$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d3017cd1-f868-36d8-ac9e-8a4ecabc4bf1.roa File: d3017cd1-f868-36d8-ac9e-8a4ecabc4bf1.roa (raw, json) Hash identifier: q3NbxSJtmleaTPU5XGyPsSo0IRvTpSwFdOqBy//4ZgQ= Subject key identifier: 17:5D:22:16:0C:D4:B2:2E:AA:9E:0F:04:66:84:AD:D9:95:06:E8:99 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285849A785117625DFEC833E3BC700 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d3017cd1-f868-36d8-ac9e-8a4ecabc4bf1.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 15169 IP address blocks: 74.125.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:85:11:76:25:df:ec:83:3e:3b:c7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=42972598-50a4-4a37-ba2f-76f4e76803df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:ef:fc:c6:48:ff:90:5d:1c:31:4f:d7:0b:14: c9:f8:b9:23:3c:ac:6d:57:e7:26:96:9e:da:e3:7b: 27:22:85:88:f8:dc:60:3a:b2:bd:b4:83:aa:f3:b3: 40:78:23:a7:48:c0:76:9e:c5:be:78:c6:10:2f:e1: 34:68:f1:81:fa:e4:3e:15:3e:b9:19:be:a0:1e:fb: 90:b4:cf:d3:4a:1b:b5:3c:35:f8:24:01:a2:99:e9: 6f:ec:d0:53:00:8f:74:99:f6:a4:1e:47:3a:90:ff: dd:56:18:79:95:b1:0b:19:bf:fd:51:94:ff:ce:68: 18:fa:2a:32:41:f4:7f:da:a6:c5:43:62:4f:ef:84: 3b:6a:60:10:b5:c8:31:bf:a5:b4:21:10:48:40:2d: 93:2f:4c:9b:24:cc:c9:da:3e:84:78:5f:d9:52:a3: 33:ef:ec:cb:2f:7b:85:db:c4:9d:a7:a4:28:94:58: eb:66:3d:9b:1e:c1:e8:e4:af:fd:d1:0f:62:31:ce: 58:35:88:ae:32:b2:aa:24:a6:59:23:97:39:68:b1: 61:d0:49:82:80:a9:f6:55:e9:0f:f0:eb:2a:4d:11: cb:94:e0:aa:d1:59:bf:87:a0:57:55:26:2f:35:3d: ad:5a:18:d7:b2:94:a7:ec:fa:0e:2e:bf:11:df:b3: be:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:5D:22:16:0C:D4:B2:2E:AA:9E:0F:04:66:84:AD:D9:95:06:E8:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d3017cd1-f868-36d8-ac9e-8a4ecabc4bf1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 74.125.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:b3:b6:c9:e3:19:2c:3a:42:60:be:f9:df:88:a7:59:68:d7: 72:aa:a2:1a:16:70:f7:75:37:94:6f:e2:4f:f6:44:82:d6:d7: aa:94:6f:d5:d5:8d:b7:d0:de:e9:32:4e:aa:af:1c:7e:4b:7b: f1:bc:93:80:23:55:27:a3:43:ea:3a:e1:27:9b:bf:50:c9:b6: 26:2d:1b:17:71:05:a3:bd:99:60:c0:8a:70:52:50:f4:44:a4: 83:86:dd:4b:89:66:6a:f9:43:51:67:ab:00:db:8c:0c:5e:28: 28:d2:d9:14:0b:8d:1b:cf:47:e9:0d:8e:5a:ce:4a:64:ce:8d: 78:4e:fe:4a:06:b7:c0:7e:ae:ec:e5:3a:59:ec:0c:18:f4:70: c9:d2:17:56:d8:68:f8:4e:46:69:8e:22:d7:08:45:01:aa:80: 1b:c2:75:ec:2e:72:a7:d8:00:c7:86:9b:ca:5f:14:53:21:e3: 37:48:39:a1:70:7d:e3:e7:6f:73:a7:bf:57:f6:1b:52:08:bf: 59:58:ba:e9:5c:fc:11:6e:f1:74:5e:85:e9:92:5a:40:c4:22: 36:06:76:84:a3:f0:80:90:58:b2:69:e8:21:fc:b8:b4:24:e3: c2:34:03:2b:14:6b:9c:1a:d7:d3:1b:3c:de:a0:d8:a0:4b:25: 98:7e:88:ce -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhRF2Jd/sgz47xwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk NDI5NzI1OTgtNTBhNC00YTM3LWJhMmYtNzZmNGU3NjgwM2RmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvO/8xkj/kF0cMU/XCxTJ+LkjPKxtV+cmlp7a 43snIoWI+NxgOrK9tIOq87NAeCOnSMB2nsW+eMYQL+E0aPGB+uQ+FT65Gb6gHvuQ tM/TShu1PDX4JAGimelv7NBTAI90mfakHkc6kP/dVhh5lbELGb/9UZT/zmgY+ioy QfR/2qbFQ2JP74Q7amAQtcgxv6W0IRBIQC2TL0ybJMzJ2j6EeF/ZUqMz7+zLL3uF 28Sdp6QolFjrZj2bHsHo5K/90Q9iMc5YNYiuMrKqJKZZI5c5aLFh0EmCgKn2VekP 8OsqTRHLlOCq0Vm/h6BXVSYvNT2tWhjXspSn7PoOLr8R37O+6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBddIhYM1LIuqp4PBGaErdmVBuiZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZDMwMTdjZDEtZjg2OC0z NmQ4LWFjOWUtOGE0ZWNhYmM0YmYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQESn0AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACGztsnjGSw6QmC++d+Ip1lo13KqohoWcPd1N5Rv4k/2RILW16qUb9XV jbfQ3ukyTqqvHH5Le/G8k4AjVSejQ+o64Sebv1DJtiYtGxdxBaO9mWDAinBSUPRE pIOG3UuJZmr5Q1FnqwDbjAxeKCjS2RQLjRvPR+kNjlrOSmTOjXhO/koGt8B+ruzl OlnsDBj0cMnSF1bYaPhORmmOItcIRQGqgBvCdewucqfYAMeGm8pfFFMh4zdIOaFw fePnb3Onv1f2G1IIv1lYuulc/BFu8XRehemSWkDEIjYGdoSj8ICQWLJp6CH8uLQk 48I0AysUa5wa19MbPN6g2KBLJZh+iM4= -----END CERTIFICATE-----Generated at Sat Apr 26 20:55:26 2025 by rpki-client