$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/91aa005b-97cc-355d-91b1-2abe0b1359f4.roa File: 91aa005b-97cc-355d-91b1-2abe0b1359f4.roa (raw, json) Hash identifier: QNrACRy3uO5dC7OBZHuieX0BYECKaNLnDUoIKvrcHmg= Subject key identifier: 54:80:6C:9D:A2:85:25:BB:21:B2:50:1F:E7:3F:A7:F0:D1:78:5A:74 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285848C84BF59942046C2176D9B6B8 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/91aa005b-97cc-355d-91b1-2abe0b1359f4.roa Signing time: Wed 05 Feb 2025 14:00:51 +0000 ROA not before: Wed 05 Feb 2025 14:00:51 +0000 ROA not after: Tue 06 May 2025 13:00:51 +0000 asID: 15169 IP address blocks: 74.125.23.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c8:4b:f5:99:42:04:6c:21:76:d9:b6:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Feb 5 14:00:51 2025 GMT Not After : May 6 13:00:51 2025 GMT Subject: CN=8795d4f8-fff0-4976-8986-b09078d6d039 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:cb:4b:05:81:24:43:4a:73:b3:94:47:f1:4a: f1:71:4f:22:1b:95:fb:a0:6f:23:be:70:2b:bb:cb: b8:ca:86:fb:cf:48:a1:cd:f5:a2:3c:57:88:3e:5c: ad:ac:e5:62:e2:a9:1f:62:4a:92:1b:96:73:62:0a: 06:82:fa:62:67:1a:b0:93:7e:79:32:1d:16:c9:70: 50:77:15:0d:91:27:ef:4b:72:5a:07:50:ca:6d:b4: 5f:aa:95:84:cf:ae:af:d3:90:8b:62:b3:61:45:62: 09:fe:2e:ff:19:1d:d6:c7:10:71:d3:de:a9:3d:7f: 22:a8:51:5a:e4:93:c9:40:95:01:81:63:d2:ec:ac: 07:de:e5:45:b9:cf:f3:39:80:8d:fb:3f:9a:16:63: dc:56:db:4f:ab:f4:2a:97:db:a2:ee:f5:72:d1:40: 4d:2f:11:cd:d1:90:1a:2b:c3:f8:7a:87:cd:eb:70: 29:36:c1:99:85:a3:43:17:0a:3b:24:ee:fe:ec:cd: 8e:a8:20:ee:ed:da:60:d3:2b:e0:aa:dd:89:ab:43: 04:13:76:38:30:93:d3:1c:92:74:d5:94:85:4c:40: 7b:cf:d3:f5:7a:8a:64:f6:e3:4b:bc:9f:2d:39:89: 27:d6:9f:f6:24:b7:da:1e:9a:ac:6a:10:0d:31:89: c3:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:80:6C:9D:A2:85:25:BB:21:B2:50:1F:E7:3F:A7:F0:D1:78:5A:74 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/91aa005b-97cc-355d-91b1-2abe0b1359f4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 74.125.23.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:0a:7d:34:4f:d5:a3:06:5e:9c:db:67:62:88:30:06:25:73: f8:96:e8:0d:a3:d8:67:a5:c1:00:66:cf:78:71:15:51:6a:f0: e9:1b:97:85:77:17:b3:3a:74:34:80:20:fd:e7:c3:bc:7c:6c: 0d:07:e0:35:0a:f2:24:21:2f:50:01:3a:df:45:b6:ae:6c:ac: bf:30:63:c4:c3:ef:5e:67:38:aa:e0:ae:76:32:3d:59:3e:c7: 21:dd:1a:02:4a:86:4c:d6:7b:77:b9:af:8c:56:38:e7:34:27: 1d:8e:b2:bf:17:13:ec:09:ae:5e:cb:b0:b2:45:ce:1d:09:c5: 65:89:6e:a1:37:45:ad:60:1b:a0:42:0e:91:c2:5c:a8:60:52: be:e3:05:e1:da:d2:9f:11:47:c8:30:14:9f:95:10:38:58:f0: 38:7d:e4:f9:79:19:b0:4a:55:55:b3:96:0d:0a:44:01:23:74: 95:0b:18:e2:06:4d:0c:5c:6d:28:3e:ea:63:21:01:74:28:03: 00:94:66:9c:19:19:19:3e:e9:28:7c:38:c5:1a:39:59:de:c5: c5:bf:4f:bb:db:9c:2e:bd:fd:5f:68:86:68:07:51:af:1e:f3: 88:fa:2f:b8:df:5c:50:07:65:77:72:29:96:8c:3b:6d:37:72: c9:12:ed:0c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjIS/WZQgRsIXbZtrgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDIwNTE0MDA1MVoXDTI1MDUwNjEzMDA1MVowLzEtMCsGA1UEAxMk ODc5NWQ0ZjgtZmZmMC00OTc2LTg5ODYtYjA5MDc4ZDZkMDM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvMtLBYEkQ0pzs5RH8UrxcU8iG5X7oG8jvnAr u8u4yob7z0ihzfWiPFeIPlytrOVi4qkfYkqSG5ZzYgoGgvpiZxqwk355Mh0WyXBQ dxUNkSfvS3JaB1DKbbRfqpWEz66v05CLYrNhRWIJ/i7/GR3WxxBx096pPX8iqFFa 5JPJQJUBgWPS7KwH3uVFuc/zOYCN+z+aFmPcVttPq/Qql9ui7vVy0UBNLxHN0ZAa K8P4eofN63ApNsGZhaNDFwo7JO7+7M2OqCDu7dpg0yvgqt2Jq0MEE3Y4MJPTHJJ0 1ZSFTEB7z9P1eopk9uNLvJ8tOYkn1p/2JLfaHpqsahANMYnDBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFSAbJ2ihSW7IbJQH+c/p/DReFp0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvOTFhYTAwNWItOTdjYy0z NTVkLTkxYjEtMmFiZTBiMTM1OWY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASn0XMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEQKfTRP1aMGXpzbZ2KIMAYlc/iW6A2j2GelwQBmz3hxFVFq8Okbl4V3 F7M6dDSAIP3nw7x8bA0H4DUK8iQhL1ABOt9Ftq5srL8wY8TD715nOKrgrnYyPVk+ xyHdGgJKhkzWe3e5r4xWOOc0Jx2Osr8XE+wJrl7LsLJFzh0JxWWJbqE3Ra1gG6BC DpHCXKhgUr7jBeHa0p8RR8gwFJ+VEDhY8Dh95Pl5GbBKVVWzlg0KRAEjdJULGOIG TQxcbSg+6mMhAXQoAwCUZpwZGRk+6Sh8OMUaOVnexcW/T7vbnC69/V9ohmgHUa8e 84j6L7jfXFAHZXdyKZaMO203cskS7Qw= -----END CERTIFICATE-----Generated at Fri Apr 4 08:39:07 2025 by rpki-client