$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/daf989db-caa5-35ae-bda5-779962f46d3b.roa File: daf989db-caa5-35ae-bda5-779962f46d3b.roa (raw, json) Hash identifier: QoF/1GSxhwXgqlgn1c1WfTh+Xk0njV9ysP8rAEZB9mo= Subject key identifier: DC:5A:7F:92:7F:F8:D0:2C:36:37:37:07:8B:B4:32:25:3E:57:25:9F Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285848C84BA9923982DF4B180B9E40 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/daf989db-caa5-35ae-bda5-779962f46d3b.roa Signing time: Wed 05 Feb 2025 14:00:51 +0000 ROA not before: Wed 05 Feb 2025 14:00:51 +0000 ROA not after: Tue 06 May 2025 13:00:51 +0000 asID: 15169 IP address blocks: 74.125.225.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c8:4b:a9:92:39:82:df:4b:18:0b:9e:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Feb 5 14:00:51 2025 GMT Not After : May 6 13:00:51 2025 GMT Subject: CN=acb80886-a435-470d-9973-41566e822124 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:03:56:d9:ae:3c:ac:5a:62:fa:fd:35:ae:f6: 50:f0:2d:a3:79:eb:92:bb:7f:5e:24:73:fa:c6:19: 21:b5:27:df:1d:05:b0:82:80:0d:a3:37:34:01:94: e7:22:4e:92:80:d8:86:7e:8e:8c:a5:14:5f:58:b0: eb:55:79:a9:d0:a5:01:9d:1b:a1:fe:9f:4f:f5:a4: 55:7b:1a:37:75:6f:c1:66:b5:2d:4d:4a:9e:63:e8: 39:2f:21:36:ec:9a:97:cc:8c:c4:04:67:cb:ad:83: 0f:7c:e8:36:02:08:1e:a1:fc:5a:d8:49:72:46:a7: bf:0a:c7:af:d0:13:27:62:22:56:23:29:94:7d:4e: 71:ba:41:9b:c4:5e:a4:0b:88:a1:5e:e3:45:1f:91: 5f:8c:86:30:f7:c5:eb:0d:66:63:cd:f1:47:7a:58: 3b:b1:97:83:ce:6f:c6:be:eb:94:f5:70:bf:5e:9c: 1b:08:3e:b4:c7:12:40:fd:20:77:47:d1:e5:62:a4: 61:5e:1a:fe:bf:38:96:49:ee:5a:6b:43:d1:d1:8b: 25:f1:b8:30:f7:43:c2:d2:73:07:66:36:7a:1a:1f: 8d:26:bb:c3:44:27:20:8a:08:5c:e9:e0:9d:eb:78: cb:f6:1e:f7:7d:1f:c2:07:71:25:b1:a4:13:4e:2d: 79:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:5A:7F:92:7F:F8:D0:2C:36:37:37:07:8B:B4:32:25:3E:57:25:9F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/daf989db-caa5-35ae-bda5-779962f46d3b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 74.125.225.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:13:2b:bf:dd:2e:61:8f:63:66:22:7f:b4:9f:97:da:a6:81: 5d:ff:71:3e:c9:91:7c:e1:f3:72:b6:97:47:72:97:7c:30:80: 79:7a:99:a7:9e:5e:70:b4:a1:8d:af:52:52:48:ad:2b:f2:07: e8:d4:e6:15:2d:fe:4b:9c:6c:63:e5:90:3a:6c:b0:53:da:2b: 42:ef:ba:c2:c9:25:b1:39:5e:5c:c3:ab:c5:fc:91:5f:7b:a9: 07:d9:ce:fc:25:c6:79:8c:3d:f0:6c:57:ae:65:49:0f:93:f3: 3a:e9:8b:9b:f5:27:be:cd:50:b3:cc:69:12:e0:0c:34:ba:b7: f5:bd:14:ac:90:c9:69:c8:49:98:04:1f:e4:8b:78:96:9f:6f: 99:61:a0:5e:e3:67:9c:e6:8c:a7:21:42:b5:6f:c0:ee:6d:8a: 33:5f:82:9b:aa:39:8d:ff:83:46:bf:8d:58:6d:93:08:48:d3: 66:2e:45:3b:17:aa:c2:15:6f:65:39:43:28:f5:4a:e3:92:6d: b5:ec:e5:3d:fa:f5:f2:60:30:d6:28:a2:80:cc:71:9a:e1:90: 10:3d:f7:54:f8:cf:92:57:13:b6:9b:b9:3c:d4:dc:ae:14:b0: e5:7f:2a:ea:c8:02:7d:de:5f:99:ed:b8:6a:83:76:bf:36:36: 3b:03:78:11 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjIS6mSOYLfSxgLnkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDIwNTE0MDA1MVoXDTI1MDUwNjEzMDA1MVowLzEtMCsGA1UEAxMk YWNiODA4ODYtYTQzNS00NzBkLTk5NzMtNDE1NjZlODIyMTI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqQNW2a48rFpi+v01rvZQ8C2jeeuSu39eJHP6 xhkhtSffHQWwgoANozc0AZTnIk6SgNiGfo6MpRRfWLDrVXmp0KUBnRuh/p9P9aRV exo3dW/BZrUtTUqeY+g5LyE27JqXzIzEBGfLrYMPfOg2Aggeofxa2ElyRqe/Csev 0BMnYiJWIymUfU5xukGbxF6kC4ihXuNFH5FfjIYw98XrDWZjzfFHelg7sZeDzm/G vuuU9XC/XpwbCD60xxJA/SB3R9HlYqRhXhr+vziWSe5aa0PR0Ysl8bgw90PC0nMH ZjZ6Gh+NJrvDRCcgighc6eCd63jL9h73fR/CB3ElsaQTTi15swIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNxaf5J/+NAsNjc3B4u0MiU+VyWfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZGFmOTg5ZGItY2FhNS0z NWFlLWJkYTUtNzc5OTYyZjQ2ZDNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASn3hMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABITK7/dLmGPY2Yif7Sfl9qmgV3/cT7JkXzh83K2l0dyl3wwgHl6maee XnC0oY2vUlJIrSvyB+jU5hUt/kucbGPlkDpssFPaK0LvusLJJbE5XlzDq8X8kV97 qQfZzvwlxnmMPfBsV65lSQ+T8zrpi5v1J77NULPMaRLgDDS6t/W9FKyQyWnISZgE H+SLeJafb5lhoF7jZ5zmjKchQrVvwO5tijNfgpuqOY3/g0a/jVhtkwhI02YuRTsX qsIVb2U5Qyj1SuOSbbXs5T369fJgMNYoooDMcZrhkBA991T4z5JXE7abuTzU3K4U sOV/KurIAn3eX5ntuGqDdr82NjsDeBE= -----END CERTIFICATE-----Generated at Fri Mar 14 10:07:31 2025 by rpki-client