$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/41e31434-ac45-31db-8c5b-9234aa20878a.roa File: 41e31434-ac45-31db-8c5b-9234aa20878a.roa (raw, json) Hash identifier: /aGCFA1NZJNc6/ChchPaTgoBVB/qEOIh98F83QHO7tU= Subject key identifier: 9F:54:C6:45:6A:DE:CA:EB:0C:32:2F:ED:E7:30:36:15:F1:9A:0A:F6 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285848C84C08B4A3C3C2CFD2EC0F70 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/41e31434-ac45-31db-8c5b-9234aa20878a.roa Signing time: Wed 05 Feb 2025 14:00:51 +0000 ROA not before: Wed 05 Feb 2025 14:00:51 +0000 ROA not after: Tue 06 May 2025 13:00:51 +0000 asID: 15169 IP address blocks: 74.125.39.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c8:4c:08:b4:a3:c3:c2:cf:d2:ec:0f:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Feb 5 14:00:51 2025 GMT Not After : May 6 13:00:51 2025 GMT Subject: CN=1292890a-6571-4ee4-ae00-759991d524f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:53:17:4e:0c:a8:c1:d8:26:e5:81:bb:37:d3: 39:a1:88:75:38:69:b5:c3:28:03:78:3a:9a:d4:ee: d6:a2:bc:32:24:fc:a9:d3:a5:bc:e7:7c:d8:4b:b4: 68:b2:5d:51:0b:b6:ae:0d:7b:5c:99:cd:57:d5:0f: c2:65:54:00:15:74:6c:51:7b:ba:66:9a:52:12:eb: e2:76:81:3e:fa:9a:5e:7f:84:22:6b:a4:6d:50:d9: 35:85:e7:22:6f:a1:23:41:b3:fe:c4:4c:20:52:5e: 45:a9:4e:92:d7:34:e6:f7:14:73:f2:5c:65:62:da: 4d:22:19:c7:9d:ee:9d:32:b3:58:25:ff:f6:e1:f1: ae:23:3f:62:cf:e7:4d:b1:dc:62:68:ce:24:c3:12: ed:e0:c5:ab:a5:15:48:6a:e9:76:9f:e3:ec:ab:45: e1:8b:b7:5e:9f:a0:a2:8b:1c:fe:6e:34:36:8f:78: aa:31:fe:a1:8a:dd:80:f6:55:50:41:82:21:c3:d1: c1:70:41:f9:d0:9a:7e:b3:c2:9d:4e:78:ff:fa:ab: c0:de:8c:36:70:55:d7:11:48:0b:23:5a:74:51:7f: d6:aa:f4:86:a5:24:c8:36:a3:f0:66:19:ea:68:bf: 8b:1a:54:e4:3f:d7:22:d7:4c:5d:ab:d1:fa:bd:bd: 6b:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:54:C6:45:6A:DE:CA:EB:0C:32:2F:ED:E7:30:36:15:F1:9A:0A:F6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/41e31434-ac45-31db-8c5b-9234aa20878a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 74.125.39.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ad:4d:0f:76:6d:0b:42:81:6a:04:56:be:4d:4c:65:06:59:a2: bc:76:b7:f2:06:fe:07:ad:ce:f3:a9:95:0b:6a:42:96:44:9e: 6a:e5:af:a8:ee:4a:cf:e5:d0:f7:9f:39:2b:15:c7:63:7d:78: e1:ce:d4:24:ab:05:ad:f7:5e:4c:04:3d:a9:5c:2e:b9:d0:3c: e0:c1:44:01:24:f0:b3:50:fb:56:32:51:07:a0:18:ca:98:73: 0c:4c:ea:b6:86:34:a5:d3:80:42:b7:14:8b:57:54:76:19:10: 0f:bd:3d:00:7e:92:1f:14:a0:21:dd:20:67:ca:6f:cc:c8:21: 15:04:6e:3a:f8:1d:cf:1a:ca:ca:82:3b:49:49:d8:58:ba:9a: aa:e2:59:37:a7:d6:13:a1:12:7a:92:c9:64:33:6b:c0:3d:54: 9f:40:76:cc:2f:d1:bf:26:79:f7:14:a8:66:77:d0:58:45:0e: 78:78:4d:04:a8:ce:4f:b1:70:3d:e1:a7:50:81:32:b0:ce:db: 2c:14:1b:23:9e:32:68:33:0d:e3:0b:e2:00:6a:f1:36:66:2c: 6a:c9:3b:74:c8:b5:e6:35:22:52:76:6b:f0:40:48:2f:02:05: 4b:0e:7d:11:56:0d:42:5d:44:20:ba:ff:83:9b:f2:ab:25:63: e0:a9:34:25 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjITAi0o8PCz9LsD3AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDIwNTE0MDA1MVoXDTI1MDUwNjEzMDA1MVowLzEtMCsGA1UEAxMk MTI5Mjg5MGEtNjU3MS00ZWU0LWFlMDAtNzU5OTkxZDUyNGY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhVMXTgyowdgm5YG7N9M5oYh1OGm1wygDeDqa 1O7WorwyJPyp06W853zYS7Rosl1RC7auDXtcmc1X1Q/CZVQAFXRsUXu6ZppSEuvi doE++ppef4Qia6RtUNk1hecib6EjQbP+xEwgUl5FqU6S1zTm9xRz8lxlYtpNIhnH ne6dMrNYJf/24fGuIz9iz+dNsdxiaM4kwxLt4MWrpRVIaul2n+Psq0Xhi7den6Ci ixz+bjQ2j3iqMf6hit2A9lVQQYIhw9HBcEH50Jp+s8KdTnj/+qvA3ow2cFXXEUgL I1p0UX/WqvSGpSTINqPwZhnqaL+LGlTkP9ci10xdq9H6vb1rhwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ9UxkVq3srrDDIv7ecwNhXxmgr2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNDFlMzE0MzQtYWM0NS0z MWRiLThjNWItOTIzNGFhMjA4NzhhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASn0nMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK1ND3ZtC0KBagRWvk1MZQZZorx2t/IG/getzvOplQtqQpZEnmrlr6ju Ss/l0PefOSsVx2N9eOHO1CSrBa33XkwEPalcLrnQPODBRAEk8LNQ+1YyUQegGMqY cwxM6raGNKXTgEK3FItXVHYZEA+9PQB+kh8UoCHdIGfKb8zIIRUEbjr4Hc8aysqC O0lJ2Fi6mqriWTen1hOhEnqSyWQza8A9VJ9Adswv0b8mefcUqGZ30FhFDnh4TQSo zk+xcD3hp1CBMrDO2ywUGyOeMmgzDeML4gBq8TZmLGrJO3TIteY1IlJ2a/BASC8C BUsOfRFWDUJdRCC6/4Ob8qslY+CpNCU= -----END CERTIFICATE-----Generated at Sun Feb 16 15:50:43 2025 by rpki-client