$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/cc17325d-904d-38a2-ac55-8ee4a0a677b6.roa File: cc17325d-904d-38a2-ac55-8ee4a0a677b6.roa (raw, json) Hash identifier: lUgNGqlSWFY/lA/IRXWlMx6zAXmnTubDzYvmDoBK4XA= Subject key identifier: 19:AB:A0:10:CD:26:A0:DB:88:DF:37:1C:11:3E:D8:82:B8:76:93:64 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285848DEA127081190B4D3196F7600 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/cc17325d-904d-38a2-ac55-8ee4a0a677b6.roa Signing time: Thu 13 Feb 2025 14:00:50 +0000 ROA not before: Thu 13 Feb 2025 14:00:50 +0000 ROA not after: Wed 14 May 2025 13:00:50 +0000 asID: 15169 IP address blocks: 74.125.28.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:de:a1:27:08:11:90:b4:d3:19:6f:76:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Feb 13 14:00:50 2025 GMT Not After : May 14 13:00:50 2025 GMT Subject: CN=b68bf88e-b34c-43c5-a7ce-6323518224d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:3a:e2:02:fa:e8:6d:5a:d6:81:29:b7:12:4e: f4:46:8a:d8:dc:6b:99:ba:59:8c:8c:f1:de:7e:9f: 91:82:fd:61:79:79:09:b6:b6:4c:3b:da:23:24:0e: 46:22:28:60:1e:3b:64:de:f7:a7:6b:33:48:de:64: eb:2b:f3:f9:7e:48:06:d6:e5:4d:8b:cb:21:da:5a: ea:d8:58:da:b3:fd:ce:7a:21:89:f1:6b:01:b4:45: 62:49:50:a4:58:7a:2e:e6:41:80:b2:93:99:1b:7d: 26:e7:79:c0:31:70:39:be:12:0d:0d:42:7c:b6:3b: 22:94:3a:8c:ac:71:ed:b1:1d:0b:ce:8d:5a:66:f8: 6a:ea:e7:51:70:7c:cb:5b:1c:58:89:3f:49:2f:91: de:03:08:76:09:55:d6:f5:09:01:a8:0f:7d:57:b5: f3:49:e7:54:c2:9a:c5:53:f2:8a:69:62:5b:f2:f3: 26:0d:54:ba:53:1b:20:f4:f8:49:92:ee:bf:92:2d: 21:75:3d:ae:08:f4:a0:ef:99:5d:80:d8:4a:3f:0e: f2:0a:02:43:50:ba:c6:5a:70:38:c9:52:18:37:96: df:42:29:73:9b:10:3d:39:5c:11:bf:16:e9:9c:4e: 36:7b:20:d7:98:7c:0a:34:0a:e8:c0:ff:80:20:38: 25:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:AB:A0:10:CD:26:A0:DB:88:DF:37:1C:11:3E:D8:82:B8:76:93:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/cc17325d-904d-38a2-ac55-8ee4a0a677b6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 74.125.28.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:b9:aa:5b:85:e5:33:95:19:68:d0:11:ad:3f:19:4b:ad:4d: 85:85:4b:9d:a8:60:d0:97:f2:d4:98:88:a4:10:d5:aa:8d:57: f2:da:51:47:4b:a9:66:4c:65:ba:c9:3a:64:ec:8d:8a:32:fe: 0c:99:bf:d5:15:e9:9c:09:42:bb:e3:5b:34:24:c7:dc:32:8c: 08:9a:ba:13:47:25:ac:5e:8b:8c:4c:0d:ab:9d:a6:20:77:a9: f1:61:a7:d4:64:ae:3a:e2:45:2f:39:37:0f:f0:52:22:2b:c6: 2b:e3:86:6e:24:7f:5a:7a:a1:3b:f5:ed:88:93:97:41:08:39: af:55:c6:16:ea:c3:b0:dc:b7:ff:be:59:b5:cc:a2:30:8d:9a: 07:a4:44:fa:f3:8c:8e:ff:d4:78:ff:b5:d9:a6:e1:89:af:49: 3d:df:83:e6:37:b0:19:58:b1:4f:6b:48:92:a8:af:94:39:12: 79:1e:35:b5:e5:ab:51:35:41:c6:e5:ae:0b:1f:d7:6c:12:db: c7:3c:66:df:73:43:cc:78:f6:83:a0:d1:e9:0f:0b:55:15:05: 80:65:e5:d0:db:1f:4d:6a:85:c8:68:83:7d:fe:b3:24:1d:0c: 11:d1:79:8f:67:7d:26:8f:26:2a:02:69:5f:fb:63:52:13:fa: a6:e7:4e:ba -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjeoScIEZC00xlvdgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDIxMzE0MDA1MFoXDTI1MDUxNDEzMDA1MFowLzEtMCsGA1UEAxMk YjY4YmY4OGUtYjM0Yy00M2M1LWE3Y2UtNjMyMzUxODIyNGQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgTriAvrobVrWgSm3Ek70RorY3GuZulmMjPHe fp+Rgv1heXkJtrZMO9ojJA5GIihgHjtk3venazNI3mTrK/P5fkgG1uVNi8sh2lrq 2Fjas/3OeiGJ8WsBtEViSVCkWHou5kGAspOZG30m53nAMXA5vhINDUJ8tjsilDqM rHHtsR0Lzo1aZvhq6udRcHzLWxxYiT9JL5HeAwh2CVXW9QkBqA99V7XzSedUwprF U/KKaWJb8vMmDVS6Uxsg9PhJku6/ki0hdT2uCPSg75ldgNhKPw7yCgJDULrGWnA4 yVIYN5bfQilzmxA9OVwRvxbpnE42eyDXmHwKNArowP+AIDgljQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBmroBDNJqDbiN83HBE+2IK4dpNkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvY2MxNzMyNWQtOTA0ZC0z OGEyLWFjNTUtOGVlNGEwYTY3N2I2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASn0cMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE65qluF5TOVGWjQEa0/GUutTYWFS52oYNCX8tSYiKQQ1aqNV/LaUUdL qWZMZbrJOmTsjYoy/gyZv9UV6ZwJQrvjWzQkx9wyjAiauhNHJaxei4xMDaudpiB3 qfFhp9RkrjriRS85Nw/wUiIrxivjhm4kf1p6oTv17YiTl0EIOa9Vxhbqw7Dct/++ WbXMojCNmgekRPrzjI7/1Hj/tdmm4YmvST3fg+Y3sBlYsU9rSJKor5Q5EnkeNbXl q1E1Qcblrgsf12wS28c8Zt9zQ8x49oOg0ekPC1UVBYBl5dDbH01qhchog33+syQd DBHReY9nfSaPJioCaV/7Y1IT+qbnTro= -----END CERTIFICATE-----Generated at Fri Apr 4 08:36:03 2025 by rpki-client