$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/44ea8a72-f66a-3660-8842-7fb769bd2686.roa File: 44ea8a72-f66a-3660-8842-7fb769bd2686.roa (raw, json) Hash identifier: oAZeCPzpqtODILoiobZfHDHCY/q0q572cI8I7abF/CA= Subject key identifier: 41:39:07:66:B2:DE:38:BF:FF:B4:E9:24:4E:6D:6C:2A:B6:68:BB:06 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285849A7851239D50793001BC552C0 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/44ea8a72-f66a-3660-8842-7fb769bd2686.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 15169 IP address blocks: 74.125.200.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:85:12:39:d5:07:93:00:1b:c5:52:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=fd5167f4-072f-4dfb-a53b-8546baaa9e24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:83:b4:be:91:74:90:4b:60:7b:19:75:59:93: 02:d1:a8:c9:60:52:11:d3:a3:bf:76:35:3e:c7:52: 3a:7d:c7:58:ee:38:dc:71:65:2a:97:f0:d4:b9:a4: 1a:01:37:9b:74:a6:e5:36:eb:93:d6:80:bb:0b:ce: 3d:d5:eb:6a:33:78:d1:ec:f5:cf:81:f3:ea:44:30: ce:12:e7:67:bf:c4:e0:88:6c:4e:2e:81:90:cc:6d: 21:f7:cc:43:8b:fa:44:4d:66:30:bf:58:61:8d:63: 26:a9:d4:27:0d:97:7e:fb:fc:d8:46:a9:50:e8:d4: 14:f1:67:ce:12:22:a0:3c:39:39:ee:ec:12:a9:7b: a1:a4:fe:b7:86:9a:7c:bc:8f:00:7d:ab:ec:65:28: c3:49:f3:56:de:2a:6a:8e:1a:25:30:32:25:33:6e: 80:9d:73:78:2c:48:4b:c1:1f:40:a6:47:b8:8c:03: fe:db:15:20:00:c6:fa:cc:42:e7:b9:4c:15:14:89: 02:78:18:86:b6:4e:b5:84:e6:3c:2e:7b:c0:aa:15: 2f:a2:a7:91:c8:97:59:4a:92:81:e5:77:8a:68:3a: d4:bb:c3:1a:d7:51:d6:26:5f:bc:9d:f9:93:18:7f: be:e8:a1:99:29:ac:1b:1c:fd:86:33:c2:52:1f:76: 4a:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:39:07:66:B2:DE:38:BF:FF:B4:E9:24:4E:6D:6C:2A:B6:68:BB:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/44ea8a72-f66a-3660-8842-7fb769bd2686.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 74.125.200.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:44:ef:de:b9:36:2f:71:cb:03:cb:99:38:47:ff:89:51:2b: 32:c3:53:66:15:26:d6:65:e3:55:9b:55:3a:0c:62:8a:c6:68: 65:ce:04:4a:21:7a:78:11:bf:fc:a8:00:90:5c:84:cb:39:2d: aa:8a:91:ce:45:6b:0d:30:6d:d8:c6:dd:cf:d6:84:35:25:47: fd:3d:16:c1:69:cc:d3:24:c0:91:16:9b:22:b9:5c:f0:2e:65: 2d:57:af:79:50:05:2d:1d:c7:d7:26:e9:65:36:e2:14:b7:92: 77:36:11:17:a2:50:8b:b2:cc:50:21:42:6b:3a:40:85:54:e3: bd:e6:90:50:04:54:dc:cb:92:61:44:3a:fc:8c:39:7d:c8:1b: 5b:51:d9:d5:c1:31:27:69:f4:f6:cc:0b:5d:e4:1c:6c:73:f9: a2:62:33:10:a7:73:16:35:b1:b8:8a:51:43:71:dd:f0:50:c4: ab:3b:d5:ab:25:16:4f:69:63:86:72:13:40:d6:79:39:9b:87: 7d:20:e1:a7:02:6c:26:09:30:27:28:a4:87:d8:a8:bc:5a:59: 11:df:4d:7f:12:fa:0c:97:61:08:f5:98:ae:70:80:9c:5f:01: ba:69:cd:44:b8:e7:2d:11:1b:50:12:6a:6d:04:b4:65:47:1c: 61:52:b6:af -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhRI51QeTABvFUsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk ZmQ1MTY3ZjQtMDcyZi00ZGZiLWE1M2ItODU0NmJhYWE5ZTI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtIO0vpF0kEtgexl1WZMC0ajJYFIR06O/djU+ x1I6fcdY7jjccWUql/DUuaQaATebdKblNuuT1oC7C8491etqM3jR7PXPgfPqRDDO Eudnv8TgiGxOLoGQzG0h98xDi/pETWYwv1hhjWMmqdQnDZd++/zYRqlQ6NQU8WfO EiKgPDk57uwSqXuhpP63hpp8vI8AfavsZSjDSfNW3ipqjholMDIlM26AnXN4LEhL wR9Apke4jAP+2xUgAMb6zELnuUwVFIkCeBiGtk61hOY8LnvAqhUvoqeRyJdZSpKB 5XeKaDrUu8Ma11HWJl+8nfmTGH++6KGZKawbHP2GM8JSH3ZK9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEE5B2ay3ji//7TpJE5tbCq2aLsGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNDRlYThhNzItZjY2YS0z NjYwLTg4NDItN2ZiNzY5YmQyNjg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASn3IMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADVE7965Ni9xywPLmThH/4lRKzLDU2YVJtZl41WbVToMYorGaGXOBEoh engRv/yoAJBchMs5LaqKkc5Faw0wbdjG3c/WhDUlR/09FsFpzNMkwJEWmyK5XPAu ZS1Xr3lQBS0dx9cm6WU24hS3knc2EReiUIuyzFAhQms6QIVU473mkFAEVNzLkmFE OvyMOX3IG1tR2dXBMSdp9PbMC13kHGxz+aJiMxCncxY1sbiKUUNx3fBQxKs71asl Fk9pY4ZyE0DWeTmbh30g4acCbCYJMCcopIfYqLxaWRHfTX8S+gyXYQj1mK5wgJxf AbppzUS45y0RG1ASam0EtGVHHGFStq8= -----END CERTIFICATE-----Generated at Sat Apr 26 19:59:29 2025 by rpki-client