$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/67d0a2bf-1fee-3c11-a30d-239424246d39.roa File: 67d0a2bf-1fee-3c11-a30d-239424246d39.roa (raw, json) Hash identifier: 131UsvCZmQ6DvlWnzMEaItpUw2oEfWe5SCoxhy0Y0ZE= Subject key identifier: DE:BF:F8:F8:41:1B:00:D8:D2:B4:B5:13:1B:C5:1C:D6:A0:B2:E5:D5 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285848C84C1436FCA0F8D41C700780 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/67d0a2bf-1fee-3c11-a30d-239424246d39.roa Signing time: Wed 05 Feb 2025 14:00:51 +0000 ROA not before: Wed 05 Feb 2025 14:00:51 +0000 ROA not after: Tue 06 May 2025 13:00:51 +0000 asID: 15169 IP address blocks: 74.125.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c8:4c:14:36:fc:a0:f8:d4:1c:70:07:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Feb 5 14:00:51 2025 GMT Not After : May 6 13:00:51 2025 GMT Subject: CN=11116e53-d1b3-4c15-bd73-b9d5fa6a53bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:02:1c:db:69:86:a5:1d:19:c4:fc:40:af:bd: 36:d5:20:b9:a7:40:aa:a0:f3:fd:bc:d2:36:70:1a: 87:07:64:f1:98:64:0d:40:2b:94:9d:45:ef:6b:c0: df:ee:0e:a8:98:10:89:29:c3:91:ab:2b:f9:6f:3a: 8c:a8:fb:33:c2:a1:39:20:f5:3a:9c:f4:fd:38:1b: a7:83:14:62:d7:8c:cf:2f:dd:16:5f:28:8c:33:a3: d8:7f:fb:c6:b1:9f:35:ae:ec:7e:da:09:8c:3f:f6: c8:15:e4:3b:d6:2d:19:ae:05:f7:4e:01:ff:77:ed: 4a:f3:45:75:71:56:d9:f7:23:2f:93:45:e1:86:c9: d8:d9:bf:51:47:f9:52:c3:97:f8:40:f8:e6:0b:c1: 57:47:f4:a8:a7:54:13:da:51:34:2a:50:b5:00:c9: 40:68:ba:57:49:64:bb:7e:e0:f7:be:5b:4a:a4:eb: 00:a4:e1:e2:a9:9b:78:f5:dc:b5:45:39:4f:6f:1a: 10:45:a9:be:6b:c5:1e:2c:0e:a8:6f:11:3c:0b:4b: 8b:cc:2d:f3:c7:f9:83:8d:f3:1d:5e:3d:7c:c1:d5: a7:15:31:30:dd:07:7f:e1:c5:79:d0:80:56:d2:fa: c8:ed:e9:ab:93:da:e4:62:46:ee:e8:ec:08:d3:11: 84:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:BF:F8:F8:41:1B:00:D8:D2:B4:B5:13:1B:C5:1C:D6:A0:B2:E5:D5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/67d0a2bf-1fee-3c11-a30d-239424246d39.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 74.125.21.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:b4:e1:38:44:a4:69:57:00:37:af:08:88:3e:35:c2:39:4d: b7:e9:fb:a5:4e:fb:e9:15:88:19:8c:c3:52:b5:c8:41:80:6f: 0b:b8:09:53:ae:d1:de:92:db:e2:ed:ba:da:33:51:a1:58:6a: c0:45:45:4f:b1:11:ba:d9:f2:23:b3:f8:e5:d3:4c:bc:70:e3: 38:65:35:36:45:23:e5:51:59:b5:e9:d7:16:25:4e:d8:f2:4a: 26:7a:e2:1a:8e:3b:f3:78:69:2a:88:02:5b:ee:48:74:5c:c0: 1d:19:34:52:c4:11:cc:de:36:fa:52:41:29:d2:eb:22:c1:b6: 01:c8:a0:c0:80:50:93:83:fc:38:8b:2a:c5:29:4c:e9:f4:ac: e4:b2:65:ee:1f:5e:a7:12:49:d7:02:d6:38:76:a9:fa:14:69: d0:72:58:c9:64:10:22:cb:34:e1:09:32:e7:d1:74:fc:9f:bf: 5f:94:14:0e:9b:6f:c4:19:18:7f:fc:e8:86:ea:eb:0d:91:94: 04:63:ec:1a:c5:f1:bf:a0:58:94:25:f4:d7:8a:28:d9:36:3d: bf:92:34:83:16:01:dd:e3:fe:86:53:bf:fc:43:33:8d:90:be: 92:bf:b1:4a:ff:22:e1:28:c8:93:21:b2:0c:a3:a4:5d:e8:05: 0e:d9:36:bd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjITBQ2/KD41BxwB4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDIwNTE0MDA1MVoXDTI1MDUwNjEzMDA1MVowLzEtMCsGA1UEAxMk MTExMTZlNTMtZDFiMy00YzE1LWJkNzMtYjlkNWZhNmE1M2JiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgwIc22mGpR0ZxPxAr7021SC5p0CqoPP9vNI2 cBqHB2TxmGQNQCuUnUXva8Df7g6omBCJKcORqyv5bzqMqPszwqE5IPU6nPT9OBun gxRi14zPL90WXyiMM6PYf/vGsZ81rux+2gmMP/bIFeQ71i0ZrgX3TgH/d+1K80V1 cVbZ9yMvk0XhhsnY2b9RR/lSw5f4QPjmC8FXR/Sop1QT2lE0KlC1AMlAaLpXSWS7 fuD3vltKpOsApOHiqZt49dy1RTlPbxoQRam+a8UeLA6obxE8C0uLzC3zx/mDjfMd Xj18wdWnFTEw3Qd/4cV50IBW0vrI7emrk9rkYkbu6OwI0xGEcwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN6/+PhBGwDY0rS1ExvFHNagsuXVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNjdkMGEyYmYtMWZlZS0z YzExLWEzMGQtMjM5NDI0MjQ2ZDM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASn0VMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACK04ThEpGlXADevCIg+NcI5Tbfp+6VO++kViBmMw1K1yEGAbwu4CVOu 0d6S2+LtutozUaFYasBFRU+xEbrZ8iOz+OXTTLxw4zhlNTZFI+VRWbXp1xYlTtjy SiZ64hqOO/N4aSqIAlvuSHRcwB0ZNFLEEczeNvpSQSnS6yLBtgHIoMCAUJOD/DiL KsUpTOn0rOSyZe4fXqcSSdcC1jh2qfoUadByWMlkECLLNOEJMufRdPyfv1+UFA6b b8QZGH/86Ibq6w2RlARj7BrF8b+gWJQl9NeKKNk2Pb+SNIMWAd3j/oZTv/xDM42Q vpK/sUr/IuEoyJMhsgyjpF3oBQ7ZNr0= -----END CERTIFICATE-----Generated at Sun Feb 16 15:17:20 2025 by rpki-client