$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/9c122302-21bd-3181-b59e-e7f1bb857cc0.roa File: 9c122302-21bd-3181-b59e-e7f1bb857cc0.roa (raw, json) Hash identifier: Uqu6NiIoPazivlo3Quvwb38FFP+bGPf77WUvX8OQlMQ= Subject key identifier: 56:E3:58:38:3C:55:1D:79:0B:E9:43:89:61:5A:E9:77:E1:FA:EA:0A Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285849A784FE35EB8ACBB43488EC80 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/9c122302-21bd-3181-b59e-e7f1bb857cc0.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 15169 IP address blocks: 74.125.152.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 05 May 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:84:fe:35:eb:8a:cb:b4:34:88:ec:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=f522d95d-a441-433d-8bb0-0ea7832cc93a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:26:1e:7a:8c:99:b2:07:bd:8c:b5:c3:35:65: 9f:b1:0f:91:e5:65:6a:d5:af:1f:70:ae:1b:31:d6: a6:d7:f4:56:d0:9c:3e:f3:af:b0:f6:80:08:0d:14: 6f:7d:23:16:26:7f:52:7b:15:ad:7b:60:0d:74:6f: 5a:fa:44:2c:2d:01:9c:85:1b:2e:fe:37:4d:0b:1b: 66:32:74:7e:1f:77:e8:89:f8:7a:bc:5c:2a:2f:c2: cd:2f:64:11:93:52:46:04:cb:99:2d:a9:9d:ff:8f: bf:20:5f:d9:da:96:7e:1c:39:29:48:16:14:19:c0: b3:3a:45:13:66:bf:c1:61:e8:43:8d:2b:ed:85:6c: 71:6c:5d:7d:89:d8:f4:ad:7c:84:c4:f5:6c:b3:03: 0b:ac:2f:d8:c8:b5:46:12:03:bb:64:fe:fd:48:7f: 90:9a:7a:e1:eb:99:59:9a:92:b6:b7:57:2a:9b:b2: cc:08:f3:ed:f6:90:5b:be:1c:a2:ed:ca:92:38:1b: 8b:10:03:82:d3:f3:e6:df:c2:cd:88:d1:d6:6b:07: e2:a6:29:58:08:e4:d3:bf:8b:aa:f8:79:ec:49:f5: 64:59:18:85:48:a8:82:c9:b2:a2:e0:9d:6f:29:e8: a5:0b:9d:f8:90:d1:90:2e:d6:7c:1d:e4:20:a5:ed: 9e:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:E3:58:38:3C:55:1D:79:0B:E9:43:89:61:5A:E9:77:E1:FA:EA:0A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/9c122302-21bd-3181-b59e-e7f1bb857cc0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 74.125.152.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:96:97:de:1c:ed:70:d1:bf:0e:e5:8f:62:39:d0:0f:85:8e: e7:54:eb:7b:64:54:05:b5:b5:8b:05:1d:d2:05:ef:e7:e2:68: 2c:e9:7f:40:bd:9a:13:8e:7a:4a:ad:d3:b6:06:44:2e:88:48: 30:bc:51:de:0a:61:9d:a5:df:32:2d:34:f1:01:bc:e5:ad:f1: be:b3:b5:49:b5:b8:6a:fc:91:bc:73:5d:c0:b0:5c:36:e5:bd: 9f:9e:65:2e:ee:ac:bd:74:0e:e1:ff:4f:72:d8:8b:b7:ae:ea: aa:b3:ac:84:ab:46:3c:25:cc:53:9a:43:7f:f3:09:97:94:18: 52:9e:0b:ff:a3:92:74:6f:78:32:00:08:d2:37:de:55:63:5a: 3a:d8:62:ab:54:01:70:2d:56:96:6b:74:d3:d8:fc:d7:f0:81: fe:44:53:96:15:a1:a7:76:84:ea:15:1d:6d:39:7f:fc:5e:8e: 14:af:cb:db:b0:61:f7:28:d4:5f:4d:cc:28:ff:dd:45:eb:fd: 18:ad:7b:99:3a:05:36:f6:42:c9:7b:e7:a7:26:00:04:d3:f7: bc:45:14:7d:79:fd:6e:c7:db:42:ff:b9:41:70:6a:2d:46:63: b9:7f:df:75:4f:42:74:42:18:23:0d:5d:ad:54:77:41:6f:03: b9:3b:cc:a2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhP4164rLtDSI7IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk ZjUyMmQ5NWQtYTQ0MS00MzNkLThiYjAtMGVhNzgzMmNjOTNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6SYeeoyZsge9jLXDNWWfsQ+R5WVq1a8fcK4b Mdam1/RW0Jw+86+w9oAIDRRvfSMWJn9SexWte2ANdG9a+kQsLQGchRsu/jdNCxtm MnR+H3foifh6vFwqL8LNL2QRk1JGBMuZLamd/4+/IF/Z2pZ+HDkpSBYUGcCzOkUT Zr/BYehDjSvthWxxbF19idj0rXyExPVsswMLrC/YyLVGEgO7ZP79SH+Qmnrh65lZ mpK2t1cqm7LMCPPt9pBbvhyi7cqSOBuLEAOC0/Pm38LNiNHWawfipilYCOTTv4uq +HnsSfVkWRiFSKiCybKi4J1vKeilC534kNGQLtZ8HeQgpe2egQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFbjWDg8VR15C+lDiWFa6Xfh+uoKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvOWMxMjIzMDItMjFiZC0z MTgxLWI1OWUtZTdmMWJiODU3Y2MwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDSn2YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFOWl94c7XDRvw7lj2I50A+FjudU63tkVAW1tYsFHdIF7+fiaCzpf0C9 mhOOekqt07YGRC6ISDC8Ud4KYZ2l3zItNPEBvOWt8b6ztUm1uGr8kbxzXcCwXDbl vZ+eZS7urL10DuH/T3LYi7eu6qqzrISrRjwlzFOaQ3/zCZeUGFKeC/+jknRveDIA CNI33lVjWjrYYqtUAXAtVpZrdNPY/Nfwgf5EU5YVoad2hOoVHW05f/xejhSvy9uw Yfco1F9NzCj/3UXr/Rite5k6BTb2Qsl756cmAATT97xFFH15/W7H20L/uUFwai1G Y7l/33VPQnRCGCMNXa1Ud0FvA7k7zKI= -----END CERTIFICATE-----Generated at Sun May 4 10:50:07 2025 by rpki-client