$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/c3af61be-d608-31cf-8e45-94b0de256680.roa File: c3af61be-d608-31cf-8e45-94b0de256680.roa (raw, json) Hash identifier: hvE2m9jrM6r+bdD9e6FhO523313AxV0O3b6Mk1rPyBs= Subject key identifier: 58:47:45:4A:08:59:D6:66:61:A2:92:EE:57:81:E8:DF:B7:60:CA:03 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584B6797A8C393C54AA194CCB500 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/c3af61be-d608-31cf-8e45-94b0de256680.roa Signing time: Sat 04 Oct 2025 01:00:33 +0000 ROA not before: Sat 04 Oct 2025 01:00:33 +0000 ROA not after: Fri 02 Jan 2026 02:00:33 +0000 asID: 15169 IP address blocks: 74.125.130.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:67:97:a8:c3:93:c5:4a:a1:94:cc:b5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Oct 4 01:00:33 2025 GMT Not After : Jan 2 02:00:33 2026 GMT Subject: CN=af960c7c-09b8-43ea-ab06-7143eb2f67d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:14:9e:f1:aa:70:db:9a:f3:1a:45:67:4f:f7: 87:6e:67:ba:66:63:09:88:2d:87:09:fb:2e:53:61: f9:68:bf:cc:c2:22:60:02:58:01:08:ca:ce:60:bc: 35:25:7c:f4:03:79:90:7b:1f:99:f6:21:88:f5:86: db:d7:1a:e2:59:4a:b4:89:17:bf:c0:5b:09:79:96: 30:cf:fd:ac:40:3d:7b:0b:bb:3e:f3:9c:20:02:02: 34:86:48:3c:2d:e1:1c:90:4c:0b:46:a6:2a:8a:ff: 91:f5:10:65:2c:f7:b2:3d:a8:1e:a0:89:35:d9:95: d2:a1:58:1e:5f:a9:47:6d:98:b2:24:34:d4:df:52: 75:ea:15:1f:2f:e7:9d:2c:97:d8:06:28:6f:e6:19: 1b:88:85:8f:f0:0f:7a:c1:ef:b1:b7:c2:72:e4:1d: a8:eb:43:d4:ae:ee:71:ca:b7:95:09:1d:3a:35:f6: 93:ef:d8:81:ee:a4:2a:dc:f5:55:8c:f5:0d:38:52: 2e:fe:73:83:79:ff:a5:0f:3d:fa:0d:b3:b0:6f:9f: f9:35:32:25:67:b3:a1:fd:41:db:f1:00:f4:81:23: 5d:c8:50:ae:15:95:c1:7f:8b:a5:bc:8a:3a:51:fc: 8e:d3:ef:a8:ed:80:9c:06:52:4c:01:d6:bc:62:69: 71:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:47:45:4A:08:59:D6:66:61:A2:92:EE:57:81:E8:DF:B7:60:CA:03 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/c3af61be-d608-31cf-8e45-94b0de256680.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 74.125.130.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:e5:64:98:a9:27:dd:78:9d:93:28:df:d0:9e:83:ba:5c:0e: e7:7d:cb:5c:c7:f4:5c:e4:57:72:53:a4:51:95:20:0b:27:5b: 4f:9c:08:5e:a3:e7:62:8c:f2:fb:f5:4f:b6:15:dd:ba:fb:0e: 32:9d:c2:2b:b2:62:19:2c:a3:e6:c6:40:dc:14:15:d1:14:cf: 83:5c:a6:13:5f:da:be:47:53:57:5d:f3:f2:29:34:e1:eb:84: a8:a0:3c:20:08:ef:d7:75:2c:6c:ff:21:3b:87:82:b0:75:08: 95:6a:6d:51:9d:5a:23:fd:81:7c:95:d8:19:3f:c6:8d:a4:86: 2e:1e:43:4e:60:df:f8:95:0d:75:21:75:a7:0b:bf:b8:8c:bd: 9a:32:d9:d5:5f:02:67:ac:1c:9e:06:ed:69:6c:f8:31:db:3c: 02:39:33:46:78:af:a6:3b:87:ea:25:18:ea:87:d1:80:a5:ad: 1c:d1:d5:3d:da:47:13:fa:f7:f3:15:42:0a:d4:c9:c1:1a:0d: a2:46:f2:4e:76:4b:5b:e7:1c:eb:3e:48:6b:ea:c1:9a:06:24: 3f:ab:78:cd:bc:ee:0e:09:e8:b0:6a:a0:63:0b:5e:b6:d1:12: 75:3e:48:d2:a3:b8:74:73:66:2d:51:21:c7:cf:3a:50:c5:e2: 36:19:94:f6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtnl6jDk8VKoZTMtQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MTAwNDAxMDAzM1oXDTI2MDEwMjAyMDAzM1owLzEtMCsGA1UEAxMk YWY5NjBjN2MtMDliOC00M2VhLWFiMDYtNzE0M2ViMmY2N2QyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiBSe8apw25rzGkVnT/eHbme6ZmMJiC2HCfsu U2H5aL/MwiJgAlgBCMrOYLw1JXz0A3mQex+Z9iGI9Ybb1xriWUq0iRe/wFsJeZYw z/2sQD17C7s+85wgAgI0hkg8LeEckEwLRqYqiv+R9RBlLPeyPageoIk12ZXSoVge X6lHbZiyJDTU31J16hUfL+edLJfYBihv5hkbiIWP8A96we+xt8Jy5B2o60PUru5x yreVCR06NfaT79iB7qQq3PVVjPUNOFIu/nODef+lDz36DbOwb5/5NTIlZ7Oh/UHb 8QD0gSNdyFCuFZXBf4ulvIo6UfyO0++o7YCcBlJMAda8YmlxLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFhHRUoIWdZmYaKS7leB6N+3YMoDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYzNhZjYxYmUtZDYwOC0z MWNmLThlNDUtOTRiMGRlMjU2NjgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASn2CMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABTlZJipJ914nZMo39Ceg7pcDud9y1zH9FzkV3JTpFGVIAsnW0+cCF6j 52KM8vv1T7YV3br7DjKdwiuyYhkso+bGQNwUFdEUz4NcphNf2r5HU1dd8/IpNOHr hKigPCAI79d1LGz/ITuHgrB1CJVqbVGdWiP9gXyV2Bk/xo2khi4eQ05g3/iVDXUh dacLv7iMvZoy2dVfAmesHJ4G7Wls+DHbPAI5M0Z4r6Y7h+olGOqH0YClrRzR1T3a RxP69/MVQgrUycEaDaJG8k52S1vnHOs+SGvqwZoGJD+reM287g4J6LBqoGMLXrbR EnU+SNKjuHRzZi1RIcfPOlDF4jYZlPY= -----END CERTIFICATE-----Generated at Fri Oct 17 08:44:58 2025 by rpki-client