$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/25d1bf45-3890-342f-9d44-7731a5a90a08.roa File: 25d1bf45-3890-342f-9d44-7731a5a90a08.roa (raw, json) Hash identifier: RpTNg9uPepFb1Z7HnNHMDlKcPTuFhJ1xEL//+64QJNA= Subject key identifier: BF:F4:58:C6:7F:73:14:E0:E5:01:8F:2B:44:D1:51:78:50:ED:65:36 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584A86DB7B9D9CFCC9B5884B73A8 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/25d1bf45-3890-342f-9d44-7731a5a90a08.roa Signing time: Tue 15 Jul 2025 13:01:04 +0000 ROA not before: Tue 15 Jul 2025 13:01:04 +0000 ROA not after: Mon 13 Oct 2025 13:01:04 +0000 asID: 15169 IP address blocks: 74.125.68.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:86:db:7b:9d:9c:fc:c9:b5:88:4b:73:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jul 15 13:01:04 2025 GMT Not After : Oct 13 13:01:04 2025 GMT Subject: CN=cb916673-9553-4317-9fb1-7840df2c3431 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:62:11:e9:10:9e:0d:b2:8e:49:92:5e:d9:f5: 84:8b:36:0b:77:46:b5:c6:da:68:87:5e:ae:a7:34: 70:6d:58:3e:ba:46:ed:cf:62:1d:27:91:07:04:d0: 45:a4:97:98:b9:11:1d:3c:8d:69:e1:af:b1:d6:52: 01:be:3d:46:de:49:49:af:6a:d2:3c:ef:57:a1:90: fa:41:7b:ca:93:9e:8c:f2:71:eb:47:75:b3:0e:af: 6a:47:75:d6:d4:63:8b:0f:30:c0:bb:e0:64:83:ff: 8c:f1:64:2a:4b:a1:44:21:6a:b8:5c:a9:c2:1b:2e: 27:3a:1c:94:3a:b6:10:21:99:41:2f:8d:9a:4d:2d: f5:c6:f7:73:ba:35:7b:6a:2e:2c:0e:bd:ef:eb:3c: 88:18:2d:1f:06:94:f4:7a:ee:62:92:a5:d4:e3:87: b0:35:4f:44:35:c5:d0:e5:83:fc:5c:76:bc:b4:3e: 60:93:f8:88:2b:ad:c3:1d:2c:3f:72:58:17:31:fd: f1:16:f4:10:ce:77:ae:a5:e4:3b:9e:40:cd:0b:8c: 3f:0d:51:d8:aa:e0:36:f4:af:bd:b0:65:7f:3e:a3: 1f:08:bc:03:06:68:fd:89:8e:86:5d:b4:95:37:f9: 84:d4:ea:d8:fa:83:36:09:a7:cb:ff:07:1b:87:ff: 16:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:F4:58:C6:7F:73:14:E0:E5:01:8F:2B:44:D1:51:78:50:ED:65:36 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/25d1bf45-3890-342f-9d44-7731a5a90a08.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 74.125.68.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:08:cc:11:22:59:bc:7d:00:8e:df:dc:df:6c:3e:07:a2:7d: 3e:76:de:12:12:24:6d:06:f5:dd:78:bb:04:fb:3c:8f:e2:e3: b1:25:c2:27:f5:15:17:43:61:87:e1:56:2d:56:5c:50:f1:c8: cd:e0:79:0d:4a:46:e6:f6:4c:53:b1:d9:a9:3b:d0:9d:19:2a: 34:5b:9d:6f:01:5a:4b:40:fb:13:68:9e:03:41:f3:79:3a:d2: f6:a4:d6:84:5d:2a:d3:d4:b4:8c:2d:9d:af:67:55:49:54:68: c7:95:2f:ad:c0:06:1d:54:99:38:b2:88:92:1b:b1:89:b2:af: 5b:28:2c:96:fe:c6:a6:b3:08:d3:91:39:a8:4e:32:ed:82:d3: d7:eb:e9:dd:1d:57:2d:f1:d2:41:d2:12:79:dc:8e:87:91:89: d3:8c:0b:e3:65:a2:79:f5:18:eb:94:0a:15:0c:31:36:ce:b6: e3:66:76:d5:f6:d2:40:38:42:cb:f2:1f:98:4c:b7:e4:b8:2c: d3:b9:dd:e0:aa:87:ab:99:a6:0c:2a:df:f8:a1:27:e3:4d:c6: 82:9a:db:4c:b8:e8:9a:5b:58:fb:01:f4:4c:3f:e8:60:fe:13: f9:e9:36:84:53:7f:b0:02:d0:86:52:cb:b1:37:c7:e5:ea:f0: 8f:24:05:51 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqG23udnPzJtYhLc6gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDcxNTEzMDEwNFoXDTI1MTAxMzEzMDEwNFowLzEtMCsGA1UEAxMk Y2I5MTY2NzMtOTU1My00MzE3LTlmYjEtNzg0MGRmMmMzNDMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq2IR6RCeDbKOSZJe2fWEizYLd0a1xtpoh16u pzRwbVg+ukbtz2IdJ5EHBNBFpJeYuREdPI1p4a+x1lIBvj1G3klJr2rSPO9XoZD6 QXvKk56M8nHrR3WzDq9qR3XW1GOLDzDAu+Bkg/+M8WQqS6FEIWq4XKnCGy4nOhyU OrYQIZlBL42aTS31xvdzujV7ai4sDr3v6zyIGC0fBpT0eu5ikqXU44ewNU9ENcXQ 5YP8XHa8tD5gk/iIK63DHSw/clgXMf3xFvQQzneupeQ7nkDNC4w/DVHYquA29K+9 sGV/PqMfCLwDBmj9iY6GXbSVN/mE1OrY+oM2CafL/wcbh/8W1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL/0WMZ/cxTg5QGPK0TRUXhQ7WU2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMjVkMWJmNDUtMzg5MC0z NDJmLTlkNDQtNzczMWE1YTkwYTA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASn1EMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEQIzBEiWbx9AI7f3N9sPgeifT523hISJG0G9d14uwT7PI/i47Elwif1 FRdDYYfhVi1WXFDxyM3geQ1KRub2TFOx2ak70J0ZKjRbnW8BWktA+xNongNB83k6 0vak1oRdKtPUtIwtna9nVUlUaMeVL63ABh1UmTiyiJIbsYmyr1soLJb+xqazCNOR OahOMu2C09fr6d0dVy3x0kHSEnncjoeRidOMC+Nlonn1GOuUChUMMTbOtuNmdtX2 0kA4QsvyH5hMt+S4LNO53eCqh6uZpgwq3/ihJ+NNxoKa20y46JpbWPsB9Ew/6GD+ E/npNoRTf7AC0IZSy7E3x+Xq8I8kBVE= -----END CERTIFICATE-----Generated at Mon Aug 4 15:37:51 2025 by rpki-client