$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/9c122302-21bd-3181-b59e-e7f1bb857cc0.roa File: 9c122302-21bd-3181-b59e-e7f1bb857cc0.roa (raw, json) Hash identifier: t5UCM4wfTiJCdr6ZfoUyHKsqcoNcMth2E0iC/PMJhjE= Subject key identifier: 2D:6E:CA:D2:06:18:A5:90:9B:AD:19:32:30:44:8E:E1:29:F6:B5:07 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584B67978E1859D785D697F99600 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/9c122302-21bd-3181-b59e-e7f1bb857cc0.roa Signing time: Sat 04 Oct 2025 01:00:33 +0000 ROA not before: Sat 04 Oct 2025 01:00:33 +0000 ROA not after: Fri 02 Jan 2026 02:00:33 +0000 asID: 15169 IP address blocks: 74.125.152.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:67:97:8e:18:59:d7:85:d6:97:f9:96:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Oct 4 01:00:33 2025 GMT Not After : Jan 2 02:00:33 2026 GMT Subject: CN=3e86e4a1-a1a6-42f4-9612-883f1917bee7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:09:1c:e1:00:ed:8f:64:6c:0e:3f:92:a6:84: 49:36:18:15:8e:42:af:3b:33:4b:f8:de:7d:e6:8c: d0:0b:fa:51:89:ae:0c:ae:e3:bf:dc:86:a1:91:2a: ff:b7:ae:48:0d:3b:13:e7:56:82:32:ef:3c:08:40: e9:a9:17:70:65:e9:46:c9:1c:c9:34:a7:fe:55:11: 5c:e4:56:f1:40:3e:08:26:96:11:5d:c6:7e:ad:f1: 49:f2:0f:2f:d6:d5:a4:e3:5e:49:58:68:aa:df:d1: 46:fb:19:cf:71:ad:29:c1:07:20:57:5f:7b:ed:b6: 1d:f1:e3:d0:30:20:85:1e:53:45:08:05:1d:1c:15: 26:69:5b:f9:d3:ea:3d:97:f9:b0:26:1f:06:2a:a8: ad:cd:35:ac:0e:14:ef:82:f6:33:0c:e5:b2:df:40: 71:90:c8:fc:bd:3c:f2:18:83:db:60:70:5a:4b:86: e8:62:95:f4:7a:ba:84:63:4f:6c:17:34:f8:e1:72: 79:fc:44:6b:3c:2a:fd:16:ae:3e:c3:73:68:6e:dd: 88:2c:52:2b:d0:29:51:ec:10:4d:91:7b:46:8d:e2: 32:c9:51:f9:c6:dc:2f:75:59:07:2a:42:cb:83:7a: e3:b5:2a:65:f3:54:b1:af:f6:f5:18:d1:76:99:4a: c8:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:6E:CA:D2:06:18:A5:90:9B:AD:19:32:30:44:8E:E1:29:F6:B5:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/9c122302-21bd-3181-b59e-e7f1bb857cc0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 74.125.152.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:fa:11:9c:4b:80:9d:1c:2c:1f:6b:26:50:b6:3c:99:26:99: c2:d4:d0:ac:5f:36:c9:67:d2:39:21:d9:39:c0:9a:f4:45:fb: ff:1c:c3:ba:f5:95:71:74:4a:ac:06:76:75:14:bb:67:86:a8: 04:9f:68:b7:44:4b:53:4c:a7:f0:d2:b7:8d:3c:d8:50:33:ad: 0c:98:e6:26:95:f2:c8:dd:c0:6f:20:d3:34:3b:4f:13:c7:a4: 91:da:e1:0a:a8:98:66:41:79:dc:ce:bb:a6:15:7a:ec:97:a1: 4c:dc:f8:a1:10:da:e5:5c:81:8b:1b:5c:7b:93:e7:38:17:94: f7:49:06:62:9f:7a:9c:cd:df:84:cd:aa:c2:a2:f5:b7:bc:d3: 01:2a:16:7a:38:54:c0:8b:48:a4:9f:20:24:aa:73:03:cc:11: da:ea:0c:4b:15:39:2c:74:a8:53:b8:c9:03:65:a4:41:a2:65: 74:c5:e5:ce:77:a3:08:93:b3:4b:dc:d4:ce:5b:bd:13:f0:7b: 7a:c4:6f:3c:db:9b:53:05:76:a8:84:48:f4:eb:2e:9d:4e:9b: 04:70:fd:9f:d6:2a:aa:2f:5e:b3:0e:f2:ca:47:ab:2b:da:5e: a5:d3:b2:86:ab:82:64:30:33:2c:79:e7:13:67:fc:3a:db:5c: 23:33:0f:49 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtnl44YWdeF1pf5lgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MTAwNDAxMDAzM1oXDTI2MDEwMjAyMDAzM1owLzEtMCsGA1UEAxMk M2U4NmU0YTEtYTFhNi00MmY0LTk2MTItODgzZjE5MTdiZWU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhwkc4QDtj2RsDj+SpoRJNhgVjkKvOzNL+N59 5ozQC/pRia4MruO/3IahkSr/t65IDTsT51aCMu88CEDpqRdwZelGyRzJNKf+VRFc 5FbxQD4IJpYRXcZ+rfFJ8g8v1tWk415JWGiq39FG+xnPca0pwQcgV1977bYd8ePQ MCCFHlNFCAUdHBUmaVv50+o9l/mwJh8GKqitzTWsDhTvgvYzDOWy30BxkMj8vTzy GIPbYHBaS4boYpX0erqEY09sFzT44XJ5/ERrPCr9Fq4+w3Nobt2ILFIr0ClR7BBN kXtGjeIyyVH5xtwvdVkHKkLLg3rjtSpl81Sxr/b1GNF2mUrIDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC1uytIGGKWQm60ZMjBEjuEp9rUHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvOWMxMjIzMDItMjFiZC0z MTgxLWI1OWUtZTdmMWJiODU3Y2MwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDSn2YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABT6EZxLgJ0cLB9rJlC2PJkmmcLU0KxfNsln0jkh2TnAmvRF+/8cw7r1 lXF0SqwGdnUUu2eGqASfaLdES1NMp/DSt4082FAzrQyY5iaV8sjdwG8g0zQ7TxPH pJHa4QqomGZBedzOu6YVeuyXoUzc+KEQ2uVcgYsbXHuT5zgXlPdJBmKfepzN34TN qsKi9be80wEqFno4VMCLSKSfICSqcwPMEdrqDEsVOSx0qFO4yQNlpEGiZXTF5c53 owiTs0vc1M5bvRPwe3rEbzzbm1MFdqiESPTrLp1OmwRw/Z/WKqovXrMO8spHqyva XqXTsoargmQwMyx55xNn/DrbXCMzD0k= -----END CERTIFICATE-----Generated at Fri Oct 17 08:47:41 2025 by rpki-client