$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a838f9f3-0bc7-3996-9c53-4f361a3393f2.roa File: a838f9f3-0bc7-3996-9c53-4f361a3393f2.roa (raw, json) Hash identifier: xmmGMqoM+NxNHeZbokwJH2qPwGjdglOPmaBxU6WF/Q4= Subject key identifier: 73:5B:14:ED:2B:D2:6C:88:C7:7B:33:8F:6F:CF:B7:37:7B:89:93:77 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584B6797CA7011690DD55DDB3600 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a838f9f3-0bc7-3996-9c53-4f361a3393f2.roa Signing time: Sat 04 Oct 2025 01:00:33 +0000 ROA not before: Sat 04 Oct 2025 01:00:33 +0000 ROA not after: Fri 02 Jan 2026 02:00:33 +0000 asID: 15169 IP address blocks: 74.125.232.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:67:97:ca:70:11:69:0d:d5:5d:db:36:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Oct 4 01:00:33 2025 GMT Not After : Jan 2 02:00:33 2026 GMT Subject: CN=10a1e197-b7bf-4c95-bcba-ef1349630f1e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:df:a6:8f:b1:a7:51:23:92:ed:47:04:20:e8: b7:33:be:77:9f:d8:a3:4b:f7:a7:ea:42:f6:c0:d8: a4:c1:5a:70:ff:59:33:a5:49:6d:c0:5f:e8:2d:bf: 1e:70:e7:92:5f:47:ff:7d:66:e7:2a:f1:18:38:a7: cf:c4:d9:4c:c2:30:d7:7c:69:92:fb:74:23:2a:a7: ee:fc:b1:be:62:de:8f:d2:7b:a8:22:ba:59:01:3d: ca:2a:64:91:a5:d9:f2:33:63:42:2f:48:90:7f:33: 2f:73:df:97:3e:51:d5:c3:11:c5:d2:ee:bb:9d:82: ee:cd:9a:7d:b4:9d:90:ea:f8:a1:36:05:c3:d9:25: 5d:af:1f:1d:54:45:04:e0:ff:a7:64:3f:6b:5c:67: 13:dd:b2:61:4e:25:9f:58:8c:91:95:69:b5:90:bb: 3c:2c:71:3a:f2:9c:bd:f9:e2:5e:88:c4:7a:03:ab: a2:96:74:f6:1f:9e:1b:44:ea:df:eb:7c:db:61:2d: 6f:9b:48:9d:96:ad:18:af:fe:d8:33:10:13:6b:66: 48:71:ea:66:1d:75:08:6d:af:fa:73:81:4f:0b:b7: a3:49:8b:d9:12:20:40:4d:fa:73:34:74:e1:2e:b6: f6:f6:0d:25:89:b7:12:31:38:8a:20:e2:63:d3:4c: 7f:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:5B:14:ED:2B:D2:6C:88:C7:7B:33:8F:6F:CF:B7:37:7B:89:93:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a838f9f3-0bc7-3996-9c53-4f361a3393f2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 74.125.232.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:76:50:aa:49:5d:c7:45:2f:15:5c:cb:aa:a8:9c:a0:99:a0: 46:d8:d5:2b:34:ff:55:f2:23:3a:2e:aa:01:bc:40:08:3e:58: 96:90:1f:3c:78:a1:f2:14:62:5d:cf:69:0b:95:9d:af:f5:d4: 4a:3f:32:9a:23:b7:32:bf:df:e5:1d:a0:43:f9:78:86:a1:c3: 0c:bc:61:2f:83:b6:b4:a3:eb:b1:76:3b:d1:16:9d:3f:05:dd: e7:eb:f8:c9:b8:4b:dd:70:ee:d7:d8:cf:d5:87:6c:62:ee:29: db:58:c3:d8:30:31:7d:b4:73:3a:b6:e6:0c:d5:96:79:f3:29: 03:1f:34:35:29:47:d3:50:86:3d:80:48:0f:8e:db:2d:98:54: e4:9d:ee:4b:f2:b7:9e:b4:25:6a:ef:5d:1f:f3:95:22:53:03: ea:80:29:75:4e:bf:ca:57:0d:a3:6a:62:15:06:19:4b:a0:00: 77:0f:09:5a:8c:16:37:db:4f:78:d0:54:73:fb:e2:b2:b0:99: 96:57:0c:5b:89:fe:86:a2:72:a8:90:6f:3d:56:ad:f7:e0:ad: a3:b7:f3:d6:98:63:d0:6a:90:e6:fd:24:cd:32:e8:d4:cd:b2: 68:f6:19:52:3e:52:da:e9:d2:55:14:62:b0:81:dc:8b:f1:b9: c6:c4:2c:5d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtnl8pwEWkN1V3bNgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MTAwNDAxMDAzM1oXDTI2MDEwMjAyMDAzM1owLzEtMCsGA1UEAxMk MTBhMWUxOTctYjdiZi00Yzk1LWJjYmEtZWYxMzQ5NjMwZjFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAst+mj7GnUSOS7UcEIOi3M753n9ijS/en6kL2 wNikwVpw/1kzpUltwF/oLb8ecOeSX0f/fWbnKvEYOKfPxNlMwjDXfGmS+3QjKqfu /LG+Yt6P0nuoIrpZAT3KKmSRpdnyM2NCL0iQfzMvc9+XPlHVwxHF0u67nYLuzZp9 tJ2Q6vihNgXD2SVdrx8dVEUE4P+nZD9rXGcT3bJhTiWfWIyRlWm1kLs8LHE68py9 +eJeiMR6A6uilnT2H54bROrf63zbYS1vm0idlq0Yr/7YMxATa2ZIcepmHXUIba/6 c4FPC7ejSYvZEiBATfpzNHThLrb29g0libcSMTiKIOJj00x/5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHNbFO0r0myIx3szj2/Ptzd7iZN3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYTgzOGY5ZjMtMGJjNy0z OTk2LTljNTMtNGYzNjFhMzM5M2YyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASn3oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAd2UKpJXcdFLxVcy6qonKCZoEbY1Ss0/1XyIzouqgG8QAg+WJaQHzx4 ofIUYl3PaQuVna/11Eo/MpojtzK/3+UdoEP5eIahwwy8YS+DtrSj67F2O9EWnT8F 3efr+Mm4S91w7tfYz9WHbGLuKdtYw9gwMX20czq25gzVlnnzKQMfNDUpR9NQhj2A SA+O2y2YVOSd7kvyt560JWrvXR/zlSJTA+qAKXVOv8pXDaNqYhUGGUugAHcPCVqM FjfbT3jQVHP74rKwmZZXDFuJ/oaicqiQbz1WrffgraO389aYY9BqkOb9JM0y6NTN smj2GVI+Utrp0lUUYrCB3IvxucbELF0= -----END CERTIFICATE-----Generated at Fri Oct 17 08:42:29 2025 by rpki-client