$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/04b9aae5-9a08-3015-90f0-2164c4501787.roa File: 04b9aae5-9a08-3015-90f0-2164c4501787.roa (raw, json) Hash identifier: pcS+gDPutxc7RMgqFjP9kkytFc78X0aDtL3ts2PPWuM= Subject key identifier: 9B:2C:54:2B:E6:16:81:78:42:76:AE:D0:46:BB:52:A5:A3:6D:3C:CD Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285849A784FF7E64437E775C01625C Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/04b9aae5-9a08-3015-90f0-2164c4501787.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 15169 IP address blocks: 74.125.70.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 05 May 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:84:ff:7e:64:43:7e:77:5c:01:62:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=c831b2e5-6686-4d99-97a7-8b6182ec1863 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:fe:23:46:2d:a5:f7:3c:a7:19:e8:f4:c9:cd: 86:2e:40:51:79:7e:74:cd:7a:9b:a9:9a:2d:25:8f: 09:41:2f:d6:e0:6b:62:0d:9f:cb:20:9b:94:04:90: 60:7f:b0:f8:49:dc:81:a9:36:75:3b:d5:cf:21:aa: a8:a9:9d:d0:99:ea:0f:3a:26:72:cc:5c:f8:51:5d: f3:cc:72:29:24:94:be:22:96:d1:c9:07:41:f8:8e: 0a:da:09:f2:b0:5d:01:9e:29:9d:a4:a2:4d:85:46: cc:bd:71:3f:ea:d6:10:3f:78:78:ee:14:47:40:2c: 39:0b:25:32:ec:50:5c:a2:a7:ea:5b:92:5d:3e:c1: b9:0f:01:cb:e0:78:89:6b:c7:d9:fd:3f:fb:82:94: ab:23:3a:e8:cd:dc:35:bf:d1:a2:ad:52:ca:f6:bd: b7:8c:9c:a2:5e:b7:60:53:7b:95:59:81:5a:56:4b: 91:56:ab:ba:aa:2a:52:fd:50:e3:12:08:c2:2b:4f: 2a:5b:21:59:14:d8:c6:9d:b8:4a:8e:90:ce:7d:21: bc:d7:59:23:69:46:42:3b:71:89:e2:31:01:85:4c: 82:dc:e4:26:2f:d5:d7:9a:42:82:45:ea:44:2e:b5: c1:a9:e8:ea:b0:d3:ec:2f:df:73:0d:ae:13:90:83: f7:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:2C:54:2B:E6:16:81:78:42:76:AE:D0:46:BB:52:A5:A3:6D:3C:CD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/04b9aae5-9a08-3015-90f0-2164c4501787.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 74.125.70.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:28:e9:e7:6a:6e:52:24:20:ed:b0:0d:07:20:c6:c1:ca:40: fa:ef:61:11:39:be:c4:4b:e4:76:55:b2:a7:09:bb:7e:1d:53: 04:e0:ac:43:31:9f:2b:0e:41:94:98:e9:4f:d7:7d:ae:a0:68: b1:2f:fa:16:32:d3:1f:38:5e:15:c5:31:78:f6:57:49:7d:20: 76:c7:f1:68:c2:94:72:78:f5:5d:e5:4a:1a:fd:eb:e8:2f:3f: 38:be:5b:fe:50:a0:75:05:7c:6b:28:e0:99:ad:44:4f:ca:fe: ac:66:a6:4b:7c:79:6e:e0:f7:41:37:1c:0a:57:fb:43:1b:8c: 0f:93:ab:44:2a:84:a3:0d:b3:0e:98:21:08:0c:d0:07:60:5b: c4:93:df:09:f5:a8:3f:75:7d:3a:cd:75:60:4e:e1:8c:9f:ea: bb:ef:01:d7:b3:7b:50:0f:6b:37:76:9b:fb:12:0e:6b:cd:ee: 98:9a:d2:7b:38:d1:d6:29:77:8c:b4:0b:c2:03:a3:91:50:33: bc:6b:c0:03:c4:a1:52:03:89:d6:b0:bb:0b:44:a0:c4:8a:f6: 3d:14:ce:d8:75:df:a3:05:67:eb:26:93:72:db:3c:72:21:90: 1e:4f:a4:bf:b5:e0:4c:97:9e:0f:02:da:b6:5f:6b:4c:10:3f: eb:d0:6e:b1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhP9+ZEN+d1wBYlwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk YzgzMWIyZTUtNjY4Ni00ZDk5LTk3YTctOGI2MTgyZWMxODYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhv4jRi2l9zynGej0yc2GLkBReX50zXqbqZot JY8JQS/W4GtiDZ/LIJuUBJBgf7D4SdyBqTZ1O9XPIaqoqZ3QmeoPOiZyzFz4UV3z zHIpJJS+IpbRyQdB+I4K2gnysF0BnimdpKJNhUbMvXE/6tYQP3h47hRHQCw5CyUy 7FBcoqfqW5JdPsG5DwHL4HiJa8fZ/T/7gpSrIzrozdw1v9GirVLK9r23jJyiXrdg U3uVWYFaVkuRVqu6qipS/VDjEgjCK08qWyFZFNjGnbhKjpDOfSG811kjaUZCO3GJ 4jEBhUyC3OQmL9XXmkKCRepELrXBqejqsNPsL99zDa4TkIP3bwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJssVCvmFoF4Qnau0Ea7UqWjbTzNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMDRiOWFhZTUtOWEwOC0z MDE1LTkwZjAtMjE2NGM0NTAxNzg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASn1GMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHMo6edqblIkIO2wDQcgxsHKQPrvYRE5vsRL5HZVsqcJu34dUwTgrEMx nysOQZSY6U/Xfa6gaLEv+hYy0x84XhXFMXj2V0l9IHbH8WjClHJ49V3lShr96+gv Pzi+W/5QoHUFfGso4JmtRE/K/qxmpkt8eW7g90E3HApX+0MbjA+Tq0QqhKMNsw6Y IQgM0AdgW8ST3wn1qD91fTrNdWBO4Yyf6rvvAdeze1APazd2m/sSDmvN7pia0ns4 0dYpd4y0C8IDo5FQM7xrwAPEoVIDidawuwtEoMSK9j0Uzth136MFZ+smk3LbPHIh kB5PpL+14EyXng8C2rZfa0wQP+vQbrE= -----END CERTIFICATE-----Generated at Sun May 4 11:29:08 2025 by rpki-client