$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d74a535e-1bac-36c0-b790-e4cab31f5a34.roa File: d74a535e-1bac-36c0-b790-e4cab31f5a34.roa (raw, json) Hash identifier: qy/ThimLi+Ovc3xTcFYLroNSNgfF7C9/iG46OPsoww8= Subject key identifier: 72:FD:15:0D:D1:DB:02:4B:F3:0F:2A:03:AF:AB:80:47:D1:44:B8:F5 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285849A784C745A153AD179124EBC0 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d74a535e-1bac-36c0-b790-e4cab31f5a34.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 15169 IP address blocks: 74.125.205.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:84:c7:45:a1:53:ad:17:91:24:eb:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=9a93397e-8720-4f46-a447-86a17e2ab71b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:1b:82:09:98:dd:07:4b:3f:7d:a0:30:cb:95: cb:03:59:20:4c:76:4a:23:29:53:9c:12:0b:aa:52: b4:1b:d8:db:61:9d:ef:7f:3d:25:8f:ac:76:19:ee: ba:b8:17:59:d4:5d:51:15:ac:7c:91:59:48:94:37: c5:7d:3b:23:72:42:69:d4:2f:ae:bc:e3:ff:83:c9: ea:d7:8f:81:88:06:cb:05:58:6f:aa:01:cf:c5:e0: 6a:05:66:5f:1e:a7:c2:db:31:ba:0b:20:21:70:a5: 48:c2:32:f5:97:53:8c:1d:6c:9e:bd:ac:cf:76:11: 90:75:68:ba:6d:22:aa:36:9e:cc:0f:88:8c:a7:1a: 5f:43:88:fb:65:27:4e:db:ca:96:d9:64:eb:19:88: 99:21:d7:1f:a0:98:63:31:8c:28:3e:aa:53:5e:73: ed:cb:2a:1b:d3:06:1f:e0:38:9c:e6:d1:58:d9:2b: e9:dc:33:2c:fc:25:f7:be:61:a0:0f:0a:db:ea:20: 2f:44:4f:82:ab:c2:58:66:81:72:03:04:e2:29:c7: a7:43:3f:19:d2:e9:b3:3a:b4:12:ee:ab:df:c0:e0: ac:cc:6a:62:c1:75:2a:6e:fd:5c:d0:c3:12:cc:94: 9e:8b:3e:e6:87:67:7f:4c:6f:19:6d:c3:0d:bf:fb: 9d:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:FD:15:0D:D1:DB:02:4B:F3:0F:2A:03:AF:AB:80:47:D1:44:B8:F5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d74a535e-1bac-36c0-b790-e4cab31f5a34.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 74.125.205.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:d3:59:cc:17:58:90:b6:db:29:01:02:0d:8e:0d:5a:fd:78: 71:c8:94:85:34:9f:2e:29:cb:ea:81:f7:76:cd:7c:d3:26:96: bd:bc:ae:a2:dd:3d:ef:31:5d:5b:02:95:9c:25:0d:36:a2:72: cf:88:c9:34:ea:bd:8a:e5:30:80:b3:4f:c4:e7:58:b7:1c:9c: e1:c0:6e:29:c3:80:ea:d8:3a:98:59:7f:3d:9f:47:e7:ed:5a: 96:4b:87:00:ca:6f:ab:02:16:4c:29:12:f6:c7:34:d9:a8:06: f8:08:d0:e9:70:e8:81:50:0c:be:f0:cc:bf:15:6b:e6:c5:99: 0a:4e:c5:26:58:70:d6:2b:61:33:0f:50:fb:65:c1:56:2a:d9: 65:34:81:93:de:6a:7c:89:64:99:c3:23:51:32:95:61:e7:e6: 28:82:91:7e:c9:e1:3a:90:f9:65:76:6f:d0:7a:44:42:cb:d5: 0e:f3:98:fb:b4:76:e2:95:e6:4d:30:0d:38:f4:86:88:30:93: d0:5d:fb:20:02:bf:67:9f:a7:ce:1a:00:5e:3a:7f:84:03:2d: 44:2b:b8:10:03:f0:25:29:0f:e6:d0:e1:d5:3c:35:6b:7f:5c: 6b:b1:02:eb:ce:a7:06:30:0e:9b:39:2b:24:a6:4a:86:5d:0a: 68:38:41:73 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhMdFoVOtF5Ek68AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk OWE5MzM5N2UtODcyMC00ZjQ2LWE0NDctODZhMTdlMmFiNzFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwxuCCZjdB0s/faAwy5XLA1kgTHZKIylTnBIL qlK0G9jbYZ3vfz0lj6x2Ge66uBdZ1F1RFax8kVlIlDfFfTsjckJp1C+uvOP/g8nq 14+BiAbLBVhvqgHPxeBqBWZfHqfC2zG6CyAhcKVIwjL1l1OMHWyevazPdhGQdWi6 bSKqNp7MD4iMpxpfQ4j7ZSdO28qW2WTrGYiZIdcfoJhjMYwoPqpTXnPtyyob0wYf 4Dic5tFY2Svp3DMs/CX3vmGgDwrb6iAvRE+Cq8JYZoFyAwTiKcenQz8Z0umzOrQS 7qvfwOCszGpiwXUqbv1c0MMSzJSeiz7mh2d/TG8ZbcMNv/udKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHL9FQ3R2wJL8w8qA6+rgEfRRLj1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZDc0YTUzNWUtMWJhYy0z NmMwLWI3OTAtZTRjYWIzMWY1YTM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASn3NMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH/TWcwXWJC22ykBAg2ODVr9eHHIlIU0ny4py+qB93bNfNMmlr28rqLd Pe8xXVsClZwlDTaics+IyTTqvYrlMICzT8TnWLccnOHAbinDgOrYOphZfz2fR+ft WpZLhwDKb6sCFkwpEvbHNNmoBvgI0Olw6IFQDL7wzL8Va+bFmQpOxSZYcNYrYTMP UPtlwVYq2WU0gZPeanyJZJnDI1EylWHn5iiCkX7J4TqQ+WV2b9B6RELL1Q7zmPu0 duKV5k0wDTj0hogwk9Bd+yACv2efp84aAF46f4QDLUQruBAD8CUpD+bQ4dU8NWt/ XGuxAuvOpwYwDps5KySmSoZdCmg4QXM= -----END CERTIFICATE-----Generated at Sat Apr 26 19:54:46 2025 by rpki-client