$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/f88daead-6cba-32df-a8f9-e16b4b2aba2d.roa File: f88daead-6cba-32df-a8f9-e16b4b2aba2d.roa (raw, json) Hash identifier: u2omyNeGYBjV+eYi20y7I7TCGGDjgoJx8+ikJ+mjbzQ= Subject key identifier: CA:FB:A8:74:FB:8E:32:B9:40:9B:FF:94:02:6D:82:81:B6:06:7F:A4 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584A86DBD1225EB2F10BEC788650 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/f88daead-6cba-32df-a8f9-e16b4b2aba2d.roa Signing time: Tue 15 Jul 2025 13:01:04 +0000 ROA not before: Tue 15 Jul 2025 13:01:04 +0000 ROA not after: Mon 13 Oct 2025 13:01:04 +0000 asID: 15169 IP address blocks: 64.233.169.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:86:db:d1:22:5e:b2:f1:0b:ec:78:86:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jul 15 13:01:04 2025 GMT Not After : Oct 13 13:01:04 2025 GMT Subject: CN=6cfb82b9-1360-4fb1-82cc-190554c60848 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:57:85:62:56:20:06:fe:bf:b7:4f:63:16:52: 9f:68:95:40:9c:3c:a5:b0:13:54:02:80:53:0f:37: fe:9d:97:db:ab:41:3e:4e:e0:e2:56:94:e9:2e:59: 63:f7:b6:a5:77:3e:84:82:b0:44:11:7e:4f:db:2d: 93:1d:b4:9a:29:14:d0:8b:6c:13:c4:e7:74:fc:d3: 6a:d8:b3:25:d5:ff:ed:fd:24:d3:8a:3f:9d:e9:0a: 31:25:cb:0e:c4:14:c5:4f:15:ef:56:a3:40:a8:e6: a3:b0:9b:c7:1c:31:df:dd:de:36:0c:c4:ab:12:96: df:6e:3c:d3:4a:c7:0f:42:0a:3d:a5:dc:8d:3c:2f: 33:27:ea:be:c4:e6:ee:b3:1e:9a:b4:e3:dc:28:7b: c5:ca:bf:32:fb:68:4a:d9:f0:d8:5f:9a:65:0e:92: 81:28:86:38:b3:11:8d:ed:a2:eb:9e:2e:da:61:72: f7:bd:bb:c7:e0:74:8e:20:8f:5f:d1:b3:5c:3e:80: 7a:a6:cf:93:88:34:5d:50:25:66:02:55:ed:35:25: 43:4d:86:98:03:c2:01:3b:95:54:ac:bc:66:f8:85: f8:06:d9:94:e4:8b:86:ef:e0:8b:96:e6:50:c8:e1: a3:32:91:7e:1c:d3:18:23:13:ce:35:8c:9e:f2:cc: 65:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:FB:A8:74:FB:8E:32:B9:40:9B:FF:94:02:6D:82:81:B6:06:7F:A4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/f88daead-6cba-32df-a8f9-e16b4b2aba2d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 64.233.169.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:b1:9e:dc:a9:4f:e5:6e:14:76:82:6a:c1:8f:bb:14:d7:d4: b8:ed:5d:38:be:af:33:71:5d:54:e9:0f:95:c4:29:73:30:48: 4a:f7:5a:4f:da:2e:92:5d:a5:3c:e9:f0:6f:ce:ba:87:07:15: 9d:72:c4:53:b0:df:9c:8d:55:e1:bd:f6:a9:50:df:4d:02:4a: 13:38:ec:c5:36:b4:e0:9f:92:42:58:8a:54:f8:98:fe:f3:32: 20:81:e0:dd:fb:c4:57:07:93:74:37:92:1a:06:bd:5c:9d:27: c4:3d:c3:44:be:a2:73:dd:5d:ba:f9:19:c1:9d:cd:b4:15:d4: da:9b:6a:67:7f:c9:cd:34:91:d3:2f:f0:a1:a0:27:f7:04:04: f4:24:a8:72:f0:31:72:1b:ae:d6:5b:a4:79:73:d7:96:34:27: 93:44:94:36:b6:05:de:03:f8:44:01:95:a6:c2:03:e4:83:66: 9c:7d:6a:ad:27:6b:20:26:35:cc:73:f9:a2:f7:a0:8e:1d:c6: 7c:5d:53:62:d4:f9:3c:16:5d:09:33:19:d6:03:ea:46:c5:8c: f5:83:51:8b:b2:c6:4d:6c:a7:71:44:ae:9e:f1:b4:0f:b2:db: a7:80:ec:1e:23:e8:25:b5:19:70:21:2a:de:d9:2e:33:02:6d: 6d:fe:67:9c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqG29EiXrLxC+x4hlAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDcxNTEzMDEwNFoXDTI1MTAxMzEzMDEwNFowLzEtMCsGA1UEAxMk NmNmYjgyYjktMTM2MC00ZmIxLTgyY2MtMTkwNTU0YzYwODQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj1eFYlYgBv6/t09jFlKfaJVAnDylsBNUAoBT Dzf+nZfbq0E+TuDiVpTpLllj97aldz6EgrBEEX5P2y2THbSaKRTQi2wTxOd0/NNq 2LMl1f/t/STTij+d6QoxJcsOxBTFTxXvVqNAqOajsJvHHDHf3d42DMSrEpbfbjzT SscPQgo9pdyNPC8zJ+q+xObusx6atOPcKHvFyr8y+2hK2fDYX5plDpKBKIY4sxGN 7aLrni7aYXL3vbvH4HSOII9f0bNcPoB6ps+TiDRdUCVmAlXtNSVDTYaYA8IBO5VU rLxm+IX4BtmU5IuG7+CLluZQyOGjMpF+HNMYIxPONYye8sxlywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMr7qHT7jjK5QJv/lAJtgoG2Bn+kMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZjg4ZGFlYWQtNmNiYS0z MmRmLWE4ZjktZTE2YjRiMmFiYTJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQOmpMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIexntypT+VuFHaCasGPuxTX1LjtXTi+rzNxXVTpD5XEKXMwSEr3Wk/a LpJdpTzp8G/OuocHFZ1yxFOw35yNVeG99qlQ300CShM47MU2tOCfkkJYilT4mP7z MiCB4N37xFcHk3Q3khoGvVydJ8Q9w0S+onPdXbr5GcGdzbQV1Nqbamd/yc00kdMv 8KGgJ/cEBPQkqHLwMXIbrtZbpHlz15Y0J5NElDa2Bd4D+EQBlabCA+SDZpx9aq0n ayAmNcxz+aL3oI4dxnxdU2LU+TwWXQkzGdYD6kbFjPWDUYuyxk1sp3FErp7xtA+y 26eA7B4j6CW1GXAhKt7ZLjMCbW3+Z5w= -----END CERTIFICATE-----Generated at Mon Aug 4 14:19:30 2025 by rpki-client