$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/ab381ecf-9f21-39b7-a9ee-6309e067aa96.roa File: ab381ecf-9f21-39b7-a9ee-6309e067aa96.roa (raw, json) Hash identifier: ZGVAq4z9XPd+IWbLi05egYIz/1rTAWjqRXc4l3CLEWY= Subject key identifier: 74:1C:BD:A8:D5:EA:C6:BA:2C:37:A7:9A:02:6B:B8:25:6C:B9:B7:C7 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285849A78505758334B16F277F6040 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/ab381ecf-9f21-39b7-a9ee-6309e067aa96.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 15169 IP address blocks: 74.125.136.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:85:05:75:83:34:b1:6f:27:7f:60:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=3421a6cf-c092-454b-b1cf-e41135c40af2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:8c:f4:61:1e:84:46:bc:ef:e0:9f:97:1e:93: 32:5e:72:03:50:8b:07:e9:65:32:20:36:ea:3c:10: ee:5a:f2:9e:8a:47:c6:60:39:68:46:53:14:be:32: ef:62:53:85:13:0d:44:de:a0:50:8c:76:e5:e6:a6: ad:65:a8:ad:92:b3:44:f7:23:40:5a:a0:e4:4b:cf: 5c:33:41:ab:c5:c5:f9:46:44:bd:61:8d:4a:c2:f3: e3:df:99:df:ec:da:74:7d:8f:35:c3:82:16:9c:50: 92:98:b6:fb:ed:3b:41:78:1b:f4:d2:bc:3b:f9:16: 8f:34:48:27:9e:9e:76:38:b2:6d:9e:b4:2f:40:e5: 80:f3:8b:77:44:b5:5d:c0:09:cf:fd:64:f0:35:08: 7a:d5:c9:e9:2e:ca:a3:9d:e2:e9:d3:51:d2:e9:e8: c3:a0:fc:20:eb:36:73:28:18:04:9e:3a:41:08:a4: 4e:b3:ad:2b:a6:4e:4c:1f:97:7c:49:9d:71:15:15: 98:7c:f2:86:9e:b3:d9:8a:62:dd:5f:ea:95:8a:74: 9c:9a:61:d8:ce:27:92:73:1d:e9:d7:d2:da:d8:04: b6:88:98:89:4a:72:b7:2c:73:a3:25:d9:a9:30:f0: 92:6e:ef:a9:7c:43:ff:d0:7a:b3:08:ef:41:88:d4: 16:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:1C:BD:A8:D5:EA:C6:BA:2C:37:A7:9A:02:6B:B8:25:6C:B9:B7:C7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/ab381ecf-9f21-39b7-a9ee-6309e067aa96.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 74.125.136.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9f:03:fe:29:50:06:39:bb:15:d3:3d:fb:a4:a3:2b:03:75:a9: cd:12:67:77:e9:65:4d:f0:aa:7c:14:fd:e3:da:81:56:74:76: 92:33:09:1c:55:dd:58:54:13:f4:68:0a:e7:8d:9f:10:f6:91: f1:16:3a:02:ff:39:9b:6d:60:32:83:47:e6:56:07:97:86:a2: 02:1d:a6:3a:ab:4b:53:7b:76:e9:84:52:d5:93:a1:41:1f:a1: 09:b1:fc:d3:f3:8a:8d:65:1c:56:d1:6d:f6:24:ce:e0:57:05: 52:b1:c2:ad:04:13:2f:2a:89:1c:fd:0b:56:7a:35:73:24:bb: f6:21:40:0f:f6:2d:14:8f:db:82:54:22:b2:75:b7:36:09:94: ca:cc:7a:d8:69:69:ee:50:d0:f2:27:e2:19:e8:41:96:58:fe: 68:71:d7:48:d2:91:a6:e9:41:10:6f:18:dd:10:08:6b:14:e1: f0:a9:8e:e2:7c:b7:14:66:89:bb:8f:8b:60:7a:17:04:c7:9f: 28:72:b2:76:7d:82:3c:9e:d9:2e:0c:ed:b0:7f:4d:79:cb:52: 90:9f:13:15:ed:d4:0b:48:3b:4f:a3:ff:9f:d1:83:93:1d:40: e3:3b:58:b0:33:68:b6:10:96:d3:9b:72:92:71:fa:37:08:c9: 81:b8:0f:3c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhQV1gzSxbyd/YEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk MzQyMWE2Y2YtYzA5Mi00NTRiLWIxY2YtZTQxMTM1YzQwYWYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsoz0YR6ERrzv4J+XHpMyXnIDUIsH6WUyIDbq PBDuWvKeikfGYDloRlMUvjLvYlOFEw1E3qBQjHbl5qatZaitkrNE9yNAWqDkS89c M0GrxcX5RkS9YY1KwvPj35nf7Np0fY81w4IWnFCSmLb77TtBeBv00rw7+RaPNEgn np52OLJtnrQvQOWA84t3RLVdwAnP/WTwNQh61cnpLsqjneLp01HS6ejDoPwg6zZz KBgEnjpBCKROs60rpk5MH5d8SZ1xFRWYfPKGnrPZimLdX+qVinScmmHYzieScx3p 19La2AS2iJiJSnK3LHOjJdmpMPCSbu+pfEP/0HqzCO9BiNQWfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHQcvajV6sa6LDenmgJruCVsubfHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYWIzODFlY2YtOWYyMS0z OWI3LWE5ZWUtNjMwOWUwNjdhYTk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASn2IMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ8D/ilQBjm7FdM9+6SjKwN1qc0SZ3fpZU3wqnwU/ePagVZ0dpIzCRxV 3VhUE/RoCueNnxD2kfEWOgL/OZttYDKDR+ZWB5eGogIdpjqrS1N7dumEUtWToUEf oQmx/NPzio1lHFbRbfYkzuBXBVKxwq0EEy8qiRz9C1Z6NXMku/YhQA/2LRSP24JU IrJ1tzYJlMrMethpae5Q0PIn4hnoQZZY/mhx10jSkabpQRBvGN0QCGsU4fCpjuJ8 txRmibuPi2B6FwTHnyhysnZ9gjye2S4M7bB/TXnLUpCfExXt1AtIO0+j/5/Rg5Md QOM7WLAzaLYQltObcpJx+jcIyYG4Dzw= -----END CERTIFICATE-----Generated at Sat Apr 26 19:52:43 2025 by rpki-client