$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/6f3267c6-2b53-3981-806e-7238b31139b4.roa File: 6f3267c6-2b53-3981-806e-7238b31139b4.roa (raw, json) Hash identifier: LBEJ5a3tE8YqDOZ5xymLkblQ4tgPqaut3mYvm8z1d9c= Subject key identifier: 58:A7:36:D6:2B:8E:7F:CF:C9:5D:B8:53:59:8C:E8:8A:5F:4E:4E:43 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584B67976CDE383495B226B14440 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/6f3267c6-2b53-3981-806e-7238b31139b4.roa Signing time: Sat 04 Oct 2025 01:00:33 +0000 ROA not before: Sat 04 Oct 2025 01:00:33 +0000 ROA not after: Fri 02 Jan 2026 02:00:33 +0000 asID: 15169 IP address blocks: 64.233.170.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:67:97:6c:de:38:34:95:b2:26:b1:44:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Oct 4 01:00:33 2025 GMT Not After : Jan 2 02:00:33 2026 GMT Subject: CN=14f38422-5041-40ee-8973-741a4e54bd5b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:40:fd:d1:ee:9d:24:a8:fa:db:1a:bb:7f:f6: 25:7c:64:39:0d:7c:cd:03:c4:9b:1a:e8:ed:de:fa: 4b:e1:5b:d3:7a:e4:be:79:51:6b:76:48:54:19:f1: be:7a:43:ba:e7:7a:53:1e:35:0d:91:f5:59:78:92: 6c:08:03:f9:89:92:f8:4d:36:8d:83:bb:8b:9b:08: 68:f0:02:99:53:4e:11:05:39:19:d1:b8:87:fe:3c: df:3e:b0:1c:96:57:13:ad:34:2f:32:f5:37:d0:b5: 3e:de:5c:7d:51:41:dd:14:b6:29:71:d1:42:85:a4: 08:af:af:9e:87:39:9b:59:5f:e6:d0:ae:76:49:6a: b3:a4:35:f4:44:03:3a:97:fa:bf:38:04:56:10:5d: 3a:08:ae:79:42:d2:79:24:9e:35:6b:84:af:fc:07: 9b:35:c2:10:0c:ab:fb:ac:a2:1e:d5:c3:c4:ed:38: f7:f9:04:34:65:47:fe:aa:ae:79:a3:81:be:51:4f: 62:c6:3c:2a:24:78:bd:78:c2:11:d7:b9:84:31:9c: ba:8c:fa:47:46:d9:10:9e:79:b6:9d:54:b1:49:66: ec:49:15:8a:a2:2b:a3:10:eb:62:19:92:a6:49:21: bd:96:e4:dd:d4:3b:b2:a3:8e:a1:75:4f:37:0c:54: 28:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:A7:36:D6:2B:8E:7F:CF:C9:5D:B8:53:59:8C:E8:8A:5F:4E:4E:43 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/6f3267c6-2b53-3981-806e-7238b31139b4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 64.233.170.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:14:15:70:2c:b5:58:35:4f:43:1a:55:5d:36:30:3d:9b:4d: ea:33:65:78:d1:70:89:94:a5:9c:6a:9b:f0:1d:d3:f7:4d:bb: 85:e9:5c:14:c9:9f:48:18:5f:d3:55:84:4c:7f:5b:06:b6:45: b5:82:59:29:f5:b5:60:9b:54:46:b9:18:26:60:2e:eb:0f:20: 48:a3:40:78:44:8c:d6:fc:68:aa:52:cb:ba:20:21:7e:0d:ed: c1:b7:fb:49:2d:0a:b1:dc:3b:29:44:da:38:26:dd:8c:e4:44: 7d:b8:d0:bb:b6:69:b0:0f:f9:b6:e9:dc:b2:80:d4:bc:cf:9e: 6c:0b:5c:4c:04:1e:96:00:13:0f:94:15:4a:d4:02:95:6b:cf: 5e:e0:79:5c:70:b9:03:bf:24:1b:9a:dd:2b:66:20:a4:51:f3: 76:34:b0:98:9d:2a:2f:9e:18:50:53:ad:d6:0b:d9:65:66:12: 4f:ef:cc:90:83:99:38:d1:82:25:df:c7:46:51:69:a3:88:c5: 89:81:76:98:c6:f3:53:cf:8e:b7:37:c3:48:79:27:49:d7:e4: 4b:98:9a:0f:ca:31:f6:43:20:26:96:3b:1d:75:41:72:7e:96: b8:3a:50:5f:12:ce:14:7f:09:e6:59:49:f0:dd:76:7e:75:08: 38:21:24:05 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtnl2zeODSVsiaxREAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MTAwNDAxMDAzM1oXDTI2MDEwMjAyMDAzM1owLzEtMCsGA1UEAxMk MTRmMzg0MjItNTA0MS00MGVlLTg5NzMtNzQxYTRlNTRiZDViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhUD90e6dJKj62xq7f/YlfGQ5DXzNA8SbGujt 3vpL4VvTeuS+eVFrdkhUGfG+ekO653pTHjUNkfVZeJJsCAP5iZL4TTaNg7uLmwho 8AKZU04RBTkZ0biH/jzfPrAcllcTrTQvMvU30LU+3lx9UUHdFLYpcdFChaQIr6+e hzmbWV/m0K52SWqzpDX0RAM6l/q/OARWEF06CK55QtJ5JJ41a4Sv/AebNcIQDKv7 rKIe1cPE7Tj3+QQ0ZUf+qq55o4G+UU9ixjwqJHi9eMIR17mEMZy6jPpHRtkQnnm2 nVSxSWbsSRWKoiujEOtiGZKmSSG9luTd1Duyo46hdU83DFQoRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFinNtYrjn/PyV24U1mM6IpfTk5DMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNmYzMjY3YzYtMmI1My0z OTgxLTgwNmUtNzIzOGIzMTEzOWI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQOmqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACoUFXAstVg1T0MaVV02MD2bTeozZXjRcImUpZxqm/Ad0/dNu4XpXBTJ n0gYX9NVhEx/Wwa2RbWCWSn1tWCbVEa5GCZgLusPIEijQHhEjNb8aKpSy7ogIX4N 7cG3+0ktCrHcOylE2jgm3YzkRH240Lu2abAP+bbp3LKA1LzPnmwLXEwEHpYAEw+U FUrUApVrz17geVxwuQO/JBua3StmIKRR83Y0sJidKi+eGFBTrdYL2WVmEk/vzJCD mTjRgiXfx0ZRaaOIxYmBdpjG81PPjrc3w0h5J0nX5EuYmg/KMfZDICaWOx11QXJ+ lrg6UF8SzhR/CeZZSfDddn51CDghJAU= -----END CERTIFICATE-----Generated at Fri Oct 17 08:47:25 2025 by rpki-client