$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/25d1bf45-3890-342f-9d44-7731a5a90a08.roa File: 25d1bf45-3890-342f-9d44-7731a5a90a08.roa (raw, json) Hash identifier: WLgwTnwErXlIapkMyE+WTXO5r6ulNcv2KW2ZBj0POTw= Subject key identifier: 49:C3:85:6A:B5:7A:F4:52:77:7A:E1:7C:F2:AC:51:0A:77:D9:72:90 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584B67974B8E7428F0474BBAA980 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/25d1bf45-3890-342f-9d44-7731a5a90a08.roa Signing time: Sat 04 Oct 2025 01:00:33 +0000 ROA not before: Sat 04 Oct 2025 01:00:33 +0000 ROA not after: Fri 02 Jan 2026 02:00:33 +0000 asID: 15169 IP address blocks: 74.125.68.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:67:97:4b:8e:74:28:f0:47:4b:ba:a9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Oct 4 01:00:33 2025 GMT Not After : Jan 2 02:00:33 2026 GMT Subject: CN=28f6b3b5-7314-4a59-82bd-7df43d196b10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:1c:74:63:df:c2:34:0b:15:06:39:97:ec:c9: 26:e9:f9:18:57:00:d3:ea:73:e7:23:81:cf:3a:bb: b6:c4:49:de:bf:be:62:e0:ab:7b:3a:7f:8e:6e:d8: b0:c4:7e:64:65:d3:01:aa:68:a3:a8:73:1d:dc:75: ea:a9:2e:e8:ce:28:81:f8:80:60:04:04:2f:06:2a: 6f:83:13:07:d6:72:61:86:6c:27:f7:60:e2:45:d9: 4b:5d:0b:7c:de:97:c4:5c:7f:56:7c:20:06:c5:4b: 7d:1c:fb:36:e7:8f:90:c1:cd:c8:61:f6:9d:ce:13: 3e:e6:e7:1d:79:7a:4f:37:d4:7a:c1:45:30:17:1a: 42:24:36:8e:f6:35:ad:1d:1c:c3:66:51:71:e9:14: c4:f9:59:8b:43:08:4a:74:70:80:7e:22:38:fa:c6: 98:f1:55:cf:f6:0c:0d:3b:f7:57:4d:f7:27:b9:65: bd:26:82:20:9f:92:94:0c:39:6a:8b:1a:b2:97:82: 2d:7d:96:ac:ea:f7:02:e2:1c:80:2e:9c:9c:d6:fa: 59:6b:86:98:9e:cc:76:8f:b1:e4:c2:3f:c2:68:40: e6:8c:86:eb:b7:2c:6e:a1:7b:05:81:2a:85:e9:85: c3:ee:b1:9e:e8:e7:fc:b5:7c:ec:30:f0:f8:da:37: 19:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:C3:85:6A:B5:7A:F4:52:77:7A:E1:7C:F2:AC:51:0A:77:D9:72:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/25d1bf45-3890-342f-9d44-7731a5a90a08.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 74.125.68.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:be:9e:03:c5:9e:6a:1d:a7:9e:02:88:a0:74:c6:22:46:ce: 83:f6:b6:22:ea:a5:46:bb:61:79:80:fd:30:c8:c3:61:79:97: 90:7a:5a:50:92:d5:72:5c:69:4c:a3:15:17:22:63:69:f4:d1: fa:3c:4f:82:12:78:e2:ff:28:75:09:ee:09:d4:e5:44:c7:80: c6:08:16:2c:99:fb:8c:b9:d2:aa:01:72:7d:bd:f8:12:01:15: ee:59:49:5e:59:1b:20:e0:02:3c:10:4e:d2:5b:9e:25:4f:ce: aa:ae:27:fe:5b:4a:b1:3f:fd:b5:1a:10:57:39:2f:fc:59:64: 1b:f5:77:1f:ee:8e:d7:eb:d9:c5:59:5b:36:7d:3e:e4:1f:40: 78:d1:fb:3c:dc:eb:83:74:2f:a9:8b:1e:3c:6a:e1:c9:ec:29: 72:75:f8:c7:7c:d5:f7:1e:ae:c7:9d:af:38:95:25:5a:68:8d: d2:2d:01:b0:72:62:0c:a7:16:0b:80:87:f5:f2:4c:fb:05:45: b9:e3:92:7b:34:95:f2:ef:97:83:2f:f4:e0:02:4b:68:c3:af: 4a:90:7c:3f:f9:50:ea:bd:7d:30:48:68:c7:d4:87:62:67:44: f7:5c:6f:42:00:c2:b9:4d:82:01:82:df:d9:ca:2d:e9:50:58: 8a:5a:3a:37 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtnl0uOdCjwR0u6qYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MTAwNDAxMDAzM1oXDTI2MDEwMjAyMDAzM1owLzEtMCsGA1UEAxMk MjhmNmIzYjUtNzMxNC00YTU5LTgyYmQtN2RmNDNkMTk2YjEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuhx0Y9/CNAsVBjmX7Mkm6fkYVwDT6nPnI4HP Oru2xEnev75i4Kt7On+ObtiwxH5kZdMBqmijqHMd3HXqqS7oziiB+IBgBAQvBipv gxMH1nJhhmwn92DiRdlLXQt83pfEXH9WfCAGxUt9HPs254+Qwc3IYfadzhM+5ucd eXpPN9R6wUUwFxpCJDaO9jWtHRzDZlFx6RTE+VmLQwhKdHCAfiI4+saY8VXP9gwN O/dXTfcnuWW9JoIgn5KUDDlqixqyl4ItfZas6vcC4hyALpyc1vpZa4aYnsx2j7Hk wj/CaEDmjIbrtyxuoXsFgSqF6YXD7rGe6Of8tXzsMPD42jcZwwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEnDhWq1evRSd3rhfPKsUQp32XKQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMjVkMWJmNDUtMzg5MC0z NDJmLTlkNDQtNzczMWE1YTkwYTA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASn1EMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEK+ngPFnmodp54CiKB0xiJGzoP2tiLqpUa7YXmA/TDIw2F5l5B6WlCS 1XJcaUyjFRciY2n00fo8T4ISeOL/KHUJ7gnU5UTHgMYIFiyZ+4y50qoBcn29+BIB Fe5ZSV5ZGyDgAjwQTtJbniVPzqquJ/5bSrE//bUaEFc5L/xZZBv1dx/ujtfr2cVZ WzZ9PuQfQHjR+zzc64N0L6mLHjxq4cnsKXJ1+Md81fcersedrziVJVpojdItAbBy YgynFguAh/XyTPsFRbnjkns0lfLvl4Mv9OACS2jDr0qQfD/5UOq9fTBIaMfUh2Jn RPdcb0IAwrlNggGC39nKLelQWIpaOjc= -----END CERTIFICATE-----Generated at Fri Oct 17 08:44:55 2025 by rpki-client