$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/2f56d89a-42ea-3608-8547-7b9075281609.roa File: 2f56d89a-42ea-3608-8547-7b9075281609.roa (raw, json) Hash identifier: ai7yi4mmEoaqVq7zehY1vRdJHDRTBbZ38dRqKaqAtuA= Subject key identifier: C3:7C:46:49:2F:1B:DD:D9:E1:DE:FC:2C:D5:03:17:1B:52:98:50:71 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584B7DECB5B81087C128B0591E60 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/2f56d89a-42ea-3608-8547-7b9075281609.roa Signing time: Sun 12 Oct 2025 01:00:30 +0000 ROA not before: Sun 12 Oct 2025 01:00:30 +0000 ROA not after: Sat 10 Jan 2026 02:00:30 +0000 asID: 15169 IP address blocks: 74.125.29.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7d:ec:b5:b8:10:87:c1:28:b0:59:1e:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Oct 12 01:00:30 2025 GMT Not After : Jan 10 02:00:30 2026 GMT Subject: CN=5e7d8d1f-38bc-4d1a-ae01-e43747b87119 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:b4:ac:42:84:aa:50:ca:a5:8f:80:26:48:70: ac:51:a6:ed:a2:1d:33:26:7c:9c:fc:ac:fd:b8:7a: 71:19:e0:f4:2a:68:89:e9:48:61:a1:f2:a8:97:e7: f3:e1:b8:b3:71:2c:40:99:66:50:5b:3d:fe:ec:2c: 76:22:b9:45:87:bc:e7:40:b4:21:34:cf:b4:ac:90: 29:9c:6e:78:70:9d:0d:0a:21:61:81:19:a9:37:04: b4:a3:5d:34:cd:4e:79:2f:b2:96:2e:5a:b2:32:37: 1b:1f:6c:4c:2d:76:56:9e:50:f2:66:03:e6:ff:04: 5e:7e:b4:49:34:5f:bb:fb:42:3c:3c:03:3e:f9:f4: 19:6c:9a:8f:58:8d:b5:f8:d3:ac:00:db:11:09:c3: 69:61:93:3f:74:53:2b:6d:18:21:10:03:2f:c8:12: 94:b4:18:01:b9:dd:c5:f6:f2:7f:12:f9:0f:79:5e: 80:5d:ba:e6:d6:22:34:b1:48:10:7c:4c:b4:c4:5b: b6:10:04:d5:c7:9c:79:cc:e9:dd:8d:91:cf:92:e6: 49:66:e0:5d:7a:dc:21:0c:38:c3:23:b1:3e:7f:4f: cc:cd:e7:0e:97:bb:ce:7e:55:8c:ef:1f:9a:f4:b9: 4a:19:2b:07:d4:52:ab:73:7a:c1:ba:76:c2:29:55: 1a:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:7C:46:49:2F:1B:DD:D9:E1:DE:FC:2C:D5:03:17:1B:52:98:50:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/2f56d89a-42ea-3608-8547-7b9075281609.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 74.125.29.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9c:d8:7c:3c:4a:49:d7:2a:dc:02:79:92:1b:6d:30:97:ea:0a: 7f:57:ce:eb:75:3b:85:68:af:df:8f:a9:1a:03:9a:ee:e4:59: fc:f7:e6:fc:9a:da:d0:8e:71:21:17:49:7a:bf:c7:f5:48:50: 5e:36:16:75:61:dc:f0:7c:2e:c5:9b:5e:92:6e:cc:bc:e5:03: 4b:d6:0d:e6:4b:8e:35:a1:a9:d9:d8:71:c3:4d:e6:9e:a2:6f: 96:3d:7e:80:e1:a9:77:00:55:14:aa:cb:cc:12:8e:ef:4b:cc: 09:32:1f:6b:b4:a9:93:5b:a9:1f:76:43:21:d6:33:f8:7e:4e: 4d:ff:a1:57:6e:5b:6f:a7:59:bd:40:79:9b:fc:bd:eb:a3:94: a5:63:0f:0a:9c:0a:e2:91:04:6d:26:4f:dc:16:52:b2:54:0b: 75:6d:1f:1c:2c:20:c2:96:92:40:7b:81:72:7b:f1:9b:8e:b0: 3e:2f:ae:a8:c9:42:a6:ea:4d:ff:f9:40:6b:81:93:3a:ae:bc: 12:69:ee:d9:67:c1:3b:f5:81:fe:e2:11:4e:d0:cc:7e:cb:be: a6:35:f0:57:e4:d3:29:7b:e7:49:fb:8c:a2:b7:4e:c6:0e:bc: 2a:5c:c4:75:22:fb:0a:6c:43:77:dc:d9:2f:e6:bd:ce:ce:db: 4e:a4:ce:9a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt97LW4EIfBKLBZHmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MTAxMjAxMDAzMFoXDTI2MDExMDAyMDAzMFowLzEtMCsGA1UEAxMk NWU3ZDhkMWYtMzhiYy00ZDFhLWFlMDEtZTQzNzQ3Yjg3MTE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmrSsQoSqUMqlj4AmSHCsUabtoh0zJnyc/Kz9 uHpxGeD0KmiJ6UhhofKol+fz4bizcSxAmWZQWz3+7Cx2IrlFh7znQLQhNM+0rJAp nG54cJ0NCiFhgRmpNwS0o100zU55L7KWLlqyMjcbH2xMLXZWnlDyZgPm/wRefrRJ NF+7+0I8PAM++fQZbJqPWI21+NOsANsRCcNpYZM/dFMrbRghEAMvyBKUtBgBud3F 9vJ/EvkPeV6AXbrm1iI0sUgQfEy0xFu2EATVx5x5zOndjZHPkuZJZuBdetwhDDjD I7E+f0/MzecOl7vOflWM7x+a9LlKGSsH1FKrc3rBunbCKVUa5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMN8RkkvG93Z4d78LNUDFxtSmFBxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMmY1NmQ4OWEtNDJlYS0z NjA4LTg1NDctN2I5MDc1MjgxNjA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASn0dMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJzYfDxKSdcq3AJ5khttMJfqCn9Xzut1O4Vor9+PqRoDmu7kWfz35vya 2tCOcSEXSXq/x/VIUF42FnVh3PB8LsWbXpJuzLzlA0vWDeZLjjWhqdnYccNN5p6i b5Y9foDhqXcAVRSqy8wSju9LzAkyH2u0qZNbqR92QyHWM/h+Tk3/oVduW2+nWb1A eZv8veujlKVjDwqcCuKRBG0mT9wWUrJUC3VtHxwsIMKWkkB7gXJ78ZuOsD4vrqjJ QqbqTf/5QGuBkzquvBJp7tlnwTv1gf7iEU7QzH7LvqY18Ffk0yl750n7jKK3TsYO vCpcxHUi+wpsQ3fc2S/mvc7O206kzpo= -----END CERTIFICATE-----Generated at Fri Oct 17 08:47:39 2025 by rpki-client