$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/ba44d5a2-83a0-3c80-8d21-57f890a3d06d.roa File: ba44d5a2-83a0-3c80-8d21-57f890a3d06d.roa (raw, json) Hash identifier: qn+/qcfBbsf/wDbMlFK+bMbKG1EpfS3MzkY5YzSL4qU= Subject key identifier: 32:2B:9F:E5:6A:9E:09:84:AE:7D:9E:5A:65:12:DA:1D:89:8D:46:0B Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584B679774ABDD93E68C43829A80 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/ba44d5a2-83a0-3c80-8d21-57f890a3d06d.roa Signing time: Sat 04 Oct 2025 01:00:33 +0000 ROA not before: Sat 04 Oct 2025 01:00:33 +0000 ROA not after: Fri 02 Jan 2026 02:00:33 +0000 asID: 15169 IP address blocks: 74.125.134.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:67:97:74:ab:dd:93:e6:8c:43:82:9a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Oct 4 01:00:33 2025 GMT Not After : Jan 2 02:00:33 2026 GMT Subject: CN=0bf84c72-bbb8-4069-9135-33a84b13dcc7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:ee:b1:c1:6c:e4:0d:c8:67:04:86:04:5e:9d: 83:80:dc:c1:33:31:b2:78:d2:54:97:6b:90:de:eb: 70:5a:e7:7a:2b:49:8f:44:cd:c3:2c:da:e3:d6:e0: 0b:28:d6:66:1a:6c:f9:da:3e:71:26:db:b1:40:dd: ed:ca:2f:ef:e7:09:d9:36:dd:9d:1d:8e:f2:ee:9c: 96:ab:c9:95:45:00:23:4f:87:0f:32:79:79:1f:db: a1:12:71:ea:49:2e:28:4c:90:9f:95:99:4c:49:25: 27:60:7d:be:aa:6f:ba:20:5f:d8:30:d0:6e:1e:b9: 51:e8:c3:c6:1a:bb:bb:3b:c0:ab:34:6b:68:04:8c: 1d:50:b2:ad:6b:1e:7f:07:4c:f1:08:94:f1:0b:8d: 42:05:77:90:e4:39:4d:25:43:bc:da:4c:2f:6b:b8: 6b:db:fc:2b:2f:35:2a:36:c9:95:9c:5d:b7:2a:91: d7:9a:55:cf:3c:33:f6:7d:e0:a3:7d:c8:5f:e5:cc: 63:a3:55:44:78:26:a7:cf:34:b6:1b:4a:46:19:ea: 95:8a:56:c3:29:a2:63:10:78:95:ba:11:39:75:e9: c6:66:27:03:18:3e:68:08:58:a1:e5:21:cf:5c:60: ce:1a:67:b1:3d:6b:96:fc:6e:04:f3:9d:39:78:f1: 98:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:2B:9F:E5:6A:9E:09:84:AE:7D:9E:5A:65:12:DA:1D:89:8D:46:0B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/ba44d5a2-83a0-3c80-8d21-57f890a3d06d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 74.125.134.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:10:02:b3:9c:90:82:ee:5f:43:71:a5:fb:f0:80:07:91:be: ce:89:53:e1:7d:f7:d2:d1:ec:80:bc:1e:9f:c4:b2:51:4b:4a: 8d:02:66:07:7d:a8:54:44:c7:4f:d4:35:d2:02:ca:4f:94:50: 36:bf:a1:25:f9:38:34:23:c1:fb:3b:9e:e1:95:52:74:14:c2: 61:ba:49:a5:d2:4b:dc:a8:78:2b:6f:01:f7:17:42:18:cd:be: 64:86:13:42:28:0b:57:91:c4:66:c9:83:f1:f0:24:8b:36:d8: cf:24:2f:1d:67:04:c3:99:4f:57:89:b4:d4:d1:e3:af:cb:b9: 1d:b7:e3:91:4c:b7:05:27:a3:a4:0e:8f:b0:16:5d:c8:66:b0: db:37:55:4a:92:7e:87:8e:1e:0c:a1:69:68:c2:0d:d3:58:2f: 2d:65:16:1b:cb:89:be:67:46:e2:78:d4:60:36:53:3e:c4:8f: 4e:c0:6d:70:23:52:f4:7c:10:c6:8e:f6:9c:37:7d:26:64:1f: 3d:d4:0e:b8:d9:7b:db:3d:70:10:5b:93:8b:77:14:0b:e9:b0: 20:90:56:b8:a3:7b:29:c4:f1:a8:48:e7:1e:d7:23:92:c5:e5: 06:23:bd:61:42:8a:44:9d:31:b4:20:66:04:c9:5c:6f:09:7c: a2:3f:cd:32 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtnl3Sr3ZPmjEOCmoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MTAwNDAxMDAzM1oXDTI2MDEwMjAyMDAzM1owLzEtMCsGA1UEAxMk MGJmODRjNzItYmJiOC00MDY5LTkxMzUtMzNhODRiMTNkY2M3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnu6xwWzkDchnBIYEXp2DgNzBMzGyeNJUl2uQ 3utwWud6K0mPRM3DLNrj1uALKNZmGmz52j5xJtuxQN3tyi/v5wnZNt2dHY7y7pyW q8mVRQAjT4cPMnl5H9uhEnHqSS4oTJCflZlMSSUnYH2+qm+6IF/YMNBuHrlR6MPG Gru7O8CrNGtoBIwdULKtax5/B0zxCJTxC41CBXeQ5DlNJUO82kwva7hr2/wrLzUq NsmVnF23KpHXmlXPPDP2feCjfchf5cxjo1VEeCanzzS2G0pGGeqVilbDKaJjEHiV uhE5denGZicDGD5oCFih5SHPXGDOGmexPWuW/G4E8505ePGYpQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDIrn+VqngmErn2eWmUS2h2JjUYLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYmE0NGQ1YTItODNhMC0z YzgwLThkMjEtNTdmODkwYTNkMDZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASn2GMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACEQArOckILuX0NxpfvwgAeRvs6JU+F999LR7IC8Hp/EslFLSo0CZgd9 qFREx0/UNdICyk+UUDa/oSX5ODQjwfs7nuGVUnQUwmG6SaXSS9yoeCtvAfcXQhjN vmSGE0IoC1eRxGbJg/HwJIs22M8kLx1nBMOZT1eJtNTR46/LuR2345FMtwUno6QO j7AWXchmsNs3VUqSfoeOHgyhaWjCDdNYLy1lFhvLib5nRuJ41GA2Uz7Ej07AbXAj UvR8EMaO9pw3fSZkHz3UDrjZe9s9cBBbk4t3FAvpsCCQVrijeynE8ahI5x7XI5LF 5QYjvWFCikSdMbQgZgTJXG8JfKI/zTI= -----END CERTIFICATE-----Generated at Fri Oct 17 08:42:01 2025 by rpki-client