$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/72dc7deb-7233-3223-850c-eb40285cffdc.roa File: 72dc7deb-7233-3223-850c-eb40285cffdc.roa (raw, json) Hash identifier: 1sD2ut/ZjjLxuCRr2yJFM8fuYQKa8h+QZb0curfkf4s= Subject key identifier: 41:09:43:96:D9:1B:EA:A1:66:AA:AE:41:ED:81:4F:87:23:E6:4F:3A Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584A86DBF72A01A42B7CBD6C0F00 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/72dc7deb-7233-3223-850c-eb40285cffdc.roa Signing time: Tue 15 Jul 2025 13:01:04 +0000 ROA not before: Tue 15 Jul 2025 13:01:04 +0000 ROA not after: Mon 13 Oct 2025 13:01:04 +0000 asID: 15169 IP address blocks: 74.125.137.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:86:db:f7:2a:01:a4:2b:7c:bd:6c:0f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jul 15 13:01:04 2025 GMT Not After : Oct 13 13:01:04 2025 GMT Subject: CN=e16c5bf0-43bc-4671-9999-f560d8ffbecb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:85:39:7a:01:9f:6a:9b:4d:7e:f6:4c:6f:af: 14:f9:fd:79:f4:56:eb:f6:c6:4d:a0:0b:6b:43:3a: f7:ba:3c:ba:4c:3d:9f:cf:36:fb:54:89:e7:90:a3: 1d:8f:ad:16:0e:34:4b:a5:53:8e:af:ca:7a:1a:9c: 82:b8:a1:76:20:8e:43:5f:88:95:3a:42:66:6e:f5: 2b:6b:b0:a5:2d:1a:db:67:d8:66:6f:55:39:39:98: 14:84:46:34:02:6b:8e:98:9a:2e:e9:3a:3d:8b:c7: 1c:01:8b:e6:d3:cb:33:b1:f3:69:84:f2:a0:67:ac: c3:66:cf:e3:65:e9:44:52:d3:8a:e7:7f:ea:fc:d2: 7f:25:ca:ae:5c:42:f8:2c:c6:98:e9:fe:57:17:b5: 73:02:31:0e:a8:21:27:ae:9f:f5:f7:68:fe:0b:5e: 3e:f1:37:15:d9:44:93:46:d3:bb:53:33:bf:b9:5f: 4a:a9:09:86:ea:88:07:09:3f:c6:53:6e:84:96:75: d1:6e:f8:47:8a:8c:13:58:f8:55:a9:ac:38:43:0f: 6a:93:c6:ac:6b:98:c2:69:53:22:98:45:00:70:2b: 81:59:ba:67:43:c3:67:e5:6b:e2:cf:de:59:32:8d: ba:52:3e:89:80:3c:f6:a7:16:f5:1d:ce:1c:24:59: 88:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:09:43:96:D9:1B:EA:A1:66:AA:AE:41:ED:81:4F:87:23:E6:4F:3A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/72dc7deb-7233-3223-850c-eb40285cffdc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 74.125.137.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ad:50:9b:37:a1:be:a5:fe:c4:c6:47:15:f3:61:c7:7d:93:b8: 3e:cd:e7:e1:8b:aa:1b:16:80:57:8e:7d:74:db:ff:f2:4f:ba: d1:b7:60:bf:2d:9d:b9:c3:f6:35:3d:79:91:d4:5c:19:d8:02: f4:18:fc:da:e2:4f:50:e5:16:0a:8b:bf:44:19:3b:b0:fa:b6: d1:bc:23:fe:e5:c0:6e:34:4e:49:44:26:ee:d9:03:8b:25:64: 3b:50:13:5f:c4:9c:e6:cb:a4:62:ce:42:52:6c:93:b1:97:f5: 42:46:0f:a6:cb:a6:e2:8b:30:ef:81:b7:46:74:be:72:a6:1f: 4e:4a:15:2e:9a:22:29:94:35:d2:c7:01:a9:73:b1:76:ab:98: 40:64:82:f6:f2:60:ee:b3:e1:4d:e6:a4:e6:01:e3:27:47:92: 63:24:cd:ad:51:c2:fc:fa:2e:44:59:61:ab:7b:b0:5b:8b:45: e3:18:30:64:ad:91:7a:c6:17:a7:92:67:fa:00:97:6f:a3:fd: 4d:ba:9c:91:60:7b:47:51:3f:3d:e1:2d:32:33:99:85:d0:64: fe:f6:0a:84:c0:9f:88:bd:be:88:65:79:62:5a:f4:8d:26:87: 0c:bc:7a:09:ac:60:93:d3:45:76:a3:f4:c7:86:ac:81:6e:1b: c4:3d:60:20 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqG2/cqAaQrfL1sDwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDcxNTEzMDEwNFoXDTI1MTAxMzEzMDEwNFowLzEtMCsGA1UEAxMk ZTE2YzViZjAtNDNiYy00NjcxLTk5OTktZjU2MGQ4ZmZiZWNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAloU5egGfaptNfvZMb68U+f159Fbr9sZNoAtr Qzr3ujy6TD2fzzb7VInnkKMdj60WDjRLpVOOr8p6GpyCuKF2II5DX4iVOkJmbvUr a7ClLRrbZ9hmb1U5OZgUhEY0AmuOmJou6To9i8ccAYvm08szsfNphPKgZ6zDZs/j ZelEUtOK53/q/NJ/JcquXEL4LMaY6f5XF7VzAjEOqCEnrp/192j+C14+8TcV2UST RtO7UzO/uV9KqQmG6ogHCT/GU26ElnXRbvhHiowTWPhVqaw4Qw9qk8asa5jCaVMi mEUAcCuBWbpnQ8Nn5Wviz95ZMo26Uj6JgDz2pxb1Hc4cJFmIJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEEJQ5bZG+qhZqquQe2BT4cj5k86MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNzJkYzdkZWItNzIzMy0z MjIzLTg1MGMtZWI0MDI4NWNmZmRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASn2JMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK1QmzehvqX+xMZHFfNhx32TuD7N5+GLqhsWgFeOfXTb//JPutG3YL8t nbnD9jU9eZHUXBnYAvQY/NriT1DlFgqLv0QZO7D6ttG8I/7lwG40TklEJu7ZA4sl ZDtQE1/EnObLpGLOQlJsk7GX9UJGD6bLpuKLMO+Bt0Z0vnKmH05KFS6aIimUNdLH AalzsXarmEBkgvbyYO6z4U3mpOYB4ydHkmMkza1Rwvz6LkRZYat7sFuLReMYMGSt kXrGF6eSZ/oAl2+j/U26nJFge0dRPz3hLTIzmYXQZP72CoTAn4i9vohleWJa9I0m hwy8egmsYJPTRXaj9MeGrIFuG8Q9YCA= -----END CERTIFICATE-----Generated at Tue Aug 5 17:13:47 2025 by rpki-client