$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/1c68adcb-e030-30cd-9cd4-6a7353a50978.roa File: 1c68adcb-e030-30cd-9cd4-6a7353a50978.roa (raw, json) Hash identifier: 4nukaqO/H7Wabg6jvKJu/bHIYTMK6LSwT2DKb4Z2pm0= Subject key identifier: 73:CB:0A:46:B6:F8:BD:AE:8B:76:9B:73:21:10:87:88:45:82:CD:BA Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584B6797663297BF559D1C55F040 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/1c68adcb-e030-30cd-9cd4-6a7353a50978.roa Signing time: Sat 04 Oct 2025 01:00:33 +0000 ROA not before: Sat 04 Oct 2025 01:00:33 +0000 ROA not after: Fri 02 Jan 2026 02:00:33 +0000 asID: 15169 IP address blocks: 74.125.142.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:67:97:66:32:97:bf:55:9d:1c:55:f0:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Oct 4 01:00:33 2025 GMT Not After : Jan 2 02:00:33 2026 GMT Subject: CN=4ecf80ff-13ff-4470-b916-4ed552bf80a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:01:76:24:7e:ff:0d:f9:b0:73:a0:9e:dd:7b: 1d:4a:a1:6c:c6:d4:55:39:e7:33:a2:a3:5e:d3:e0: 54:9e:d3:fb:40:7e:72:04:38:b8:6f:6c:39:85:37: 9f:40:f9:5b:32:b3:2c:a4:4b:d0:af:41:cd:5f:0f: 1a:b6:9e:55:cb:29:d9:3b:b8:eb:b5:ac:b9:51:33: b9:64:a1:3c:02:c6:bb:2a:4b:aa:aa:f9:dd:18:88: a7:46:43:03:b4:c2:db:5a:87:ee:9b:36:2d:38:0c: 42:9f:23:7b:4b:dc:ec:ef:5d:23:bc:bb:7c:af:d6: e1:13:d6:5a:48:d2:10:7a:50:35:4c:8d:97:6d:cb: e1:60:b3:b5:8c:22:a8:74:ff:22:b3:a7:be:da:d8: 91:a8:e1:c2:ea:2f:b1:4f:27:22:ee:fb:20:30:7b: a1:8e:34:d0:54:9f:e7:4f:5f:31:14:b5:16:17:24: d3:c6:43:02:89:5e:fb:54:86:12:c7:44:b6:77:57: a5:c1:0c:3c:23:77:0a:ea:97:9c:d8:c0:64:02:46: c0:6e:e2:7e:ff:ac:b8:31:6e:ae:be:77:c1:c6:c1: b6:69:c8:84:8a:88:6d:76:1a:14:8a:c3:57:87:c2: 58:1b:32:41:0d:f6:f6:9e:8a:02:72:f1:53:42:4d: 37:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:CB:0A:46:B6:F8:BD:AE:8B:76:9B:73:21:10:87:88:45:82:CD:BA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/1c68adcb-e030-30cd-9cd4-6a7353a50978.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 74.125.142.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:11:b8:9f:c3:93:b4:c5:23:0b:c5:41:26:d3:93:79:00:91: b0:96:87:da:01:5a:2c:38:c5:e4:dd:d9:80:2e:ec:05:7a:61: 60:1a:33:da:04:e1:ed:a6:c1:40:f3:e2:a4:48:df:be:fd:d3: fc:67:7c:22:c9:b1:9e:d6:ee:9a:af:19:b6:27:73:15:74:05: 8d:a2:4b:bf:bf:e8:8b:9a:90:b1:13:3e:f1:0f:14:8c:ad:0e: d3:17:6e:b2:d9:9d:47:dd:35:61:b2:13:2b:47:0e:2f:38:33: 60:30:60:7a:b9:1a:92:af:66:aa:98:6b:ba:8c:c8:f9:8a:fb: d1:71:51:50:4a:75:80:3b:8d:24:2d:fa:7f:bb:97:38:ee:6b: 3e:4c:4e:68:c0:00:2e:16:d6:33:97:60:a8:07:6b:db:00:8c: 85:60:bd:c1:0b:93:39:97:ce:38:fe:13:73:f4:c4:75:69:d2: 60:1e:45:a1:ed:80:02:70:64:87:90:6f:f6:29:2c:87:5d:03: d9:1e:b8:2b:62:50:f5:b0:da:3b:5c:e7:80:e1:b3:ab:f9:e8: e4:81:f8:ed:6c:a4:47:e7:e8:46:28:28:66:55:a8:0b:09:8d: 15:2c:aa:3c:78:fe:75:b1:d8:4a:31:eb:69:90:33:f2:5a:7a: 32:ab:08:67 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtnl2Yyl79VnRxV8EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MTAwNDAxMDAzM1oXDTI2MDEwMjAyMDAzM1owLzEtMCsGA1UEAxMk NGVjZjgwZmYtMTNmZi00NDcwLWI5MTYtNGVkNTUyYmY4MGEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuwF2JH7/Dfmwc6Ce3XsdSqFsxtRVOeczoqNe 0+BUntP7QH5yBDi4b2w5hTefQPlbMrMspEvQr0HNXw8atp5VyynZO7jrtay5UTO5 ZKE8Asa7KkuqqvndGIinRkMDtMLbWofumzYtOAxCnyN7S9zs710jvLt8r9bhE9Za SNIQelA1TI2XbcvhYLO1jCKodP8is6e+2tiRqOHC6i+xTyci7vsgMHuhjjTQVJ/n T18xFLUWFyTTxkMCiV77VIYSx0S2d1elwQw8I3cK6pec2MBkAkbAbuJ+/6y4MW6u vnfBxsG2aciEiohtdhoUisNXh8JYGzJBDfb2nooCcvFTQk03zwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHPLCka2+L2ui3abcyEQh4hFgs26MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMWM2OGFkY2ItZTAzMC0z MGNkLTljZDQtNmE3MzUzYTUwOTc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASn2OMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABkRuJ/Dk7TFIwvFQSbTk3kAkbCWh9oBWiw4xeTd2YAu7AV6YWAaM9oE 4e2mwUDz4qRI37790/xnfCLJsZ7W7pqvGbYncxV0BY2iS7+/6IuakLETPvEPFIyt DtMXbrLZnUfdNWGyEytHDi84M2AwYHq5GpKvZqqYa7qMyPmK+9FxUVBKdYA7jSQt +n+7lzjuaz5MTmjAAC4W1jOXYKgHa9sAjIVgvcELkzmXzjj+E3P0xHVp0mAeRaHt gAJwZIeQb/YpLIddA9keuCtiUPWw2jtc54Dhs6v56OSB+O1spEfn6EYoKGZVqAsJ jRUsqjx4/nWx2Eox62mQM/JaejKrCGc= -----END CERTIFICATE-----Generated at Wed Nov 5 01:02:12 2025 by rpki-client