$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/41e31434-ac45-31db-8c5b-9234aa20878a.roa File: 41e31434-ac45-31db-8c5b-9234aa20878a.roa (raw, json) Hash identifier: vQYVfo1flGW2WCXVfdRn20BoBkCow2c5Ts8l465T+rU= Subject key identifier: AB:02:45:7A:B5:FA:E3:D6:0B:7E:E3:A5:E2:2E:B1:74:79:4F:9B:8D Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584A86DBDF36D4D633C72AD61A80 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/41e31434-ac45-31db-8c5b-9234aa20878a.roa Signing time: Tue 15 Jul 2025 13:01:04 +0000 ROA not before: Tue 15 Jul 2025 13:01:04 +0000 ROA not after: Mon 13 Oct 2025 13:01:04 +0000 asID: 15169 IP address blocks: 74.125.39.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:86:db:df:36:d4:d6:33:c7:2a:d6:1a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jul 15 13:01:04 2025 GMT Not After : Oct 13 13:01:04 2025 GMT Subject: CN=32bf4131-b962-42cf-8e99-9de41d6b7a03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:ba:83:a7:ab:e3:42:8f:b9:63:ba:83:68:70: e7:b3:0b:16:8a:ac:4f:dc:a6:da:ef:0a:e2:d0:46: 73:37:c7:6a:42:82:92:be:8b:5e:67:09:a6:ef:b4: b2:b5:49:bd:62:52:32:f9:cf:6d:bd:f2:87:20:35: 44:12:9f:37:50:9d:fa:3b:14:52:48:63:fb:da:33: 41:47:ae:7c:4e:69:6d:97:21:99:84:b3:3a:24:ae: 6a:68:00:5b:2a:db:25:ea:88:69:bd:18:75:e8:e5: 12:cd:25:5c:ad:05:2d:aa:66:b1:4c:51:67:ec:94: ec:47:f0:8f:b2:60:8d:6d:2b:e6:ac:5d:e2:d5:ec: 26:db:d3:d6:b5:8d:0d:5f:d6:db:9f:dc:7c:af:86: e9:5f:a1:2b:f7:9d:23:b3:33:c5:7d:74:23:c2:d0: c8:66:f6:a6:e2:2a:ae:99:a0:9c:db:20:42:4f:b6: 6c:6f:2b:e8:ca:3c:f6:ea:49:cf:d2:4d:5f:72:9e: 5c:e1:93:06:5e:46:9e:0b:21:fe:8f:b4:3e:bd:e6: 14:0a:4d:51:b8:0f:c3:9d:0b:db:71:70:e7:b5:30: 44:2c:f8:b3:ad:eb:d5:52:98:23:7a:b4:40:75:5d: 9e:66:e5:f2:6f:de:31:f4:15:65:bf:12:5e:0f:35: 8e:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:02:45:7A:B5:FA:E3:D6:0B:7E:E3:A5:E2:2E:B1:74:79:4F:9B:8D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/41e31434-ac45-31db-8c5b-9234aa20878a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 74.125.39.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:ea:3d:04:de:6e:ea:16:58:c6:3c:f0:26:cb:21:8e:54:26: ba:f2:f2:1a:37:44:bc:00:24:ae:20:5c:db:37:6f:56:c1:8f: f6:69:c6:0f:c5:1b:5b:53:70:76:50:9b:61:d9:0c:2a:a4:31: 53:99:d2:e9:64:40:e8:f3:7e:24:9f:9a:68:ba:c4:a0:92:3b: 4b:bd:f7:fd:87:55:da:51:72:cb:b7:04:b5:d6:7e:1c:7e:bf: f7:30:5c:c2:7c:b8:21:05:9e:cf:67:c7:1c:cb:cb:16:18:f8: 66:76:d3:98:44:b9:b6:59:26:9d:80:02:9c:ea:e8:27:47:06: b1:92:f2:64:a2:26:e3:8d:34:d8:fd:54:7d:46:a1:3e:a4:bb: f1:f9:a6:92:9b:f5:21:a3:77:92:a0:3c:1d:52:bd:fe:61:8f: 61:f5:ec:46:c5:e0:a7:74:38:52:8a:73:f0:61:24:62:86:b1: 2c:1d:20:bc:ea:32:5a:d3:2c:ae:64:6c:d8:3c:12:46:97:d3: f9:73:55:32:12:ee:d3:97:52:57:b1:66:3b:2b:12:1e:38:88: b9:21:69:28:20:d4:e0:58:1f:03:87:f8:4e:fb:1d:1b:8e:b2: da:18:3e:31:6c:05:ee:b8:87:f8:a3:9a:91:41:38:cf:40:40: 3a:ee:56:c0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqG29821NYzxyrWGoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDcxNTEzMDEwNFoXDTI1MTAxMzEzMDEwNFowLzEtMCsGA1UEAxMk MzJiZjQxMzEtYjk2Mi00MmNmLThlOTktOWRlNDFkNmI3YTAzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA27qDp6vjQo+5Y7qDaHDnswsWiqxP3Kba7wri 0EZzN8dqQoKSvoteZwmm77SytUm9YlIy+c9tvfKHIDVEEp83UJ36OxRSSGP72jNB R658TmltlyGZhLM6JK5qaABbKtsl6ohpvRh16OUSzSVcrQUtqmaxTFFn7JTsR/CP smCNbSvmrF3i1ewm29PWtY0NX9bbn9x8r4bpX6Er950jszPFfXQjwtDIZvam4iqu maCc2yBCT7Zsbyvoyjz26knP0k1fcp5c4ZMGXkaeCyH+j7Q+veYUCk1RuA/DnQvb cXDntTBELPizrevVUpgjerRAdV2eZuXyb94x9BVlvxJeDzWOmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKsCRXq1+uPWC37jpeIusXR5T5uNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNDFlMzE0MzQtYWM0NS0z MWRiLThjNWItOTIzNGFhMjA4NzhhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASn0nMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGLqPQTebuoWWMY88CbLIY5UJrry8ho3RLwAJK4gXNs3b1bBj/Zpxg/F G1tTcHZQm2HZDCqkMVOZ0ulkQOjzfiSfmmi6xKCSO0u99/2HVdpRcsu3BLXWfhx+ v/cwXMJ8uCEFns9nxxzLyxYY+GZ205hEubZZJp2AApzq6CdHBrGS8mSiJuONNNj9 VH1GoT6ku/H5ppKb9SGjd5KgPB1Svf5hj2H17EbF4Kd0OFKKc/BhJGKGsSwdILzq MlrTLK5kbNg8EkaX0/lzVTIS7tOXUlexZjsrEh44iLkhaSgg1OBYHwOH+E77HRuO stoYPjFsBe64h/ijmpFBOM9AQDruVsA= -----END CERTIFICATE-----Generated at Mon Aug 4 15:30:29 2025 by rpki-client