$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a838f9f3-0bc7-3996-9c53-4f361a3393f2.roa File: a838f9f3-0bc7-3996-9c53-4f361a3393f2.roa (raw, json) Hash identifier: iqMxmbcbXteI3S6dhiGu5i2NiHE6YlJkM8hDa9ZqzbM= Subject key identifier: 25:1E:82:20:23:85:5A:1C:97:E3:45:EC:21:DF:B0:8C:5F:CD:B5:BD Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584A86DBE3C08EABAF511EDC6480 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a838f9f3-0bc7-3996-9c53-4f361a3393f2.roa Signing time: Tue 15 Jul 2025 13:01:04 +0000 ROA not before: Tue 15 Jul 2025 13:01:04 +0000 ROA not after: Mon 13 Oct 2025 13:01:04 +0000 asID: 15169 IP address blocks: 74.125.232.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:86:db:e3:c0:8e:ab:af:51:1e:dc:64:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jul 15 13:01:04 2025 GMT Not After : Oct 13 13:01:04 2025 GMT Subject: CN=693beeee-a62d-41bd-8093-fcfdcc47f931 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:3a:00:fc:30:bd:42:bb:84:cc:d0:f3:db:bc: 43:58:c7:b0:a9:a1:b4:64:e8:06:10:ab:12:eb:d8: 1a:da:af:36:aa:f7:7b:22:ee:b8:2c:4c:bc:0a:61: 30:7c:48:fa:4c:49:20:81:60:de:72:dc:e7:b2:6b: e9:4a:f4:4d:e3:45:f0:cf:32:a2:69:df:a5:f8:29: 7a:db:1e:1b:0e:82:7d:e5:53:5c:de:ab:9a:af:f7: 56:86:26:60:e3:4b:a0:6f:01:61:36:34:f7:6d:0f: 31:3b:d0:e5:2c:f0:7d:aa:5c:d1:d1:02:eb:5b:1a: 3d:9f:d2:8d:de:8e:e7:88:13:58:fd:ba:71:e2:e9: 3b:80:7a:01:e8:a5:8b:af:c1:59:0a:06:d5:e0:a1: f1:c8:5b:20:07:0f:b9:a9:21:9a:d6:83:9d:07:81: 05:0a:d0:d1:ae:07:64:89:63:e1:d4:ef:23:45:c5: 1c:e5:61:f9:22:b6:1a:21:ed:a9:36:74:9a:7c:b7: 2f:ac:31:3f:fd:bd:be:8a:12:ef:31:bb:d1:c9:5a: 5b:5e:54:a2:0f:c4:98:f4:8c:de:e0:2e:86:55:ad: 1e:b8:77:33:e2:ef:9e:fd:5d:f9:91:6d:63:3b:98: 49:e9:9e:28:20:6f:f3:66:27:17:bf:fe:cb:7f:c6: f1:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:1E:82:20:23:85:5A:1C:97:E3:45:EC:21:DF:B0:8C:5F:CD:B5:BD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a838f9f3-0bc7-3996-9c53-4f361a3393f2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 74.125.232.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:5f:63:21:65:9d:0c:29:e8:b5:00:c9:7c:f6:f8:25:82:93: 20:86:f9:70:e8:51:5f:87:28:4a:f1:81:0c:82:1d:bc:3e:72: ba:f4:87:eb:9e:11:05:8b:13:d5:e0:b1:3c:6e:7b:94:ce:b1: 5e:32:f4:18:6d:84:8b:f2:02:4d:7a:a3:56:48:c8:4d:20:81: b6:de:65:76:0e:c5:01:cd:72:3f:13:bd:7a:52:2f:66:c2:e6: 46:a0:c0:17:45:b6:40:4c:53:b9:b3:cd:36:29:c3:b2:a5:45: af:2a:98:98:f2:8d:89:d8:b5:47:ca:11:96:49:55:25:ac:2f: 9e:40:42:d7:77:f3:da:f6:78:77:2c:3f:3e:2b:29:91:b6:9a: 0f:f1:2e:cf:97:d7:f6:f8:eb:77:02:c3:99:78:fd:1c:45:bf: 5d:c6:6f:5c:75:b0:f5:cd:d6:94:9f:59:15:9d:17:6f:d9:81: 07:85:72:53:b9:1e:6c:46:6a:6a:bc:c7:01:6a:14:04:9a:2f: 47:ae:9c:d2:32:b5:be:31:fb:49:eb:d9:67:72:22:da:20:46: 2e:86:fb:bd:f5:f1:62:21:4c:54:c5:66:07:43:f3:a8:09:0e: c6:71:2f:35:ca:e0:70:9c:e3:9a:c2:e0:fd:25:0b:30:27:2f: bc:33:d0:31 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqG2+PAjquvUR7cZIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDcxNTEzMDEwNFoXDTI1MTAxMzEzMDEwNFowLzEtMCsGA1UEAxMk NjkzYmVlZWUtYTYyZC00MWJkLTgwOTMtZmNmZGNjNDdmOTMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1ToA/DC9QruEzNDz27xDWMewqaG0ZOgGEKsS 69ga2q82qvd7Iu64LEy8CmEwfEj6TEkggWDectznsmvpSvRN40XwzzKiad+l+Cl6 2x4bDoJ95VNc3quar/dWhiZg40ugbwFhNjT3bQ8xO9DlLPB9qlzR0QLrWxo9n9KN 3o7niBNY/bpx4uk7gHoB6KWLr8FZCgbV4KHxyFsgBw+5qSGa1oOdB4EFCtDRrgdk iWPh1O8jRcUc5WH5IrYaIe2pNnSafLcvrDE//b2+ihLvMbvRyVpbXlSiD8SY9Ize 4C6GVa0euHcz4u+e/V35kW1jO5hJ6Z4oIG/zZicXv/7Lf8bxYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCUegiAjhVocl+NF7CHfsIxfzbW9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYTgzOGY5ZjMtMGJjNy0z OTk2LTljNTMtNGYzNjFhMzM5M2YyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASn3oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABxfYyFlnQwp6LUAyXz2+CWCkyCG+XDoUV+HKErxgQyCHbw+crr0h+ue EQWLE9XgsTxue5TOsV4y9BhthIvyAk16o1ZIyE0ggbbeZXYOxQHNcj8TvXpSL2bC 5kagwBdFtkBMU7mzzTYpw7KlRa8qmJjyjYnYtUfKEZZJVSWsL55AQtd389r2eHcs Pz4rKZG2mg/xLs+X1/b463cCw5l4/RxFv13Gb1x1sPXN1pSfWRWdF2/ZgQeFclO5 HmxGamq8xwFqFASaL0eunNIytb4x+0nr2WdyItogRi6G+7318WIhTFTFZgdD86gJ DsZxLzXK4HCc45rC4P0lCzAnL7wz0DE= -----END CERTIFICATE-----Generated at Mon Aug 4 22:16:33 2025 by rpki-client