$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/df2e2f0f-0ef1-3b15-8474-16e7683a8f30.roa File: df2e2f0f-0ef1-3b15-8474-16e7683a8f30.roa (raw, json) Hash identifier: Rj25RSB1x93+pZGwKYi+Zx81FLkMFIi5n6N2wnzRn7E= Subject key identifier: EF:A5:CC:BD:FF:53:37:90:06:9D:B8:E3:D8:FE:56:41:5A:C1:F0:84 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285848C84BD9414448B91FAC003400 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/df2e2f0f-0ef1-3b15-8474-16e7683a8f30.roa Signing time: Wed 05 Feb 2025 14:00:51 +0000 ROA not before: Wed 05 Feb 2025 14:00:51 +0000 ROA not after: Tue 06 May 2025 13:00:51 +0000 asID: 15169 IP address blocks: 74.125.198.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c8:4b:d9:41:44:48:b9:1f:ac:00:34:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Feb 5 14:00:51 2025 GMT Not After : May 6 13:00:51 2025 GMT Subject: CN=49fc86ca-35c8-4307-ae67-7b0a10fead93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:58:85:2f:c0:40:43:fe:ee:92:00:11:3d:61: 0c:7f:b4:17:b0:90:cc:5a:53:ec:a7:30:b2:9f:64: a6:a8:1a:50:17:6d:b7:88:c2:35:ca:fe:74:8a:95: 9b:b4:aa:0c:af:bb:d3:31:a9:05:9b:19:cd:2d:94: 90:97:52:b5:1b:7a:71:54:ee:81:44:ee:e9:a2:93: 46:7b:13:fd:c7:72:7c:c6:14:ff:3b:c8:bb:bb:97: 82:4c:ed:e1:ab:f9:00:5f:4e:14:ac:03:e4:31:b6: 36:a3:3e:0b:b7:ff:88:10:68:62:bc:85:f7:0c:fd: 5d:36:3e:a6:b7:29:3f:ea:83:90:eb:99:f7:18:6c: ec:48:c1:d5:40:c2:e4:90:39:51:03:21:19:48:6e: 6d:32:da:ee:4b:d4:ef:19:8f:cb:9c:d9:cf:74:2b: e2:34:c3:3f:1f:c6:69:58:15:67:6c:26:79:c3:fa: 43:da:66:da:9c:fe:cd:a0:8b:0d:46:ef:e9:ff:30: 2a:ed:8c:1b:4c:88:44:e8:80:8b:b0:5b:9c:24:dd: 37:d0:7c:22:64:ca:68:c7:ff:80:8b:32:81:7c:82: 39:ee:60:88:36:54:5c:c2:e8:fa:16:d9:5d:20:5b: af:3a:16:a5:de:ed:ae:36:1f:d4:f8:ec:39:81:d4: 8f:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:A5:CC:BD:FF:53:37:90:06:9D:B8:E3:D8:FE:56:41:5A:C1:F0:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/df2e2f0f-0ef1-3b15-8474-16e7683a8f30.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 74.125.198.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:8c:be:fd:7e:bd:52:36:12:17:12:b3:7d:62:c0:59:87:92: 76:66:75:9e:c3:7e:8b:69:84:6c:02:81:20:f0:3b:fc:0c:1e: 21:b8:6b:ac:2d:f6:db:bf:80:4a:e9:3f:4e:81:4b:db:4c:a9: 43:dc:69:d3:68:18:37:a9:5d:92:bd:da:a8:7d:d8:5d:3a:16: e7:3d:8e:00:75:e9:7d:dc:c1:a6:dc:45:25:cb:31:2c:ed:b1: 7d:fe:c5:93:61:c1:2d:08:46:a8:37:cb:42:c2:ee:59:e6:f0: e5:80:89:2a:41:a0:1c:db:84:57:0f:73:59:48:b3:c6:0c:3e: de:77:1c:05:11:ee:d1:e2:db:fb:84:49:19:08:bd:74:f3:5e: f8:35:06:e3:45:58:0e:79:2c:a8:e7:ce:5f:d4:72:4a:0c:21: 7b:ff:75:5d:92:5d:fe:6c:15:6a:0d:31:73:1a:4a:83:7e:cf: ce:5e:7f:a0:0b:07:44:2a:eb:22:ae:46:ed:59:c3:6d:48:0b: fa:46:0d:ec:97:b0:40:6b:b8:0e:50:3d:4f:34:fe:23:60:80: bc:a9:11:99:e9:b0:49:fa:3e:ea:4a:60:58:16:db:c8:d2:06: df:a5:9f:48:09:26:31:1b:c9:cb:d5:60:7f:db:83:09:68:71: e5:03:02:7f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjIS9lBREi5H6wANAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDIwNTE0MDA1MVoXDTI1MDUwNjEzMDA1MVowLzEtMCsGA1UEAxMk NDlmYzg2Y2EtMzVjOC00MzA3LWFlNjctN2IwYTEwZmVhZDkzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvViFL8BAQ/7ukgARPWEMf7QXsJDMWlPspzCy n2SmqBpQF223iMI1yv50ipWbtKoMr7vTMakFmxnNLZSQl1K1G3pxVO6BRO7popNG exP9x3J8xhT/O8i7u5eCTO3hq/kAX04UrAPkMbY2oz4Lt/+IEGhivIX3DP1dNj6m tyk/6oOQ65n3GGzsSMHVQMLkkDlRAyEZSG5tMtruS9TvGY/LnNnPdCviNMM/H8Zp WBVnbCZ5w/pD2mbanP7NoIsNRu/p/zAq7YwbTIhE6ICLsFucJN030HwiZMpox/+A izKBfII57mCINlRcwuj6FtldIFuvOhal3u2uNh/U+Ow5gdSPLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO+lzL3/UzeQBp2449j+VkFawfCEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZGYyZTJmMGYtMGVmMS0z YjE1LTg0NzQtMTZlNzY4M2E4ZjMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASn3GMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEWMvv1+vVI2EhcSs31iwFmHknZmdZ7DfotphGwCgSDwO/wMHiG4a6wt 9tu/gErpP06BS9tMqUPcadNoGDepXZK92qh92F06Fuc9jgB16X3cwabcRSXLMSzt sX3+xZNhwS0IRqg3y0LC7lnm8OWAiSpBoBzbhFcPc1lIs8YMPt53HAUR7tHi2/uE SRkIvXTzXvg1BuNFWA55LKjnzl/UckoMIXv/dV2SXf5sFWoNMXMaSoN+z85ef6AL B0Qq6yKuRu1Zw21IC/pGDeyXsEBruA5QPU80/iNggLypEZnpsEn6PupKYFgW28jS Bt+ln0gJJjEbycvVYH/bgwloceUDAn8= -----END CERTIFICATE-----Generated at Fri Apr 4 08:27:17 2025 by rpki-client