$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/029c48da-3306-30e5-b410-416996624d8c.roa File: 029c48da-3306-30e5-b410-416996624d8c.roa (raw, json) Hash identifier: OxBVdLrbV6XMLBR/C/l7Ij06uSa3kT6CX6bDn+9ysKo= Subject key identifier: FC:E4:C5:F7:C9:21:3F:F4:AB:7B:4B:60:5B:A9:37:74:4C:3D:84:12 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584A86DBE3E681BFD95E9589C380 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/029c48da-3306-30e5-b410-416996624d8c.roa Signing time: Tue 15 Jul 2025 13:01:04 +0000 ROA not before: Tue 15 Jul 2025 13:01:04 +0000 ROA not after: Mon 13 Oct 2025 13:01:04 +0000 asID: 15169 IP address blocks: 74.125.238.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:86:db:e3:e6:81:bf:d9:5e:95:89:c3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jul 15 13:01:04 2025 GMT Not After : Oct 13 13:01:04 2025 GMT Subject: CN=8ea7ce14-50e6-4e8b-9b58-06a5c1552019 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:3f:c2:3b:6c:d3:a3:3a:59:1d:d9:90:17:b4: 7f:bc:3d:2e:60:f1:2a:88:2f:76:d4:8f:8c:fd:75: f9:f9:67:c4:ff:7b:67:86:4b:fb:3b:9d:e3:c2:7c: fd:ac:be:cb:ee:16:a1:ff:13:ca:57:62:57:d4:6c: a6:f8:ca:cb:e8:44:f5:1d:45:00:c1:73:c8:c2:d7: 24:77:c3:5a:16:41:42:36:5a:25:81:b0:df:e7:85: d7:fd:ca:09:43:35:74:ec:0f:89:18:15:ff:f2:0a: 80:62:c7:91:80:2c:7a:43:16:5e:a8:17:56:27:de: f2:a7:f0:33:f1:ba:06:af:8a:07:8d:3b:56:69:93: 1e:d5:6b:2a:12:7e:f9:6b:b2:9f:16:bb:fa:46:1b: 9b:39:59:74:3b:9b:1c:0f:b7:2f:da:98:46:d7:b8: 77:36:a1:24:ab:f6:a2:36:e1:e4:92:78:c1:5b:e0: 25:01:47:f8:b7:32:3f:28:64:e9:92:a8:d9:56:2b: 96:e7:7b:92:72:f6:ef:77:a0:95:fc:d5:5e:69:88: 66:a5:3f:12:c4:70:37:5c:a2:49:eb:7d:db:1f:ba: 59:19:27:6e:ab:72:fd:9e:4d:55:3d:23:92:16:b8: d2:a6:5f:56:e2:6a:a1:c7:ae:53:21:a7:ea:a7:42: de:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:E4:C5:F7:C9:21:3F:F4:AB:7B:4B:60:5B:A9:37:74:4C:3D:84:12 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/029c48da-3306-30e5-b410-416996624d8c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 74.125.238.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:ad:af:41:4c:33:f0:85:42:44:e6:49:29:a4:25:d2:19:0e: e7:60:b0:14:31:4f:53:c4:a2:26:7c:39:4e:5d:0d:10:1e:e7: 28:44:ac:ad:d0:b2:d1:76:d7:ba:9d:7c:b3:5b:ee:33:1f:a0: 68:98:68:d1:18:f2:a4:5f:78:4f:16:82:da:b9:73:27:4c:31: c0:d7:f2:36:a5:03:f2:46:7c:cd:77:46:eb:86:39:0a:43:95: bd:5d:2f:68:12:bd:85:b4:ad:e5:25:1e:e3:b7:b1:20:67:6e: 89:74:70:3a:24:61:ec:bf:5d:bb:5c:d2:8f:ee:e0:1c:7e:a3: 36:c0:18:c2:08:81:1f:bf:71:78:a6:9e:38:6b:cb:38:5d:37: 35:6a:e1:a6:c5:e3:be:3b:c3:98:49:b6:03:85:43:75:29:bc: b3:d3:49:48:2d:04:fe:be:8e:65:81:06:aa:3c:dd:1a:f0:90: 57:40:52:9f:5a:cc:d8:f7:7b:8f:d0:c3:56:96:10:a6:46:31: ad:78:0b:ee:62:f0:b1:12:1f:1e:6d:ef:a5:ec:68:05:68:70: 2b:42:a6:a9:1b:ce:b7:bb:f4:1b:5b:d5:28:41:99:cc:bd:b1: 27:5c:cf:dd:14:4c:a5:78:0c:95:aa:c4:06:1d:9c:5a:92:51: 67:e0:18:d6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqG2+Pmgb/ZXpWJw4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDcxNTEzMDEwNFoXDTI1MTAxMzEzMDEwNFowLzEtMCsGA1UEAxMk OGVhN2NlMTQtNTBlNi00ZThiLTliNTgtMDZhNWMxNTUyMDE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhz/CO2zTozpZHdmQF7R/vD0uYPEqiC921I+M /XX5+WfE/3tnhkv7O53jwnz9rL7L7hah/xPKV2JX1Gym+MrL6ET1HUUAwXPIwtck d8NaFkFCNlolgbDf54XX/coJQzV07A+JGBX/8gqAYseRgCx6QxZeqBdWJ97yp/Az 8boGr4oHjTtWaZMe1WsqEn75a7KfFrv6RhubOVl0O5scD7cv2phG17h3NqEkq/ai NuHkknjBW+AlAUf4tzI/KGTpkqjZViuW53uScvbvd6CV/NVeaYhmpT8SxHA3XKJJ 633bH7pZGSduq3L9nk1VPSOSFrjSpl9W4mqhx65TIafqp0LepQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPzkxffJIT/0q3tLYFupN3RMPYQSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMDI5YzQ4ZGEtMzMwNi0z MGU1LWI0MTAtNDE2OTk2NjI0ZDhjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASn3uMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABetr0FMM/CFQkTmSSmkJdIZDudgsBQxT1PEoiZ8OU5dDRAe5yhErK3Q stF217qdfLNb7jMfoGiYaNEY8qRfeE8Wgtq5cydMMcDX8jalA/JGfM13RuuGOQpD lb1dL2gSvYW0reUlHuO3sSBnbol0cDokYey/Xbtc0o/u4Bx+ozbAGMIIgR+/cXim njhryzhdNzVq4abF4747w5hJtgOFQ3UpvLPTSUgtBP6+jmWBBqo83RrwkFdAUp9a zNj3e4/Qw1aWEKZGMa14C+5i8LESHx5t76XsaAVocCtCpqkbzre79Btb1ShBmcy9 sSdcz90UTKV4DJWqxAYdnFqSUWfgGNY= -----END CERTIFICATE-----Generated at Tue Aug 5 17:22:40 2025 by rpki-client