$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5a75d440-ecd3-30f4-9dd5-d8cb01986ada.roa File: 5a75d440-ecd3-30f4-9dd5-d8cb01986ada.roa (raw, json) Hash identifier: yErdgrdCOWbD47YL3Z8rZ1iuftDeVTnxBQtVztaMN88= Subject key identifier: 91:88:D8:77:0F:36:E6:05:89:27:F5:29:B1:CA:ED:06:E8:88:8A:20 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285848C84BFDED61A428A143F1C100 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5a75d440-ecd3-30f4-9dd5-d8cb01986ada.roa Signing time: Wed 05 Feb 2025 14:00:51 +0000 ROA not before: Wed 05 Feb 2025 14:00:51 +0000 ROA not after: Tue 06 May 2025 13:00:51 +0000 asID: 396982 IP address blocks: 74.125.65.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c8:4b:fd:ed:61:a4:28:a1:43:f1:c1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Feb 5 14:00:51 2025 GMT Not After : May 6 13:00:51 2025 GMT Subject: CN=840b8f71-1205-4f37-8ed8-ae27dc9370aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:ad:cc:74:43:c5:2a:69:78:1a:fa:0e:6f:90: 7d:0e:9c:c0:50:6b:04:94:5e:ce:64:7a:ba:fa:5c: 72:09:e6:6f:03:1d:97:7c:80:a5:15:57:61:eb:08: 55:ce:e8:da:af:8a:d5:2d:6b:71:9e:55:7f:6a:5d: 79:6f:e2:db:68:35:53:b4:a7:08:f4:3b:25:2a:ba: 48:f2:5f:dd:6d:d9:44:ee:14:76:65:79:e4:68:35: 22:55:db:6b:ad:13:57:64:40:d4:35:61:2d:f6:29: b5:ed:7d:b8:3d:d2:ca:9f:6e:7e:84:99:40:31:6d: 06:65:34:51:e2:bd:bb:25:a1:54:e8:f3:9c:69:85: d3:17:36:34:3e:e0:d7:d5:ca:c0:81:d5:b3:9b:d5: 12:53:15:c6:37:3b:86:8b:7c:fc:60:8f:c0:9d:44: 08:f6:56:c6:13:b3:7f:8b:cd:26:43:4d:2b:d8:6e: 08:24:63:ce:62:47:d6:62:34:d9:cd:0c:76:d7:fd: 2d:d7:99:0c:97:54:06:d1:35:16:c4:c6:82:50:8d: 7d:b9:08:3a:73:f6:b9:cc:11:2f:94:f0:e5:81:bc: cd:53:d1:a7:de:c1:82:3b:6a:0a:2b:66:e6:a8:d8: 09:2f:c5:17:f7:74:4e:54:27:53:2f:96:d9:ff:b9: d3:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:88:D8:77:0F:36:E6:05:89:27:F5:29:B1:CA:ED:06:E8:88:8A:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5a75d440-ecd3-30f4-9dd5-d8cb01986ada.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 74.125.65.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:8b:5e:8a:42:fe:9d:29:4c:52:9d:36:45:b9:b5:07:90:40: ae:c7:ce:9c:48:e9:d5:05:4a:32:22:6b:7f:95:6a:14:a1:70: 78:ec:39:ff:07:77:8d:52:fe:6c:09:7c:61:43:c1:ae:8f:d4: 14:3f:2b:d8:b9:75:cb:e3:59:7b:21:dd:db:a2:d4:09:aa:1f: 04:23:7e:6c:8d:8d:1f:1f:2c:48:32:50:04:ef:d4:73:ca:d2: d2:5f:8a:67:a6:c6:0c:1b:d1:d1:12:23:fa:6f:82:7d:86:06: ab:8f:6f:3f:16:c1:08:ff:11:9b:bf:71:b0:73:b3:dd:f5:8a: 31:f1:9f:b6:9c:9e:2c:76:97:a1:48:2a:ab:8e:a0:4d:fd:ab: 76:91:8b:56:64:8c:49:31:2c:e6:f7:81:93:74:cc:73:a2:fa: 7a:c0:61:51:f3:97:10:d5:2e:2b:1b:e3:3c:48:fc:63:8a:32: 97:de:81:0e:bd:8b:2d:f7:36:82:1a:fc:e9:19:6f:51:93:05: f8:77:7a:c9:46:54:3d:00:b2:87:b3:29:09:5c:65:da:03:f8: 9e:8c:85:76:44:07:72:ce:ff:df:a5:96:d2:52:19:2b:94:7f: 60:dd:29:4e:fd:4c:4a:9e:66:1c:e3:0f:e0:7c:93:2b:d1:66: f6:cd:7b:46 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjIS/3tYaQooUPxwQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDIwNTE0MDA1MVoXDTI1MDUwNjEzMDA1MVowLzEtMCsGA1UEAxMk ODQwYjhmNzEtMTIwNS00ZjM3LThlZDgtYWUyN2RjOTM3MGFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq63MdEPFKml4GvoOb5B9DpzAUGsElF7OZHq6 +lxyCeZvAx2XfIClFVdh6whVzujar4rVLWtxnlV/al15b+LbaDVTtKcI9DslKrpI 8l/dbdlE7hR2ZXnkaDUiVdtrrRNXZEDUNWEt9im17X24PdLKn25+hJlAMW0GZTRR 4r27JaFU6POcaYXTFzY0PuDX1crAgdWzm9USUxXGNzuGi3z8YI/AnUQI9lbGE7N/ i80mQ00r2G4IJGPOYkfWYjTZzQx21/0t15kMl1QG0TUWxMaCUI19uQg6c/a5zBEv lPDlgbzNU9Gn3sGCO2oKK2bmqNgJL8UX93ROVCdTL5bZ/7nT6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJGI2HcPNuYFiSf1KbHK7QboiIogMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNWE3NWQ0NDAtZWNkMy0z MGY0LTlkZDUtZDhjYjAxOTg2YWRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASn1BMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABqLXopC/p0pTFKdNkW5tQeQQK7HzpxI6dUFSjIia3+VahShcHjsOf8H d41S/mwJfGFDwa6P1BQ/K9i5dcvjWXsh3dui1AmqHwQjfmyNjR8fLEgyUATv1HPK 0tJfimemxgwb0dESI/pvgn2GBquPbz8WwQj/EZu/cbBzs931ijHxn7acnix2l6FI KquOoE39q3aRi1ZkjEkxLOb3gZN0zHOi+nrAYVHzlxDVLisb4zxI/GOKMpfegQ69 iy33NoIa/OkZb1GTBfh3eslGVD0AsoezKQlcZdoD+J6MhXZEB3LO/9+lltJSGSuU f2DdKU79TEqeZhzjD+B8kyvRZvbNe0Y= -----END CERTIFICATE-----Generated at Sun Feb 16 15:45:27 2025 by rpki-client