$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/030f0921-a9f1-3e19-8546-f6e7c1f407e3.roa File: 030f0921-a9f1-3e19-8546-f6e7c1f407e3.roa (raw, json) Hash identifier: 59uqT+P1iWydK31ImxNM4aTiCXQZGBnmLQ9No/AlyZ4= Subject key identifier: 27:0A:75:8B:C4:A9:C6:69:78:15:CE:15:8F:82:62:80:6C:33:62:8C Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285849A784FA12A29FDA05505BBC00 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/030f0921-a9f1-3e19-8546-f6e7c1f407e3.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 15169 IP address blocks: 74.125.227.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:84:fa:12:a2:9f:da:05:50:5b:bc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=04ee5905-aeec-4581-be01-37ad374b4715 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:79:54:42:66:59:10:10:9f:fb:e1:ed:3b:64: c1:f8:fa:27:9d:ad:4a:9c:81:74:01:e3:b6:9f:bb: 0f:cc:db:ca:6e:27:5d:b7:54:a3:d0:f4:e7:7a:83: 29:0a:4b:c7:e7:b9:ea:9f:8e:4d:4b:57:22:87:35: fb:37:11:f9:21:46:79:59:4a:1c:04:0c:c3:3a:c0: 4e:d4:b5:e5:3a:5e:f0:ce:3e:90:d1:71:9f:30:f6: 90:8e:9b:f1:9c:53:79:0c:5f:25:19:b5:04:f4:b2: e6:90:15:97:1c:52:c2:13:17:fe:59:e8:32:11:6a: b8:a5:b2:c1:ab:a1:d7:60:75:75:79:06:e3:d6:bf: 04:2f:cf:81:4c:1a:34:5a:17:c7:8a:01:41:43:30: 68:7e:64:0a:b2:d3:e5:2a:60:cd:6b:12:d9:2c:23: 5b:47:77:14:94:b8:c5:72:2f:1d:f0:c1:11:c2:18: 9d:3d:31:d4:74:8c:d4:29:34:e4:35:1e:00:a2:60: e3:da:72:c7:07:f2:cf:7d:ac:0c:37:4d:19:85:d7: 67:f7:14:50:b9:0a:87:70:8e:ac:81:54:7f:b2:ca: 4d:6c:31:fa:9c:1a:9f:d7:cf:47:2d:c1:18:6e:82: e1:66:ad:e8:4f:a1:55:37:fe:04:fa:32:95:bc:95: 07:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:0A:75:8B:C4:A9:C6:69:78:15:CE:15:8F:82:62:80:6C:33:62:8C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/030f0921-a9f1-3e19-8546-f6e7c1f407e3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 74.125.227.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:c6:87:74:39:f0:50:fa:c1:31:9b:fa:16:9d:15:89:77:0f: ed:4a:a9:c3:87:05:94:d8:e5:d2:e0:2b:6c:49:c0:12:c6:ed: 09:10:6a:c2:74:97:52:db:23:6d:c8:ed:33:33:2b:2f:60:d8: d3:db:1c:42:aa:36:d9:14:55:ee:87:f3:30:34:bf:46:57:82: 96:38:0c:eb:e8:a6:27:87:0c:4b:ed:83:87:76:22:1e:45:05: b3:d7:2f:76:bb:21:35:5c:07:ae:f9:cd:9a:54:dd:7e:a1:a7: 68:a5:5a:c3:9e:ef:2e:67:e2:17:e2:82:1e:e9:a1:1b:26:a5: 80:f5:7e:b6:48:0a:5b:c1:d0:61:4a:5c:33:5a:ba:95:f7:3d: d6:09:83:53:e6:a9:30:d4:3c:3e:73:01:c9:4e:21:b3:d0:f7: b9:7f:ec:ea:2f:86:dd:dc:b4:bc:7a:5b:42:dd:df:1b:d7:c2: 5f:5e:fa:55:60:75:21:1c:1e:eb:76:e3:7d:e4:d3:42:09:9e: b2:26:53:7f:16:66:ae:c4:ea:3a:5f:0c:e3:f2:23:72:49:cb: d5:9b:3f:b8:6b:9b:07:97:84:36:51:59:18:2a:bc:fc:9b:84: f9:2b:cf:42:8a:15:21:b1:71:ff:dd:8c:5c:13:4e:ec:b8:46: 30:d3:24:88 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhPoSop/aBVBbvAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk MDRlZTU5MDUtYWVlYy00NTgxLWJlMDEtMzdhZDM3NGI0NzE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlnlUQmZZEBCf++HtO2TB+Ponna1KnIF0AeO2 n7sPzNvKbiddt1Sj0PTneoMpCkvH57nqn45NS1cihzX7NxH5IUZ5WUocBAzDOsBO 1LXlOl7wzj6Q0XGfMPaQjpvxnFN5DF8lGbUE9LLmkBWXHFLCExf+WegyEWq4pbLB q6HXYHV1eQbj1r8EL8+BTBo0WhfHigFBQzBofmQKstPlKmDNaxLZLCNbR3cUlLjF ci8d8MERwhidPTHUdIzUKTTkNR4AomDj2nLHB/LPfawMN00Zhddn9xRQuQqHcI6s gVR/sspNbDH6nBqf189HLcEYboLhZq3oT6FVN/4E+jKVvJUHlQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCcKdYvEqcZpeBXOFY+CYoBsM2KMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMDMwZjA5MjEtYTlmMS0z ZTE5LTg1NDYtZjZlN2MxZjQwN2UzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASn3jMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABzGh3Q58FD6wTGb+hadFYl3D+1KqcOHBZTY5dLgK2xJwBLG7QkQasJ0 l1LbI23I7TMzKy9g2NPbHEKqNtkUVe6H8zA0v0ZXgpY4DOvopieHDEvtg4d2Ih5F BbPXL3a7ITVcB675zZpU3X6hp2ilWsOe7y5n4hfigh7poRsmpYD1frZIClvB0GFK XDNaupX3PdYJg1PmqTDUPD5zAclOIbPQ97l/7Oovht3ctLx6W0Ld3xvXwl9e+lVg dSEcHut2433k00IJnrImU38WZq7E6jpfDOPyI3JJy9WbP7hrmweXhDZRWRgqvPyb hPkrz0KKFSGxcf/djFwTTuy4RjDTJIg= -----END CERTIFICATE-----Generated at Sun Apr 27 09:18:06 2025 by rpki-client