$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d4ed2bc0-90b8-394f-a948-4ee35ff19e6d.roa File: d4ed2bc0-90b8-394f-a948-4ee35ff19e6d.roa (raw, json) Hash identifier: /11pImRU7ou6k0gn2YYgjiiVv0eEdp9ncRrbHr5kg5g= Subject key identifier: 90:0A:78:A2:30:79:AA:50:0A:91:1A:50:53:C8:01:DA:4B:C3:A1:8C Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285849A7853CA1FA8F0323E038E800 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d4ed2bc0-90b8-394f-a948-4ee35ff19e6d.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 15169 IP address blocks: 74.125.24.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:85:3c:a1:fa:8f:03:23:e0:38:e8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=7b925067-a909-4121-b68e-441bab3f49d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:aa:2c:04:e3:5a:66:11:19:7b:e3:46:e0:56: 4d:68:3a:03:cd:a8:d0:0c:ca:84:7d:c1:59:73:ad: 09:45:b1:c3:0d:17:a7:db:fd:a9:c4:30:78:73:6c: 31:49:b1:84:9c:16:72:98:24:a4:33:c0:bb:52:d3: ef:d0:74:da:9d:db:be:25:93:49:3b:1b:ed:49:a7: 12:21:1b:bb:51:ba:93:d6:8a:d2:fc:71:21:d4:d4: d2:83:fe:85:70:e5:d9:84:96:a6:82:96:d4:44:f2: a8:ce:a9:b6:08:a4:c8:9b:c1:09:f1:82:18:37:e8: a6:46:a0:7d:a3:eb:35:b3:ea:a8:ad:6e:8f:b9:b1: 50:83:5e:87:98:15:d0:ab:82:8c:76:93:80:ac:af: b9:79:bf:d9:4a:d5:40:8b:0e:b9:40:7b:79:02:6c: be:c0:4f:33:54:d0:d2:25:85:14:ac:60:79:5e:8c: 37:ac:51:7b:3b:0f:d0:1d:a4:1d:38:d0:a6:59:1e: 8a:dd:d7:7f:6f:6b:b8:51:ca:e7:1b:95:98:42:ba: a2:12:eb:15:73:47:b3:a0:c5:b1:db:ab:e3:47:8e: 57:6e:fa:b8:1a:1e:41:8b:f6:83:eb:e9:93:49:15: 5d:dc:d7:c1:95:7a:30:60:13:d6:c8:b5:4f:b1:51: 09:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:0A:78:A2:30:79:AA:50:0A:91:1A:50:53:C8:01:DA:4B:C3:A1:8C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d4ed2bc0-90b8-394f-a948-4ee35ff19e6d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 74.125.24.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:dd:9c:f2:e4:6b:1e:4f:df:33:63:b9:f3:fd:5c:ce:a5:64: d2:a8:a1:9e:91:53:19:54:fa:48:c6:3c:fe:7b:60:fc:a1:b9: b8:ce:aa:49:7b:77:b0:a8:a5:d3:bc:e9:20:84:15:7c:61:dd: a8:03:9b:85:67:4d:39:1a:49:d5:5b:38:a6:6e:48:bb:7a:60: 97:f0:32:90:44:51:b4:06:27:99:ef:94:da:1f:e2:bf:10:ea: 1a:35:3c:c8:37:f6:e4:38:90:39:3e:21:52:c0:c9:05:78:47: 79:df:c0:ad:14:53:27:f6:1d:e2:aa:36:df:25:1f:7f:ec:ab: d1:dc:29:91:7a:25:08:e0:c8:d5:93:b9:9e:87:6c:b2:0c:f7: a1:e8:d0:86:94:d6:bf:84:d2:31:e6:1e:74:38:ee:29:b8:ce: e0:0f:27:ee:65:75:81:e6:8c:d4:68:2c:a3:03:35:0c:37:fd: e3:dd:54:1c:c4:4f:6b:2c:15:28:fa:61:1f:8d:fb:2f:31:2f: 84:da:9c:0a:ca:ee:c2:4d:c7:e4:36:46:e2:73:63:ba:78:87: 4d:ff:17:5f:5f:39:64:96:59:0d:ac:bc:c7:f3:fc:c7:19:53: 7e:88:8f:39:4b:30:dc:24:88:8e:c3:a1:70:63:9b:53:22:c2: 44:83:ab:f6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhTyh+o8DI+A46AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk N2I5MjUwNjctYTkwOS00MTIxLWI2OGUtNDQxYmFiM2Y0OWQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkqosBONaZhEZe+NG4FZNaDoDzajQDMqEfcFZ c60JRbHDDRen2/2pxDB4c2wxSbGEnBZymCSkM8C7UtPv0HTandu+JZNJOxvtSacS IRu7UbqT1orS/HEh1NTSg/6FcOXZhJamgpbURPKozqm2CKTIm8EJ8YIYN+imRqB9 o+s1s+qorW6PubFQg16HmBXQq4KMdpOArK+5eb/ZStVAiw65QHt5Amy+wE8zVNDS JYUUrGB5Xow3rFF7Ow/QHaQdONCmWR6K3dd/b2u4UcrnG5WYQrqiEusVc0ezoMWx 26vjR45Xbvq4Gh5Bi/aD6+mTSRVd3NfBlXowYBPWyLVPsVEJowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJAKeKIweapQCpEaUFPIAdpLw6GMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZDRlZDJiYzAtOTBiOC0z OTRmLWE5NDgtNGVlMzVmZjE5ZTZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASn0YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGfdnPLkax5P3zNjufP9XM6lZNKooZ6RUxlU+kjGPP57YPyhubjOqkl7 d7CopdO86SCEFXxh3agDm4VnTTkaSdVbOKZuSLt6YJfwMpBEUbQGJ5nvlNof4r8Q 6ho1PMg39uQ4kDk+IVLAyQV4R3nfwK0UUyf2HeKqNt8lH3/sq9HcKZF6JQjgyNWT uZ6HbLIM96Ho0IaU1r+E0jHmHnQ47im4zuAPJ+5ldYHmjNRoLKMDNQw3/ePdVBzE T2ssFSj6YR+N+y8xL4TanArK7sJNx+Q2RuJzY7p4h03/F19fOWSWWQ2svMfz/McZ U36IjzlLMNwkiI7DoXBjm1MiwkSDq/Y= -----END CERTIFICATE-----Generated at Sun Apr 27 08:43:53 2025 by rpki-client