$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/54824a57-30df-397e-bb86-882c177dd83b.roa File: 54824a57-30df-397e-bb86-882c177dd83b.roa (raw, json) Hash identifier: 3/9vHliLF/SZBcXFpIlOQcsSISMz70b8cX2et9gT+Kw= Subject key identifier: 23:62:21:6E:89:16:FB:9A:C0:AC:39:70:D6:06:D0:69:6B:55:0C:F3 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285849A78528DF9B26EC227D452680 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/54824a57-30df-397e-bb86-882c177dd83b.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 15169 IP address blocks: 74.125.195.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:85:28:df:9b:26:ec:22:7d:45:26:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=51e9c4f1-a28c-4c9d-b8f9-24278353863d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:94:fc:5e:22:a6:a4:e5:80:8e:3d:fd:a3:2f: fe:6b:6a:66:33:22:ea:e7:ad:61:39:ed:cb:54:26: 28:31:6f:9e:12:4e:c9:f1:a3:c2:11:b4:e8:b9:4d: d0:cd:e8:3e:5e:96:0a:50:0a:76:da:9c:ad:aa:a0: aa:d4:dc:7a:14:59:ab:e2:a2:a1:35:96:17:be:0f: 35:0b:b4:c8:68:f5:49:08:e5:0f:98:75:bf:ff:05: e4:0c:c1:ec:64:8e:f2:05:38:75:2f:4d:a9:df:13: 35:49:d3:a6:95:0e:9c:15:a0:5a:87:87:8e:fe:76: 99:f6:5c:63:a7:62:7f:64:2d:89:7d:6a:22:06:2a: 1c:be:d3:68:6a:a5:da:e2:f7:0c:ff:ed:6f:9e:41: 52:6a:b0:73:04:9b:08:d4:0e:e8:ab:90:e4:63:df: 1e:c5:7a:1f:5f:e3:b0:75:e8:00:bc:a2:c6:97:5a: af:31:9e:2f:b9:c1:6f:b0:44:c9:0e:e3:bb:38:0d: 71:c6:2a:d5:88:4d:ee:54:b5:d1:f5:b5:aa:1f:75: fd:98:e3:95:80:62:ae:5b:ef:bf:af:09:20:f5:3e: cf:88:16:c2:76:1b:c2:36:9a:8f:6a:02:43:d7:e7: 91:fe:04:77:87:36:d1:28:10:03:39:0a:a2:98:0e: 34:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:62:21:6E:89:16:FB:9A:C0:AC:39:70:D6:06:D0:69:6B:55:0C:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/54824a57-30df-397e-bb86-882c177dd83b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 74.125.195.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:bc:9c:1a:2a:f0:72:6f:26:ac:f1:7b:37:46:a4:69:57:05: 12:54:22:09:a9:d8:92:de:0e:a9:7e:6d:96:5b:5e:be:74:1e: 3e:ec:ef:c8:d5:cc:b7:78:0f:23:c3:1b:f2:1f:8a:2a:53:6d: 5f:49:58:69:19:19:a4:13:23:45:f5:f1:1f:16:2b:a2:ae:50: 03:55:d9:b3:f7:b6:c6:7d:89:49:0f:69:36:17:db:49:81:3e: a1:4b:5c:e5:a1:59:35:f3:b9:5d:8f:f5:e7:7c:0b:20:e5:25: be:cb:12:b3:4e:57:e0:58:18:77:86:ee:99:bb:0b:35:8b:ee: 16:05:a2:28:05:d4:da:df:0a:41:80:dc:bd:6e:1d:21:c5:50: fd:f1:69:15:0f:a2:a4:09:5d:6a:be:d7:8f:86:8a:42:85:d1: 6f:e8:48:66:10:14:d8:41:6b:71:f0:36:75:e5:20:85:2d:c5: 97:c1:22:fb:3d:11:ba:a8:85:8c:69:9e:e9:12:5d:1a:29:e1: e9:e3:ff:ae:53:ba:60:17:da:07:d9:4c:0e:fa:db:b1:69:fa: f5:49:e8:fa:d7:61:de:5d:58:54:3f:01:c3:ec:bd:c9:60:1d: e6:f7:38:8a:1c:8b:84:f4:b2:cb:45:3f:38:c7:23:d7:39:c4: aa:59:4c:37 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhSjfmybsIn1FJoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk NTFlOWM0ZjEtYTI4Yy00YzlkLWI4ZjktMjQyNzgzNTM4NjNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwZT8XiKmpOWAjj39oy/+a2pmMyLq561hOe3L VCYoMW+eEk7J8aPCEbTouU3Qzeg+XpYKUAp22pytqqCq1Nx6FFmr4qKhNZYXvg81 C7TIaPVJCOUPmHW//wXkDMHsZI7yBTh1L02p3xM1SdOmlQ6cFaBah4eO/naZ9lxj p2J/ZC2JfWoiBiocvtNoaqXa4vcM/+1vnkFSarBzBJsI1A7oq5DkY98exXofX+Ow degAvKLGl1qvMZ4vucFvsETJDuO7OA1xxirViE3uVLXR9bWqH3X9mOOVgGKuW++/ rwkg9T7PiBbCdhvCNpqPagJD1+eR/gR3hzbRKBADOQqimA40qwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCNiIW6JFvuawKw5cNYG0GlrVQzzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNTQ4MjRhNTctMzBkZi0z OTdlLWJiODYtODgyYzE3N2RkODNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASn3DMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF+8nBoq8HJvJqzxezdGpGlXBRJUIgmp2JLeDql+bZZbXr50Hj7s78jV zLd4DyPDG/IfiipTbV9JWGkZGaQTI0X18R8WK6KuUANV2bP3tsZ9iUkPaTYX20mB PqFLXOWhWTXzuV2P9ed8CyDlJb7LErNOV+BYGHeG7pm7CzWL7hYFoigF1NrfCkGA 3L1uHSHFUP3xaRUPoqQJXWq+14+GikKF0W/oSGYQFNhBa3HwNnXlIIUtxZfBIvs9 EbqohYxpnukSXRop4enj/65TumAX2gfZTA7627Fp+vVJ6PrXYd5dWFQ/AcPsvclg Heb3OIoci4T0sstFPzjHI9c5xKpZTDc= -----END CERTIFICATE-----Generated at Sat Apr 26 21:02:47 2025 by rpki-client