$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/e648c687-e466-3d2e-82ec-255870c940d1.roa File: e648c687-e466-3d2e-82ec-255870c940d1.roa (raw, json) Hash identifier: jS5l7C4lV0HYDQKaen8mK4XPXp1fhauGmUIWiW2j8HY= Subject key identifier: 3B:0E:BB:32:00:46:AB:8F:41:87:40:CB:87:9A:C5:CB:4D:12:E6:10 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285849A7851D881FA10AA427C71C00 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/e648c687-e466-3d2e-82ec-255870c940d1.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 15169 IP address blocks: 64.233.165.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:85:1d:88:1f:a1:0a:a4:27:c7:1c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=25a763cf-cc5c-4144-8b99-c968327f3645 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:59:0f:c7:75:44:a2:14:0d:4f:b0:69:99:57: 5e:8b:f4:71:9b:96:0e:c8:e6:fa:41:a8:d7:36:ab: c7:20:f9:bb:ef:15:9a:f5:53:d3:20:bc:0d:ca:76: 0f:c4:0e:97:74:cf:da:1d:08:97:b1:03:37:9b:1e: 83:ae:c4:df:61:f8:07:ab:54:da:4d:03:7b:6e:90: 13:ea:89:61:50:ea:2f:43:bc:e6:3f:88:e6:03:4f: e2:f2:b2:4e:4a:c1:32:04:49:27:2f:ca:65:dd:da: 93:d2:50:4d:d5:3a:a7:53:0e:f0:b8:e8:ec:38:49: fd:e6:90:6b:58:2f:98:a2:4f:e9:22:10:37:23:fa: 8e:92:32:ef:84:25:b8:1a:59:4d:c4:a5:3e:86:c9: 74:e7:1d:f6:64:3a:d7:be:84:a3:c6:f7:f5:e1:56: 75:b6:1b:3a:04:2f:90:f0:f9:ee:45:65:22:5e:46: 04:18:d4:91:af:91:97:10:5f:94:d0:a8:7b:c8:16: 8a:87:7a:8b:4d:ea:6e:41:71:21:02:f3:15:23:a1: 4a:9c:10:76:c6:31:02:25:7e:00:c3:bc:a9:af:1c: 00:b7:eb:68:e8:31:b0:a3:19:64:f1:a7:66:e8:19: 58:21:92:03:28:8c:b4:29:d1:2e:af:0f:7e:f8:89: b1:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:0E:BB:32:00:46:AB:8F:41:87:40:CB:87:9A:C5:CB:4D:12:E6:10 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/e648c687-e466-3d2e-82ec-255870c940d1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 64.233.165.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9a:00:b3:cd:e8:ed:68:34:6b:22:3b:d2:8b:86:7f:90:89:d4: e4:74:27:67:e2:b2:ec:aa:c5:52:07:47:9f:5e:69:52:99:30: f8:19:58:d5:f3:6f:cd:a8:a1:aa:bc:80:7d:e1:5f:9b:ca:72: 40:b0:23:d5:62:8c:6c:8b:0b:30:70:c8:2a:ec:d6:4b:42:ac: 45:f4:2a:42:69:0e:4a:fc:4c:a0:ca:44:d6:00:97:e2:b0:4d: cc:2d:91:7c:c1:19:a1:ea:78:c9:0c:ca:26:cf:72:bb:00:6f: 73:0e:77:bf:bc:33:98:38:e1:df:30:d1:b3:f1:d4:c9:6e:47: 9f:74:9b:04:c3:c2:b7:e8:82:09:d8:2a:b1:5b:7f:de:44:1c: 79:f7:47:0a:8a:03:8a:85:ef:3f:9f:9d:e9:ea:6d:85:ef:23: 30:41:7c:ed:97:cf:1d:d0:c0:91:cb:03:2a:4c:89:54:9d:56: c6:6f:55:d6:f9:d9:1c:e0:61:b0:2d:69:76:e8:a3:2f:fa:a8: 4f:b8:1b:18:0a:57:a7:7d:4f:1b:b3:90:02:5f:94:e1:cb:25: bb:eb:b3:8f:2a:9e:d7:de:8f:58:81:2b:74:0c:ba:73:77:2b: bc:27:45:a1:7c:36:ae:61:80:34:bf:0e:76:60:34:a1:d3:49: 50:ae:e8:75 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhR2IH6EKpCfHHAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk MjVhNzYzY2YtY2M1Yy00MTQ0LThiOTktYzk2ODMyN2YzNjQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArlkPx3VEohQNT7BpmVdei/Rxm5YOyOb6QajX NqvHIPm77xWa9VPTILwNynYPxA6XdM/aHQiXsQM3mx6DrsTfYfgHq1TaTQN7bpAT 6olhUOovQ7zmP4jmA0/i8rJOSsEyBEknL8pl3dqT0lBN1TqnUw7wuOjsOEn95pBr WC+Yok/pIhA3I/qOkjLvhCW4GllNxKU+hsl05x32ZDrXvoSjxvf14VZ1ths6BC+Q 8PnuRWUiXkYEGNSRr5GXEF+U0Kh7yBaKh3qLTepuQXEhAvMVI6FKnBB2xjECJX4A w7yprxwAt+to6DGwoxlk8adm6BlYIZIDKIy0KdEurw9++ImxrQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDsOuzIARquPQYdAy4eaxctNEuYQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZTY0OGM2ODctZTQ2Ni0z ZDJlLTgyZWMtMjU1ODcwYzk0MGQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQOmlMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJoAs83o7Wg0ayI70ouGf5CJ1OR0J2fisuyqxVIHR59eaVKZMPgZWNXz b82ooaq8gH3hX5vKckCwI9VijGyLCzBwyCrs1ktCrEX0KkJpDkr8TKDKRNYAl+Kw TcwtkXzBGaHqeMkMyibPcrsAb3MOd7+8M5g44d8w0bPx1MluR590mwTDwrfoggnY KrFbf95EHHn3RwqKA4qF7z+fnenqbYXvIzBBfO2Xzx3QwJHLAypMiVSdVsZvVdb5 2RzgYbAtaXbooy/6qE+4GxgKV6d9TxuzkAJflOHLJbvrs48qntfej1iBK3QMunN3 K7wnRaF8Nq5hgDS/DnZgNKHTSVCu6HU= -----END CERTIFICATE-----Generated at Sun Apr 27 09:52:50 2025 by rpki-client