$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/67d0a2bf-1fee-3c11-a30d-239424246d39.roa File: 67d0a2bf-1fee-3c11-a30d-239424246d39.roa (raw, json) Hash identifier: AqH82+8+MMdKXbJT5Su7i9yhBAC9xEyhVsAEp7+tTKc= Subject key identifier: 9A:C7:08:A8:21:27:08:A6:71:78:27:85:D0:33:62:CB:80:33:39:22 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584A86DBEB54BCE509E74C8EC000 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/67d0a2bf-1fee-3c11-a30d-239424246d39.roa Signing time: Tue 15 Jul 2025 13:01:04 +0000 ROA not before: Tue 15 Jul 2025 13:01:04 +0000 ROA not after: Mon 13 Oct 2025 13:01:04 +0000 asID: 15169 IP address blocks: 74.125.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:86:db:eb:54:bc:e5:09:e7:4c:8e:c0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jul 15 13:01:04 2025 GMT Not After : Oct 13 13:01:04 2025 GMT Subject: CN=4014cbbb-c730-4398-a72d-314fb797cbc3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:fa:ca:6f:7b:b7:83:ac:e4:f8:45:4c:7c:09: 03:2f:73:44:13:b5:66:86:56:78:cb:e6:df:22:91: 35:70:5c:ef:a0:a4:2e:28:23:0b:c6:31:d7:3f:61: 3e:86:36:00:f7:9f:4d:87:df:77:8f:ec:df:c8:2d: 7b:df:6e:da:92:b1:13:4f:82:6e:b8:7b:9d:a1:77: 6e:7a:d3:dc:08:d2:8f:84:52:a7:d2:cd:53:ad:20: d1:0e:bd:43:b4:a2:8a:e0:17:a8:75:d7:9b:47:b5: 55:f1:b2:01:14:a6:e0:7b:d4:9f:b7:91:15:f4:da: d9:e6:58:4c:94:fd:96:33:34:a2:05:b7:b3:42:97: 94:a1:89:2b:8c:7f:d6:18:65:b4:02:be:3b:cd:d2: 46:55:6e:ac:2a:d2:8e:3b:f7:99:92:11:de:77:80: c3:8f:59:81:b8:f3:75:bd:77:e5:40:34:57:fe:af: 54:20:88:4b:cb:66:51:0b:a2:6c:3c:eb:5c:f4:c7: bd:7c:01:53:15:c0:16:e9:87:ad:16:ef:98:62:c0: 8a:ba:c4:b4:2d:f2:99:9e:7e:21:79:44:70:c1:dc: 0d:ab:46:1e:ef:95:9d:df:e6:c7:85:6c:ee:72:e6: 7b:5a:f1:a4:29:41:8e:57:80:f9:ff:20:12:41:8f: d1:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:C7:08:A8:21:27:08:A6:71:78:27:85:D0:33:62:CB:80:33:39:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/67d0a2bf-1fee-3c11-a30d-239424246d39.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 74.125.21.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:bf:8d:6a:b8:51:0a:47:62:93:43:70:cb:cb:3f:88:e7:2f: 8a:de:30:9d:23:4e:83:53:50:0e:44:08:5f:41:e5:94:db:85: a8:d8:59:a9:c1:85:31:51:f1:b4:f5:6b:79:7f:89:1e:63:a5: d4:f5:25:c0:c8:1d:e0:99:9b:19:6e:68:77:b2:26:eb:80:98: 0d:42:f7:6a:a7:f1:de:5d:9e:42:6a:db:1b:5c:4a:6b:05:a2: 2d:c6:4b:e4:6a:7e:87:ac:63:dd:48:28:aa:7a:79:04:48:e5: da:af:e4:86:f2:c9:6f:35:62:f9:c0:9d:e1:7a:a5:3a:b8:6f: 20:f1:85:88:72:66:08:9c:78:13:6b:d6:d9:47:6e:61:ba:dd: 58:78:98:86:ba:a9:d0:75:f5:19:a2:30:72:a6:56:0c:2b:71: 64:4b:fb:a9:07:97:9d:15:9d:67:6e:53:55:51:5b:c2:d9:06: 33:99:96:2d:e6:ea:25:f8:85:fb:86:bd:ae:f2:30:b1:8d:40: a1:7b:fb:17:43:97:32:62:78:32:42:ab:74:9b:a0:fc:16:42: 7f:5a:65:57:e3:ab:70:46:e9:6a:84:a7:42:c1:f4:d5:07:6f: 1a:96:50:ac:e4:74:ad:28:ea:ed:c2:42:db:1c:7e:51:b4:1c: 8b:f5:72:1a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqG2+tUvOUJ50yOwAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDcxNTEzMDEwNFoXDTI1MTAxMzEzMDEwNFowLzEtMCsGA1UEAxMk NDAxNGNiYmItYzczMC00Mzk4LWE3MmQtMzE0ZmI3OTdjYmMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhvrKb3u3g6zk+EVMfAkDL3NEE7VmhlZ4y+bf IpE1cFzvoKQuKCMLxjHXP2E+hjYA959Nh993j+zfyC17327akrETT4JuuHudoXdu etPcCNKPhFKn0s1TrSDRDr1DtKKK4BeoddebR7VV8bIBFKbge9Sft5EV9NrZ5lhM lP2WMzSiBbezQpeUoYkrjH/WGGW0Ar47zdJGVW6sKtKOO/eZkhHed4DDj1mBuPN1 vXflQDRX/q9UIIhLy2ZRC6JsPOtc9Me9fAFTFcAW6YetFu+YYsCKusS0LfKZnn4h eURwwdwNq0Ye75Wd3+bHhWzucuZ7WvGkKUGOV4D5/yASQY/RwwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJrHCKghJwimcXgnhdAzYsuAMzkiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNjdkMGEyYmYtMWZlZS0z YzExLWEzMGQtMjM5NDI0MjQ2ZDM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASn0VMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAO/jWq4UQpHYpNDcMvLP4jnL4reMJ0jToNTUA5ECF9B5ZTbhajYWanB hTFR8bT1a3l/iR5jpdT1JcDIHeCZmxluaHeyJuuAmA1C92qn8d5dnkJq2xtcSmsF oi3GS+RqfoesY91IKKp6eQRI5dqv5IbyyW81YvnAneF6pTq4byDxhYhyZgiceBNr 1tlHbmG63Vh4mIa6qdB19RmiMHKmVgwrcWRL+6kHl50VnWduU1VRW8LZBjOZli3m 6iX4hfuGva7yMLGNQKF7+xdDlzJieDJCq3SboPwWQn9aZVfjq3BG6WqEp0LB9NUH bxqWUKzkdK0o6u3CQtscflG0HIv1cho= -----END CERTIFICATE-----Generated at Mon Aug 4 19:07:56 2025 by rpki-client