$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/68d441be-0181-30ba-806d-c11590a6aa4e.roa File: 68d441be-0181-30ba-806d-c11590a6aa4e.roa (raw, json) Hash identifier: GJIti4U6hJ1oK0ovLOSmBI+/o8APfQFpEAJ5BFgysDQ= Subject key identifier: 1F:D3:FA:89:73:F3:C7:08:92:3F:A1:37:8E:4B:E5:C0:34:87:A1:F0 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285849A785394FF64ACF3A4B3C0600 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/68d441be-0181-30ba-806d-c11590a6aa4e.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 15169 IP address blocks: 74.125.230.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:85:39:4f:f6:4a:cf:3a:4b:3c:06:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=534e8fbe-0449-4622-9ee9-c129cd21ab4f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:9d:86:f7:18:d7:88:6f:4c:aa:46:09:c2:e4: ea:e4:48:5c:5d:51:c2:b2:a9:91:11:2a:f2:b4:ae: 4f:c5:52:37:b1:11:6e:7c:ef:96:9d:ed:c1:81:74: d4:29:f4:1d:5f:64:c8:89:fa:0a:c6:46:81:f1:90: 26:54:44:e0:92:ac:e9:19:14:55:c6:6c:7d:6b:08: f2:7a:78:06:5e:68:21:9f:86:4c:40:98:79:96:33: 97:60:06:47:5c:f2:29:4c:fb:d5:22:2b:3c:ec:b4: b1:09:99:2c:40:db:80:0f:81:4a:9f:41:35:e8:80: f8:d9:e4:a5:fa:cf:4d:f7:54:eb:85:5b:ad:f5:4c: ba:91:35:ea:cc:b6:09:9a:9b:28:47:42:da:c9:02: 9e:35:33:0a:99:44:0f:0b:86:22:dd:69:2a:6b:63: fa:21:1c:46:3a:1d:05:fa:67:e8:80:68:8a:c5:c2: 77:d0:1e:9f:fb:48:9d:5f:e1:88:19:a6:50:6a:4e: 62:44:88:2e:21:b5:fa:e8:d3:e4:ad:ea:90:45:6b: 36:76:1c:77:ee:14:2c:ab:9f:45:7c:f4:b6:a0:ac: 0e:a9:de:f9:e6:f3:c0:85:4d:0f:05:da:a9:a0:66: b7:43:ce:d0:8e:6f:81:3a:62:25:09:b5:3b:65:c1: 07:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:D3:FA:89:73:F3:C7:08:92:3F:A1:37:8E:4B:E5:C0:34:87:A1:F0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/68d441be-0181-30ba-806d-c11590a6aa4e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 74.125.230.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:87:3f:d7:5d:f2:6c:7a:a1:b8:a2:bd:15:cb:74:b4:03:1b: 9b:c9:3a:c5:be:8e:67:f0:95:ee:dd:12:58:9f:ab:2d:05:06: 91:dc:e8:10:3c:b9:28:18:f7:09:55:4f:70:2c:0e:da:3d:b2: 4d:62:ba:c2:e4:ce:1b:14:d9:99:59:16:d9:d6:3e:47:e0:be: 73:c7:a4:7e:df:45:63:e0:c0:8d:12:4f:ec:67:30:32:39:59: b9:27:91:02:1b:87:d5:c3:a7:30:25:2b:9d:06:09:63:63:f4: ab:ea:1a:3e:5b:41:10:63:67:b1:e1:6d:5d:b6:3c:3e:49:b0: 2c:a3:cd:c5:ed:ab:e6:91:de:23:6c:0a:10:ad:89:b4:4e:e3: 2f:bd:76:f3:95:75:80:6b:45:03:eb:57:92:f8:91:d8:1d:89: 99:b8:99:ed:ef:d1:71:9b:4b:9d:da:cb:86:aa:fc:af:4b:c6: 63:ce:11:02:d8:52:5b:ab:95:0b:b3:7b:6d:12:72:aa:46:b8: fb:e7:11:aa:8e:31:52:d6:31:fa:77:37:ff:15:46:4e:dc:fd: 4b:dc:35:7f:63:8d:c8:4c:6a:3f:f0:00:1e:fa:52:e6:c0:01: 74:82:8d:d7:c3:45:e9:75:9c:a7:65:6d:52:69:84:11:d4:67: 03:38:26:35 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhTlP9krPOks8BgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk NTM0ZThmYmUtMDQ0OS00NjIyLTllZTktYzEyOWNkMjFhYjRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjp2G9xjXiG9MqkYJwuTq5EhcXVHCsqmRESry tK5PxVI3sRFufO+Wne3BgXTUKfQdX2TIifoKxkaB8ZAmVETgkqzpGRRVxmx9awjy engGXmghn4ZMQJh5ljOXYAZHXPIpTPvVIis87LSxCZksQNuAD4FKn0E16ID42eSl +s9N91TrhVut9Uy6kTXqzLYJmpsoR0LayQKeNTMKmUQPC4Yi3Wkqa2P6IRxGOh0F +mfogGiKxcJ30B6f+0idX+GIGaZQak5iRIguIbX66NPkreqQRWs2dhx37hQsq59F fPS2oKwOqd755vPAhU0PBdqpoGa3Q87Qjm+BOmIlCbU7ZcEHrwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB/T+olz88cIkj+hN45L5cA0h6HwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNjhkNDQxYmUtMDE4MS0z MGJhLTgwNmQtYzExNTkwYTZhYTRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASn3mMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABSHP9dd8mx6obiivRXLdLQDG5vJOsW+jmfwle7dElifqy0FBpHc6BA8 uSgY9wlVT3AsDto9sk1iusLkzhsU2ZlZFtnWPkfgvnPHpH7fRWPgwI0ST+xnMDI5 WbknkQIbh9XDpzAlK50GCWNj9KvqGj5bQRBjZ7HhbV22PD5JsCyjzcXtq+aR3iNs ChCtibRO4y+9dvOVdYBrRQPrV5L4kdgdiZm4me3v0XGbS53ay4aq/K9LxmPOEQLY UlurlQuze20ScqpGuPvnEaqOMVLWMfp3N/8VRk7c/UvcNX9jjchMaj/wAB76UubA AXSCjdfDRel1nKdlbVJphBHUZwM4JjU= -----END CERTIFICATE-----Generated at Sat Apr 26 20:59:08 2025 by rpki-client