$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d882c9dd-3234-34a8-8cc4-0d6f9903b764.roa File: d882c9dd-3234-34a8-8cc4-0d6f9903b764.roa (raw, json) Hash identifier: JWBYw1gGG9wQn3IKBDD35NPTmbHSsDQCmIHSEq6nbiY= Subject key identifier: 21:EF:2F:6C:C7:F8:6F:43:D5:6A:D8:EF:06:21:34:04:87:95:5D:DF Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584B679761E59A3CA4DAA3CDCE00 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d882c9dd-3234-34a8-8cc4-0d6f9903b764.roa Signing time: Sat 04 Oct 2025 01:00:33 +0000 ROA not before: Sat 04 Oct 2025 01:00:33 +0000 ROA not after: Fri 02 Jan 2026 02:00:33 +0000 asID: 15169 IP address blocks: 64.233.176.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:67:97:61:e5:9a:3c:a4:da:a3:cd:ce:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Oct 4 01:00:33 2025 GMT Not After : Jan 2 02:00:33 2026 GMT Subject: CN=a9337de0-e669-41e7-8b97-541137bd7b41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:fb:3c:12:1c:b1:51:3c:37:99:58:d1:0a:f4: 9f:b2:00:df:5f:60:c3:d1:ab:60:d8:5c:12:3e:c8: 27:74:2c:7c:4e:09:ed:a3:d8:81:3a:7d:11:86:1c: 4d:87:e2:41:4c:65:1e:ab:28:17:f5:5a:dc:09:38: 40:96:22:a0:fa:1f:2d:6d:c4:67:0f:80:69:ab:2f: 13:9c:b8:6f:5d:62:48:87:29:7e:45:e5:9c:ee:68: 70:d7:ce:fa:76:9c:a3:6f:38:20:81:68:e6:79:65: 84:7e:42:ae:a4:0c:d2:48:57:3d:77:23:29:ca:a5: cd:95:43:6a:1b:6a:e9:37:f2:61:11:3d:37:7c:94: 9d:d9:85:36:6c:4e:58:ee:8b:75:34:01:d1:9a:c4: 55:62:49:25:e4:93:dc:a2:33:1b:ef:5e:c3:3f:67: 7b:cb:1f:a8:ab:b4:42:8b:b2:0d:0b:5b:e7:82:06: 94:06:57:04:71:cd:2e:89:38:80:a9:a8:ae:96:86: e7:83:7a:9a:07:69:60:fb:c8:47:a3:63:27:34:46: 08:f3:4f:9c:d1:a0:a7:28:77:ce:c1:dd:3a:bd:6e: 1e:5b:b7:e7:2a:0f:c9:b8:99:44:e2:d5:ba:52:3f: 0f:85:19:82:4e:45:fb:af:95:d8:49:31:81:0e:62: ed:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:EF:2F:6C:C7:F8:6F:43:D5:6A:D8:EF:06:21:34:04:87:95:5D:DF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d882c9dd-3234-34a8-8cc4-0d6f9903b764.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 64.233.176.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ab:bb:7a:5c:0d:c7:38:15:f9:f8:91:d2:01:fc:7b:58:82:1e: 51:22:25:0f:4e:ca:5e:2c:20:e1:ff:9c:d0:18:79:c4:e2:0b: 5f:5d:a0:ea:7c:13:46:8d:c6:ae:38:f0:e5:2c:87:f5:0b:a0: 6a:6f:ff:ab:25:be:c4:84:35:12:83:2b:34:e2:3d:33:46:d0: e4:13:ac:6f:ff:25:3e:05:ad:0f:db:e4:79:6e:69:de:54:9c: 9c:66:75:16:84:df:1a:86:b9:0d:ec:67:df:ce:42:15:d9:11: 52:59:c0:10:44:d2:e3:6e:fc:20:06:ba:af:17:be:10:78:7e: e9:da:f7:a7:18:65:8c:a1:0a:89:26:cf:38:9d:b7:53:da:e9: 33:3c:70:7a:8d:c7:10:56:0b:b5:49:28:72:99:e5:de:d3:04: f3:8e:ec:b1:ad:e8:ff:44:c8:89:b8:3b:2e:bd:7c:82:ae:02: 9c:d0:a3:75:d2:f6:5b:96:31:32:9b:2a:91:1d:00:16:98:db: b6:4e:5b:38:62:a0:b5:84:32:c6:28:40:bd:92:c2:61:51:ea: 69:d3:4e:a5:e5:8a:c2:73:b9:d5:48:c3:87:d9:db:1a:fe:07: 2e:5a:a6:46:f1:7d:0f:64:31:97:86:74:49:65:73:ad:37:21: 41:05:2b:81 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtnl2Hlmjyk2qPNzgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MTAwNDAxMDAzM1oXDTI2MDEwMjAyMDAzM1owLzEtMCsGA1UEAxMk YTkzMzdkZTAtZTY2OS00MWU3LThiOTctNTQxMTM3YmQ3YjQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAovs8EhyxUTw3mVjRCvSfsgDfX2DD0atg2FwS PsgndCx8Tgnto9iBOn0RhhxNh+JBTGUeqygX9VrcCThAliKg+h8tbcRnD4Bpqy8T nLhvXWJIhyl+ReWc7mhw1876dpyjbzgggWjmeWWEfkKupAzSSFc9dyMpyqXNlUNq G2rpN/JhET03fJSd2YU2bE5Y7ot1NAHRmsRVYkkl5JPcojMb717DP2d7yx+oq7RC i7INC1vnggaUBlcEcc0uiTiAqaiulobng3qaB2lg+8hHo2MnNEYI80+c0aCnKHfO wd06vW4eW7fnKg/JuJlE4tW6Uj8PhRmCTkX7r5XYSTGBDmLt2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCHvL2zH+G9D1WrY7wYhNASHlV3fMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZDg4MmM5ZGQtMzIzNC0z NGE4LThjYzQtMGQ2Zjk5MDNiNzY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQOmwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKu7elwNxzgV+fiR0gH8e1iCHlEiJQ9Oyl4sIOH/nNAYecTiC19doOp8 E0aNxq448OUsh/ULoGpv/6slvsSENRKDKzTiPTNG0OQTrG//JT4FrQ/b5Hluad5U nJxmdRaE3xqGuQ3sZ9/OQhXZEVJZwBBE0uNu/CAGuq8XvhB4funa96cYZYyhCokm zzidt1Pa6TM8cHqNxxBWC7VJKHKZ5d7TBPOO7LGt6P9EyIm4Oy69fIKuApzQo3XS 9luWMTKbKpEdABaY27ZOWzhioLWEMsYoQL2SwmFR6mnTTqXlisJzudVIw4fZ2xr+ By5apkbxfQ9kMZeGdEllc603IUEFK4E= -----END CERTIFICATE-----Generated at Fri Oct 17 08:39:58 2025 by rpki-client