$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/f9a9e133-b66d-37bd-bcc0-405b1ae35f2e.roa File: f9a9e133-b66d-37bd-bcc0-405b1ae35f2e.roa (raw, json) Hash identifier: IfXhMLPwAOz1hBZcdlGCSCS4JxSe72N5UzkDR8R0Eog= Subject key identifier: 0E:4F:71:10:98:49:F7:7C:13:45:B8:93:5E:89:0E:59:05:92:A1:2C Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285848C84BC6C28EF4203A3B9F2D00 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/f9a9e133-b66d-37bd-bcc0-405b1ae35f2e.roa Signing time: Wed 05 Feb 2025 14:00:51 +0000 ROA not before: Wed 05 Feb 2025 14:00:51 +0000 ROA not after: Tue 06 May 2025 13:00:51 +0000 asID: 15169 IP address blocks: 74.125.206.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c8:4b:c6:c2:8e:f4:20:3a:3b:9f:2d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Feb 5 14:00:51 2025 GMT Not After : May 6 13:00:51 2025 GMT Subject: CN=abe10891-f146-43a5-b0d0-c1d5c48e2ab7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:08:f2:4a:ca:78:22:a7:6a:bf:f5:9a:c1:13: fd:f8:01:52:83:8a:b1:c7:30:40:a6:c8:19:a0:0b: 1b:e9:d0:6a:b2:e6:01:8f:fa:46:04:f8:22:b5:0a: 3f:34:5c:7c:d9:8f:6d:a3:91:6a:ce:08:f4:46:a0: 36:b6:a8:69:8e:49:1c:de:f1:b2:df:0d:fd:43:3d: 07:d3:24:1f:b2:2b:81:d4:aa:cf:99:9a:5e:81:e6: 5e:31:7e:13:8d:b4:b3:ac:f2:dd:2c:be:1a:3b:2a: de:e4:dc:61:4a:47:ed:3b:99:09:7f:4d:49:03:cd: e4:70:09:05:3d:72:84:9b:3d:0a:16:a9:6a:f7:2d: b8:cd:28:31:23:7e:4b:f1:8f:b5:6d:0f:ae:90:f2: 0e:d3:3a:6f:f2:00:9e:b5:63:63:a8:bb:16:d4:9d: dc:03:44:2e:82:56:94:2c:9a:a2:4d:8f:9a:2f:23: 3d:b3:67:ea:d7:36:43:09:99:b6:df:07:96:91:34: 82:ce:5e:0c:b8:80:8f:2a:b1:bc:dc:2e:d6:90:36: c7:64:4a:ae:69:41:9e:b3:e8:14:df:86:e5:17:0e: 14:13:66:4b:c1:63:70:ad:5c:e9:06:10:6f:20:5d: d6:57:79:79:1a:01:45:3d:33:2a:98:a3:0f:86:4d: 3a:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:4F:71:10:98:49:F7:7C:13:45:B8:93:5E:89:0E:59:05:92:A1:2C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/f9a9e133-b66d-37bd-bcc0-405b1ae35f2e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 74.125.206.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:4d:c9:44:6d:a9:7d:e4:72:77:f9:e0:d7:69:8e:7f:12:91: 11:db:81:20:66:ba:a0:d3:38:30:a1:d7:cb:bb:c2:20:36:97: 2d:fc:93:7e:a8:19:4b:84:e0:9e:0d:d2:1d:0d:85:3d:79:fc: db:ff:34:12:93:6b:61:39:66:50:14:d1:5a:34:77:21:ea:69: 74:2b:e7:58:de:07:e9:cb:e2:71:39:96:6c:7d:97:a9:cd:b0: 6b:85:95:fe:2e:6d:ce:b6:9c:c1:5a:8e:71:d3:26:8f:ed:8e: 3f:38:9f:a9:50:b3:f8:6c:03:07:9c:20:15:8b:50:48:d1:e0: 62:4b:3d:ca:d8:b8:60:f6:88:73:02:3c:43:d4:b8:96:8a:ab: aa:bf:fa:bb:d1:55:ea:d2:45:a3:50:ba:cb:3f:6e:9e:8f:ef: b3:b6:e5:7f:e3:5f:d0:f3:1f:c2:51:c0:29:69:89:74:a7:a8: 50:05:6a:8f:12:f9:36:50:a7:fd:e6:e8:ea:2d:29:e1:e6:3a: 95:78:0c:4c:6b:ca:a1:4b:e8:1d:f5:dd:ad:26:c7:ad:c1:b6: 1e:74:d7:14:b9:6a:7b:9e:62:e6:80:29:b2:ae:c8:4e:f8:56: 36:a2:a0:86:97:09:0b:da:b5:11:72:e4:32:84:1e:c2:dd:66: 30:f4:f4:92 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjIS8bCjvQgOjufLQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDIwNTE0MDA1MVoXDTI1MDUwNjEzMDA1MVowLzEtMCsGA1UEAxMk YWJlMTA4OTEtZjE0Ni00M2E1LWIwZDAtYzFkNWM0OGUyYWI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhAjySsp4Iqdqv/WawRP9+AFSg4qxxzBApsgZ oAsb6dBqsuYBj/pGBPgitQo/NFx82Y9to5Fqzgj0RqA2tqhpjkkc3vGy3w39Qz0H 0yQfsiuB1KrPmZpegeZeMX4TjbSzrPLdLL4aOyre5NxhSkftO5kJf01JA83kcAkF PXKEmz0KFqlq9y24zSgxI35L8Y+1bQ+ukPIO0zpv8gCetWNjqLsW1J3cA0QuglaU LJqiTY+aLyM9s2fq1zZDCZm23weWkTSCzl4MuICPKrG83C7WkDbHZEquaUGes+gU 34blFw4UE2ZLwWNwrVzpBhBvIF3WV3l5GgFFPTMqmKMPhk06KQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA5PcRCYSfd8E0W4k16JDlkFkqEsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZjlhOWUxMzMtYjY2ZC0z N2JkLWJjYzAtNDA1YjFhZTM1ZjJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASn3OMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFZNyURtqX3kcnf54Ndpjn8SkRHbgSBmuqDTODCh18u7wiA2ly38k36o GUuE4J4N0h0NhT15/Nv/NBKTa2E5ZlAU0Vo0dyHqaXQr51jeB+nL4nE5lmx9l6nN sGuFlf4ubc62nMFajnHTJo/tjj84n6lQs/hsAwecIBWLUEjR4GJLPcrYuGD2iHMC PEPUuJaKq6q/+rvRVerSRaNQuss/bp6P77O25X/jX9DzH8JRwClpiXSnqFAFao8S +TZQp/3m6OotKeHmOpV4DExryqFL6B313a0mx63Bth501xS5anueYuaAKbKuyE74 VjaioIaXCQvatRFy5DKEHsLdZjD09JI= -----END CERTIFICATE-----Generated at Fri Mar 14 09:31:35 2025 by rpki-client