$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/df2e2f0f-0ef1-3b15-8474-16e7683a8f30.roa File: df2e2f0f-0ef1-3b15-8474-16e7683a8f30.roa (raw, json) Hash identifier: 8E0k5fNUmf1omyR3ZM+zb7cUaPFu/J95lkB3lENlCwo= Subject key identifier: AF:C6:26:8A:E3:0C:D4:29:B0:0E:C1:C9:8D:EF:9B:43:7B:9B:2D:CB Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584B6797843BC452715D6D668C40 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/df2e2f0f-0ef1-3b15-8474-16e7683a8f30.roa Signing time: Sat 04 Oct 2025 01:00:33 +0000 ROA not before: Sat 04 Oct 2025 01:00:33 +0000 ROA not after: Fri 02 Jan 2026 02:00:33 +0000 asID: 15169 IP address blocks: 74.125.198.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:67:97:84:3b:c4:52:71:5d:6d:66:8c:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Oct 4 01:00:33 2025 GMT Not After : Jan 2 02:00:33 2026 GMT Subject: CN=b1d7a820-67ec-4111-86f4-c3e0b7d832e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:22:7a:f4:f5:ae:e6:4d:31:f2:84:a6:c0:ef: 1d:20:e3:de:49:8a:1f:fa:7b:2f:3b:79:c9:75:db: c9:87:0f:f3:19:ed:05:c1:20:2c:53:17:62:1e:dd: 9c:94:71:30:5a:d1:25:6b:bb:d6:e6:68:6d:a9:84: c7:d4:e5:24:27:3a:ab:59:a5:66:9d:4d:4b:a7:cb: d3:11:bf:df:5a:fb:36:e4:dc:51:34:5c:d8:fa:9f: 73:d4:07:db:20:dd:ec:4e:4c:a0:b2:0c:f3:21:ed: 32:5f:f7:7c:ae:c7:3b:bb:22:a1:c5:2c:ea:1d:d3: 59:b0:a2:53:e8:ca:95:37:ea:53:f8:c0:94:cc:53: c5:4e:05:fb:97:30:b4:f6:c2:87:27:ba:0f:91:70: ab:15:4b:bc:64:a9:03:93:55:90:9c:6d:f3:53:d5: 3d:cd:d0:3f:b1:b9:ab:3c:61:be:c4:b4:61:ae:cc: dc:fe:85:79:8f:9d:12:d3:ec:4e:b3:8f:88:02:77: e8:b4:89:27:9b:7c:dd:2b:8a:43:c3:af:2f:58:07: 22:93:16:11:60:93:91:26:84:bb:ff:54:40:3c:ce: 02:8e:44:d0:8e:fa:36:85:2c:6c:a6:32:0b:2c:46: fb:89:ac:e1:37:d6:7f:3b:1b:8b:f6:fb:48:f9:33: 7f:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:C6:26:8A:E3:0C:D4:29:B0:0E:C1:C9:8D:EF:9B:43:7B:9B:2D:CB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/df2e2f0f-0ef1-3b15-8474-16e7683a8f30.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 74.125.198.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:74:32:03:84:92:92:d0:a8:4f:0c:67:82:2c:a5:ea:32:75: a2:cb:d6:06:44:da:3d:11:1d:7c:b9:e8:5c:d9:17:e2:36:2a: a5:76:dc:1e:7a:ee:12:15:90:7a:8b:bf:0c:bd:4b:51:ad:20: d0:19:fb:09:53:e9:4f:b0:f9:61:ef:71:43:69:63:30:55:92: 18:bb:1c:f8:28:18:f7:d3:bf:01:af:35:37:7c:c2:17:2e:de: 67:9d:19:92:dd:18:39:a4:3b:f7:0a:10:e8:86:cc:81:99:26: b0:b5:b6:18:b0:ae:1a:11:9b:e0:5f:73:c0:4b:5e:34:b8:44: 87:96:42:e5:4a:24:b0:cc:d8:36:2f:fa:ff:a8:67:cc:1f:08: f5:f1:2a:22:02:22:12:18:f5:0f:ce:11:03:34:1a:06:95:a7: c2:8d:58:ac:0f:a7:d1:c1:23:f6:e8:bd:a5:4f:37:18:a1:14: f3:0c:12:ec:17:d4:ce:6f:61:e9:83:82:7c:40:59:42:7f:7b: a3:58:bd:09:1b:2c:d1:6a:df:24:53:3a:f2:06:d3:08:79:24: 56:ec:36:a4:7d:5c:91:84:6c:77:96:f8:92:d5:e1:c2:66:eb: 92:c2:22:72:1f:22:06:cb:89:f6:b1:1b:9d:2a:71:63:f2:b7: db:73:e3:f8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtnl4Q7xFJxXW1mjEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MTAwNDAxMDAzM1oXDTI2MDEwMjAyMDAzM1owLzEtMCsGA1UEAxMk YjFkN2E4MjAtNjdlYy00MTExLTg2ZjQtYzNlMGI3ZDgzMmU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmyJ69PWu5k0x8oSmwO8dIOPeSYof+nsvO3nJ ddvJhw/zGe0FwSAsUxdiHt2clHEwWtEla7vW5mhtqYTH1OUkJzqrWaVmnU1Lp8vT Eb/fWvs25NxRNFzY+p9z1AfbIN3sTkygsgzzIe0yX/d8rsc7uyKhxSzqHdNZsKJT 6MqVN+pT+MCUzFPFTgX7lzC09sKHJ7oPkXCrFUu8ZKkDk1WQnG3zU9U9zdA/sbmr PGG+xLRhrszc/oV5j50S0+xOs4+IAnfotIknm3zdK4pDw68vWAcikxYRYJORJoS7 /1RAPM4CjkTQjvo2hSxspjILLEb7iazhN9Z/OxuL9vtI+TN/jwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK/GJorjDNQpsA7ByY3vm0N7my3LMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZGYyZTJmMGYtMGVmMS0z YjE1LTg0NzQtMTZlNzY4M2E4ZjMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASn3GMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIt0MgOEkpLQqE8MZ4IspeoydaLL1gZE2j0RHXy56FzZF+I2KqV23B56 7hIVkHqLvwy9S1GtINAZ+wlT6U+w+WHvcUNpYzBVkhi7HPgoGPfTvwGvNTd8whcu 3medGZLdGDmkO/cKEOiGzIGZJrC1thiwrhoRm+Bfc8BLXjS4RIeWQuVKJLDM2DYv +v+oZ8wfCPXxKiICIhIY9Q/OEQM0GgaVp8KNWKwPp9HBI/bovaVPNxihFPMMEuwX 1M5vYemDgnxAWUJ/e6NYvQkbLNFq3yRTOvIG0wh5JFbsNqR9XJGEbHeW+JLV4cJm 65LCInIfIgbLifaxG50qcWPyt9tz4/g= -----END CERTIFICATE-----Generated at Fri Oct 17 08:42:10 2025 by rpki-client