$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/f88daead-6cba-32df-a8f9-e16b4b2aba2d.roa File: f88daead-6cba-32df-a8f9-e16b4b2aba2d.roa (raw, json) Hash identifier: JnWLVTSoQxpugwbNb4eyjdE0tjeP+RPak5rlnGPpiKw= Subject key identifier: 44:B2:1C:99:49:60:C5:BE:D4:7E:86:B3:87:0D:B6:BE:5C:43:4B:77 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584B6797B25F1788541A677CBA00 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/f88daead-6cba-32df-a8f9-e16b4b2aba2d.roa Signing time: Sat 04 Oct 2025 01:00:33 +0000 ROA not before: Sat 04 Oct 2025 01:00:33 +0000 ROA not after: Fri 02 Jan 2026 02:00:33 +0000 asID: 15169 IP address blocks: 64.233.169.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:67:97:b2:5f:17:88:54:1a:67:7c:ba:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Oct 4 01:00:33 2025 GMT Not After : Jan 2 02:00:33 2026 GMT Subject: CN=87052ec7-cef4-43f1-b847-2802647522eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:70:50:38:2b:6f:17:fc:ae:58:c7:90:71:53: 7b:59:8c:39:ed:2c:c0:5f:51:37:5a:0d:87:9f:49: b4:87:07:86:dc:8f:cc:26:db:3d:24:4e:73:fb:32: 34:36:90:d5:25:ff:7f:18:ff:ad:ad:49:0a:db:81: 03:ca:57:32:2f:de:12:4b:52:d1:60:dd:e2:b3:01: 73:4a:4b:4e:f4:8a:73:c2:9b:ba:79:b2:8e:b3:18: df:84:f0:ae:cc:69:23:d1:43:92:89:22:6e:10:a1: c2:0b:3b:fb:66:28:62:31:70:cb:e7:f9:a2:5f:66: 94:bd:cb:14:3b:c0:e6:15:33:7a:d1:ae:4a:1e:99: 5f:31:e8:91:db:2c:4e:d0:0c:e2:0c:2a:66:e8:bc: 31:58:5f:c6:cb:42:9e:a2:c5:7d:0e:d9:bc:de:81: 88:fd:35:2b:2f:b8:ae:bb:aa:51:8a:3c:98:10:a2: 03:3e:93:07:d0:cb:5f:e4:a1:ee:c8:47:5e:00:bd: cf:3c:26:92:ae:59:76:da:17:6e:f8:0c:f0:cc:46: 7f:28:31:c9:c0:07:ad:85:21:a7:13:bb:77:8d:00: 46:64:13:9d:7e:a8:cd:d9:f1:b9:c4:73:f5:b6:22: c7:1c:b4:9f:f7:c7:e8:98:15:e7:f5:5c:60:0e:b4: a6:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:B2:1C:99:49:60:C5:BE:D4:7E:86:B3:87:0D:B6:BE:5C:43:4B:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/f88daead-6cba-32df-a8f9-e16b4b2aba2d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 64.233.169.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:84:aa:67:80:6b:f9:21:34:f9:39:fd:3a:44:d3:38:1a:d2: 9b:0b:2a:60:e4:c8:44:6b:98:fd:be:87:3f:7d:74:d3:bc:67: 87:ca:b5:06:aa:ed:86:73:29:9b:b2:bf:1b:f9:44:c0:6f:9c: d2:81:42:ae:54:6c:90:c0:a7:f9:b2:b4:66:36:28:69:53:7f: cc:54:4f:df:e8:2e:cc:4c:9e:bb:28:71:8d:2b:81:5f:32:8b: e7:56:b2:47:0d:4a:6e:68:45:1f:4d:1d:9c:2d:ba:0b:ef:4f: 18:22:80:71:f9:f0:db:e8:48:74:66:e5:99:68:8c:78:ef:48: 7c:ee:4c:80:65:17:8a:ba:b1:33:66:aa:bb:80:a1:a8:12:d2: 6e:55:9a:77:ec:6f:a9:ea:13:74:88:e2:d4:1e:27:79:08:4a: d4:7f:4e:43:d6:bd:11:dd:56:d1:94:2b:32:5f:9e:07:9d:cd: c5:de:31:2d:64:54:96:35:57:14:d6:bc:ef:ec:c2:c9:46:d2: 98:bb:e3:f9:ba:fd:25:67:c4:35:e3:fa:de:72:9f:7d:49:91: d6:78:7f:ea:15:ba:af:b6:c1:0a:08:68:53:89:e2:55:7e:51: ff:bb:aa:00:fc:97:e1:1b:23:2c:1b:83:d3:b5:5a:ac:b5:26: 58:fa:69:c6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtnl7JfF4hUGmd8ugAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MTAwNDAxMDAzM1oXDTI2MDEwMjAyMDAzM1owLzEtMCsGA1UEAxMk ODcwNTJlYzctY2VmNC00M2YxLWI4NDctMjgwMjY0NzUyMmViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm3BQOCtvF/yuWMeQcVN7WYw57SzAX1E3Wg2H n0m0hweG3I/MJts9JE5z+zI0NpDVJf9/GP+trUkK24EDylcyL94SS1LRYN3iswFz SktO9Ipzwpu6ebKOsxjfhPCuzGkj0UOSiSJuEKHCCzv7ZihiMXDL5/miX2aUvcsU O8DmFTN60a5KHplfMeiR2yxO0AziDCpm6LwxWF/Gy0KeosV9Dtm83oGI/TUrL7iu u6pRijyYEKIDPpMH0Mtf5KHuyEdeAL3PPCaSrll22hdu+AzwzEZ/KDHJwAethSGn E7t3jQBGZBOdfqjN2fG5xHP1tiLHHLSf98fomBXn9VxgDrSmgQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFESyHJlJYMW+1H6Gs4cNtr5cQ0t3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZjg4ZGFlYWQtNmNiYS0z MmRmLWE4ZjktZTE2YjRiMmFiYTJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQOmpMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGCEqmeAa/khNPk5/TpE0zga0psLKmDkyERrmP2+hz99dNO8Z4fKtQaq 7YZzKZuyvxv5RMBvnNKBQq5UbJDAp/mytGY2KGlTf8xUT9/oLsxMnrsocY0rgV8y i+dWskcNSm5oRR9NHZwtugvvTxgigHH58NvoSHRm5ZlojHjvSHzuTIBlF4q6sTNm qruAoagS0m5Vmnfsb6nqE3SI4tQeJ3kIStR/TkPWvRHdVtGUKzJfngedzcXeMS1k VJY1VxTWvO/swslG0pi74/m6/SVnxDXj+t5yn31JkdZ4f+oVuq+2wQoIaFOJ4lV+ Uf+7qgD8l+EbIywbg9O1Wqy1Jlj6acY= -----END CERTIFICATE-----Generated at Fri Oct 17 08:39:57 2025 by rpki-client