$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d74a535e-1bac-36c0-b790-e4cab31f5a34.roa File: d74a535e-1bac-36c0-b790-e4cab31f5a34.roa (raw, json) Hash identifier: PNDQCNN5BDIJvqFWdmo7ANB8q7+DiTYzUzl51lKe0bY= Subject key identifier: 29:36:3F:62:D9:ED:D6:66:1C:35:CA:AC:68:97:BC:36:61:3E:DC:DE Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285848C84BA51954934086FC877F80 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d74a535e-1bac-36c0-b790-e4cab31f5a34.roa Signing time: Wed 05 Feb 2025 14:00:51 +0000 ROA not before: Wed 05 Feb 2025 14:00:51 +0000 ROA not after: Tue 06 May 2025 13:00:51 +0000 asID: 15169 IP address blocks: 74.125.205.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c8:4b:a5:19:54:93:40:86:fc:87:7f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Feb 5 14:00:51 2025 GMT Not After : May 6 13:00:51 2025 GMT Subject: CN=58bfea3e-c83b-4094-b2e9-9c7d027635e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:ab:a5:5b:ac:39:fb:e0:6b:b9:89:3a:30:d8: 0e:0e:d9:d9:2f:f0:c5:b0:57:5c:2e:88:54:93:5c: 49:2b:9e:b1:0e:d2:c6:3c:67:33:fc:8c:79:d6:c3: 87:eb:2d:db:fa:33:a8:34:b2:a7:95:ab:97:b7:1a: 3d:99:e5:70:7e:b4:42:12:0e:f9:09:c4:4d:18:57: e6:cc:c8:e0:c0:ba:44:90:fa:89:b8:85:14:77:3b: 2d:c6:68:35:b5:7d:d5:5f:8f:e7:2c:8b:b6:e6:99: 32:c8:f5:dd:50:b7:29:01:b7:77:b5:db:c2:58:5c: 90:9b:71:4e:31:96:d6:5e:20:c6:da:f9:06:4d:0e: 49:aa:6e:c8:19:c4:cd:65:4f:88:9d:4f:6a:1d:4c: b8:1b:03:5d:c3:78:d9:40:22:83:f9:52:65:ef:9d: fc:a2:7a:73:b5:7d:21:54:dc:b4:fd:52:65:9c:c7: 2e:22:b9:cd:47:1e:e2:22:8e:ca:76:29:ee:b2:87: d0:97:1f:60:87:34:f6:ee:a4:da:86:82:80:4d:67: c0:17:a2:be:62:61:a5:b9:69:2a:0e:23:4b:51:5b: 91:be:7f:d0:fa:9e:13:40:96:08:e8:28:49:75:fc: 23:1c:a2:57:94:da:c2:9f:57:8a:3d:d2:98:73:ea: b3:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:36:3F:62:D9:ED:D6:66:1C:35:CA:AC:68:97:BC:36:61:3E:DC:DE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d74a535e-1bac-36c0-b790-e4cab31f5a34.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 74.125.205.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:d4:d5:1e:09:85:8a:63:7a:9a:38:f2:e0:2d:31:18:08:f0: 81:11:41:2c:b7:6c:55:bd:8c:9a:ce:b4:dd:ca:c3:66:16:80: 9a:ad:79:d8:0d:7f:cc:eb:f9:52:3e:24:6c:f3:d2:01:39:de: 21:26:e9:c8:21:38:93:38:4b:f2:68:ad:b3:1f:75:cb:00:26: 9a:b0:ca:71:ef:9a:5a:b0:ab:b2:12:d1:3e:8f:0c:bd:48:c6: 9e:d8:c2:0a:28:d2:da:8f:d6:9a:28:11:7f:10:0b:4f:51:86: c2:99:8b:48:3f:ff:30:d2:67:43:07:5e:64:bc:4a:9e:fe:30: 44:f8:eb:c1:92:4c:3d:59:e2:a9:e5:d6:ea:a6:1c:53:e7:7d: 62:35:c1:b2:76:58:bb:db:ef:b4:53:a1:d0:15:28:2d:8d:f9: e0:32:5a:1d:cd:40:a3:86:ec:66:06:d8:d3:5d:a4:eb:e7:29: ab:37:a3:cc:87:98:1b:a3:65:e3:ab:a6:7f:c2:08:2f:21:bd: 4f:c3:42:38:44:35:38:a8:6d:dd:cc:eb:a0:44:99:54:82:e3: 14:71:eb:a4:07:2a:5a:a6:e1:4f:5d:75:75:bd:e1:48:9f:5c: 32:a2:73:5c:e8:fd:cf:26:58:6f:ca:86:c0:30:30:95:45:ec: 6c:91:29:b6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjIS6UZVJNAhvyHf4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDIwNTE0MDA1MVoXDTI1MDUwNjEzMDA1MVowLzEtMCsGA1UEAxMk NThiZmVhM2UtYzgzYi00MDk0LWIyZTktOWM3ZDAyNzYzNWU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl6ulW6w5++BruYk6MNgODtnZL/DFsFdcLohU k1xJK56xDtLGPGcz/Ix51sOH6y3b+jOoNLKnlauXtxo9meVwfrRCEg75CcRNGFfm zMjgwLpEkPqJuIUUdzstxmg1tX3VX4/nLIu25pkyyPXdULcpAbd3tdvCWFyQm3FO MZbWXiDG2vkGTQ5Jqm7IGcTNZU+InU9qHUy4GwNdw3jZQCKD+VJl7538onpztX0h VNy0/VJlnMcuIrnNRx7iIo7KdinusofQlx9ghzT27qTahoKATWfAF6K+YmGluWkq DiNLUVuRvn/Q+p4TQJYI6ChJdfwjHKJXlNrCn1eKPdKYc+qzOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCk2P2LZ7dZmHDXKrGiXvDZhPtzeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZDc0YTUzNWUtMWJhYy0z NmMwLWI3OTAtZTRjYWIzMWY1YTM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASn3NMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGzU1R4JhYpjepo48uAtMRgI8IERQSy3bFW9jJrOtN3Kw2YWgJqtedgN f8zr+VI+JGzz0gE53iEm6cghOJM4S/JorbMfdcsAJpqwynHvmlqwq7IS0T6PDL1I xp7Ywgoo0tqP1pooEX8QC09RhsKZi0g//zDSZ0MHXmS8Sp7+MET468GSTD1Z4qnl 1uqmHFPnfWI1wbJ2WLvb77RTodAVKC2N+eAyWh3NQKOG7GYG2NNdpOvnKas3o8yH mBujZeOrpn/CCC8hvU/DQjhENTiobd3M66BEmVSC4xRx66QHKlqm4U9ddXW94Uif XDKic1zo/c8mWG/KhsAwMJVF7GyRKbY= -----END CERTIFICATE-----Generated at Sun Feb 16 15:09:54 2025 by rpki-client