$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/94aeecc2-66ea-39ad-b7ba-6e344e5e2509.roa File: 94aeecc2-66ea-39ad-b7ba-6e344e5e2509.roa (raw, json) Hash identifier: 5JNS9Mrn74Bkr2zoHQIhvz85G57MdlhhtM2WKtZHhDU= Subject key identifier: 6D:D5:30:E1:48:07:78:F2:FE:C7:F7:78:53:3B:81:15:DE:53:8A:9F Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285849A784EC6B2CF34682DDCB2C40 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/94aeecc2-66ea-39ad-b7ba-6e344e5e2509.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 15169 IP address blocks: 74.125.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 05 May 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:84:ec:6b:2c:f3:46:82:dd:cb:2c:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=ea3fecc3-08e9-4180-8142-8719f4e4fe72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:b5:1b:fb:a8:b6:00:52:08:85:dd:ca:8a:1e: 2c:72:9d:2b:69:3d:a5:36:84:c8:9b:10:9a:c4:8e: 65:5d:d0:ca:fb:4a:40:07:ce:24:80:e9:74:1d:3b: f1:f1:6c:38:57:d4:e0:4e:5f:c5:12:41:fd:53:6e: f3:32:b3:2a:ff:da:d0:bb:2e:ae:59:16:13:a7:cf: 62:e7:8d:30:49:8c:3c:b7:53:1e:22:14:2e:4d:61: 0f:df:ca:2e:55:30:c6:94:c8:2f:6b:5d:f6:54:3b: 73:00:08:44:eb:c2:0d:64:53:8e:11:d9:09:05:46: fb:b4:a4:75:a8:96:46:6a:26:91:d1:59:7b:47:e2: e8:b9:06:d0:b1:4d:70:dd:91:41:8d:12:9d:08:d7: d6:0b:a6:27:a6:08:03:1a:fe:93:6f:2d:41:01:53: aa:cc:83:c6:e7:f6:84:e0:a1:b0:05:eb:04:2f:a4: 46:31:d4:47:50:14:3c:48:89:cc:b4:e4:30:2c:5c: ed:9d:89:11:62:1a:b6:7a:fd:28:b2:9b:22:bb:84: 01:fa:1e:22:d4:4a:d7:c6:68:9e:2d:79:7b:d1:fb: a5:f1:54:f8:be:20:05:8f:69:79:5c:80:9c:0f:ae: 1b:32:62:27:73:f9:a8:38:05:d3:3e:bb:ba:bc:98: c1:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:D5:30:E1:48:07:78:F2:FE:C7:F7:78:53:3B:81:15:DE:53:8A:9F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/94aeecc2-66ea-39ad-b7ba-6e344e5e2509.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 74.125.228.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:4a:af:4b:a8:8a:50:a2:b5:fb:c7:61:7a:c9:06:1e:10:fb: e3:7c:15:2e:fa:48:a1:ee:1b:d3:de:d5:f4:8a:3a:74:06:2e: 4d:f6:cf:82:ba:5e:e4:69:6e:90:15:75:66:ce:68:b7:45:1e: 29:b6:e8:49:e5:03:91:94:9e:45:21:25:07:ae:de:a4:88:81: dd:2a:32:0e:15:10:11:b0:0f:8e:11:b6:6f:ac:c1:ca:65:16: 4f:70:8b:67:60:7e:88:5c:c5:ae:4d:19:05:e9:07:78:51:32: 73:93:12:38:f9:62:30:f2:ec:26:b8:a3:43:76:95:48:2e:e8: 8e:ad:d3:b6:63:18:d3:a4:56:01:02:f1:89:c1:81:6c:eb:40: 73:0f:fe:fa:a2:62:07:cc:5f:b3:7c:e5:85:3d:d1:6a:aa:1b: 4e:f1:0a:ef:7d:7b:b5:9b:bb:88:3c:ef:e3:fd:10:cc:89:dd: 9a:00:03:70:46:d0:0e:1e:7b:73:e3:c1:c3:38:e0:6a:60:54: 69:b6:7d:02:b6:c6:94:c5:77:d7:29:34:bd:f2:16:e1:7d:79: 84:5e:46:9b:86:40:37:d5:d7:f6:40:35:d1:94:7b:ce:fa:3a: 01:a2:7f:cf:09:64:83:5d:12:e4:67:0e:cc:6f:12:77:1a:73: 05:fa:e5:6b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhOxrLPNGgt3LLEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk ZWEzZmVjYzMtMDhlOS00MTgwLTgxNDItODcxOWY0ZTRmZTcyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk7Ub+6i2AFIIhd3Kih4scp0raT2lNoTImxCa xI5lXdDK+0pAB84kgOl0HTvx8Ww4V9TgTl/FEkH9U27zMrMq/9rQuy6uWRYTp89i 540wSYw8t1MeIhQuTWEP38ouVTDGlMgva132VDtzAAhE68INZFOOEdkJBUb7tKR1 qJZGaiaR0Vl7R+LouQbQsU1w3ZFBjRKdCNfWC6YnpggDGv6Tby1BAVOqzIPG5/aE 4KGwBesEL6RGMdRHUBQ8SInMtOQwLFztnYkRYhq2ev0ospsiu4QB+h4i1ErXxmie LXl70ful8VT4viAFj2l5XICcD64bMmInc/moOAXTPru6vJjBdQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG3VMOFIB3jy/sf3eFM7gRXeU4qfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvOTRhZWVjYzItNjZlYS0z OWFkLWI3YmEtNmUzNDRlNWUyNTA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASn3kMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJRKr0uoilCitfvHYXrJBh4Q++N8FS76SKHuG9Pe1fSKOnQGLk32z4K6 XuRpbpAVdWbOaLdFHim26EnlA5GUnkUhJQeu3qSIgd0qMg4VEBGwD44Rtm+swcpl Fk9wi2dgfohcxa5NGQXpB3hRMnOTEjj5YjDy7Ca4o0N2lUgu6I6t07ZjGNOkVgEC 8YnBgWzrQHMP/vqiYgfMX7N85YU90WqqG07xCu99e7Wbu4g87+P9EMyJ3ZoAA3BG 0A4ee3PjwcM44GpgVGm2fQK2xpTFd9cpNL3yFuF9eYReRpuGQDfV1/ZANdGUe876 OgGif88JZINdEuRnDsxvEncacwX65Ws= -----END CERTIFICATE-----Generated at Sun May 4 11:41:33 2025 by rpki-client