$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/1d293b2d-8ece-319b-aaf2-e38bb2d9712c.roa File: 1d293b2d-8ece-319b-aaf2-e38bb2d9712c.roa (raw, json) Hash identifier: aewx/B9wTF9Det2KetXiaKJvDHafdvbXvG8BlugZgVI= Subject key identifier: C5:86:36:65:23:FA:51:B5:F5:F4:FB:99:8A:DC:FC:42:04:CF:2B:99 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285849A784DA50B938445A8F3C0844 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/1d293b2d-8ece-319b-aaf2-e38bb2d9712c.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 15169 IP address blocks: 74.125.204.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:84:da:50:b9:38:44:5a:8f:3c:08:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=85495302-9ca6-4f21-827e-c91520af684f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:2b:1f:2e:40:66:64:6a:c1:3a:0e:c2:31:2d: 9a:dd:bb:f6:4e:aa:b5:53:5b:88:1f:12:09:9c:0e: 4d:83:52:4a:24:b0:2b:f8:1a:c6:07:7c:d2:d9:ef: 00:03:c7:17:58:b9:5e:7d:f3:39:dc:70:8c:9b:5e: 85:cc:04:d7:73:0a:32:1d:bb:e9:92:1c:de:c9:03: 9b:32:ad:2a:13:03:69:be:fb:bd:1a:48:20:21:81: 30:58:3a:9d:99:2c:26:23:d7:8e:13:25:ca:98:79: a0:6a:14:04:7b:a9:2a:54:6e:0e:0d:86:c5:d7:e8: 40:0b:5b:78:29:57:f5:48:b8:bc:0b:22:1c:0b:ae: 82:d7:21:a1:74:26:f6:e7:a9:94:f3:53:e4:ac:5a: 60:3f:74:df:1d:fa:1e:fb:01:ba:61:f3:a6:a7:1e: 38:c2:ab:fc:0b:5a:40:8c:05:e7:b0:ff:f6:05:5d: e7:fa:75:f3:d1:df:f4:5c:20:38:c5:f7:70:f2:4a: e9:7c:06:ab:57:56:21:16:f6:b1:e3:a9:43:0b:e9: 2c:29:e9:2e:d3:5c:55:a3:13:4e:4e:fa:db:6a:f5: f8:22:bb:70:20:6e:fc:bf:d2:7e:00:9d:43:3d:c8: 1e:38:7f:51:ad:d9:9f:8f:26:50:73:d6:cf:01:fc: bd:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:86:36:65:23:FA:51:B5:F5:F4:FB:99:8A:DC:FC:42:04:CF:2B:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/1d293b2d-8ece-319b-aaf2-e38bb2d9712c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 74.125.204.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 98:e7:25:30:3c:63:e3:c2:3a:c3:03:14:c0:b9:a6:4d:ca:5c: 91:c5:44:9c:90:24:bc:b3:0f:b0:11:27:cd:4e:43:1c:e8:23: 2d:33:9f:8c:ea:81:4a:90:ed:fb:9f:d5:ce:f6:66:56:21:b6: 59:49:bf:ff:0e:27:11:28:89:a7:5a:c9:0c:ce:d4:f2:65:68: cf:3f:ad:76:6e:f0:5f:8d:d9:9e:a7:67:61:76:f0:1e:59:b5: 0b:87:44:5f:bb:99:1e:2c:16:b4:f3:41:5f:35:f6:4e:0b:89: e1:9a:b4:56:8b:e0:43:9c:19:60:7b:cd:a4:ff:07:1c:6b:37: 2d:f9:a6:20:50:fc:41:03:8f:d8:2e:e4:da:e1:05:1d:89:c0: b2:48:df:e7:17:44:a9:88:e7:67:02:e8:25:51:e0:e9:b6:03: 12:c3:38:b5:2d:c5:61:b7:86:ba:e6:80:44:6d:19:fb:23:24: 30:2b:c6:03:84:ec:61:e6:a3:a8:27:dc:84:90:e4:4b:62:45: e9:bc:00:7f:ce:17:71:45:e9:20:af:3d:e7:d6:09:67:19:a9: 28:8f:15:f8:6c:51:57:1a:e0:2f:4e:90:34:09:97:46:07:28: 63:cf:c5:77:ee:4d:9a:58:e9:b1:d5:ad:b1:bd:31:05:ee:bd: 82:39:e9:5f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhNpQuThEWo88CEQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk ODU0OTUzMDItOWNhNi00ZjIxLTgyN2UtYzkxNTIwYWY2ODRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3CsfLkBmZGrBOg7CMS2a3bv2Tqq1U1uIHxIJ nA5Ng1JKJLAr+BrGB3zS2e8AA8cXWLleffM53HCMm16FzATXcwoyHbvpkhzeyQOb Mq0qEwNpvvu9GkggIYEwWDqdmSwmI9eOEyXKmHmgahQEe6kqVG4ODYbF1+hAC1t4 KVf1SLi8CyIcC66C1yGhdCb256mU81PkrFpgP3TfHfoe+wG6YfOmpx44wqv8C1pA jAXnsP/2BV3n+nXz0d/0XCA4xfdw8krpfAarV1YhFvax46lDC+ksKeku01xVoxNO TvrbavX4IrtwIG78v9J+AJ1DPcgeOH9RrdmfjyZQc9bPAfy9yQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMWGNmUj+lG19fT7mYrc/EIEzyuZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMWQyOTNiMmQtOGVjZS0z MTliLWFhZjItZTM4YmIyZDk3MTJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASn3MMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJjnJTA8Y+PCOsMDFMC5pk3KXJHFRJyQJLyzD7ARJ81OQxzoIy0zn4zq gUqQ7fuf1c72ZlYhtllJv/8OJxEoiadayQzO1PJlaM8/rXZu8F+N2Z6nZ2F28B5Z tQuHRF+7mR4sFrTzQV819k4LieGatFaL4EOcGWB7zaT/BxxrNy35piBQ/EEDj9gu 5NrhBR2JwLJI3+cXRKmI52cC6CVR4Om2AxLDOLUtxWG3hrrmgERtGfsjJDArxgOE 7GHmo6gn3ISQ5EtiRem8AH/OF3FF6SCvPefWCWcZqSiPFfhsUVca4C9OkDQJl0YH KGPPxXfuTZpY6bHVrbG9MQXuvYI56V8= -----END CERTIFICATE-----Generated at Sun Apr 27 08:45:52 2025 by rpki-client