$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/1c68adcb-e030-30cd-9cd4-6a7353a50978.roa File: 1c68adcb-e030-30cd-9cd4-6a7353a50978.roa (raw, json) Hash identifier: yg7wal7qWSck+daLOjCY09BDa6Zt2xwpmSn3YNCdxTo= Subject key identifier: D5:9C:E8:E5:C6:5E:F9:AD:15:50:23:85:62:18:19:78:08:21:B7:26 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285849A784DFF600A6D27166C66800 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/1c68adcb-e030-30cd-9cd4-6a7353a50978.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 15169 IP address blocks: 74.125.142.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:84:df:f6:00:a6:d2:71:66:c6:68:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=fd03e277-c6ef-4314-ae0c-a302a383b4f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:24:0b:50:62:fa:c5:42:d4:de:2b:2e:16:13: 85:7c:88:27:42:aa:ed:8b:65:91:a0:b8:27:dc:19: 40:8e:48:75:e9:c5:1c:92:f7:22:00:9a:de:90:5f: f3:4b:66:1c:00:9f:6b:db:6c:c2:d3:33:3a:3c:c7: c6:e3:b7:81:4c:a1:85:8f:c5:dd:fa:a4:de:49:f1: 69:4e:ae:f5:09:78:11:d9:2d:b7:5a:ac:5f:e2:d2: 50:19:cc:9a:0a:d5:c5:67:95:fc:4c:fe:8c:d5:77: c1:53:5e:00:8f:64:76:f9:13:93:ab:87:99:b6:9a: 6b:bc:87:08:ab:d0:68:df:4b:a0:40:8f:ca:fd:94: 16:da:6b:25:c7:7f:0d:8b:ea:c5:10:ba:4e:b6:ea: 2e:ba:62:8b:c0:c1:4e:9a:ef:38:14:a8:79:72:4c: 1c:30:75:1c:db:a1:d5:48:ab:bf:ed:1a:bc:de:aa: 59:4a:3e:fc:74:52:8e:82:8c:fd:1f:bb:66:6a:01: f1:40:39:41:43:7e:5f:8e:a1:a0:b9:81:71:62:93: 83:4d:56:66:38:ed:38:8b:4c:0f:3a:c2:74:e4:42: a9:95:19:e0:94:64:d5:b1:b8:26:d4:03:8e:cf:86: 1f:bb:43:18:cf:94:1d:c4:69:ab:d3:f8:89:02:bd: b2:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:9C:E8:E5:C6:5E:F9:AD:15:50:23:85:62:18:19:78:08:21:B7:26 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/1c68adcb-e030-30cd-9cd4-6a7353a50978.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 74.125.142.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:23:02:e7:0d:00:9b:75:86:97:22:e8:73:f3:49:6c:9a:ae: 87:f4:32:3c:d4:b9:b6:f5:d2:48:b0:f8:a5:65:fe:00:df:2d: 68:86:0a:41:4c:37:d5:e1:83:9c:d9:3e:5b:75:34:d7:c5:61: b7:3e:de:2a:db:3f:1f:63:c2:e0:2d:b1:3d:59:03:84:8f:f5: c1:4e:ac:3a:5b:79:64:b5:f0:dd:da:5f:8d:31:ab:21:4f:c5: f5:fc:1f:f7:49:da:96:f1:7f:b3:b3:dc:a3:62:6b:61:01:ff: 4b:89:4d:a7:ac:b3:c4:c3:e5:59:24:a9:0d:88:e3:5c:6c:ba: 2c:a9:ff:30:e0:4d:50:4d:e5:b1:57:58:76:40:5c:1d:b1:b2: 62:93:d7:7a:d8:a9:03:ab:79:fd:b6:f6:d5:bc:8d:51:33:77: c9:3f:c3:c1:82:4b:03:8f:31:6f:49:44:51:7f:3c:28:72:5b: 73:fa:77:1c:fc:96:06:0c:f5:5f:07:41:b0:49:73:53:21:60: 85:b8:f6:f2:38:d5:2c:5d:4b:43:b4:3b:e6:45:d8:01:1d:d3: c9:e6:df:55:bd:d1:d0:eb:c9:7c:01:7b:f1:14:a0:09:ff:37: c6:24:be:ff:a9:d7:22:3e:78:49:96:35:18:98:b0:50:ed:4f: 36:80:b2:e5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhN/2AKbScWbGaAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk ZmQwM2UyNzctYzZlZi00MzE0LWFlMGMtYTMwMmEzODNiNGY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzyQLUGL6xULU3isuFhOFfIgnQqrti2WRoLgn 3BlAjkh16cUckvciAJrekF/zS2YcAJ9r22zC0zM6PMfG47eBTKGFj8Xd+qTeSfFp Tq71CXgR2S23Wqxf4tJQGcyaCtXFZ5X8TP6M1XfBU14Aj2R2+ROTq4eZtpprvIcI q9Bo30ugQI/K/ZQW2mslx38Ni+rFELpOtuouumKLwMFOmu84FKh5ckwcMHUc26HV SKu/7Rq83qpZSj78dFKOgoz9H7tmagHxQDlBQ35fjqGguYFxYpODTVZmOO04i0wP OsJ05EKplRnglGTVsbgm1AOOz4Yfu0MYz5QdxGmr0/iJAr2yEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNWc6OXGXvmtFVAjhWIYGXgIIbcmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMWM2OGFkY2ItZTAzMC0z MGNkLTljZDQtNmE3MzUzYTUwOTc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASn2OMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB8jAucNAJt1hpci6HPzSWyarof0MjzUubb10kiw+KVl/gDfLWiGCkFM N9Xhg5zZPlt1NNfFYbc+3irbPx9jwuAtsT1ZA4SP9cFOrDpbeWS18N3aX40xqyFP xfX8H/dJ2pbxf7Oz3KNia2EB/0uJTaess8TD5VkkqQ2I41xsuiyp/zDgTVBN5bFX WHZAXB2xsmKT13rYqQOref229tW8jVEzd8k/w8GCSwOPMW9JRFF/PChyW3P6dxz8 lgYM9V8HQbBJc1MhYIW49vI41SxdS0O0O+ZF2AEd08nm31W90dDryXwBe/EUoAn/ N8Ykvv+p1yI+eEmWNRiYsFDtTzaAsuU= -----END CERTIFICATE-----Generated at Sun Apr 27 13:03:46 2025 by rpki-client