$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/0983f839-866b-32f3-a6d3-1e8a2d9ae49f.roa File: 0983f839-866b-32f3-a6d3-1e8a2d9ae49f.roa (raw, json) Hash identifier: 1JJsJrmncS+eSmXmk77ptGu8B6ikYmUd4LTy6F8u9g8= Subject key identifier: 54:38:4E:C4:A9:8A:68:51:9F:1F:BF:20:32:4A:0F:76:10:29:41:13 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285849A784EB84C82B06011536C340 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/0983f839-866b-32f3-a6d3-1e8a2d9ae49f.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 15169 IP address blocks: 74.125.138.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:84:eb:84:c8:2b:06:01:15:36:c3:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=3d05710e-e4aa-489e-a479-e314684a62d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:32:6f:36:77:7e:46:42:de:d6:c0:a5:73:3c: c7:db:8c:f9:e0:0f:93:8e:7c:f6:f4:fa:06:8c:5d: 67:73:c6:94:29:1e:da:ac:be:31:7c:e7:b7:00:7d: 45:0a:18:f2:50:36:45:d2:38:ff:76:d5:23:ae:b1: d6:df:bb:05:0a:06:cb:5f:42:f3:25:db:0b:fb:7c: b3:11:c9:b0:95:fc:e2:79:e7:5c:39:18:fd:27:78: df:1b:0c:12:1b:90:f2:d1:07:4b:4d:1d:2c:d0:81: 4d:ad:72:17:02:ab:b8:3f:75:e2:9b:2d:cd:a8:7d: 4d:80:67:45:79:dc:4f:fe:74:87:05:85:eb:d4:74: e9:cc:98:f1:0f:d2:de:7b:11:c1:88:1a:e7:ca:63: 08:b4:97:35:f9:f3:8a:17:a4:0c:54:b5:7f:0c:e6: 4a:5f:f8:b0:91:55:65:44:5f:f7:54:57:0b:96:97: 13:9b:b9:3d:4a:47:f5:1a:48:27:8a:58:a8:6f:40: 8c:83:9e:dd:63:55:62:19:42:34:35:d9:fb:b6:d6: 5d:ec:99:b9:89:0e:03:9f:40:15:21:80:a3:c1:aa: 46:b1:d1:c0:73:1d:f1:7d:a8:52:8a:3b:de:00:3d: 85:f9:47:2c:e0:75:1a:61:fe:51:1f:25:45:10:f2: 1a:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:38:4E:C4:A9:8A:68:51:9F:1F:BF:20:32:4A:0F:76:10:29:41:13 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/0983f839-866b-32f3-a6d3-1e8a2d9ae49f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 74.125.138.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:87:ef:13:a3:78:41:40:0f:2b:91:44:95:aa:5c:fc:db:5c: fd:72:44:29:4a:34:27:3f:42:35:c1:07:3f:35:68:0f:0d:84: 3a:7b:ff:af:ea:a5:a8:f1:bd:78:18:bb:5b:fd:01:af:0b:6d: 07:35:08:aa:d1:3c:20:5a:aa:6e:c0:ae:1e:33:4d:71:56:01: 94:d8:6c:df:6d:e9:b0:35:d5:30:b4:23:07:ac:61:72:2f:c4: 77:dc:11:3a:5a:6b:32:68:1a:33:79:9f:37:a3:95:58:c2:dc: db:0d:46:55:33:b3:a8:6d:ba:e6:16:29:71:33:95:a2:48:67: 08:45:33:60:9c:0f:ac:20:17:01:d4:50:06:02:fd:2a:8f:49: 96:79:2f:4c:a4:0e:3f:3f:ba:22:a9:8b:d6:2e:95:a9:e7:cc: 98:f6:8e:17:3d:49:61:1f:53:c7:ad:9d:eb:bf:9f:26:01:6d: 59:6b:b0:dd:c6:73:4f:1e:80:16:eb:c5:17:33:74:c9:bb:16: 5a:af:e7:b7:a7:85:d6:af:c1:e8:fe:3f:31:36:4c:d9:d1:8c: 36:56:68:d2:c1:05:9d:29:3b:69:b2:e4:92:66:77:00:5f:82: 2d:f5:cc:c8:8f:f0:d5:30:b5:dd:06:4d:7b:90:f5:e5:8b:10: 21:0e:14:73 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhOuEyCsGARU2w0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk M2QwNTcxMGUtZTRhYS00ODllLWE0NzktZTMxNDY4NGE2MmQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApzJvNnd+RkLe1sClczzH24z54A+Tjnz29PoG jF1nc8aUKR7arL4xfOe3AH1FChjyUDZF0jj/dtUjrrHW37sFCgbLX0LzJdsL+3yz EcmwlfzieedcORj9J3jfGwwSG5Dy0QdLTR0s0IFNrXIXAqu4P3Ximy3NqH1NgGdF edxP/nSHBYXr1HTpzJjxD9LeexHBiBrnymMItJc1+fOKF6QMVLV/DOZKX/iwkVVl RF/3VFcLlpcTm7k9Skf1Gkgniliob0CMg57dY1ViGUI0Ndn7ttZd7Jm5iQ4Dn0AV IYCjwapGsdHAcx3xfahSijveAD2F+Ucs4HUaYf5RHyVFEPIa6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFQ4TsSpimhRnx+/IDJKD3YQKUETMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMDk4M2Y4MzktODY2Yi0z MmYzLWE2ZDMtMWU4YTJkOWFlNDlmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASn2KMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHGH7xOjeEFADyuRRJWqXPzbXP1yRClKNCc/QjXBBz81aA8NhDp7/6/q pajxvXgYu1v9Aa8LbQc1CKrRPCBaqm7Arh4zTXFWAZTYbN9t6bA11TC0IwesYXIv xHfcETpaazJoGjN5nzejlVjC3NsNRlUzs6htuuYWKXEzlaJIZwhFM2CcD6wgFwHU UAYC/SqPSZZ5L0ykDj8/uiKpi9YulannzJj2jhc9SWEfU8etneu/nyYBbVlrsN3G c08egBbrxRczdMm7Flqv57enhdavwej+PzE2TNnRjDZWaNLBBZ0pO2my5JJmdwBf gi31zMiP8NUwtd0GTXuQ9eWLECEOFHM= -----END CERTIFICATE-----Generated at Sun Apr 27 12:14:34 2025 by rpki-client