$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/c3af61be-d608-31cf-8e45-94b0de256680.roa File: c3af61be-d608-31cf-8e45-94b0de256680.roa (raw, json) Hash identifier: 8EwoBJQgr0jeO5Ou3jaY39Oy1JZBrCil3DCmsoxhVrE= Subject key identifier: 2E:FE:D3:B1:71:6C:D1:5B:CA:F2:74:A3:78:46:85:C0:D3:E7:C3:FC Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285849A78511F01D9247D8F2E95C80 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/c3af61be-d608-31cf-8e45-94b0de256680.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 15169 IP address blocks: 74.125.130.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:85:11:f0:1d:92:47:d8:f2:e9:5c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=e222b8a8-4911-4f89-928c-f3617dcc7ae7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:46:21:0c:ec:bf:f5:2c:94:01:cb:10:e5:89: 84:c6:be:69:ca:6d:97:10:2a:a5:0a:9d:92:80:e1: 3d:c2:82:b7:5e:fa:24:6d:2b:a8:6b:16:fb:a1:93: 56:f9:ab:84:04:8c:3e:e1:11:5a:db:61:da:21:a2: e7:d9:4f:2e:8b:1f:1c:4c:25:d8:b9:bf:07:03:e3: ff:a2:26:25:79:9b:0e:53:9f:73:45:88:96:47:e0: c1:ee:bf:18:5e:7d:fb:b6:92:56:bf:d4:88:33:a6: ec:5b:8a:8a:3d:16:36:98:de:7f:57:15:6d:66:0b: 45:db:6a:9c:1d:70:7d:69:65:83:df:b1:59:f9:59: b4:ab:35:53:ef:44:97:3f:86:79:04:3e:bb:65:f0: 0b:ca:2a:b9:20:66:81:a9:88:c0:aa:0c:c3:f7:f8: 41:54:de:93:08:3b:51:53:c4:a1:d9:a5:c2:41:70: fd:b2:65:54:de:9a:6a:a2:29:88:1d:0a:f8:cc:0a: fa:45:7c:94:f5:a2:ec:8d:bf:42:89:d7:14:43:3f: 2b:d0:47:bf:3d:f7:28:f5:fd:46:04:0a:9b:58:c2: df:12:15:4e:cf:89:a8:0f:09:90:2a:21:ad:49:a5: 78:b0:e4:05:6c:f3:20:ce:a4:2b:c8:10:62:5f:a0: 1b:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:FE:D3:B1:71:6C:D1:5B:CA:F2:74:A3:78:46:85:C0:D3:E7:C3:FC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/c3af61be-d608-31cf-8e45-94b0de256680.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 74.125.130.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:e0:cc:9e:21:8e:e0:0e:08:18:1e:37:2d:25:64:ef:e3:39: ac:98:c7:93:60:5a:e1:78:51:dc:d1:22:d5:1a:ee:e9:44:9c: e1:23:ab:2b:46:58:4b:22:a5:44:7a:a9:ac:1a:e0:fe:24:54: 6f:31:b5:42:64:33:22:c7:52:0c:09:34:6b:6a:f7:72:ef:0b: 4e:99:86:c2:26:d6:6d:5d:54:90:45:1a:99:19:31:13:6b:35: 57:32:7c:b1:ea:b5:6d:15:cf:05:70:c7:be:a8:0b:95:28:5e: 0e:94:95:aa:0e:65:ff:0c:a2:9f:6d:a5:03:72:e2:25:b9:87: 45:33:95:b0:7f:6b:de:e5:17:27:ec:b9:54:7a:60:45:48:1d: d0:1b:a4:2c:e8:9b:23:1e:30:58:a5:7e:03:fa:cb:ff:59:39: 9a:86:40:df:63:b3:e3:70:dd:2c:59:e5:d5:be:83:22:b9:58: 7e:99:64:ae:8f:ac:c4:98:c8:e1:e8:8f:58:66:be:25:6d:54: 6e:0c:19:a0:77:d5:20:0c:c7:68:42:b1:82:07:d5:ae:5c:ee: 68:38:ae:36:15:ee:bf:0c:52:09:c5:c0:89:b3:28:21:24:37: e6:64:d6:39:f3:d2:93:24:34:52:d1:82:b4:68:96:6b:ca:09: 44:f0:7b:e2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhRHwHZJH2PLpXIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk ZTIyMmI4YTgtNDkxMS00Zjg5LTkyOGMtZjM2MTdkY2M3YWU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwkYhDOy/9SyUAcsQ5YmExr5pym2XECqlCp2S gOE9woK3XvokbSuoaxb7oZNW+auEBIw+4RFa22HaIaLn2U8uix8cTCXYub8HA+P/ oiYleZsOU59zRYiWR+DB7r8YXn37tpJWv9SIM6bsW4qKPRY2mN5/VxVtZgtF22qc HXB9aWWD37FZ+Vm0qzVT70SXP4Z5BD67ZfALyiq5IGaBqYjAqgzD9/hBVN6TCDtR U8Sh2aXCQXD9smVU3ppqoimIHQr4zAr6RXyU9aLsjb9CidcUQz8r0Ee/Pfco9f1G BAqbWMLfEhVOz4moDwmQKiGtSaV4sOQFbPMgzqQryBBiX6AbzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC7+07FxbNFbyvJ0o3hGhcDT58P8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYzNhZjYxYmUtZDYwOC0z MWNmLThlNDUtOTRiMGRlMjU2NjgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASn2CMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAngzJ4hjuAOCBgeNy0lZO/jOayYx5NgWuF4UdzRItUa7ulEnOEjqytG WEsipUR6qawa4P4kVG8xtUJkMyLHUgwJNGtq93LvC06ZhsIm1m1dVJBFGpkZMRNr NVcyfLHqtW0VzwVwx76oC5UoXg6UlaoOZf8Mop9tpQNy4iW5h0UzlbB/a97lFyfs uVR6YEVIHdAbpCzomyMeMFilfgP6y/9ZOZqGQN9js+Nw3SxZ5dW+gyK5WH6ZZK6P rMSYyOHoj1hmviVtVG4MGaB31SAMx2hCsYIH1a5c7mg4rjYV7r8MUgnFwImzKCEk N+Zk1jnz0pMkNFLRgrRolmvKCUTwe+I= -----END CERTIFICATE-----Generated at Sat Apr 26 20:56:45 2025 by rpki-client