$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/72dc7deb-7233-3223-850c-eb40285cffdc.roa File: 72dc7deb-7233-3223-850c-eb40285cffdc.roa (raw, json) Hash identifier: q1oj0AHdBRo1WTR21yXan9BxlwuEYF1v93RY6lY97hw= Subject key identifier: C8:D5:75:0A:35:14:45:4F:D4:D8:62:DA:DB:DC:3E:45:F2:C2:3C:A6 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285849A7853E57F5CD5BFC620FE740 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/72dc7deb-7233-3223-850c-eb40285cffdc.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 15169 IP address blocks: 74.125.137.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:85:3e:57:f5:cd:5b:fc:62:0f:e7:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=7e35c4f9-6aaf-4bc5-9034-1212abb9aede Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:cb:01:a8:7f:81:b3:1d:08:b7:c1:01:fa:6d: a1:b0:29:c1:6b:37:42:b9:64:62:be:ff:6d:9b:13: 9a:94:a0:40:64:f3:0f:25:61:f4:18:68:08:b0:de: c9:47:6f:23:63:44:cb:57:9b:06:d6:7e:b7:80:e4: c6:ff:17:94:7d:28:3f:8e:1f:44:d8:e3:a6:57:7d: 7b:cf:0b:23:4a:d9:83:e8:ae:0c:8c:52:e9:8e:31: b2:8c:f3:01:76:57:36:42:0d:1f:eb:58:79:a4:43: e3:13:50:9e:e4:f4:d1:35:f8:c9:37:d6:fa:d1:3f: 45:57:9d:03:38:44:cf:a0:6c:7d:83:32:9e:2b:08: b6:6e:ab:75:91:2e:aa:38:1c:fe:d0:d3:76:45:c8: 33:75:88:eb:8b:55:2d:d3:79:ef:91:20:bd:3e:8c: 90:e0:e5:a9:9d:e7:1b:69:e1:40:aa:0e:f9:61:74: 60:d8:0d:8e:26:7e:55:dc:87:51:f8:03:9c:3c:5c: 76:2f:da:95:92:86:a1:9f:eb:b8:ec:4d:99:fe:f2: c9:03:75:ed:ba:c9:46:22:c6:60:67:fc:d6:3f:9c: fe:a5:5e:aa:60:75:63:7d:26:52:e8:5f:eb:99:06: ea:36:0b:cd:7f:a5:73:9a:f6:6d:a5:9c:de:14:40: 61:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:D5:75:0A:35:14:45:4F:D4:D8:62:DA:DB:DC:3E:45:F2:C2:3C:A6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/72dc7deb-7233-3223-850c-eb40285cffdc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 74.125.137.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:26:25:46:1a:d6:74:65:fb:09:5e:5e:1c:66:fe:2c:be:c8: 77:44:ec:df:71:c1:c3:1d:9a:45:cf:0e:e7:0c:b9:f7:3f:4b: f3:71:3c:73:c1:2d:21:e8:dd:5a:66:e4:15:53:f9:3e:43:1e: f9:1c:dd:4d:0b:0a:e8:35:d9:d0:0c:33:e3:b2:39:32:f5:b2: 72:6d:36:22:f6:cd:20:5f:46:a4:06:4b:b2:44:dd:b3:bd:2e: 77:ae:aa:e0:bd:a4:85:66:4b:b4:75:e3:68:0b:e8:27:03:cd: 5c:9a:7b:04:7f:88:ad:b0:88:db:3a:78:a5:ba:44:c9:f3:f5: a5:3d:5e:60:76:36:b6:92:89:9e:54:84:ba:38:2b:dc:19:74: c4:84:ae:29:e5:ec:84:9b:f6:38:96:89:54:f3:0a:ac:e5:1f: 79:f6:84:4f:68:d1:fc:10:a1:b9:64:2d:02:1e:43:70:46:82: 01:11:97:bd:b3:b6:b2:9f:4d:9a:ee:92:0e:46:4d:88:32:76: f9:07:cf:3e:e5:4a:de:ee:1f:26:9a:36:52:e2:1f:2f:72:e9: bc:34:66:fa:20:8c:93:e7:de:47:ab:2a:e2:1f:29:f5:67:00: 61:f0:37:c7:cc:18:47:4d:ea:cc:a3:0c:60:44:1f:5c:93:d9: d3:f3:e4:48 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhT5X9c1b/GIP50AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk N2UzNWM0ZjktNmFhZi00YmM1LTkwMzQtMTIxMmFiYjlhZWRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp8sBqH+Bsx0It8EB+m2hsCnBazdCuWRivv9t mxOalKBAZPMPJWH0GGgIsN7JR28jY0TLV5sG1n63gOTG/xeUfSg/jh9E2OOmV317 zwsjStmD6K4MjFLpjjGyjPMBdlc2Qg0f61h5pEPjE1Ce5PTRNfjJN9b60T9FV50D OETPoGx9gzKeKwi2bqt1kS6qOBz+0NN2RcgzdYjri1Ut03nvkSC9PoyQ4OWpnecb aeFAqg75YXRg2A2OJn5V3IdR+AOcPFx2L9qVkoahn+u47E2Z/vLJA3XtuslGIsZg Z/zWP5z+pV6qYHVjfSZS6F/rmQbqNgvNf6VzmvZtpZzeFEBh4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMjVdQo1FEVP1Nhi2tvcPkXywjymMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNzJkYzdkZWItNzIzMy0z MjIzLTg1MGMtZWI0MDI4NWNmZmRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASn2JMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACsmJUYa1nRl+wleXhxm/iy+yHdE7N9xwcMdmkXPDucMufc/S/NxPHPB LSHo3Vpm5BVT+T5DHvkc3U0LCug12dAMM+OyOTL1snJtNiL2zSBfRqQGS7JE3bO9 LneuquC9pIVmS7R142gL6CcDzVyaewR/iK2wiNs6eKW6RMnz9aU9XmB2NraSiZ5U hLo4K9wZdMSErinl7ISb9jiWiVTzCqzlH3n2hE9o0fwQoblkLQIeQ3BGggERl72z trKfTZrukg5GTYgydvkHzz7lSt7uHyaaNlLiHy9y6bw0ZvogjJPn3kerKuIfKfVn AGHwN8fMGEdN6syjDGBEH1yT2dPz5Eg= -----END CERTIFICATE-----Generated at Sun Apr 27 01:09:05 2025 by rpki-client