$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/cf9de6ed-2ca4-32e5-901d-ba845a2dce7a.roa File: cf9de6ed-2ca4-32e5-901d-ba845a2dce7a.roa (raw, json) Hash identifier: yDxkEdSlJdBTkCt9zP/Aq1avBc02/ml3s/R1+7p2b4s= Subject key identifier: 8C:66:78:B1:43:44:E6:86:9B:E4:49:86:99:2D:E5:C0:60:8D:21:38 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584B6797AEC5795F18F8E5A4A820 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/cf9de6ed-2ca4-32e5-901d-ba845a2dce7a.roa Signing time: Sat 04 Oct 2025 01:00:33 +0000 ROA not before: Sat 04 Oct 2025 01:00:33 +0000 ROA not after: Fri 02 Jan 2026 02:00:33 +0000 asID: 15169 IP address blocks: 74.125.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:67:97:ae:c5:79:5f:18:f8:e5:a4:a8:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Oct 4 01:00:33 2025 GMT Not After : Jan 2 02:00:33 2026 GMT Subject: CN=406c63df-59a9-4a24-be9a-d12da9952dae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:52:64:62:f6:f3:59:e0:21:8f:9f:5f:8e:41: 1b:b8:e5:34:ea:d7:4e:bc:7b:b3:b7:c3:61:00:55: 8e:59:ae:0c:6b:67:ed:65:65:6e:31:df:31:d0:a3: b9:c2:33:60:ca:f6:cb:d4:73:64:6c:53:fd:fd:f0: eb:4c:54:3a:75:e6:7a:a5:1b:47:b1:66:46:b6:11: 9e:dd:98:04:06:6a:26:01:fd:4c:7a:65:e5:95:50: 13:ab:09:2b:41:2e:d7:44:1c:99:45:b7:7a:0f:13: 49:78:cc:e2:7a:84:aa:7d:3d:bf:7d:8f:bb:84:a4: 95:78:b1:e2:ff:2a:78:f7:aa:1e:b7:33:fd:39:8c: 1e:81:91:03:c8:ca:17:02:4e:e8:2d:6c:62:5d:65: 6f:d2:b0:16:f0:12:2d:0b:f7:25:21:ad:4d:54:fc: 10:9f:0c:bd:03:a5:79:5c:23:b5:10:cf:24:03:51: 95:91:72:56:e4:25:d6:ae:fd:66:e9:9d:4a:60:64: ff:48:5c:fe:78:0c:4c:90:76:f0:6c:ec:f6:4f:7d: 91:a9:c2:32:11:8e:b8:fc:72:5e:41:d7:34:8a:51: ef:4b:b1:77:d1:4e:c8:b8:50:b9:97:94:ad:8e:c9: e8:ba:66:a2:c9:73:2c:03:02:2c:63:09:4f:57:df: 20:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:66:78:B1:43:44:E6:86:9B:E4:49:86:99:2D:E5:C0:60:8D:21:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/cf9de6ed-2ca4-32e5-901d-ba845a2dce7a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 74.125.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:ad:71:40:e8:52:b3:e6:47:b6:04:ba:cb:b2:6f:07:79:ae: d2:88:d8:80:25:e1:7b:13:be:25:c9:44:b8:16:dd:88:65:eb: 48:8d:a3:55:f6:fd:2c:ea:14:bb:26:89:70:9b:88:26:6e:e5: 21:79:b0:45:03:d3:fd:2c:b0:1c:60:49:d6:0e:a2:b5:57:e0: 9c:2d:33:cb:1d:54:4f:c9:53:46:0f:ed:19:a5:09:a0:a3:4d: d2:2b:05:38:ce:7b:4e:32:b1:da:b7:30:39:4a:52:72:64:01: 64:45:f2:8f:6a:76:52:d6:12:75:cf:6c:f3:f9:3e:cb:9c:f5: 90:ae:69:17:bf:85:da:cd:77:82:45:d7:75:b4:2a:d8:80:09: ca:4c:77:5c:1e:bb:2c:70:4f:39:4a:8f:a9:eb:84:1b:18:06: 42:34:23:f7:70:79:55:6f:07:66:5e:f2:05:fd:f3:8b:2b:ff: 01:d7:91:7c:ff:ec:bb:0f:c4:56:e6:16:da:34:e5:c9:30:4a: fc:1a:46:60:08:7e:cd:29:a3:1f:f7:5e:ce:f8:16:03:81:78: 5b:01:90:5c:1d:4d:55:22:33:86:0d:61:f4:70:be:b2:9b:42: f0:fc:f5:20:27:5d:9b:9d:02:05:07:76:4e:f9:64:d9:90:f9: ba:e3:93:fc -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEtnl67FeV8Y+OWkqCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MTAwNDAxMDAzM1oXDTI2MDEwMjAyMDAzM1owLzEtMCsGA1UEAxMk NDA2YzYzZGYtNTlhOS00YTI0LWJlOWEtZDEyZGE5OTUyZGFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArVJkYvbzWeAhj59fjkEbuOU06tdOvHuzt8Nh AFWOWa4Ma2ftZWVuMd8x0KO5wjNgyvbL1HNkbFP9/fDrTFQ6deZ6pRtHsWZGthGe 3ZgEBmomAf1MemXllVATqwkrQS7XRByZRbd6DxNJeMzieoSqfT2/fY+7hKSVeLHi /yp496oetzP9OYwegZEDyMoXAk7oLWxiXWVv0rAW8BItC/clIa1NVPwQnwy9A6V5 XCO1EM8kA1GVkXJW5CXWrv1m6Z1KYGT/SFz+eAxMkHbwbOz2T32RqcIyEY64/HJe Qdc0ilHvS7F30U7IuFC5l5StjsnoumaiyXMsAwIsYwlPV98gBQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFIxmeLFDROaGm+RJhpkt5cBgjSE4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvY2Y5ZGU2ZWQtMmNhNC0z MmU1LTkwMWQtYmE4NDVhMmRjZTdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMASn0wVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAXK1xQOhSs+ZHtgS6y7JvB3mu0ojYgCXhexO+JclEuBbdiGXrSI2jVfb9 LOoUuyaJcJuIJm7lIXmwRQPT/SywHGBJ1g6itVfgnC0zyx1UT8lTRg/tGaUJoKNN 0isFOM57TjKx2rcwOUpScmQBZEXyj2p2UtYSdc9s8/k+y5z1kK5pF7+F2s13gkXX dbQq2IAJykx3XB67LHBPOUqPqeuEGxgGQjQj93B5VW8HZl7yBf3ziyv/AdeRfP/s uw/EVuYW2jTlyTBK/BpGYAh+zSmjH/dezvgWA4F4WwGQXB1NVSIzhg1h9HC+sptC 8Pz1ICddm50CBQd2Tvlk2ZD5uuOT/A== -----END CERTIFICATE-----Generated at Fri Oct 17 08:42:30 2025 by rpki-client