$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/cd0c675e-d5a4-3880-94ad-b6166913174b.roa File: cd0c675e-d5a4-3880-94ad-b6166913174b.roa (raw, json) Hash identifier: IZ0nhs8S+VJD7M6A1vlHtQaUJDFDFl4BC7zvtP2uIb8= Subject key identifier: 78:98:EE:FE:3C:48:DB:02:6B:26:7E:6D:8B:B9:E8:EF:B7:9B:49:F6 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285849A784CC0F4ED0F6514B78C0C0 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/cd0c675e-d5a4-3880-94ad-b6166913174b.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 15169 IP address blocks: 74.125.236.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:84:cc:0f:4e:d0:f6:51:4b:78:c0:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=2968a087-414a-47d2-a5bc-4f043e01240d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:49:c4:32:ea:5a:0f:11:41:ef:c4:b0:ff:78: 86:d8:77:30:57:30:7f:c2:1a:62:5c:50:04:68:8d: 98:97:c2:9a:99:d3:70:ed:66:08:92:6b:37:97:9b: da:82:a8:1f:db:6e:f7:93:55:e5:e0:a5:1a:ff:f8: 2f:5a:0b:02:03:25:de:4c:f9:62:ed:4b:c3:19:e8: a5:79:1e:a3:bf:b8:fc:63:d6:4e:6f:67:a8:ca:49: 53:90:93:38:37:ab:72:60:e6:7e:3a:76:71:ae:d1: 67:15:4a:32:55:82:ce:a5:bc:74:f8:90:82:04:81: ab:99:0d:4f:e0:c6:d6:fe:14:25:f4:b7:7c:2e:72: 39:4a:b2:fc:c7:de:d2:fa:7f:81:82:1c:13:23:89: bd:3b:82:19:0f:84:65:03:cd:7a:de:7a:56:20:24: a2:af:bc:79:6d:74:ba:0d:ce:bf:91:79:66:95:33: 2d:c0:3c:51:e2:69:34:db:43:33:1b:06:51:be:55: 25:e8:e4:98:3b:7d:4a:c0:b8:90:85:2b:91:47:00: 4f:85:ef:27:d5:6a:22:a7:6b:57:6d:28:26:ac:bd: f5:30:22:91:28:38:cc:3a:6b:28:e3:cb:dc:5f:33: 14:53:35:82:54:e8:b5:7b:ba:ae:ff:1b:3c:25:2f: 4f:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:98:EE:FE:3C:48:DB:02:6B:26:7E:6D:8B:B9:E8:EF:B7:9B:49:F6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/cd0c675e-d5a4-3880-94ad-b6166913174b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 74.125.236.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:ab:fa:3c:12:e0:42:cf:0d:5b:37:c3:be:10:75:2d:e6:c7: c0:07:09:f4:5a:cf:18:81:b1:b1:93:42:bc:70:09:72:4f:6f: 40:0d:39:d7:dd:1e:78:8f:bf:b8:e5:44:4c:73:f0:70:28:06: 93:ed:c4:8e:54:1d:e0:cb:a6:cb:55:df:62:38:53:3d:35:a3: 0c:3b:96:6b:34:ed:4c:ff:b4:a9:7a:13:83:f0:35:39:41:46: 4f:3f:74:42:73:33:53:f3:79:44:3d:d3:bc:dc:ea:2a:24:92: a9:85:8b:af:25:1d:58:e5:e7:53:2f:f0:08:cf:e9:5e:0a:37: d7:41:a5:fd:ef:aa:56:c8:b8:ff:55:05:54:47:93:2c:e1:1e: 12:6e:ef:e8:91:9c:c6:2d:bd:ef:2f:ae:db:76:04:29:0a:7d: 7d:00:29:74:6d:30:16:61:42:7b:0c:05:1c:55:f1:67:ae:0a: c0:da:31:45:89:1f:8f:49:d7:3d:c6:e5:fc:b7:ad:31:e4:84: 6c:7a:79:6d:46:7a:fe:d7:6c:9e:7b:c8:84:40:fc:1a:ef:b5: 32:c4:5e:33:f1:e8:53:33:53:f3:d3:66:2f:0f:38:77:20:e0: 1a:5d:07:39:ed:9e:7f:52:a5:c6:de:b8:f0:4a:9c:ef:12:b2: d2:7f:d5:a3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhMwPTtD2UUt4wMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk Mjk2OGEwODctNDE0YS00N2QyLWE1YmMtNGYwNDNlMDEyNDBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnUnEMupaDxFB78Sw/3iG2HcwVzB/whpiXFAE aI2Yl8KamdNw7WYIkms3l5vagqgf2273k1Xl4KUa//gvWgsCAyXeTPli7UvDGeil eR6jv7j8Y9ZOb2eoyklTkJM4N6tyYOZ+OnZxrtFnFUoyVYLOpbx0+JCCBIGrmQ1P 4MbW/hQl9Ld8LnI5SrL8x97S+n+BghwTI4m9O4IZD4RlA8163npWICSir7x5bXS6 Dc6/kXlmlTMtwDxR4mk020MzGwZRvlUl6OSYO31KwLiQhSuRRwBPhe8n1Woip2tX bSgmrL31MCKRKDjMOmso48vcXzMUUzWCVOi1e7qu/xs8JS9PkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHiY7v48SNsCayZ+bYu56O+3m0n2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvY2QwYzY3NWUtZDVhNC0z ODgwLTk0YWQtYjYxNjY5MTMxNzRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASn3sMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACer+jwS4ELPDVs3w74QdS3mx8AHCfRazxiBsbGTQrxwCXJPb0ANOdfd HniPv7jlRExz8HAoBpPtxI5UHeDLpstV32I4Uz01oww7lms07Uz/tKl6E4PwNTlB Rk8/dEJzM1PzeUQ907zc6iokkqmFi68lHVjl51Mv8AjP6V4KN9dBpf3vqlbIuP9V BVRHkyzhHhJu7+iRnMYtve8vrtt2BCkKfX0AKXRtMBZhQnsMBRxV8WeuCsDaMUWJ H49J1z3G5fy3rTHkhGx6eW1Gev7XbJ57yIRA/BrvtTLEXjPx6FMzU/PTZi8POHcg 4BpdBzntnn9SpcbeuPBKnO8SstJ/1aM= -----END CERTIFICATE-----Generated at Sat Apr 26 19:56:08 2025 by rpki-client