLWIwMzEtM2UzNDZjNDE0Y2E5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnB9H5ysQxSOap1PyrdDleivVKA03GyoJQW08 ys+xskh486n+mM+9BM7vITKNsVt5S5iUVu9cXAEKtJ+YBvvkaBmYS/qQTvY1jGTt yLpPlEJOAQPf0SvYINLfFUYXi6ti4buP31fErwT7UgVEhuQ8Xy5HIgFVUFwshrvQ rkgsXIm+rHwFHBqFqSJcSae5bNNcjMCpLF8DO0Q6cKmYD20BFuQo8kdpN5756cF8 6rk4/hmnhgBndCp8V4lJrcnPNkMTqgIhAHuXKoNBH88u3a7l5RGT+U50nEnl/0fe RT2VKYntDDlPqjnww6fiFkY7GrmjK/LhjZj2XuO7hJVbn+Y68QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLU5vRhELwEXeiYwGO16i4JSAsM2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZDFkYjI0MzQtNjlhOS0z NWZlLThjNjItNzI0MzFmYTRiOWJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQOm8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI51CcnFRtxZ7eaorfqieaYABWAip0U6jg9P4Nt8rVyEU/8MGjdwoQ1l n/SbHkbKIkzYl3F1NHFy1+M+ZWQZZ2CAssFoixldkZNdkCs9Yn5lOUa2nEP6fB75 9B5nqAaSaxnZOYATk+9IfJiiUEeOFRdeZJRPyvjJMeQffGZhvmEvXABjoFpffCGl Oy6o8xOxtM/suqfx2IHT+5AyobqlwnTCfCMvZ4vJ7TVbgzKthtBtcnBgVuaw3+Aj 2c/w1rAM/CQIHtYpgbN59VTP+x1ANBNAF+akzFi6Bcw1Glo/dleZPxtXnVuxTWBo bDoXUxvHuJImqFHW17EsMlJr9htbUhc= -----END CERTIFICATE-----Generated at Sun Apr 27 11:51:33 2025 by rpki-client