$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/6e290d9e-a21d-3232-9846-a94d6bbc3f12.roa File: 6e290d9e-a21d-3232-9846-a94d6bbc3f12.roa (raw, json) Hash identifier: 3KnTmcvl+5Huv5t6aK7JqK9xh/gFU81vnOXcG57IPgo= Subject key identifier: D5:15:CD:70:70:91:5F:42:A7:09:99:42:A9:EE:51:54:8F:58:F0:96 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584B7DECB47DA59F00D8440F2630 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/6e290d9e-a21d-3232-9846-a94d6bbc3f12.roa Signing time: Sun 12 Oct 2025 01:00:30 +0000 ROA not before: Sun 12 Oct 2025 01:00:30 +0000 ROA not after: Sat 10 Jan 2026 02:00:30 +0000 asID: 15169 IP address blocks: 74.125.207.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7d:ec:b4:7d:a5:9f:00:d8:44:0f:26:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Oct 12 01:00:30 2025 GMT Not After : Jan 10 02:00:30 2026 GMT Subject: CN=83807cc8-f86b-49c2-9e03-2967c668d147 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:14:81:ea:28:90:a0:7a:80:d7:24:e5:36:15: 92:d1:19:19:f3:e6:13:6a:dd:aa:a1:a8:e4:69:17: 34:4d:4d:7b:36:ec:03:e1:07:6f:f8:08:31:0b:01: d1:be:64:f5:20:44:f9:93:1e:f4:a4:60:b5:5f:0d: f9:e0:05:cf:cd:25:2c:e7:54:89:26:8b:6e:cc:d1: 6c:dd:92:40:45:64:83:38:6a:f9:bc:cf:f9:bd:c3: 45:2c:93:6d:c1:89:5d:85:bf:7a:eb:d9:48:38:c7: 08:85:cf:c8:ba:74:3d:ca:88:55:88:fe:ab:a5:3f: 8a:15:41:e8:cf:bc:79:56:82:3d:30:ca:62:5f:70: b2:00:bf:2f:ce:44:94:f9:8c:78:e0:27:43:fb:3f: a5:1f:d6:e8:d2:53:4f:d0:c5:7e:13:87:0a:1e:6a: e0:d3:3b:e1:b5:cd:d3:55:e1:96:f5:30:11:7f:a1: 06:75:37:ab:50:0b:ba:ea:dc:30:6e:29:13:24:3b: 19:88:c0:21:c7:ba:a5:70:7f:02:ac:e5:f3:a4:14: d8:54:85:3e:a0:ee:02:ef:63:db:56:11:0a:0a:de: 01:14:de:f5:f2:5e:d2:b2:c7:68:3e:6c:4f:87:74: a3:89:36:a6:f7:61:4c:54:25:ef:86:0a:91:fe:b2: 9e:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:15:CD:70:70:91:5F:42:A7:09:99:42:A9:EE:51:54:8F:58:F0:96 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/6e290d9e-a21d-3232-9846-a94d6bbc3f12.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 74.125.207.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:9f:b1:ff:0e:ac:cb:d9:c6:d7:ef:61:0d:a7:41:5b:16:87: f7:9c:0f:74:e3:a0:97:8b:04:36:bf:d1:38:7f:72:9a:3f:26: fc:ec:72:b7:7a:d3:18:e8:d3:1d:11:5f:7d:87:d8:e7:56:8c: 56:d1:05:e3:ba:9e:48:43:85:50:b5:a3:39:91:90:64:da:4b: a2:b4:e7:54:1f:99:b0:58:cd:88:09:a2:f5:60:20:8f:dc:5a: 52:ec:79:d7:07:29:86:cf:f9:a4:b7:f7:20:fe:65:df:87:6a: fa:36:34:f6:22:ef:f2:d7:a0:50:a9:ef:73:b9:9f:16:fa:27: 39:71:98:12:63:51:ae:ff:de:b8:d1:5b:62:3d:c2:47:81:87: ec:ca:61:22:87:37:11:03:65:92:bb:7e:8c:40:ad:e5:c6:db: b7:98:08:8d:ad:66:aa:fa:d6:59:4c:36:3a:33:dd:bb:10:b8: 77:ab:89:7e:5f:d1:1c:5e:a8:61:3e:cd:3b:51:7e:e3:07:4c: 48:ae:6d:50:ee:96:eb:4a:a7:aa:f2:d7:08:3f:ba:c3:eb:b5: 6a:f2:16:da:e0:da:32:fa:0a:c0:43:43:0b:d8:ac:f8:a0:54: b2:37:0f:66:30:e6:ce:8a:c3:28:18:8f:41:90:6b:1f:39:73: cf:bc:c0:fd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt97LR9pZ8A2EQPJjAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MTAxMjAxMDAzMFoXDTI2MDExMDAyMDAzMFowLzEtMCsGA1UEAxMk ODM4MDdjYzgtZjg2Yi00OWMyLTllMDMtMjk2N2M2NjhkMTQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsBSB6iiQoHqA1yTlNhWS0RkZ8+YTat2qoajk aRc0TU17NuwD4Qdv+AgxCwHRvmT1IET5kx70pGC1Xw354AXPzSUs51SJJotuzNFs 3ZJARWSDOGr5vM/5vcNFLJNtwYldhb9669lIOMcIhc/IunQ9yohViP6rpT+KFUHo z7x5VoI9MMpiX3CyAL8vzkSU+Yx44CdD+z+lH9bo0lNP0MV+E4cKHmrg0zvhtc3T VeGW9TARf6EGdTerUAu66twwbikTJDsZiMAhx7qlcH8CrOXzpBTYVIU+oO4C72Pb VhEKCt4BFN718l7SssdoPmxPh3SjiTam92FMVCXvhgqR/rKeowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNUVzXBwkV9CpwmZQqnuUVSPWPCWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNmUyOTBkOWUtYTIxZC0z MjMyLTk4NDYtYTk0ZDZiYmMzZjEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASn3PMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHifsf8OrMvZxtfvYQ2nQVsWh/ecD3TjoJeLBDa/0Th/cpo/Jvzscrd6 0xjo0x0RX32H2OdWjFbRBeO6nkhDhVC1ozmRkGTaS6K051QfmbBYzYgJovVgII/c WlLsedcHKYbP+aS39yD+Zd+Havo2NPYi7/LXoFCp73O5nxb6JzlxmBJjUa7/3rjR W2I9wkeBh+zKYSKHNxEDZZK7foxAreXG27eYCI2tZqr61llMNjoz3bsQuHeriX5f 0RxeqGE+zTtRfuMHTEiubVDulutKp6ry1wg/usPrtWryFtrg2jL6CsBDQwvYrPig VLI3D2Yw5s6KwygYj0GQax85c8+8wP0= -----END CERTIFICATE-----Generated at Fri Oct 17 08:42:09 2025 by rpki-client