$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/c23a993a-b379-3356-a21d-447f6f63600a.roa File: c23a993a-b379-3356-a21d-447f6f63600a.roa (raw, json) Hash identifier: mvrU8UQV9ueCNPHG9B5V8rH2nDRNGtuWNYtJWdMgIR4= Subject key identifier: 0A:87:2A:B2:03:D8:E1:A6:EB:E8:08:8A:F1:4B:05:7C:09:4A:95:EB Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285849A7853A272DF4DFD856AC6800 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/c23a993a-b379-3356-a21d-447f6f63600a.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 15169 IP address blocks: 74.125.201.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:85:3a:27:2d:f4:df:d8:56:ac:68:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=e76f9fd6-2c39-4f80-9d2c-f9506946b805 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:27:00:7f:2b:e0:b7:a0:75:45:b4:0f:2f:8d: fb:16:18:8e:cf:85:c6:11:c9:65:15:c8:3c:29:39: 62:78:41:93:12:c2:b7:5c:ec:c3:97:96:13:10:8c: 5c:6c:be:8b:70:f8:af:66:f1:a0:d6:e5:d8:7a:e2: 10:40:16:7b:4a:fd:08:72:0b:b3:d8:fa:e3:fd:17: 4f:57:99:79:90:79:99:08:da:ca:41:df:b5:54:d7: 0d:b7:e3:ae:b4:7b:9d:04:ab:48:bf:c5:32:4f:f6: 51:c6:59:8c:c0:27:8f:30:1e:aa:fd:d1:35:b7:c6: ea:d4:74:31:50:2c:98:17:3e:ed:95:25:3c:2c:aa: b8:b1:6e:05:ec:20:c0:f8:02:17:71:ad:89:83:22: 3c:de:3f:15:fd:e9:aa:9f:04:0f:97:94:8a:80:25: 35:69:be:b0:d5:26:30:dd:f0:83:68:41:e6:01:fb: 08:3f:d0:0a:26:c6:0d:14:35:98:fe:60:37:0d:2c: 82:f4:9e:0c:ad:e7:9e:83:e7:e3:7b:b8:2a:40:58: e7:89:14:17:5c:dc:02:1f:16:7f:15:9c:a0:9c:92: c2:0d:37:b4:5e:0d:64:6f:a8:8b:16:11:d1:f8:e7: ec:6a:e7:89:3f:75:03:d4:5e:3a:ec:38:fc:06:44: 80:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:87:2A:B2:03:D8:E1:A6:EB:E8:08:8A:F1:4B:05:7C:09:4A:95:EB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/c23a993a-b379-3356-a21d-447f6f63600a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 74.125.201.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:7d:3e:0c:f4:33:c7:67:6a:1a:5d:20:a2:35:55:50:1c:ed: ad:d2:ca:d3:1a:8f:50:13:d6:d6:96:2e:e0:2d:ea:a8:ed:81: 5a:6d:25:63:52:61:73:92:4a:73:68:f9:68:bf:e5:ca:ff:0c: 18:fa:70:9b:af:1f:94:06:a8:d8:24:1e:be:f7:69:60:26:51: dc:ba:e4:50:fc:cd:6e:ba:f4:20:2f:f0:63:bb:b5:dc:b6:a2: 32:c0:40:d8:38:d9:e2:ee:c0:ea:af:c5:75:1a:25:4c:1e:e3: c7:68:f2:3a:f0:6b:c8:e8:e3:c0:3d:11:d6:ea:ed:67:f9:ec: 1d:52:ba:74:b9:11:68:90:c5:a0:cc:7b:6e:e0:ce:36:42:69: 8e:43:5f:32:b3:0e:93:cd:ca:06:3d:2a:5b:b2:d4:1c:51:ee: b7:ef:6b:d5:b6:a2:81:78:7e:56:88:72:36:a0:11:0c:e8:ab: db:9a:6c:69:e7:11:f2:d2:1f:1b:01:f9:1e:c5:b2:4a:e5:9d: 20:c2:7e:69:77:56:39:84:6a:ef:7b:da:18:7d:45:cf:33:af: 40:e3:75:07:11:70:53:8f:98:12:cc:1a:ca:87:60:0b:79:cd: 23:43:c3:7a:b5:c7:c7:2a:68:a5:f2:25:a3:36:2c:27:f5:36: 8c:e1:90:b6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhTonLfTf2FasaAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk ZTc2ZjlmZDYtMmMzOS00ZjgwLTlkMmMtZjk1MDY5NDZiODA1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArCcAfyvgt6B1RbQPL437FhiOz4XGEcllFcg8 KTlieEGTEsK3XOzDl5YTEIxcbL6LcPivZvGg1uXYeuIQQBZ7Sv0Icguz2Prj/RdP V5l5kHmZCNrKQd+1VNcNt+OutHudBKtIv8UyT/ZRxlmMwCePMB6q/dE1t8bq1HQx UCyYFz7tlSU8LKq4sW4F7CDA+AIXca2JgyI83j8V/emqnwQPl5SKgCU1ab6w1SYw 3fCDaEHmAfsIP9AKJsYNFDWY/mA3DSyC9J4Mreeeg+fje7gqQFjniRQXXNwCHxZ/ FZygnJLCDTe0Xg1kb6iLFhHR+OfsaueJP3UD1F467Dj8BkSApQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAqHKrID2OGm6+gIivFLBXwJSpXrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYzIzYTk5M2EtYjM3OS0z MzU2LWEyMWQtNDQ3ZjZmNjM2MDBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASn3JMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABp9Pgz0M8dnahpdIKI1VVAc7a3SytMaj1AT1taWLuAt6qjtgVptJWNS YXOSSnNo+Wi/5cr/DBj6cJuvH5QGqNgkHr73aWAmUdy65FD8zW669CAv8GO7tdy2 ojLAQNg42eLuwOqvxXUaJUwe48do8jrwa8jo48A9Edbq7Wf57B1SunS5EWiQxaDM e27gzjZCaY5DXzKzDpPNygY9Kluy1BxR7rfva9W2ooF4flaIcjagEQzoq9uabGnn EfLSHxsB+R7FskrlnSDCfml3VjmEau972hh9Rc8zr0DjdQcRcFOPmBLMGsqHYAt5 zSNDw3q1x8cqaKXyJaM2LCf1NozhkLY= -----END CERTIFICATE-----Generated at Sun Apr 27 11:20:27 2025 by rpki-client