$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5042fc88-5f01-39b3-8b5f-8932f28aa563.roa File: 5042fc88-5f01-39b3-8b5f-8932f28aa563.roa (raw, json) Hash identifier: ZYLowuJuCIqMqgO58C8HZXqH3AYZmws7YMuvqblAZV8= Subject key identifier: 3C:08:66:23:63:B5:13:8F:A2:CE:F9:0B:51:6A:2B:6F:AF:A2:6D:01 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584A86DB9CC80D130E98FF393900 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5042fc88-5f01-39b3-8b5f-8932f28aa563.roa Signing time: Tue 15 Jul 2025 13:01:04 +0000 ROA not before: Tue 15 Jul 2025 13:01:04 +0000 ROA not after: Mon 13 Oct 2025 13:01:04 +0000 asID: 396982 IP address blocks: 74.125.64.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:86:db:9c:c8:0d:13:0e:98:ff:39:39:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jul 15 13:01:04 2025 GMT Not After : Oct 13 13:01:04 2025 GMT Subject: CN=4073c72f-690e-4375-b978-04b826f63774 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:04:c3:11:41:64:5e:e8:df:79:eb:12:09:c2: f0:6e:77:97:0d:7f:25:c7:fd:32:c9:f8:f9:df:b6: 1b:98:41:de:1b:3d:52:2a:eb:a7:40:52:f6:ee:74: 0c:0b:25:c7:df:94:fe:a6:db:47:71:d4:a1:2b:00: e5:79:b8:82:c1:da:80:2f:79:13:fa:68:ad:1e:73: 74:71:ab:dd:b6:d6:14:d6:d7:aa:e5:28:1d:6d:5e: df:95:44:32:7f:f4:68:e9:89:2f:5b:25:fc:02:43: b5:f3:8a:9f:f4:ac:c2:b2:78:0b:bd:f9:c9:8a:fb: af:88:c6:23:1e:be:bb:bf:2b:c2:4e:6b:b2:d1:cc: 65:6b:9e:fc:65:20:cb:85:24:8f:14:55:05:cc:6f: 8b:76:3a:8f:2b:bd:78:03:bc:8c:6a:81:d5:86:5d: 1c:55:a7:b4:4a:aa:87:bc:e2:84:a4:20:92:8d:30: c1:c7:8b:2c:89:0f:40:ee:c3:b5:5e:00:da:05:c1: ba:6a:d0:b7:22:0c:4b:3f:66:f6:d6:8b:ef:ed:75: 79:ac:1f:0d:53:5e:52:7c:f8:3f:74:7d:0e:e2:fd: 98:7b:fb:72:1e:6a:e8:d7:f1:33:7b:f8:94:ac:be: 54:a7:c5:75:d7:48:cd:0e:db:b6:ac:79:21:4d:48: d5:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:08:66:23:63:B5:13:8F:A2:CE:F9:0B:51:6A:2B:6F:AF:A2:6D:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5042fc88-5f01-39b3-8b5f-8932f28aa563.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 74.125.64.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:ec:83:70:1b:7b:12:bd:ec:b0:9d:bb:af:20:79:76:8a:34: 08:9d:ea:d8:94:8d:f9:fc:1b:a2:6b:6d:45:ce:b2:70:2e:cd: 0d:d0:b3:9e:49:63:42:40:ae:bb:08:e1:52:a9:1b:a1:08:55: 1d:b3:30:12:4e:4c:00:b8:1e:7d:17:98:c6:8b:32:e9:73:23: 5f:dd:8f:23:61:d8:6b:f5:dc:52:8b:79:35:97:9b:03:1f:e5: a9:d9:bf:f2:20:75:99:5e:fc:91:74:2e:fe:34:f6:21:15:94: 9d:ba:64:af:f2:ec:a9:32:0f:1b:4c:08:5f:e8:39:d4:34:6f: af:fb:8e:a1:7b:fc:42:a3:9a:be:8e:b8:c0:4e:92:52:46:cb: 3a:45:e5:be:57:d4:d3:27:d3:d9:81:90:94:86:d1:b8:8c:e6: 90:13:f1:1a:a4:74:71:d7:24:ff:c0:2a:7f:83:30:15:e3:50: ec:b4:dc:51:0f:e9:63:ea:51:b7:b7:96:ed:c9:b6:08:b8:a9: 75:5b:b4:aa:98:ad:25:0c:17:c1:ea:1c:36:81:22:93:30:cc: d0:7f:3a:f1:b0:38:34:7e:93:13:5d:08:7a:c2:16:71:e3:9a: 65:cc:29:98:15:4d:b6:6e:18:11:d9:e7:01:df:e1:7f:cd:14: 6f:be:00:15 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqG25zIDRMOmP85OQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDcxNTEzMDEwNFoXDTI1MTAxMzEzMDEwNFowLzEtMCsGA1UEAxMk NDA3M2M3MmYtNjkwZS00Mzc1LWI5NzgtMDRiODI2ZjYzNzc0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgATDEUFkXujfeesSCcLwbneXDX8lx/0yyfj5 37YbmEHeGz1SKuunQFL27nQMCyXH35T+pttHcdShKwDlebiCwdqAL3kT+mitHnN0 cavdttYU1teq5SgdbV7flUQyf/Ro6YkvWyX8AkO184qf9KzCsngLvfnJivuviMYj Hr67vyvCTmuy0cxla578ZSDLhSSPFFUFzG+LdjqPK714A7yMaoHVhl0cVae0SqqH vOKEpCCSjTDBx4ssiQ9A7sO1XgDaBcG6atC3IgxLP2b21ovv7XV5rB8NU15SfPg/ dH0O4v2Ye/tyHmro1/Eze/iUrL5Up8V110jNDtu2rHkhTUjVBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDwIZiNjtROPos75C1FqK2+vom0BMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNTA0MmZjODgtNWYwMS0z OWIzLThiNWYtODkzMmYyOGFhNTYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASn1AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHHsg3AbexK97LCdu68geXaKNAid6tiUjfn8G6JrbUXOsnAuzQ3Qs55J Y0JArrsI4VKpG6EIVR2zMBJOTAC4Hn0XmMaLMulzI1/djyNh2Gv13FKLeTWXmwMf 5anZv/IgdZle/JF0Lv409iEVlJ26ZK/y7KkyDxtMCF/oOdQ0b6/7jqF7/EKjmr6O uMBOklJGyzpF5b5X1NMn09mBkJSG0biM5pAT8RqkdHHXJP/AKn+DMBXjUOy03FEP 6WPqUbe3lu3Jtgi4qXVbtKqYrSUMF8HqHDaBIpMwzNB/OvGwODR+kxNdCHrCFnHj mmXMKZgVTbZuGBHZ5wHf4X/NFG++ABU= -----END CERTIFICATE-----Generated at Mon Aug 4 16:07:20 2025 by rpki-client