$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/f8b12702-35c4-3539-9ab0-cb44fe3bd9c2.roa File: f8b12702-35c4-3539-9ab0-cb44fe3bd9c2.roa (raw, json) Hash identifier: O5OFkRFtCQkKJR+M7R6FaOQgbgX1YVBZ/MqIrCwnG5w= Subject key identifier: DD:6F:9A:44:97:C9:D0:E7:45:D0:9C:96:B4:11:99:DB:AA:F9:9C:D1 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584A86DBE9C5C1C3969A92528900 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/f8b12702-35c4-3539-9ab0-cb44fe3bd9c2.roa Signing time: Tue 15 Jul 2025 13:01:04 +0000 ROA not before: Tue 15 Jul 2025 13:01:04 +0000 ROA not after: Mon 13 Oct 2025 13:01:04 +0000 asID: 15169 IP address blocks: 64.233.167.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:86:db:e9:c5:c1:c3:96:9a:92:52:89:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jul 15 13:01:04 2025 GMT Not After : Oct 13 13:01:04 2025 GMT Subject: CN=779a6d31-10de-43ae-b463-260f6d0a1b8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:fe:76:e7:c7:af:8f:76:c4:1b:7b:d8:e9:d8: 70:70:24:a5:d1:71:4f:e7:d7:59:60:df:6a:78:0d: 86:fe:b9:9b:c0:58:51:ce:21:33:55:9b:c6:30:23: a2:e2:ab:e3:07:f4:54:15:8a:54:bc:c6:cd:2f:1b: 63:1a:eb:dc:23:3a:fb:8c:1a:bd:87:9f:97:88:ca: 6b:dc:f9:5c:d9:c8:64:c6:2c:88:48:ee:da:72:c0: 8a:c3:32:9e:98:47:29:5f:e9:75:be:3e:71:5c:75: 79:ae:e7:bd:7f:19:e5:f4:5e:9c:a0:d5:3e:07:d8: fc:2b:c3:36:82:e8:a4:16:46:1b:2f:f6:87:f7:84: 71:9b:18:a1:3a:69:3e:ef:49:39:d9:7a:84:91:4c: 73:03:61:1f:63:1e:bd:23:cb:25:d8:e4:d2:23:42: 2b:38:46:62:67:d8:22:c0:6a:a5:2d:f5:08:53:75: 9e:0d:94:1b:62:2a:c8:60:ca:e9:02:b3:57:3f:1f: ff:7c:de:61:60:ce:da:50:90:2a:03:84:e8:12:37: a9:8e:45:0a:70:68:f4:e8:a0:65:61:5d:32:ca:9e: c9:a0:c5:5d:07:41:c5:1c:bf:86:53:a6:4f:1a:f6: 35:21:69:d7:35:2b:1d:03:dd:c8:50:fc:cd:b5:6b: bb:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:6F:9A:44:97:C9:D0:E7:45:D0:9C:96:B4:11:99:DB:AA:F9:9C:D1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/f8b12702-35c4-3539-9ab0-cb44fe3bd9c2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 64.233.167.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b3:78:79:87:45:9d:39:60:9e:54:88:47:b1:78:19:73:2c:7a: 28:e7:75:15:0c:30:af:05:c0:a6:4a:09:b0:c0:4a:c6:fb:84: e0:40:55:ce:23:73:58:87:18:78:9d:87:7e:cf:83:58:53:34: 8e:5a:2b:c4:2e:ff:6a:f8:8c:b4:d3:1e:76:5a:a4:5f:69:43: 2c:28:c7:0d:57:50:24:88:68:82:12:28:4d:5c:5a:c6:dd:06: 65:35:8f:28:cd:78:79:10:32:0e:e7:76:f1:d3:9c:40:b0:91: 67:fa:ac:a5:4e:5d:ec:e9:d8:c0:65:6e:c9:ef:f5:ab:6f:e3: 60:8a:89:ed:8f:59:51:81:c7:9b:6f:b2:75:c0:0d:e3:c4:61: 11:73:f1:8f:9e:86:9c:88:8a:9f:fe:dd:69:ce:f7:19:af:ef: 75:78:c5:ca:ff:66:7f:09:67:11:f6:a5:2f:4f:59:38:a8:46: c4:e2:c6:da:73:63:a2:de:72:56:8c:55:c0:1e:dd:bc:e0:26: 14:91:a7:db:45:f2:80:ea:bf:86:12:ab:75:f0:e3:9e:d3:7d: 7b:86:a8:bf:9a:d8:88:5b:ca:f4:31:72:3b:74:18:3d:cb:30: fd:5e:57:20:da:7b:a8:f3:0c:9f:ce:57:95:9a:8e:e9:02:12: 41:74:64:ef -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqG2+nFwcOWmpJSiQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDcxNTEzMDEwNFoXDTI1MTAxMzEzMDEwNFowLzEtMCsGA1UEAxMk Nzc5YTZkMzEtMTBkZS00M2FlLWI0NjMtMjYwZjZkMGExYjhiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlP5258evj3bEG3vY6dhwcCSl0XFP59dZYN9q eA2G/rmbwFhRziEzVZvGMCOi4qvjB/RUFYpUvMbNLxtjGuvcIzr7jBq9h5+XiMpr 3Plc2chkxiyISO7acsCKwzKemEcpX+l1vj5xXHV5rue9fxnl9F6coNU+B9j8K8M2 guikFkYbL/aH94RxmxihOmk+70k52XqEkUxzA2EfYx69I8sl2OTSI0IrOEZiZ9gi wGqlLfUIU3WeDZQbYirIYMrpArNXPx//fN5hYM7aUJAqA4ToEjepjkUKcGj06KBl YV0yyp7JoMVdB0HFHL+GU6ZPGvY1IWnXNSsdA93IUPzNtWu7sQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN1vmkSXydDnRdCclrQRmduq+ZzRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZjhiMTI3MDItMzVjNC0z NTM5LTlhYjAtY2I0NGZlM2JkOWMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQOmnMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALN4eYdFnTlgnlSIR7F4GXMseijndRUMMK8FwKZKCbDASsb7hOBAVc4j c1iHGHidh37Pg1hTNI5aK8Qu/2r4jLTTHnZapF9pQywoxw1XUCSIaIISKE1cWsbd BmU1jyjNeHkQMg7ndvHTnECwkWf6rKVOXezp2MBlbsnv9atv42CKie2PWVGBx5tv snXADePEYRFz8Y+ehpyIip/+3WnO9xmv73V4xcr/Zn8JZxH2pS9PWTioRsTixtpz Y6LeclaMVcAe3bzgJhSRp9tF8oDqv4YSq3Xw457TfXuGqL+a2IhbyvQxcjt0GD3L MP1eVyDae6jzDJ/OV5WajukCEkF0ZO8= -----END CERTIFICATE-----Generated at Mon Aug 4 15:32:29 2025 by rpki-client