$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/68d441be-0181-30ba-806d-c11590a6aa4e.roa File: 68d441be-0181-30ba-806d-c11590a6aa4e.roa (raw, json) Hash identifier: g/YKb3J4gkY5nXWUt1o/rCGYiWoW6fcvTpnMWRs2Ruw= Subject key identifier: 22:5A:6D:90:00:E1:2C:5F:20:15:FE:56:9F:09:FB:E5:9A:86:49:64 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584A86DBF1ED6227F37DD71AFD00 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/68d441be-0181-30ba-806d-c11590a6aa4e.roa Signing time: Tue 15 Jul 2025 13:01:04 +0000 ROA not before: Tue 15 Jul 2025 13:01:04 +0000 ROA not after: Mon 13 Oct 2025 13:01:04 +0000 asID: 15169 IP address blocks: 74.125.230.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:86:db:f1:ed:62:27:f3:7d:d7:1a:fd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jul 15 13:01:04 2025 GMT Not After : Oct 13 13:01:04 2025 GMT Subject: CN=19ba3c25-112a-4fde-955c-1b10f33abede Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:8d:78:29:54:e9:b5:6c:29:09:28:bc:e9:6e: 2a:3a:6d:90:57:29:f2:b0:40:90:83:77:c1:9f:7a: ed:46:fc:db:79:c7:3d:15:e7:fc:0e:0f:8b:08:d7: 77:94:d9:92:b7:ec:90:65:9c:d6:e2:67:ad:f9:d2: 36:84:b8:4c:01:2a:da:6d:5f:53:9a:a4:8d:43:7b: a1:b3:d5:9c:19:b2:29:c8:a1:37:6a:31:73:e9:d7: a2:b6:e6:59:60:46:a3:a3:48:8b:0a:29:62:79:43: e6:e5:f2:f0:97:41:30:5c:b0:36:3a:70:68:3c:41: 33:67:b6:f9:28:45:c0:f1:d8:c4:13:90:55:12:79: 37:b5:f2:9c:38:1e:ed:71:9a:49:18:a1:c4:37:f1: 1b:3c:be:75:39:00:16:70:d6:25:05:28:62:45:1e: f5:59:a3:d8:ea:dc:61:0e:a4:2b:7b:c3:ee:90:ec: 8c:78:42:d5:51:0c:1b:d5:1b:51:47:2b:1e:cd:5d: 6f:9f:5b:a3:10:1e:4e:02:b2:6b:e4:70:6c:4e:b1: f9:bb:3c:3f:fe:d4:66:06:1b:38:97:36:c0:53:44: 4a:d7:bc:2b:0f:3f:0a:9f:6b:5a:fd:74:51:4c:96: 3c:b9:a8:0d:16:07:0e:02:50:c9:c7:40:20:79:3f: 59:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:5A:6D:90:00:E1:2C:5F:20:15:FE:56:9F:09:FB:E5:9A:86:49:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/68d441be-0181-30ba-806d-c11590a6aa4e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 74.125.230.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:2f:94:40:21:20:82:3d:fe:cc:21:20:71:b1:e8:dc:75:a7: bb:33:d9:1a:f5:fd:25:9f:5d:8a:b7:86:3e:39:2a:1b:b5:59: 52:c4:ae:0f:6a:3b:b2:ec:3b:b9:a0:76:b0:1f:54:d1:29:40: 10:60:4e:16:a4:2b:aa:ec:af:d8:68:25:51:3b:8b:19:d2:bb: 0a:73:4e:d3:87:20:6b:31:aa:54:af:4f:bb:85:6c:fc:22:7a: 04:f0:45:5b:97:3c:0e:a4:75:71:80:ae:fe:fb:ae:bc:08:a1: 59:2c:3b:51:17:4a:1f:a8:b3:79:2d:96:c4:fe:ab:3e:d5:22: 24:db:82:77:c0:40:bf:05:ea:93:60:97:8f:af:a8:7f:62:54: d5:39:7a:56:06:09:fe:d1:ea:06:fc:b3:bf:34:61:0e:86:c0: fe:f2:9c:b1:7b:50:6d:e6:08:51:f2:cd:77:f5:68:45:6c:2b: ac:ea:82:81:34:f5:48:8e:51:a8:95:01:56:7c:51:b5:a0:d8: cf:c4:e2:37:ca:58:39:d9:47:ac:c6:70:56:d6:68:c3:1d:3d: 1c:16:47:f6:67:fd:ad:9e:a4:0b:76:b4:8d:62:cf:3a:32:15: 90:b6:f3:f6:1d:e2:48:ac:c1:f1:ee:d9:a8:cd:e2:42:d2:10: 6d:82:27:e9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqG2/HtYifzfdca/QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDcxNTEzMDEwNFoXDTI1MTAxMzEzMDEwNFowLzEtMCsGA1UEAxMk MTliYTNjMjUtMTEyYS00ZmRlLTk1NWMtMWIxMGYzM2FiZWRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlY14KVTptWwpCSi86W4qOm2QVynysECQg3fB n3rtRvzbecc9Fef8Dg+LCNd3lNmSt+yQZZzW4met+dI2hLhMASrabV9TmqSNQ3uh s9WcGbIpyKE3ajFz6deituZZYEajo0iLCilieUPm5fLwl0EwXLA2OnBoPEEzZ7b5 KEXA8djEE5BVEnk3tfKcOB7tcZpJGKHEN/EbPL51OQAWcNYlBShiRR71WaPY6txh DqQre8PukOyMeELVUQwb1RtRRysezV1vn1ujEB5OArJr5HBsTrH5uzw//tRmBhs4 lzbAU0RK17wrDz8Kn2ta/XRRTJY8uagNFgcOAlDJx0AgeT9ZMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCJabZAA4SxfIBX+Vp8J++WahklkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNjhkNDQxYmUtMDE4MS0z MGJhLTgwNmQtYzExNTkwYTZhYTRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASn3mMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFUvlEAhIII9/swhIHGx6Nx1p7sz2Rr1/SWfXYq3hj45Khu1WVLErg9q O7LsO7mgdrAfVNEpQBBgThakK6rsr9hoJVE7ixnSuwpzTtOHIGsxqlSvT7uFbPwi egTwRVuXPA6kdXGArv77rrwIoVksO1EXSh+os3ktlsT+qz7VIiTbgnfAQL8F6pNg l4+vqH9iVNU5elYGCf7R6gb8s780YQ6GwP7ynLF7UG3mCFHyzXf1aEVsK6zqgoE0 9UiOUaiVAVZ8UbWg2M/E4jfKWDnZR6zGcFbWaMMdPRwWR/Zn/a2epAt2tI1izzoy FZC28/Yd4kiswfHu2ajN4kLSEG2CJ+k= -----END CERTIFICATE-----Generated at Wed Aug 6 04:12:51 2025 by rpki-client