$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/f9741270-0878-3505-b310-6b9d02abe772.roa File: f9741270-0878-3505-b310-6b9d02abe772.roa (raw, json) Hash identifier: DjqFJJuByrOt5zPMVidMEGnXyugvGsEciAt8bKpwaoI= Subject key identifier: 61:93:41:88:3B:71:7E:BA:52:1D:19:36:B8:81:F6:4A:86:B5:DE:31 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285849A7852170D26659CB46BC4CE0 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/f9741270-0878-3505-b310-6b9d02abe772.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 15169 IP address blocks: 74.125.129.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:85:21:70:d2:66:59:cb:46:bc:4c:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=bfb06cc0-c2d7-4a07-b5cf-62e2152d0fa9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:78:16:84:66:a9:c8:eb:0e:27:54:e4:f9:d8: 43:25:c1:95:6d:a7:c0:d9:e6:18:c8:8d:cb:4f:fa: f9:26:b6:62:fa:0b:0e:3f:2a:28:81:71:1b:49:d6: 5e:b8:e7:7f:93:b8:ba:37:c1:44:30:79:2d:5e:2d: 52:87:01:5b:77:d1:84:c1:7d:14:30:59:8c:50:57: a3:8d:b3:81:4b:8f:8c:e1:b6:91:41:fa:17:18:c8: 5a:63:f4:cb:89:ee:24:1b:b6:56:03:34:a8:03:98: 52:aa:16:52:17:a8:98:1c:3a:ea:e9:a0:73:36:07: 9a:c7:4e:45:ec:dd:db:a5:0c:13:90:8a:e9:98:27: 17:a4:4d:ce:de:c4:39:fd:25:40:9d:2e:8c:f2:9d: f3:14:26:8c:48:88:06:8b:05:a8:f2:cc:b2:7c:eb: 15:e3:7d:8b:c3:16:38:9d:f1:09:cb:7a:6b:df:db: 21:f5:b7:59:9a:de:9c:57:c1:7a:84:07:eb:11:5e: c2:a0:07:9a:91:cd:f0:4c:a8:c7:39:bd:01:72:2a: 6a:3c:aa:98:2e:31:fa:c0:89:21:9e:a4:f5:3c:30: ec:d7:0c:32:2d:31:70:64:b4:50:0f:43:8c:3f:e5: 39:3a:a5:ba:fc:c3:b1:38:ad:85:83:c4:ee:af:ad: 6b:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:93:41:88:3B:71:7E:BA:52:1D:19:36:B8:81:F6:4A:86:B5:DE:31 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/f9741270-0878-3505-b310-6b9d02abe772.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 74.125.129.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:25:4c:60:49:db:6a:8b:3d:b7:3d:ab:47:73:42:f7:27:fc: f7:e4:f8:2a:8f:3b:55:26:93:b8:af:d2:01:7d:fc:f9:6a:d9: b7:c3:73:3c:56:3e:c8:f4:e2:0a:c1:72:98:1f:c0:23:21:35: fa:5e:7b:c2:b5:02:00:c4:1c:ab:0f:5b:80:5a:ae:cc:49:87: aa:d3:be:8d:9a:62:25:ba:6d:ac:1f:66:24:ac:79:4e:05:07: 43:cd:9c:5d:18:86:77:91:29:a7:19:1d:8d:30:03:b5:ec:6d: ba:b9:c4:f9:bb:44:35:3a:61:e8:20:04:e5:a1:d3:7e:0e:08: c9:4e:0d:45:3b:20:da:e4:e9:68:4e:cc:cd:9d:87:f4:36:ef: e2:e1:a6:1e:70:bd:c7:1e:50:21:d1:4a:3f:2d:ff:7c:37:68: df:0d:d7:35:82:43:35:99:f7:7d:74:eb:c1:c6:d6:f8:22:cf: 5d:cb:6b:5c:fd:b4:ea:d2:76:0d:e5:4a:1a:5a:d2:2a:bb:f0: 4e:bf:a5:a5:17:ba:11:21:63:38:94:3e:0c:ed:85:b9:d9:7c: 22:e4:6c:da:61:22:49:06:de:9f:2b:e6:80:87:46:4d:7a:3c: af:7e:08:cc:47:40:20:a7:f8:8e:4f:0c:98:c0:7e:df:dc:a9: fd:3f:34:32 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhSFw0mZZy0a8TOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk YmZiMDZjYzAtYzJkNy00YTA3LWI1Y2YtNjJlMjE1MmQwZmE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhHgWhGapyOsOJ1Tk+dhDJcGVbafA2eYYyI3L T/r5JrZi+gsOPyoogXEbSdZeuOd/k7i6N8FEMHktXi1ShwFbd9GEwX0UMFmMUFej jbOBS4+M4baRQfoXGMhaY/TLie4kG7ZWAzSoA5hSqhZSF6iYHDrq6aBzNgeax05F 7N3bpQwTkIrpmCcXpE3O3sQ5/SVAnS6M8p3zFCaMSIgGiwWo8syyfOsV432LwxY4 nfEJy3pr39sh9bdZmt6cV8F6hAfrEV7CoAeakc3wTKjHOb0BcipqPKqYLjH6wIkh nqT1PDDs1wwyLTFwZLRQD0OMP+U5OqW6/MOxOK2Fg8Tur61rCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGGTQYg7cX66Uh0ZNriB9kqGtd4xMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZjk3NDEyNzAtMDg3OC0z NTA1LWIzMTAtNmI5ZDAyYWJlNzcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASn2BMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGElTGBJ22qLPbc9q0dzQvcn/Pfk+CqPO1Umk7iv0gF9/Plq2bfDczxW Psj04grBcpgfwCMhNfpee8K1AgDEHKsPW4BarsxJh6rTvo2aYiW6bawfZiSseU4F B0PNnF0YhneRKacZHY0wA7Xsbbq5xPm7RDU6YeggBOWh034OCMlODUU7INrk6WhO zM2dh/Q27+Lhph5wvcceUCHRSj8t/3w3aN8N1zWCQzWZ931068HG1vgiz13La1z9 tOrSdg3lShpa0iq78E6/paUXuhEhYziUPgzthbnZfCLkbNphIkkG3p8r5oCHRk16 PK9+CMxHQCCn+I5PDJjAft/cqf0/NDI= -----END CERTIFICATE-----Generated at Sat Apr 26 19:56:30 2025 by rpki-client