$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/25d1bf45-3890-342f-9d44-7731a5a90a08.roa File: 25d1bf45-3890-342f-9d44-7731a5a90a08.roa (raw, json) Hash identifier: 8uEcjGv77PhFat3cKqan9n+MyIv6A5PtuCmyAYUilQE= Subject key identifier: F2:3A:BC:B2:A4:DB:D3:23:30:EB:0B:C2:7C:BB:FA:1C:42:FE:B4:33 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285849A784C8AFC3979D59A24D6A80 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/25d1bf45-3890-342f-9d44-7731a5a90a08.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 15169 IP address blocks: 74.125.68.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:84:c8:af:c3:97:9d:59:a2:4d:6a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=f40ab80d-d4db-4707-9095-fb2ac8d2318c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:6d:2e:89:c7:6b:7f:50:0d:3c:60:84:90:72: 0a:c7:76:f7:46:87:56:82:c3:ae:5b:2c:ac:5b:18: b8:0d:9a:a8:d9:25:ff:ee:14:db:b9:0d:c5:f6:38: 23:26:55:e9:67:4c:ea:1d:76:70:b8:ea:9c:75:38: 49:52:5f:53:04:41:8b:1c:04:f7:a3:67:8c:a2:b2: ec:2d:8e:c6:0b:c1:89:56:c5:e4:91:51:53:7b:db: bf:39:5d:10:ce:35:60:1d:cf:1b:47:27:f3:f3:80: e4:42:c7:fa:16:e5:4a:12:d9:fa:fb:d4:81:bf:02: 31:79:4e:95:19:64:1c:97:9a:0d:6d:40:ef:6e:73: 50:b5:29:81:59:64:71:4f:3d:98:45:bc:00:f4:09: 23:65:af:05:d7:98:bd:a9:08:3f:8f:ee:c7:08:6d: 92:5e:34:54:57:0d:cd:9a:b5:3e:a4:ca:ee:ca:af: e0:10:3c:7c:70:9b:18:8d:c0:39:fc:16:c4:14:b2: 2e:f8:36:f0:f8:26:f3:02:05:af:09:d1:ae:d2:08: 25:8a:a2:cd:73:81:52:6e:db:e4:96:af:8f:66:40: b4:f1:b3:39:60:5a:67:a1:74:e8:a3:05:61:e0:50: 3f:80:f6:cd:88:cd:b5:7d:1e:57:4f:9d:6f:af:d3: 95:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:3A:BC:B2:A4:DB:D3:23:30:EB:0B:C2:7C:BB:FA:1C:42:FE:B4:33 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/25d1bf45-3890-342f-9d44-7731a5a90a08.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 74.125.68.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b7:e2:7e:e1:7e:f1:87:d8:6f:8e:e5:73:cb:d9:1c:9f:46:e9: ab:98:1f:0f:02:a3:a1:56:19:23:2e:a3:2a:b5:ac:df:8a:fb: 14:18:38:cf:64:73:f9:26:28:ad:7a:1a:0e:7e:fe:7d:cc:46: 3e:47:b8:28:47:67:e8:d4:94:ed:dd:a8:8f:37:d1:9c:ff:c6: cd:c3:c5:4d:31:8c:07:e7:5e:2e:36:52:ec:0f:ff:68:eb:94: b4:dc:e2:f8:2a:96:aa:43:93:07:a7:02:11:f0:8c:8a:c1:c2: f3:b7:f5:74:76:53:31:06:b4:60:c6:94:ae:90:92:c7:50:fa: 8a:95:fb:ff:83:79:13:21:c2:e1:02:5a:67:e7:1b:18:79:41: 62:a7:b6:7a:7b:14:f7:86:e2:4a:5e:48:87:28:75:a2:67:16: 0d:b6:9c:61:3d:81:c3:fb:06:d0:2b:91:2c:55:74:90:0d:b0: cd:3d:89:d8:f7:d3:8d:22:04:66:f5:f6:41:79:e4:a2:8c:d6: e1:12:28:44:63:ad:e1:ad:22:df:5b:bb:04:c9:1d:60:de:27: 4a:d9:5b:e3:e5:6f:aa:ff:41:60:e6:70:86:45:85:8f:65:15: 48:9d:fc:bd:45:4d:80:0e:74:bb:b5:72:15:d1:4b:67:1c:fb: e4:21:4f:d0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhMivw5edWaJNaoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk ZjQwYWI4MGQtZDRkYi00NzA3LTkwOTUtZmIyYWM4ZDIzMThjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuW0uicdrf1ANPGCEkHIKx3b3RodWgsOuWyys Wxi4DZqo2SX/7hTbuQ3F9jgjJlXpZ0zqHXZwuOqcdThJUl9TBEGLHAT3o2eMorLs LY7GC8GJVsXkkVFTe9u/OV0QzjVgHc8bRyfz84DkQsf6FuVKEtn6+9SBvwIxeU6V GWQcl5oNbUDvbnNQtSmBWWRxTz2YRbwA9AkjZa8F15i9qQg/j+7HCG2SXjRUVw3N mrU+pMruyq/gEDx8cJsYjcA5/BbEFLIu+Dbw+CbzAgWvCdGu0ggliqLNc4FSbtvk lq+PZkC08bM5YFpnoXToowVh4FA/gPbNiM21fR5XT51vr9OVMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPI6vLKk29MjMOsLwny7+hxC/rQzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMjVkMWJmNDUtMzg5MC0z NDJmLTlkNDQtNzczMWE1YTkwYTA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASn1EMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALfifuF+8YfYb47lc8vZHJ9G6auYHw8Co6FWGSMuoyq1rN+K+xQYOM9k c/kmKK16Gg5+/n3MRj5HuChHZ+jUlO3dqI830Zz/xs3DxU0xjAfnXi42UuwP/2jr lLTc4vgqlqpDkwenAhHwjIrBwvO39XR2UzEGtGDGlK6QksdQ+oqV+/+DeRMhwuEC WmfnGxh5QWKntnp7FPeG4kpeSIcodaJnFg22nGE9gcP7BtArkSxVdJANsM09idj3 040iBGb19kF55KKM1uESKERjreGtIt9buwTJHWDeJ0rZW+Plb6r/QWDmcIZFhY9l FUid/L1FTYAOdLu1chXRS2cc++QhT9A= -----END CERTIFICATE-----Generated at Sun Apr 27 01:03:43 2025 by rpki-client