$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a387330c-0d91-36fa-81c2-baf399716562.roa File: a387330c-0d91-36fa-81c2-baf399716562.roa (raw, json) Hash identifier: /NxJ+ZY5GTUP/6phx/JZ6nP2YOrF+mL96hHndJQrAKE= Subject key identifier: 31:05:7A:9B:97:CC:8C:D3:3B:A9:32:8F:8F:85:47:4F:03:04:DB:FF Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584A86DB80CCB268D077885D41C0 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a387330c-0d91-36fa-81c2-baf399716562.roa Signing time: Tue 15 Jul 2025 13:01:04 +0000 ROA not before: Tue 15 Jul 2025 13:01:04 +0000 ROA not after: Mon 13 Oct 2025 13:01:04 +0000 asID: 15169 IP address blocks: 74.125.131.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:86:db:80:cc:b2:68:d0:77:88:5d:41:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jul 15 13:01:04 2025 GMT Not After : Oct 13 13:01:04 2025 GMT Subject: CN=a4f40f91-3938-4dc2-b108-5cb6f4257087 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:1e:e3:7e:4d:44:50:58:63:6f:64:4f:73:73: 8c:fb:66:02:cf:df:82:c0:78:fa:35:f7:d4:11:a7: 46:67:42:4f:6d:d2:64:45:34:16:d7:3c:90:39:8f: 35:62:da:75:cf:fe:60:62:28:b5:13:69:39:f7:37: bf:a1:51:3f:34:2b:7b:9e:ee:4d:fa:0e:8a:98:36: 6a:ec:f2:0c:10:71:be:1c:f6:db:66:68:07:40:76: 85:92:8b:9b:d1:f2:5f:85:59:b3:15:01:64:83:b6: bf:57:73:53:61:11:b6:31:5a:00:4c:84:e5:68:1a: 5b:2e:9e:d6:82:56:4c:c3:5d:5c:91:48:03:58:7e: 8c:90:da:ae:d8:b2:be:bd:46:ca:33:4a:41:99:a1: 57:a6:11:2f:ff:ed:7b:43:99:07:b0:dc:20:17:cb: 97:59:81:59:a6:63:a3:1c:c6:9f:95:29:bf:a9:27: a1:c7:56:0c:01:c5:cf:c0:d1:32:52:ff:f3:d7:26: 3c:c2:bd:b1:19:d3:07:08:ac:4c:8f:59:90:23:c9: 1d:6f:5f:75:56:d6:4c:e4:a2:13:91:b0:70:7b:86: 10:96:2c:75:ea:15:65:53:64:b2:d0:c8:d1:f5:f3: 5c:5c:88:f0:dc:d6:2b:22:3f:39:58:95:c7:97:55: 3a:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:05:7A:9B:97:CC:8C:D3:3B:A9:32:8F:8F:85:47:4F:03:04:DB:FF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a387330c-0d91-36fa-81c2-baf399716562.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 74.125.131.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:17:80:a4:00:e8:a2:13:03:6e:04:43:af:62:83:68:14:f0: 50:eb:72:66:9c:af:2f:ab:5e:c3:15:df:c5:57:f7:53:cb:0e: c8:9f:09:52:d9:70:dd:47:0a:ff:55:65:f8:53:14:ba:8e:c2: 2a:50:4f:c9:f7:ac:8a:d0:7a:3d:92:33:57:8e:54:e1:c1:5b: 3a:9a:b6:4f:18:bd:08:ea:3c:b5:c1:ea:47:30:b2:e8:da:0d: c0:a8:75:68:5b:21:2d:b1:07:60:1e:0d:c6:b5:5f:f2:64:56: 34:82:ba:d0:7e:2c:dc:60:2d:ad:c8:4f:cd:ff:97:b9:ed:7a: 05:08:e3:b3:f1:bf:00:5c:3c:7a:0a:ac:7f:d8:ec:f7:d9:8c: f9:98:69:15:80:3b:c0:36:fe:3d:5a:53:d2:38:d7:80:19:33: a4:fb:e8:a4:47:bc:c6:d0:c4:8b:40:d4:27:b1:87:6e:ff:6e: 60:37:9e:34:db:d6:5b:7e:92:cc:85:83:ce:a9:e8:0f:da:1c: e4:45:70:ce:59:e4:13:ac:5f:e5:72:54:19:3f:fa:3a:6e:47: 11:4a:7a:04:e8:9d:01:85:d4:ca:e9:39:bf:7c:3c:4c:00:88: 90:18:d2:a5:26:19:9e:20:14:a5:da:df:ed:4d:f3:fb:38:40: 91:8a:78:a4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqG24DMsmjQd4hdQcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDcxNTEzMDEwNFoXDTI1MTAxMzEzMDEwNFowLzEtMCsGA1UEAxMk YTRmNDBmOTEtMzkzOC00ZGMyLWIxMDgtNWNiNmY0MjU3MDg3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArh7jfk1EUFhjb2RPc3OM+2YCz9+CwHj6NffU EadGZ0JPbdJkRTQW1zyQOY81Ytp1z/5gYii1E2k59ze/oVE/NCt7nu5N+g6KmDZq 7PIMEHG+HPbbZmgHQHaFkoub0fJfhVmzFQFkg7a/V3NTYRG2MVoATITlaBpbLp7W glZMw11ckUgDWH6MkNqu2LK+vUbKM0pBmaFXphEv/+17Q5kHsNwgF8uXWYFZpmOj HMaflSm/qSehx1YMAcXPwNEyUv/z1yY8wr2xGdMHCKxMj1mQI8kdb191VtZM5KIT kbBwe4YQlix16hVlU2Sy0MjR9fNcXIjw3NYrIj85WJXHl1U6TwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDEFepuXzIzTO6kyj4+FR08DBNv/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYTM4NzMzMGMtMGQ5MS0z NmZhLTgxYzItYmFmMzk5NzE2NTYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASn2DMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADkXgKQA6KITA24EQ69ig2gU8FDrcmacry+rXsMV38VX91PLDsifCVLZ cN1HCv9VZfhTFLqOwipQT8n3rIrQej2SM1eOVOHBWzqatk8YvQjqPLXB6kcwsuja DcCodWhbIS2xB2AeDca1X/JkVjSCutB+LNxgLa3IT83/l7ntegUI47PxvwBcPHoK rH/Y7PfZjPmYaRWAO8A2/j1aU9I414AZM6T76KRHvMbQxItA1Cexh27/bmA3njTb 1lt+ksyFg86p6A/aHORFcM5Z5BOsX+VyVBk/+jpuRxFKegTonQGF1MrpOb98PEwA iJAY0qUmGZ4gFKXa3+1N8/s4QJGKeKQ= -----END CERTIFICATE-----Generated at Mon Aug 4 14:56:45 2025 by rpki-client