$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d3017cd1-f868-36d8-ac9e-8a4ecabc4bf1.roa File: d3017cd1-f868-36d8-ac9e-8a4ecabc4bf1.roa (raw, json) Hash identifier: /gA1OzVD8cyRMBwglCnF8Lf8PcFvkxmvCHVQnHsKjA0= Subject key identifier: 88:11:0D:FA:1A:D0:67:6A:4D:2C:0C:E9:D3:6D:BE:ED:97:8A:52:3F Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285848C84BF3E08B1BE65CBCEA8540 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d3017cd1-f868-36d8-ac9e-8a4ecabc4bf1.roa Signing time: Wed 05 Feb 2025 14:00:51 +0000 ROA not before: Wed 05 Feb 2025 14:00:51 +0000 ROA not after: Tue 06 May 2025 13:00:51 +0000 asID: 15169 IP address blocks: 74.125.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c8:4b:f3:e0:8b:1b:e6:5c:bc:ea:85:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Feb 5 14:00:51 2025 GMT Not After : May 6 13:00:51 2025 GMT Subject: CN=95636d84-fd60-4a5f-abb8-a436ff0ed1e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:46:c4:af:c5:e9:9d:e3:0d:b0:15:16:6d:1b: 11:1c:77:7e:ea:80:56:af:1e:54:f4:ec:79:cf:e2: 92:4f:67:5f:02:2d:ee:0d:d6:8d:b8:37:4e:ab:3f: b4:f2:19:a9:64:09:fa:53:41:59:bd:c3:2c:1a:bd: 12:0f:93:51:ab:04:21:e7:94:13:07:cd:c0:3b:ad: 90:f8:44:df:18:e7:c4:e9:1f:e5:5f:69:5e:44:63: f8:76:26:04:0a:79:f0:11:7c:92:9f:43:88:23:c8: 04:e4:6d:2a:4e:24:f4:57:17:55:4a:87:c8:35:60: cf:85:24:f2:73:16:08:47:ec:f0:c1:3c:ab:ac:7a: 43:58:bc:91:22:17:e1:71:c4:d3:75:af:89:02:9a: 1c:39:67:58:5f:d6:02:ac:3c:93:b6:59:3d:8b:b4: d3:c2:39:bb:14:c8:ac:d5:88:7e:ce:ae:59:a1:73: 73:16:62:c8:2e:80:01:5a:33:d4:2d:c6:a9:0d:c7: d7:c1:4c:ba:1d:bb:b8:cb:cb:b8:9f:fb:8b:59:04: bd:29:03:24:48:13:b5:71:d0:8e:1b:d0:9f:15:06: 8e:63:fa:99:0c:f3:07:ac:00:2f:2d:e9:72:64:e8: 00:2c:5d:8a:74:ce:3e:72:8c:01:9b:61:22:90:4b: c3:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:11:0D:FA:1A:D0:67:6A:4D:2C:0C:E9:D3:6D:BE:ED:97:8A:52:3F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d3017cd1-f868-36d8-ac9e-8a4ecabc4bf1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 74.125.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:2d:8d:8b:4c:91:e2:45:61:48:0b:12:5d:c3:ff:33:96:84: 29:ea:5e:ce:85:13:9f:ec:db:f0:62:59:41:14:d9:f1:4b:75: 76:40:41:55:f8:ec:36:16:54:93:51:74:2e:8f:81:bc:28:a0: 3c:83:5d:aa:35:9e:bc:cf:fb:63:53:69:51:40:be:d2:b8:fa: 2e:c0:56:c7:af:ef:00:d3:3d:0e:50:f9:70:5b:a3:7b:77:be: 98:02:f1:6e:89:8b:f4:0e:56:aa:e7:a7:84:e4:d8:c9:b0:a6: b5:d6:42:fd:a1:9f:d9:71:04:6d:6a:f3:79:10:c2:83:e1:b5: 8f:35:d0:c8:00:10:89:df:f2:a6:b8:a6:ae:be:d8:9b:c8:0c: 79:f5:4d:38:df:be:0d:d4:f7:46:bf:ef:80:0c:f3:40:21:d0: 01:3d:aa:1d:87:c6:df:a6:3a:b7:9e:58:e3:29:1c:ca:6b:38: c8:ed:4c:f5:2a:68:18:c3:23:69:cc:59:ea:3a:10:4f:37:d8: 4b:64:ac:26:1e:0a:ff:69:02:da:ad:47:95:a3:f3:f9:e7:dd: 50:63:11:99:bf:d4:7a:e3:8e:2d:2e:3c:37:c4:6b:c7:7a:5a: a3:dc:b2:40:92:27:6b:e8:ee:4b:53:2d:e9:05:92:5c:4f:e2: e4:e3:55:fa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjIS/PgixvmXLzqhUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDIwNTE0MDA1MVoXDTI1MDUwNjEzMDA1MVowLzEtMCsGA1UEAxMk OTU2MzZkODQtZmQ2MC00YTVmLWFiYjgtYTQzNmZmMGVkMWUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnkbEr8XpneMNsBUWbRsRHHd+6oBWrx5U9Ox5 z+KST2dfAi3uDdaNuDdOqz+08hmpZAn6U0FZvcMsGr0SD5NRqwQh55QTB83AO62Q +ETfGOfE6R/lX2leRGP4diYECnnwEXySn0OII8gE5G0qTiT0VxdVSofINWDPhSTy cxYIR+zwwTyrrHpDWLyRIhfhccTTda+JApocOWdYX9YCrDyTtlk9i7TTwjm7FMis 1Yh+zq5ZoXNzFmLILoABWjPULcapDcfXwUy6Hbu4y8u4n/uLWQS9KQMkSBO1cdCO G9CfFQaOY/qZDPMHrAAvLelyZOgALF2KdM4+cowBm2EikEvD2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIgRDfoa0GdqTSwM6dNtvu2XilI/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZDMwMTdjZDEtZjg2OC0z NmQ4LWFjOWUtOGE0ZWNhYmM0YmYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQESn0AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJMtjYtMkeJFYUgLEl3D/zOWhCnqXs6FE5/s2/BiWUEU2fFLdXZAQVX4 7DYWVJNRdC6PgbwooDyDXao1nrzP+2NTaVFAvtK4+i7AVsev7wDTPQ5Q+XBbo3t3 vpgC8W6Ji/QOVqrnp4Tk2MmwprXWQv2hn9lxBG1q83kQwoPhtY810MgAEInf8qa4 pq6+2JvIDHn1TTjfvg3U90a/74AM80Ah0AE9qh2Hxt+mOreeWOMpHMprOMjtTPUq aBjDI2nMWeo6EE832EtkrCYeCv9pAtqtR5Wj8/nn3VBjEZm/1Hrjji0uPDfEa8d6 WqPcskCSJ2vo7ktTLekFklxP4uTjVfo= -----END CERTIFICATE-----Generated at Sun Feb 16 15:39:47 2025 by rpki-client