$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/da38760b-7c4b-3063-aad0-6b742e88b1a9.roa File: da38760b-7c4b-3063-aad0-6b742e88b1a9.roa (raw, json) Hash identifier: tNpokzr11O0xinllhGV2YY0ZZnIIQKVEP66DJTvw/AQ= Subject key identifier: 0F:16:80:F0:9B:E7:46:B1:D1:9D:7B:F7:72:E7:2A:F1:E9:D9:68:B8 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285849A785145B30C10B9E14C92CC0 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/da38760b-7c4b-3063-aad0-6b742e88b1a9.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 15169 IP address blocks: 74.125.132.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 05 May 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:85:14:5b:30:c1:0b:9e:14:c9:2c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=d3107edb-cb36-412e-8db6-e0f00086bd08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:4c:2e:44:89:6c:41:cb:ae:1c:2a:ff:c6:58: 4c:fe:84:95:d8:30:cf:46:c3:c2:9e:64:c9:d2:67: 4c:86:0b:bc:9d:90:82:8b:9c:b6:5d:21:47:99:60: de:ef:2b:61:8f:cd:9e:9d:32:96:e0:79:21:3d:3e: b9:06:f8:e0:4b:8d:f0:04:26:aa:19:85:7f:3e:7e: b7:c7:67:36:99:87:d0:8b:d9:1e:35:70:b4:7d:93: e8:d2:74:43:fd:27:a6:8d:38:9c:7a:45:d6:b9:30: 4f:8e:bd:9c:92:98:3e:5c:0b:8e:0d:96:47:5b:70: 6b:16:5f:d8:a2:7a:82:61:18:1f:3c:04:11:e6:1a: c3:50:37:8b:6e:ff:97:68:a6:88:ea:82:23:8d:09: 6e:1e:04:7e:b0:35:3b:17:e6:01:c5:2d:f9:f7:6d: 3d:ef:a9:cb:e6:f8:21:f7:3c:bf:71:90:20:72:7e: c9:72:47:bb:af:0c:52:54:f1:b2:58:81:07:80:63: 67:fa:08:62:98:a0:09:28:1d:e6:be:31:c4:f7:0b: a6:45:ae:f2:ab:58:86:b8:0d:d8:12:b2:a3:61:ca: 26:79:9c:56:e5:d2:16:d8:c6:6e:fd:f9:a3:0e:b6: 38:db:59:20:3c:50:58:03:4c:af:d0:09:cb:45:a6: 89:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:16:80:F0:9B:E7:46:B1:D1:9D:7B:F7:72:E7:2A:F1:E9:D9:68:B8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/da38760b-7c4b-3063-aad0-6b742e88b1a9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 74.125.132.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:cf:e0:db:c5:6d:0f:29:f8:32:11:b9:b8:e3:40:0a:78:70: fa:b0:36:2c:b7:53:f9:71:b8:bf:59:90:c9:80:f9:42:2a:10: 03:5e:17:77:78:33:49:9a:21:18:cf:99:ae:2b:cc:9b:1d:60: 1b:2d:54:41:25:d7:fd:4a:27:c5:db:0c:53:96:f7:41:48:38: 35:12:04:43:6c:9f:12:00:45:1c:dc:4e:68:b5:24:0c:e9:85: 11:d2:23:fb:36:9a:db:b0:f5:41:c5:37:f5:a0:29:b7:46:97: 10:ad:90:0f:3d:e2:c5:7b:eb:6a:16:b2:8b:bb:a6:46:71:02: 74:93:b8:68:e9:ce:60:dc:11:1c:9e:b0:15:a9:db:4b:1e:14: 3f:cf:cf:86:b1:b8:1f:13:ef:ba:59:fd:5a:30:1b:fb:ea:3a: 99:4e:43:58:63:67:7b:80:c8:f2:ca:57:fb:60:93:a3:60:55: d1:a0:ae:97:d7:30:af:00:56:90:67:40:e8:ae:d4:93:18:68: 30:bf:6d:68:16:84:b6:ca:72:18:6a:53:e0:1c:a6:16:60:f5: 16:fb:eb:d9:e0:e5:db:7c:5a:e5:50:ac:59:02:14:f6:60:7d: 68:36:be:2c:2f:c1:33:65:eb:07:17:a0:5c:33:98:65:ba:58: ff:58:88:5f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhRRbMMELnhTJLMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk ZDMxMDdlZGItY2IzNi00MTJlLThkYjYtZTBmMDAwODZiZDA4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoEwuRIlsQcuuHCr/xlhM/oSV2DDPRsPCnmTJ 0mdMhgu8nZCCi5y2XSFHmWDe7ythj82enTKW4HkhPT65BvjgS43wBCaqGYV/Pn63 x2c2mYfQi9keNXC0fZPo0nRD/SemjTicekXWuTBPjr2ckpg+XAuODZZHW3BrFl/Y onqCYRgfPAQR5hrDUDeLbv+XaKaI6oIjjQluHgR+sDU7F+YBxS35920976nL5vgh 9zy/cZAgcn7Jcke7rwxSVPGyWIEHgGNn+ghimKAJKB3mvjHE9wumRa7yq1iGuA3Y ErKjYcomeZxW5dIW2MZu/fmjDrY421kgPFBYA0yv0AnLRaaJcQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA8WgPCb50ax0Z1793LnKvHp2Wi4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZGEzODc2MGItN2M0Yi0z MDYzLWFhZDAtNmI3NDJlODhiMWE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASn2EMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAInP4NvFbQ8p+DIRubjjQAp4cPqwNiy3U/lxuL9ZkMmA+UIqEANeF3d4 M0maIRjPma4rzJsdYBstVEEl1/1KJ8XbDFOW90FIODUSBENsnxIARRzcTmi1JAzp hRHSI/s2mtuw9UHFN/WgKbdGlxCtkA894sV762oWsou7pkZxAnSTuGjpzmDcERye sBWp20seFD/Pz4axuB8T77pZ/VowG/vqOplOQ1hjZ3uAyPLKV/tgk6NgVdGgrpfX MK8AVpBnQOiu1JMYaDC/bWgWhLbKchhqU+AcphZg9Rb769ng5dt8WuVQrFkCFPZg fWg2viwvwTNl6wcXoFwzmGW6WP9YiF8= -----END CERTIFICATE-----Generated at Sun May 4 11:01:38 2025 by rpki-client