$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/f05ce77d-c718-3a7b-9505-bf594e90f4f2.roa File: f05ce77d-c718-3a7b-9505-bf594e90f4f2.roa (raw, json) Hash identifier: CiINZ0iTwPwJP3T18Hvu9TPxEZtKhRY9o2EmID/zJu4= Subject key identifier: B6:D3:34:15:46:5B:29:8F:AE:75:90:30:23:98:C9:86:9E:24:50:9E Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285849A7851B663C225643DE62FD00 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/f05ce77d-c718-3a7b-9505-bf594e90f4f2.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 15169 IP address blocks: 64.233.161.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:85:1b:66:3c:22:56:43:de:62:fd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=72dc734e-5172-43f2-bbef-a98fd6456d30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:8e:37:1f:18:07:01:69:19:2a:07:94:00:81: ec:0c:4f:57:ce:0f:ed:0f:fd:69:81:3e:e5:ae:b9: 71:e8:e2:2c:0c:9e:76:56:03:c1:9c:44:1b:4f:de: 5d:1b:b1:9d:49:25:dc:02:e0:68:fa:27:96:de:f4: 52:ce:3c:0a:40:68:c6:89:d2:68:89:f3:c4:6a:b6: 46:cf:96:6c:91:b2:ed:30:02:73:a0:eb:75:04:a7: 37:2e:f6:37:04:16:45:ee:9d:56:70:b9:2b:6c:06: 7f:a7:b6:e8:2f:5a:85:20:fb:ac:01:c8:78:98:a3: 4a:74:93:92:21:0c:37:12:46:08:00:77:6c:eb:7e: 6d:6d:7a:15:77:3b:0b:c4:c1:b4:6c:c0:7e:08:66: a5:70:05:b3:19:59:67:95:13:5f:99:c2:68:74:5f: 26:bf:08:94:26:fa:7a:7a:a9:1b:fa:f0:d0:1f:3e: 6f:8a:ed:0e:0a:00:12:a6:58:32:66:d8:24:ef:10: ef:bb:7b:5c:a9:cc:28:41:c9:1c:2a:30:30:a4:69: 4f:7b:8c:78:46:7f:a5:70:6a:b7:d3:73:87:58:f2: a8:56:50:5a:8e:17:85:e8:78:d8:92:40:f3:48:5e: 2e:ba:90:2b:0d:e3:12:5c:99:fd:7c:9e:6f:62:2b: 33:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:D3:34:15:46:5B:29:8F:AE:75:90:30:23:98:C9:86:9E:24:50:9E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/f05ce77d-c718-3a7b-9505-bf594e90f4f2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 64.233.161.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:fc:01:e1:38:5c:dc:63:b6:0f:cf:dd:88:68:08:2a:6e:ba: 57:28:91:0b:a7:e7:33:dd:70:a4:fe:82:0c:6e:64:6a:09:4b: 53:ca:70:b2:72:ce:66:e5:1b:f3:9d:d4:1f:8f:95:28:ba:37: 9a:25:92:46:9a:17:e6:e3:4d:47:c2:a6:4d:11:20:58:bb:38: 9a:61:e1:a2:da:8c:45:ce:22:6b:81:26:a0:e9:38:35:24:e1: 27:8c:d0:b0:93:23:bd:38:dc:1e:e1:ee:9a:c2:47:b4:95:95: 4a:80:4e:74:d4:6c:98:9f:67:1e:7e:13:72:5d:f5:11:ae:14: 9b:41:96:88:2d:86:9c:0f:ae:95:38:52:85:55:c1:fe:11:8b: 3e:da:6b:67:41:fe:ff:37:8a:1a:8c:50:2d:b0:bc:db:d9:2f: 09:b9:c8:12:16:c5:9c:d2:68:1e:a7:60:6a:b7:d4:11:74:8d: 35:71:f9:8e:e6:b2:74:8e:58:0f:1c:78:48:9d:f6:3c:aa:dc: 47:1c:27:69:a2:bd:11:d9:7b:66:55:b3:02:a0:73:78:4f:e2: 07:cf:83:df:16:e6:aa:74:7e:da:ce:58:57:45:b0:dd:78:d5: 30:5d:59:26:e4:78:22:19:a1:c9:3f:8f:16:90:ec:ac:48:12: ec:4c:d4:ac -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhRtmPCJWQ95i/QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk NzJkYzczNGUtNTE3Mi00M2YyLWJiZWYtYTk4ZmQ2NDU2ZDMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlY43HxgHAWkZKgeUAIHsDE9Xzg/tD/1pgT7l rrlx6OIsDJ52VgPBnEQbT95dG7GdSSXcAuBo+ieW3vRSzjwKQGjGidJoifPEarZG z5ZskbLtMAJzoOt1BKc3LvY3BBZF7p1WcLkrbAZ/p7boL1qFIPusAch4mKNKdJOS IQw3EkYIAHds635tbXoVdzsLxMG0bMB+CGalcAWzGVlnlRNfmcJodF8mvwiUJvp6 eqkb+vDQHz5viu0OCgASplgyZtgk7xDvu3tcqcwoQckcKjAwpGlPe4x4Rn+lcGq3 03OHWPKoVlBajheF6HjYkkDzSF4uupArDeMSXJn9fJ5vYiszUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLbTNBVGWymPrnWQMCOYyYaeJFCeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZjA1Y2U3N2QtYzcxOC0z YTdiLTk1MDUtYmY1OTRlOTBmNGYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQOmhMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE78AeE4XNxjtg/P3YhoCCpuulcokQun5zPdcKT+ggxuZGoJS1PKcLJy zmblG/Od1B+PlSi6N5olkkaaF+bjTUfCpk0RIFi7OJph4aLajEXOImuBJqDpODUk 4SeM0LCTI7043B7h7prCR7SVlUqATnTUbJifZx5+E3Jd9RGuFJtBlogthpwPrpU4 UoVVwf4Riz7aa2dB/v83ihqMUC2wvNvZLwm5yBIWxZzSaB6nYGq31BF0jTVx+Y7m snSOWA8ceEid9jyq3EccJ2mivRHZe2ZVswKgc3hP4gfPg98W5qp0ftrOWFdFsN14 1TBdWSbkeCIZock/jxaQ7KxIEuxM1Kw= -----END CERTIFICATE-----Generated at Sun Apr 27 12:14:19 2025 by rpki-client