$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/afce684f-83c8-353a-b590-2788d771b00b.roa File: afce684f-83c8-353a-b590-2788d771b00b.roa (raw, json) Hash identifier: g4a0YAahR7gg520Jk8QlXMcrzfw6kJxvrjopMOPaiNk= Subject key identifier: 93:F4:7A:35:21:AF:1E:DE:FD:A7:9D:D2:26:63:DE:6B:F0:62:6A:C5 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584B679752AE0E2EDE7D74DAA180 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/afce684f-83c8-353a-b590-2788d771b00b.roa Signing time: Sat 04 Oct 2025 01:00:33 +0000 ROA not before: Sat 04 Oct 2025 01:00:33 +0000 ROA not after: Fri 02 Jan 2026 02:00:33 +0000 asID: 15169 IP address blocks: 64.233.187.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:67:97:52:ae:0e:2e:de:7d:74:da:a1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Oct 4 01:00:33 2025 GMT Not After : Jan 2 02:00:33 2026 GMT Subject: CN=3fa65231-4001-46ea-8b9f-6e9f7d9e947c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:24:dc:14:0b:f0:0f:78:9e:87:57:e6:8c:e9: c1:7d:2a:eb:45:85:e0:49:ab:8a:bc:69:0f:73:dd: 66:d0:19:51:bc:e9:aa:46:01:58:2a:24:2a:f6:78: a2:aa:18:40:4c:b8:41:81:84:ed:ab:1c:d4:b6:ca: 2d:75:1c:04:69:c2:e2:31:3f:30:20:a7:93:32:71: c7:9e:14:bd:13:a2:0c:a2:43:0b:96:76:f6:9a:5e: fb:1a:3f:b5:e3:07:c0:2d:a4:49:42:92:81:f0:b8: 26:41:f0:f3:d6:2c:7b:97:8b:b5:c1:22:85:5f:d4: e4:6e:6b:6d:3b:6b:86:8b:da:55:09:81:b0:07:40: a4:b6:0b:aa:a2:3a:92:c1:2f:94:7e:dc:62:03:c5: 7e:9c:e3:e7:2e:75:d5:ee:d0:6f:6b:44:a8:99:53: 52:30:f9:82:76:7a:0d:c0:5e:11:14:a2:47:6e:08: 6b:c0:14:7e:61:85:6f:ee:27:f1:48:26:a2:29:5d: 2d:40:28:86:66:a4:4f:26:8b:74:39:bd:ab:7a:1c: 30:5a:4f:20:64:4d:68:67:46:e3:ec:53:34:f5:e9: 2c:5c:57:20:b8:a9:ef:84:4e:5a:95:1a:ef:7f:88: 30:08:df:20:3b:bc:ca:b3:35:3b:b9:ee:2e:b9:86: 60:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:F4:7A:35:21:AF:1E:DE:FD:A7:9D:D2:26:63:DE:6B:F0:62:6A:C5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/afce684f-83c8-353a-b590-2788d771b00b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 64.233.187.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:87:c7:7a:4c:db:07:37:1f:b8:d9:15:23:98:c4:b5:41:73: 68:06:c6:77:86:05:c6:7b:f4:44:98:ca:a0:09:1a:d7:8e:73: 7f:bd:aa:02:ae:25:0d:9d:96:6c:63:26:11:7c:76:20:3b:1f: dc:17:aa:fc:0c:99:48:b4:31:dc:6b:84:f3:98:de:32:82:47: 52:59:c1:31:98:56:0b:63:79:23:2d:6a:11:3c:1e:b6:60:b6: bf:19:e7:36:c1:94:f7:d0:31:ae:f3:6d:7c:ac:70:78:6f:c5: f5:9b:bd:ed:f5:11:ea:ae:c7:39:4e:4a:f8:4a:16:a9:6b:d3: 40:6c:e2:67:6c:f2:bb:af:bb:b9:33:94:5e:03:43:fe:2a:92: 94:1d:48:63:55:8c:10:ab:22:09:e5:6a:0b:70:55:10:dc:3b: 73:94:a3:be:d2:93:52:fd:b0:89:44:da:9d:20:44:d6:cf:92: d9:57:37:1e:f7:26:6f:eb:1f:95:73:43:50:41:0f:8a:06:e4: a2:02:ec:6e:60:b8:9c:e9:5c:4b:47:15:0b:6c:66:98:fe:4a: 2f:36:4c:d9:f4:49:8d:5a:59:e2:bd:35:c0:65:07:d9:d6:7f: 68:96:98:7a:41:cb:8f:05:45:75:25:f0:3b:d5:9b:ab:a5:2d: 25:76:09:93 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtnl1KuDi7efXTaoYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MTAwNDAxMDAzM1oXDTI2MDEwMjAyMDAzM1owLzEtMCsGA1UEAxMk M2ZhNjUyMzEtNDAwMS00NmVhLThiOWYtNmU5ZjdkOWU5NDdjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnyTcFAvwD3ieh1fmjOnBfSrrRYXgSauKvGkP c91m0BlRvOmqRgFYKiQq9niiqhhATLhBgYTtqxzUtsotdRwEacLiMT8wIKeTMnHH nhS9E6IMokMLlnb2ml77Gj+14wfALaRJQpKB8LgmQfDz1ix7l4u1wSKFX9Tkbmtt O2uGi9pVCYGwB0CktguqojqSwS+UftxiA8V+nOPnLnXV7tBva0SomVNSMPmCdnoN wF4RFKJHbghrwBR+YYVv7ifxSCaiKV0tQCiGZqRPJot0Ob2rehwwWk8gZE1oZ0bj 7FM09eksXFcguKnvhE5alRrvf4gwCN8gO7zKszU7ue4uuYZg0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJP0ejUhrx7e/aed0iZj3mvwYmrFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYWZjZTY4NGYtODNjOC0z NTNhLWI1OTAtMjc4OGQ3NzFiMDBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQOm7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAmHx3pM2wc3H7jZFSOYxLVBc2gGxneGBcZ79ESYyqAJGteOc3+9qgKu JQ2dlmxjJhF8diA7H9wXqvwMmUi0MdxrhPOY3jKCR1JZwTGYVgtjeSMtahE8HrZg tr8Z5zbBlPfQMa7zbXyscHhvxfWbve31EequxzlOSvhKFqlr00Bs4mds8ruvu7kz lF4DQ/4qkpQdSGNVjBCrIgnlagtwVRDcO3OUo77Sk1L9sIlE2p0gRNbPktlXNx73 Jm/rH5VzQ1BBD4oG5KIC7G5guJzpXEtHFQtsZpj+Si82TNn0SY1aWeK9NcBlB9nW f2iWmHpBy48FRXUl8DvVm6ulLSV2CZM= -----END CERTIFICATE-----Generated at Fri Oct 17 08:46:12 2025 by rpki-client