$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/9c122302-21bd-3181-b59e-e7f1bb857cc0.roa File: 9c122302-21bd-3181-b59e-e7f1bb857cc0.roa (raw, json) Hash identifier: dQo82T2g3fNZZH1MJ7ah1mVH06q4dpqbOd65FQw1hcc= Subject key identifier: 18:D4:B2:4C:48:D7:6A:C1:A0:5E:AF:DB:37:68:AB:78:51:B2:2C:8E Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584A86DBB39E9BC5A45FA8F08780 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/9c122302-21bd-3181-b59e-e7f1bb857cc0.roa Signing time: Tue 15 Jul 2025 13:01:04 +0000 ROA not before: Tue 15 Jul 2025 13:01:04 +0000 ROA not after: Mon 13 Oct 2025 13:01:04 +0000 asID: 15169 IP address blocks: 74.125.152.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:86:db:b3:9e:9b:c5:a4:5f:a8:f0:87:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jul 15 13:01:04 2025 GMT Not After : Oct 13 13:01:04 2025 GMT Subject: CN=56047537-ed6a-4228-a779-f8b994f4af00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:11:97:31:ae:9f:ce:a7:8c:44:87:1b:ff:cd: 85:10:58:b0:63:9e:9d:69:6c:c1:2c:2c:92:c2:bd: 50:13:70:56:d7:ed:16:22:b4:92:35:63:df:26:1b: 5e:10:d1:b2:af:86:79:de:9d:36:3a:46:44:2a:42: ca:8b:cc:d9:3e:40:ae:d4:c1:68:cc:ca:d7:ef:26: 29:4c:ac:de:23:ad:dd:c8:2b:c9:84:25:99:17:85: 83:e7:35:88:08:3f:41:bd:e0:90:fe:19:bc:47:09: fa:98:9a:b0:8b:4c:65:82:1d:1f:2e:a2:cd:f2:60: 09:97:4e:b8:f1:bf:86:fb:e6:b8:c3:6d:d7:c3:e3: cf:4a:c7:cc:04:0e:8c:c1:00:93:29:17:f1:67:0d: 81:d2:14:24:9e:da:45:6f:24:61:65:fb:a8:10:ae: 1b:dd:14:7e:31:4f:55:3e:e7:96:20:b2:fb:a0:af: f7:38:29:63:85:41:ee:3f:57:43:8a:94:f2:13:f3: ca:e2:9c:f1:0a:a0:9b:e7:02:f0:4c:51:9b:0d:04: fc:31:12:54:12:87:fa:62:ab:83:99:f4:43:ca:cb: d8:91:cb:cb:23:4f:86:dd:8e:12:ba:d3:90:5c:27: 67:b5:dc:af:7a:31:b5:6e:5c:20:b6:bc:7b:86:b8: 4b:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:D4:B2:4C:48:D7:6A:C1:A0:5E:AF:DB:37:68:AB:78:51:B2:2C:8E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/9c122302-21bd-3181-b59e-e7f1bb857cc0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 74.125.152.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:8f:3c:42:60:af:59:85:11:ca:54:68:b7:de:c0:28:ea:3a: 59:ee:81:b3:f8:b7:ab:c7:76:d2:87:d3:0b:a5:a1:28:47:50: 91:51:49:1d:9e:b6:7f:9a:a9:47:ea:da:cc:f0:a0:39:37:41: 16:12:65:b3:8d:66:ca:e9:35:21:74:33:00:88:b8:cf:4f:10: a8:74:ec:bd:7d:5a:db:58:17:74:22:45:56:b5:38:ee:62:cf: ad:2c:f5:60:db:1b:bb:39:04:c4:9d:d7:ff:5b:b6:67:8f:b5: be:ac:96:47:4d:cc:a4:69:45:b6:2d:9f:50:4a:e7:88:c5:5f: 99:44:64:bd:11:21:6f:6f:84:dc:e6:36:60:68:f4:d7:b2:d3: 95:93:12:68:6b:45:cf:88:9b:cd:ba:18:7b:02:fd:1a:90:bd: 03:e0:54:c0:37:85:52:22:c9:cd:2f:35:46:0b:bd:ef:19:f6: 61:7c:46:10:b6:e0:32:dd:97:78:01:8b:15:c4:32:f3:b2:91: 46:28:c1:d0:da:41:cc:f3:bd:58:5f:0e:67:b2:6b:1f:b3:8c: 25:d0:4a:ce:34:88:6a:ab:e9:09:4d:9f:f8:e1:9c:62:da:56: f8:69:d6:34:83:82:08:69:e5:38:36:d5:aa:af:85:4f:d0:83: 3c:83:4a:3d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqG27Oem8WkX6jwh4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDcxNTEzMDEwNFoXDTI1MTAxMzEzMDEwNFowLzEtMCsGA1UEAxMk NTYwNDc1MzctZWQ2YS00MjI4LWE3NzktZjhiOTk0ZjRhZjAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApBGXMa6fzqeMRIcb/82FEFiwY56daWzBLCyS wr1QE3BW1+0WIrSSNWPfJhteENGyr4Z53p02OkZEKkLKi8zZPkCu1MFozMrX7yYp TKzeI63dyCvJhCWZF4WD5zWICD9BveCQ/hm8Rwn6mJqwi0xlgh0fLqLN8mAJl064 8b+G++a4w23Xw+PPSsfMBA6MwQCTKRfxZw2B0hQkntpFbyRhZfuoEK4b3RR+MU9V PueWILL7oK/3OCljhUHuP1dDipTyE/PK4pzxCqCb5wLwTFGbDQT8MRJUEof6YquD mfRDysvYkcvLI0+G3Y4SutOQXCdntdyvejG1blwgtrx7hrhLTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBjUskxI12rBoF6v2zdoq3hRsiyOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvOWMxMjIzMDItMjFiZC0z MTgxLWI1OWUtZTdmMWJiODU3Y2MwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDSn2YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJCPPEJgr1mFEcpUaLfewCjqOlnugbP4t6vHdtKH0wuloShHUJFRSR2e tn+aqUfq2szwoDk3QRYSZbONZsrpNSF0MwCIuM9PEKh07L19WttYF3QiRVa1OO5i z60s9WDbG7s5BMSd1/9btmePtb6slkdNzKRpRbYtn1BK54jFX5lEZL0RIW9vhNzm NmBo9Ney05WTEmhrRc+Im826GHsC/RqQvQPgVMA3hVIiyc0vNUYLve8Z9mF8RhC2 4DLdl3gBixXEMvOykUYowdDaQczzvVhfDmeyax+zjCXQSs40iGqr6QlNn/jhnGLa Vvhp1jSDgghp5Tg21aqvhU/QgzyDSj0= -----END CERTIFICATE-----Generated at Mon Aug 4 15:06:15 2025 by rpki-client