$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d4ed2bc0-90b8-394f-a948-4ee35ff19e6d.roa File: d4ed2bc0-90b8-394f-a948-4ee35ff19e6d.roa (raw, json) Hash identifier: 8g36TuP4ZKOTe8fYMKWX+qMuzOAm13I7yNYJPeLcoGI= Subject key identifier: 97:F7:06:76:ED:C1:E6:DD:21:E9:D2:4D:64:37:0C:B7:92:77:2B:0C Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584B6797E15DEFCB0D68F7AD4580 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d4ed2bc0-90b8-394f-a948-4ee35ff19e6d.roa Signing time: Sat 04 Oct 2025 01:00:33 +0000 ROA not before: Sat 04 Oct 2025 01:00:33 +0000 ROA not after: Fri 02 Jan 2026 02:00:33 +0000 asID: 15169 IP address blocks: 74.125.24.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:67:97:e1:5d:ef:cb:0d:68:f7:ad:45:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Oct 4 01:00:33 2025 GMT Not After : Jan 2 02:00:33 2026 GMT Subject: CN=b1bb416b-7b92-4812-9fb7-db621c8c4cd7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:b3:5a:b4:ec:51:5e:31:df:d7:2d:0e:2a:1a: 96:e8:e6:d5:7b:2c:01:ac:6a:bd:74:f3:87:51:68: c8:c9:73:23:74:2f:e1:3a:32:07:b2:73:cd:f4:28: 32:10:30:23:43:3c:2a:55:9d:2b:ca:c2:04:93:2d: 84:a6:4d:60:38:b7:65:b7:38:5f:33:6b:84:b8:3d: a1:d6:ae:7d:45:76:10:63:0c:8a:97:0a:41:8b:15: 82:fa:b8:a8:48:ab:12:bb:d9:9b:c6:88:c7:f9:71: f2:e9:60:cb:98:ec:3c:69:9a:f0:d1:7c:c6:98:91: 63:f2:46:45:8a:63:25:56:96:99:89:f6:49:ec:45: 55:5e:ec:36:50:93:d7:a0:46:5a:af:e3:27:ff:59: 6c:b6:4b:69:7d:1e:41:c5:a7:58:b8:22:7a:1d:05: 98:5f:6e:fb:e3:11:3e:3c:e3:18:d1:46:b0:45:82: 0c:52:d1:ed:c3:7c:5f:8b:a6:08:0e:cf:0f:a8:e9: e9:65:44:71:ff:74:6f:9e:cd:ba:e0:2d:96:3a:f6: 40:02:46:13:41:68:ab:56:85:1f:ef:78:a4:61:1f: d4:f1:b5:35:dd:36:11:b7:11:e3:11:e5:61:3c:d6: 00:9d:c3:6b:f7:c8:fe:0c:43:b1:0f:5d:05:d2:c8: 59:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:F7:06:76:ED:C1:E6:DD:21:E9:D2:4D:64:37:0C:B7:92:77:2B:0C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d4ed2bc0-90b8-394f-a948-4ee35ff19e6d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 74.125.24.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:d4:4f:2a:94:53:d4:da:a6:b2:48:b9:3e:bf:f5:9c:35:37: 78:86:9e:b0:d0:cb:57:12:9e:36:f1:a8:73:33:b8:22:66:f4: 48:e3:e4:5b:c9:d0:79:ec:63:3e:36:2d:b3:6d:65:f4:08:61: 08:58:95:20:4e:60:28:2c:a3:95:bc:d1:59:d3:07:9d:28:8b: b1:07:e2:32:65:96:7c:cf:c1:14:71:2c:79:89:ea:f2:4b:d0: cf:bb:b7:d5:bb:ea:6f:4d:19:5a:b8:7f:66:a7:3a:9b:1d:e4: 87:71:98:91:2c:d1:68:aa:49:10:93:3b:99:01:41:5b:10:b3: 39:b0:99:a4:87:a1:fc:52:13:f4:35:cb:74:a8:cc:4d:a2:10: e7:0b:87:45:f4:a3:4b:91:ec:cf:f4:0f:2b:7d:f2:49:bc:ea: 05:57:b7:95:f6:93:02:7e:84:d7:76:41:f5:d5:2f:ae:73:c7: d0:b8:37:0d:9f:00:dd:04:f2:13:19:1f:0f:3d:73:ee:29:14: bd:55:66:a7:ef:f1:c4:2d:59:b5:4c:65:76:54:38:79:c9:21: 0c:3a:d5:97:88:90:13:86:c7:fc:c4:0e:5b:a8:65:f1:61:90: ec:66:86:64:03:56:38:eb:c3:06:23:f6:37:31:c5:ea:8f:2a: cf:e8:5c:84 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtnl+Fd78sNaPetRYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MTAwNDAxMDAzM1oXDTI2MDEwMjAyMDAzM1owLzEtMCsGA1UEAxMk YjFiYjQxNmItN2I5Mi00ODEyLTlmYjctZGI2MjFjOGM0Y2Q3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmLNatOxRXjHf1y0OKhqW6ObVeywBrGq9dPOH UWjIyXMjdC/hOjIHsnPN9CgyEDAjQzwqVZ0rysIEky2Epk1gOLdltzhfM2uEuD2h 1q59RXYQYwyKlwpBixWC+rioSKsSu9mbxojH+XHy6WDLmOw8aZrw0XzGmJFj8kZF imMlVpaZifZJ7EVVXuw2UJPXoEZar+Mn/1lstktpfR5BxadYuCJ6HQWYX2774xE+ POMY0UawRYIMUtHtw3xfi6YIDs8PqOnpZURx/3Rvns264C2WOvZAAkYTQWirVoUf 73ikYR/U8bU13TYRtxHjEeVhPNYAncNr98j+DEOxD10F0shZ8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJf3BnbtwebdIenSTWQ3DLeSdysMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZDRlZDJiYzAtOTBiOC0z OTRmLWE5NDgtNGVlMzVmZjE5ZTZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASn0YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADLUTyqUU9TaprJIuT6/9Zw1N3iGnrDQy1cSnjbxqHMzuCJm9Ejj5FvJ 0HnsYz42LbNtZfQIYQhYlSBOYCgso5W80VnTB50oi7EH4jJllnzPwRRxLHmJ6vJL 0M+7t9W76m9NGVq4f2anOpsd5IdxmJEs0WiqSRCTO5kBQVsQszmwmaSHofxSE/Q1 y3SozE2iEOcLh0X0o0uR7M/0Dyt98km86gVXt5X2kwJ+hNd2QfXVL65zx9C4Nw2f AN0E8hMZHw89c+4pFL1VZqfv8cQtWbVMZXZUOHnJIQw61ZeIkBOGx/zEDluoZfFh kOxmhmQDVjjrwwYj9jcxxeqPKs/oXIQ= -----END CERTIFICATE-----Generated at Fri Oct 17 12:43:14 2025 by rpki-client