$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/99fc7683-93e1-3003-8b29-335baef0e1f6.roa File: 99fc7683-93e1-3003-8b29-335baef0e1f6.roa (raw, json) Hash identifier: bZ6S01Fscf8TY77d+n7ryeZ2SCCbtwgDvY0DOB1Yq/I= Subject key identifier: 11:E2:2E:B6:F7:66:22:9F:B1:C4:ED:69:EB:51:28:30:5B:52:DF:1D Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285849A785155B9B1650CE1ABD5800 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/99fc7683-93e1-3003-8b29-335baef0e1f6.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 15169 IP address blocks: 74.125.139.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:85:15:5b:9b:16:50:ce:1a:bd:58:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=7ad1afc7-8dd4-4caa-a735-2683793fa901 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:d2:ee:70:38:0b:95:96:aa:9a:eb:ca:17:80: 00:90:2d:ee:7d:24:7a:38:9a:ad:62:ef:21:d7:73: ec:ef:82:97:0f:f2:f8:41:7d:41:ba:97:cd:52:10: 82:d2:ac:44:d6:0b:c9:61:47:0f:6d:3f:de:65:f6: f7:dc:c6:60:14:ab:1b:28:89:5e:65:e8:5b:43:e5: 33:a4:2a:92:be:1a:01:c9:75:49:53:0c:14:0e:74: 4a:9f:57:af:11:fa:fc:99:1b:02:ab:e7:38:8d:d7: b9:24:01:f4:63:43:86:4b:56:66:af:7f:47:5d:86: 25:c7:61:0f:82:f8:4d:6a:2f:9d:60:93:cb:5a:5b: fa:67:6e:da:3d:22:37:2d:b6:ee:d8:20:1b:9d:ba: 65:e0:de:ad:79:52:56:ec:c3:a5:1f:30:8b:b3:6e: 65:db:16:c6:90:b9:91:c3:1c:95:1d:0b:c7:29:10: 27:e6:df:76:b4:a4:d8:a1:c1:53:e4:fe:48:8e:6f: 93:77:b0:ec:f0:53:ce:30:0f:95:da:6b:60:d4:e7: b7:94:a2:90:ff:38:15:2a:14:c8:47:a8:f1:e9:ce: df:1c:ae:7e:25:9a:ac:ed:36:53:4b:af:ab:e9:7a: e9:ee:b3:05:c4:9b:4c:84:c8:08:28:86:eb:49:d3: 55:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:E2:2E:B6:F7:66:22:9F:B1:C4:ED:69:EB:51:28:30:5B:52:DF:1D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/99fc7683-93e1-3003-8b29-335baef0e1f6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 74.125.139.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:04:40:b1:7e:85:e6:52:d9:3f:51:4f:e1:41:bb:d9:71:16: 9f:2e:f6:4c:38:12:a3:e8:16:63:21:f8:75:a4:b8:c6:d1:76: 4e:72:c5:34:5b:21:93:63:5c:83:ff:89:29:81:9a:50:a4:fc: b3:b9:e2:c0:5b:55:ca:90:83:21:25:98:0b:72:db:3e:9a:a2: 4d:63:37:c9:3d:e1:f4:06:f1:1a:eb:0c:a2:e4:77:4a:50:5b: 82:97:99:4c:b0:36:99:bf:b2:b4:8d:05:9f:0f:8a:9a:4f:88: 3f:ac:65:8d:22:80:f9:ab:dd:64:ff:0f:bc:c8:1a:f5:68:7f: b7:12:bb:6f:8f:a2:94:52:34:e0:3b:9b:11:77:02:86:5a:2c: 67:97:14:a2:bb:a5:3b:f1:dc:d9:02:29:ca:e3:38:79:4e:ce: 0f:c6:59:04:3b:b5:63:c2:35:fd:eb:f0:ed:71:f6:df:62:e8: 93:5e:95:d8:9d:5e:43:ee:f3:ad:f3:48:56:81:c0:e0:96:26: d2:5d:43:e2:c0:5d:47:f1:c4:da:22:4b:83:4f:d3:ce:55:d2: 79:c8:0c:c2:02:79:cd:76:5c:72:b9:22:cc:d1:6c:9c:1a:5e: 39:70:3f:17:39:e8:01:bd:1b:eb:37:fc:46:90:ae:3e:36:50: 94:e0:23:74 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhRVbmxZQzhq9WAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk N2FkMWFmYzctOGRkNC00Y2FhLWE3MzUtMjY4Mzc5M2ZhOTAxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw9LucDgLlZaqmuvKF4AAkC3ufSR6OJqtYu8h 13Ps74KXD/L4QX1BupfNUhCC0qxE1gvJYUcPbT/eZfb33MZgFKsbKIleZehbQ+Uz pCqSvhoByXVJUwwUDnRKn1evEfr8mRsCq+c4jde5JAH0Y0OGS1Zmr39HXYYlx2EP gvhNai+dYJPLWlv6Z27aPSI3Lbbu2CAbnbpl4N6teVJW7MOlHzCLs25l2xbGkLmR wxyVHQvHKRAn5t92tKTYocFT5P5Ijm+Td7Ds8FPOMA+V2mtg1Oe3lKKQ/zgVKhTI R6jx6c7fHK5+JZqs7TZTS6+r6Xrp7rMFxJtMhMgIKIbrSdNVDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBHiLrb3ZiKfscTtaetRKDBbUt8dMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvOTlmYzc2ODMtOTNlMS0z MDAzLThiMjktMzM1YmFlZjBlMWY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASn2LMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADUEQLF+heZS2T9RT+FBu9lxFp8u9kw4EqPoFmMh+HWkuMbRdk5yxTRb IZNjXIP/iSmBmlCk/LO54sBbVcqQgyElmAty2z6aok1jN8k94fQG8RrrDKLkd0pQ W4KXmUywNpm/srSNBZ8PippPiD+sZY0igPmr3WT/D7zIGvVof7cSu2+PopRSNOA7 mxF3AoZaLGeXFKK7pTvx3NkCKcrjOHlOzg/GWQQ7tWPCNf3r8O1x9t9i6JNeldid XkPu863zSFaBwOCWJtJdQ+LAXUfxxNoiS4NP085V0nnIDMICec12XHK5IszRbJwa XjlwPxc56AG9G+s3/EaQrj42UJTgI3Q= -----END CERTIFICATE-----Generated at Sat Apr 26 19:55:37 2025 by rpki-client