$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/ba633f42-5294-38fe-a1b2-d61121b8e9f5.roa File: ba633f42-5294-38fe-a1b2-d61121b8e9f5.roa (raw, json) Hash identifier: e8oKfter6mVsJItc2lyxJyl5TT5YR5533t4UOwbl7yM= Subject key identifier: 53:2F:3A:DC:D3:02:79:45:09:E8:48:49:1E:3E:F9:00:D5:18:39:CC Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285849A785399895EDB488D8573D00 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/ba633f42-5294-38fe-a1b2-d61121b8e9f5.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 15169 IP address blocks: 74.125.234.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 05 May 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:85:39:98:95:ed:b4:88:d8:57:3d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=d3949752-8b79-487b-8306-5ba199ced961 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:67:9a:e1:6a:9d:67:31:65:a9:83:1d:28:ec: 6e:46:c8:b6:60:05:65:18:8f:e5:00:4d:50:a3:5c: 55:54:df:c3:0f:34:9e:50:d9:7b:3c:b5:d0:94:33: 0a:f9:d8:42:be:54:44:c7:a4:08:68:cf:7c:7d:41: 14:a1:f4:d3:b1:8d:07:32:b7:78:9c:01:80:35:e3: 71:44:83:af:75:21:c8:93:ea:0b:1b:7f:a1:4f:71: e3:59:73:9a:4b:47:5f:27:cf:52:09:20:d1:d2:71: 06:a0:fb:22:b6:ed:0d:5f:9d:51:74:f7:53:3f:97: a9:ed:97:56:b4:78:e9:43:49:0c:48:62:57:10:69: a2:15:55:6b:3e:86:42:15:7b:07:f4:08:e8:c0:48: 0c:3e:3a:ee:88:ac:dd:c2:3c:64:d5:a4:3d:e0:51: 79:c5:ef:e1:f3:a1:f5:59:e1:a9:85:93:d0:8c:dd: bf:4b:92:97:96:ef:f1:b9:d9:76:db:3f:5f:a5:d4: fc:cf:a0:d6:86:89:f5:58:91:68:37:a7:ac:6a:85: e0:db:5b:e1:4d:e4:56:00:f8:fe:e6:3b:a0:c8:66: cf:02:18:50:62:e6:cd:cd:5d:8c:5d:3a:17:65:93: 0f:c7:f2:8d:5c:b4:e3:08:89:a9:12:fa:7b:84:de: 3a:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:2F:3A:DC:D3:02:79:45:09:E8:48:49:1E:3E:F9:00:D5:18:39:CC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/ba633f42-5294-38fe-a1b2-d61121b8e9f5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 74.125.234.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:59:b2:e5:cc:9f:e9:f1:c7:f0:f9:b6:35:c7:36:3d:b0:97: 45:46:5f:ff:fd:6a:3e:08:09:0d:a6:81:8b:c1:ae:b4:d7:6f: fe:73:67:27:9b:52:da:76:61:44:45:7c:61:85:ad:0f:67:30: 0c:da:37:0f:61:77:0b:a1:5c:40:f1:e9:a5:1e:18:a4:5e:5e: 1d:33:aa:ca:05:ad:8c:c1:ce:53:0d:65:05:fb:aa:da:4f:bb: 4e:77:b3:10:93:a0:9d:51:57:07:e5:a9:ba:e9:d0:39:78:0c: 2d:62:f4:03:11:77:4a:70:0e:8f:11:57:4f:bd:20:ec:27:98: 2f:01:68:b3:d2:03:27:76:f0:4d:19:f8:cc:5d:12:63:e8:02: 52:eb:d4:e3:8a:49:79:06:3f:2b:f1:af:22:1e:a0:5b:9e:02: 27:a3:60:ad:7e:2c:e4:86:cb:90:88:8f:20:62:1f:65:33:a0: a9:3e:37:65:93:10:e1:b0:83:fd:3a:da:5e:27:5d:a3:fd:7f: 02:b9:e3:c1:9f:b7:37:7f:eb:04:b7:37:6f:d3:a3:9f:93:06: 65:a6:2f:1f:83:18:f1:a2:14:dd:ec:5e:54:6c:ae:03:04:13: b1:61:32:19:ad:c1:bd:4f:8f:b0:b1:dc:90:ea:30:51:dd:ef: 9d:ec:4b:47 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhTmYle20iNhXPQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk ZDM5NDk3NTItOGI3OS00ODdiLTgzMDYtNWJhMTk5Y2VkOTYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgmea4WqdZzFlqYMdKOxuRsi2YAVlGI/lAE1Q o1xVVN/DDzSeUNl7PLXQlDMK+dhCvlREx6QIaM98fUEUofTTsY0HMrd4nAGANeNx RIOvdSHIk+oLG3+hT3HjWXOaS0dfJ89SCSDR0nEGoPsitu0NX51RdPdTP5ep7ZdW tHjpQ0kMSGJXEGmiFVVrPoZCFXsH9AjowEgMPjruiKzdwjxk1aQ94FF5xe/h86H1 WeGphZPQjN2/S5KXlu/xudl22z9fpdT8z6DWhon1WJFoN6esaoXg21vhTeRWAPj+ 5jugyGbPAhhQYubNzV2MXToXZZMPx/KNXLTjCImpEvp7hN46WwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFMvOtzTAnlFCehISR4++QDVGDnMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYmE2MzNmNDItNTI5NC0z OGZlLWExYjItZDYxMTIxYjhlOWY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASn3qMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEJZsuXMn+nxx/D5tjXHNj2wl0VGX//9aj4ICQ2mgYvBrrTXb/5zZyeb Utp2YURFfGGFrQ9nMAzaNw9hdwuhXEDx6aUeGKReXh0zqsoFrYzBzlMNZQX7qtpP u053sxCToJ1RVwflqbrp0Dl4DC1i9AMRd0pwDo8RV0+9IOwnmC8BaLPSAyd28E0Z +MxdEmPoAlLr1OOKSXkGPyvxryIeoFueAiejYK1+LOSGy5CIjyBiH2UzoKk+N2WT EOGwg/062l4nXaP9fwK548Gftzd/6wS3N2/To5+TBmWmLx+DGPGiFN3sXlRsrgME E7FhMhmtwb1Pj7Cx3JDqMFHd753sS0c= -----END CERTIFICATE-----Generated at Sun May 4 13:45:45 2025 by rpki-client