$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8f2c8793-be20-36a0-9939-24dfde4496ac.roa File: 8f2c8793-be20-36a0-9939-24dfde4496ac.roa (raw, json) Hash identifier: IpkI9Ykyzvay+Wo/zywTHU9RSWrgl+OgopywHKJ5Tu8= Subject key identifier: 8D:88:E9:F5:2F:1B:88:8D:31:EC:73:C9:7C:03:D1:64:44:65:27:B5 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285849A784F4E5C22777B774556180 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8f2c8793-be20-36a0-9939-24dfde4496ac.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 15169 IP address blocks: 74.125.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:84:f4:e5:c2:27:77:b7:74:55:61:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=ae6898fa-f497-49ab-8f4d-cbe248ddf3fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:d2:6b:0c:e4:9d:5a:19:25:c8:ae:30:0a:38: fb:6a:55:fb:df:ee:61:09:41:ea:d7:96:03:09:8d: 56:58:e3:a2:ec:37:a4:4d:5c:1f:8f:18:57:14:af: 5d:2b:0a:12:83:8e:22:91:29:d5:b0:e1:3c:4c:9b: 2d:98:bf:41:77:b1:11:ea:65:13:7d:b9:ce:4a:43: 4a:e6:13:6c:fe:96:d1:cc:fc:9c:f2:5b:6f:fe:b6: d8:27:fb:99:fb:80:40:d1:79:e6:b4:68:04:fa:94: 52:9a:ec:24:7e:ad:8f:b6:02:d7:21:97:83:1a:e2: b0:2b:05:3e:fd:04:1b:7f:f4:17:42:c2:95:08:1b: b9:c7:85:32:4f:a5:b8:74:ba:a7:b4:f0:b8:3b:b0: 25:4d:8b:9b:f7:ae:fb:03:39:88:bc:44:25:1f:c0: 88:d9:a4:57:79:4e:22:84:f4:ff:47:4a:73:39:1d: 78:e5:a9:af:29:a5:42:05:57:97:8c:1d:b0:67:ea: 50:fe:ca:11:2e:86:01:45:ea:a9:cc:95:62:e1:39: 1b:01:bc:d8:15:51:60:9e:16:00:e7:3b:27:e1:a0: b4:b1:a9:ba:af:84:eb:2e:85:65:b5:3d:f2:01:06: 3f:f6:1c:8d:92:89:d1:51:d1:50:9b:a7:5c:31:96: e2:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:88:E9:F5:2F:1B:88:8D:31:EC:73:C9:7C:03:D1:64:44:65:27:B5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8f2c8793-be20-36a0-9939-24dfde4496ac.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 74.125.133.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:67:3e:6a:af:4f:43:07:fb:ad:c2:5c:a6:92:84:d6:8b:3d: 1c:79:b1:53:af:ea:b6:8b:54:cf:ac:3e:e6:c5:32:ca:ba:6d: e8:90:e5:bf:f5:cd:25:8a:95:c9:82:b7:dd:b3:da:b7:7e:86: dd:ec:9b:b2:e2:43:a4:35:2d:ca:57:72:d5:96:d5:66:a1:7b: 6f:db:45:14:bd:5f:3b:8f:36:49:9c:fd:88:a5:f3:8e:93:6a: 93:e2:ad:fa:ab:dd:76:78:78:06:13:20:a3:cf:60:25:08:99: e2:98:ef:0c:6b:9b:ef:b4:73:33:06:ee:7f:77:5b:d4:ee:3c: be:19:50:43:8c:9c:11:28:c0:d0:b0:77:a6:5a:22:f7:7a:85: ed:70:11:82:79:47:b9:7c:72:af:d2:62:73:75:13:ca:8d:28: 59:57:c2:bf:79:c0:40:0d:9d:11:d1:bb:9e:f4:0e:00:e5:01: 31:03:72:fa:ec:6a:e3:c8:01:d3:3c:12:87:59:aa:bb:d9:ad: f7:51:f8:e8:4f:7d:d1:c1:1e:99:79:f4:5a:82:0c:01:d8:0c: d2:95:fa:f9:4b:ca:17:9b:db:80:73:83:57:2b:be:a7:ef:b7: 16:34:3c:26:7f:a5:f3:4f:3b:23:51:d2:0b:61:62:30:81:40: 50:b0:92:9c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhPTlwid3t3RVYYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk YWU2ODk4ZmEtZjQ5Ny00OWFiLThmNGQtY2JlMjQ4ZGRmM2ZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgtJrDOSdWhklyK4wCjj7alX73+5hCUHq15YD CY1WWOOi7DekTVwfjxhXFK9dKwoSg44ikSnVsOE8TJstmL9Bd7ER6mUTfbnOSkNK 5hNs/pbRzPyc8ltv/rbYJ/uZ+4BA0XnmtGgE+pRSmuwkfq2PtgLXIZeDGuKwKwU+ /QQbf/QXQsKVCBu5x4UyT6W4dLqntPC4O7AlTYub9677AzmIvEQlH8CI2aRXeU4i hPT/R0pzOR145amvKaVCBVeXjB2wZ+pQ/soRLoYBReqpzJVi4TkbAbzYFVFgnhYA 5zsn4aC0sam6r4TrLoVltT3yAQY/9hyNkonRUdFQm6dcMZbiUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI2I6fUvG4iNMexzyXwD0WREZSe1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvOGYyYzg3OTMtYmUyMC0z NmEwLTk5MzktMjRkZmRlNDQ5NmFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASn2FMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH1nPmqvT0MH+63CXKaShNaLPRx5sVOv6raLVM+sPubFMsq6beiQ5b/1 zSWKlcmCt92z2rd+ht3sm7LiQ6Q1LcpXctWW1Wahe2/bRRS9XzuPNkmc/Yil846T apPirfqr3XZ4eAYTIKPPYCUImeKY7wxrm++0czMG7n93W9TuPL4ZUEOMnBEowNCw d6ZaIvd6he1wEYJ5R7l8cq/SYnN1E8qNKFlXwr95wEANnRHRu570DgDlATEDcvrs auPIAdM8EodZqrvZrfdR+OhPfdHBHpl59FqCDAHYDNKV+vlLyheb24Bzg1crvqfv txY0PCZ/pfNPOyNR0gthYjCBQFCwkpw= -----END CERTIFICATE-----Generated at Sat Apr 26 19:55:29 2025 by rpki-client