$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/fd4a1de0-e8ce-3db0-a13b-6fc62bc5a392.roa File: fd4a1de0-e8ce-3db0-a13b-6fc62bc5a392.roa (raw, json) Hash identifier: ZA0xALQpkjh/2GgxZi2fObD5jH5qJCRlCFkUuy4yPk0= Subject key identifier: 1B:93:06:A2:26:10:21:71:7D:23:B8:64:14:1B:45:DB:A2:D9:4E:C2 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285849A784EA64683C70894B9E8900 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/fd4a1de0-e8ce-3db0-a13b-6fc62bc5a392.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 15169 IP address blocks: 74.125.196.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:84:ea:64:68:3c:70:89:4b:9e:89:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=a2dc3040-d344-4b4a-84ef-7a2a0c09e739 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:49:18:1d:4c:79:00:49:0f:73:d7:ff:58:d6: 96:e2:c0:4d:56:57:9f:46:e9:fe:14:8a:ce:20:5c: 5f:35:f0:e4:43:0a:6f:c9:77:30:af:15:20:cd:66: 63:dc:b4:65:d9:71:e8:4a:c5:c8:d1:8e:61:29:ae: 1f:d5:01:81:eb:15:01:23:a9:18:4d:be:f3:fb:8d: 73:e2:34:65:66:38:4d:51:d2:6a:a2:71:a3:8b:76: c3:5b:14:85:71:9c:22:5f:03:eb:c2:5a:c7:d7:ef: a7:f0:d2:c3:42:b4:8c:03:91:77:a2:e3:25:44:4d: 32:1e:a2:92:f1:b0:6b:20:1a:b5:f5:2b:e4:9a:1f: dc:7d:2c:18:8b:41:1c:90:67:0a:90:2b:9a:3a:80: 71:15:ee:89:a9:8a:40:44:27:c0:27:ae:2f:da:3d: 77:b9:72:24:1f:4c:c0:73:e5:30:27:89:db:31:45: 60:fe:5a:80:14:4e:d4:0d:de:e4:08:70:0e:c4:54: ec:27:39:1c:d6:60:58:b5:85:36:d1:63:74:64:d3: 9a:6f:75:33:58:68:8c:b3:37:c5:97:49:50:b8:1a: f3:e3:73:ad:c0:67:4e:eb:2b:21:dc:17:aa:43:33: 57:91:e4:b1:a3:28:27:a2:fc:41:4c:a5:0f:69:70: 79:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:93:06:A2:26:10:21:71:7D:23:B8:64:14:1B:45:DB:A2:D9:4E:C2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/fd4a1de0-e8ce-3db0-a13b-6fc62bc5a392.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 74.125.196.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b1:ed:b9:27:1a:f6:a2:aa:14:11:29:95:f3:1e:ee:07:27:ba: 12:b1:39:64:dc:59:2e:5d:37:b5:55:0a:83:88:ef:a6:c8:67: 0a:af:03:7b:cc:ac:2f:15:3d:be:9f:a6:b4:35:ed:c0:e3:04: ab:e5:bd:5e:53:68:2e:d2:c3:07:44:d1:19:0d:24:3a:12:b5: dc:1d:21:9a:85:eb:34:b1:9d:fd:76:f6:a0:53:ec:13:7d:7d: 99:13:bc:ff:e0:8f:76:91:fa:e5:25:07:62:a0:b8:63:fc:85: d5:a6:6e:ce:d4:52:4e:78:08:0c:2a:75:cd:d0:77:ec:05:ff: ab:9f:2b:90:11:80:30:46:fe:37:7d:09:57:78:35:58:2a:86: 39:06:b6:5d:27:10:58:a2:77:cb:fb:12:8f:3f:50:62:5c:6e: cc:bf:17:8e:a3:fc:51:49:44:4d:e0:d5:d7:ae:23:92:a0:26: 33:7f:3a:33:71:e4:95:d6:34:f6:85:c5:0f:8e:12:6d:03:35: 67:7c:53:0f:a0:05:53:53:4e:52:4a:57:7a:12:b1:cc:56:e1: e0:81:ef:db:91:62:2c:17:59:a8:c4:66:b0:a2:f0:b5:f8:a0: 63:3a:e2:15:46:b3:e9:b0:57:4e:b5:88:5c:d1:a7:bd:8b:4e: 81:3d:6c:fd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhOpkaDxwiUueiQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk YTJkYzMwNDAtZDM0NC00YjRhLTg0ZWYtN2EyYTBjMDllNzM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz0kYHUx5AEkPc9f/WNaW4sBNVlefRun+FIrO IFxfNfDkQwpvyXcwrxUgzWZj3LRl2XHoSsXI0Y5hKa4f1QGB6xUBI6kYTb7z+41z 4jRlZjhNUdJqonGji3bDWxSFcZwiXwPrwlrH1++n8NLDQrSMA5F3ouMlRE0yHqKS 8bBrIBq19Svkmh/cfSwYi0EckGcKkCuaOoBxFe6JqYpARCfAJ64v2j13uXIkH0zA c+UwJ4nbMUVg/lqAFE7UDd7kCHAOxFTsJzkc1mBYtYU20WN0ZNOab3UzWGiMszfF l0lQuBrz43OtwGdO6ysh3BeqQzNXkeSxoygnovxBTKUPaXB5HQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBuTBqImECFxfSO4ZBQbRdui2U7CMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZmQ0YTFkZTAtZThjZS0z ZGIwLWExM2ItNmZjNjJiYzVhMzkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASn3EMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALHtuSca9qKqFBEplfMe7gcnuhKxOWTcWS5dN7VVCoOI76bIZwqvA3vM rC8VPb6fprQ17cDjBKvlvV5TaC7SwwdE0RkNJDoStdwdIZqF6zSxnf129qBT7BN9 fZkTvP/gj3aR+uUlB2KguGP8hdWmbs7UUk54CAwqdc3Qd+wF/6ufK5ARgDBG/jd9 CVd4NVgqhjkGtl0nEFiid8v7Eo8/UGJcbsy/F46j/FFJRE3g1deuI5KgJjN/OjNx 5JXWNPaFxQ+OEm0DNWd8Uw+gBVNTTlJKV3oSscxW4eCB79uRYiwXWajEZrCi8LX4 oGM64hVGs+mwV061iFzRp72LToE9bP0= -----END CERTIFICATE-----Generated at Sun Apr 27 00:37:13 2025 by rpki-client