$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/c23a993a-b379-3356-a21d-447f6f63600a.roa File: c23a993a-b379-3356-a21d-447f6f63600a.roa (raw, json) Hash identifier: vdaI/R3dfv6Z63A77VaCRYeD8f8sKU5WXVq3obqIXVY= Subject key identifier: 2A:32:AC:84:FF:08:3D:2B:AA:C4:C1:10:81:7F:5D:EA:C1:4F:61:A3 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584A86DBF2C6C1EC4B3D8852D000 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/c23a993a-b379-3356-a21d-447f6f63600a.roa Signing time: Tue 15 Jul 2025 13:01:04 +0000 ROA not before: Tue 15 Jul 2025 13:01:04 +0000 ROA not after: Mon 13 Oct 2025 13:01:04 +0000 asID: 15169 IP address blocks: 74.125.201.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:86:db:f2:c6:c1:ec:4b:3d:88:52:d0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jul 15 13:01:04 2025 GMT Not After : Oct 13 13:01:04 2025 GMT Subject: CN=6147ffe1-ee73-454c-8919-efbbb596fa0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:75:fa:4f:98:52:6d:11:0c:99:73:1a:04:05: 29:06:ea:69:b8:be:6a:22:ae:23:7c:35:02:a0:48: a8:40:d5:47:35:a0:52:b9:59:01:03:23:77:22:b7: 45:90:cc:c0:c7:76:0d:88:e0:9e:e3:70:93:45:24: 12:14:27:3e:40:13:ce:ee:11:59:15:b3:b4:38:a1: 6c:df:3e:5a:48:a5:72:cb:b7:df:f3:b7:74:28:16: 2b:05:ff:87:2e:1d:d2:73:86:d6:b5:63:cd:9a:ee: 1d:6d:59:de:f5:42:c3:7d:2a:48:5e:8e:c0:93:e2: 9d:b2:89:43:2f:43:bd:d5:32:62:b5:06:e1:62:69: 38:25:f4:81:d3:b0:8c:0f:10:db:50:ff:4f:a5:82: 29:88:40:07:67:eb:a3:10:29:38:e9:5e:fa:83:cf: 09:80:f6:51:11:a1:81:eb:ae:5f:5e:05:5f:56:c0: 7b:84:bf:76:88:82:5a:53:25:67:31:22:2e:44:4c: 8e:d6:91:e1:e4:59:ab:48:ba:65:70:3b:13:5c:fe: 76:7e:37:e6:7d:52:03:9e:d8:cf:fa:b9:55:58:5e: a6:15:d6:92:a5:61:15:26:3f:f6:46:03:44:20:26: 41:f7:8a:fc:f9:e7:3c:57:f9:13:1c:bc:cc:ac:92: 1c:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:32:AC:84:FF:08:3D:2B:AA:C4:C1:10:81:7F:5D:EA:C1:4F:61:A3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/c23a993a-b379-3356-a21d-447f6f63600a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 74.125.201.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9a:b4:49:aa:e1:d3:2d:19:5d:d4:79:99:90:d4:21:9e:d3:0e: bf:d1:cc:24:0a:f8:37:69:eb:19:43:28:25:7a:66:db:6b:57: 5f:90:0a:8d:87:8d:56:c9:9b:31:ac:f6:5c:53:6a:79:9a:94: 1b:fe:fc:11:1d:a6:dd:93:50:16:f7:20:c3:90:b8:b1:e3:35: a8:39:5b:6d:1c:d4:95:eb:f1:ad:84:97:e9:fe:af:0b:3c:12: 0e:b7:79:57:40:b6:50:8c:f7:9e:26:c8:32:44:00:63:5e:70: 4f:ae:41:e8:0f:97:49:bd:34:81:04:c8:fc:b3:14:93:e5:57: 94:2c:4a:fe:80:7e:f0:13:3a:65:97:a4:c0:40:02:7a:7e:26: ec:39:8b:d6:92:24:b4:7a:45:fe:60:16:7a:07:e4:70:bd:df: 8a:56:97:73:02:be:df:64:17:6b:8b:b4:72:e9:71:b2:dd:0f: 67:7c:13:15:25:e3:6d:49:d2:f6:46:c5:19:9c:d1:7e:77:19: 49:c3:75:ea:e1:74:25:2d:f0:ed:3e:9f:10:20:44:89:99:36: 42:1c:48:73:1e:29:97:12:86:30:ff:c2:d2:4d:30:f5:77:9b: b9:e0:b4:a5:ce:fa:e6:4b:7c:8b:25:6f:88:ed:17:e5:49:ee: af:2b:6c:cb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqG2/LGwexLPYhS0AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDcxNTEzMDEwNFoXDTI1MTAxMzEzMDEwNFowLzEtMCsGA1UEAxMk NjE0N2ZmZTEtZWU3My00NTRjLTg5MTktZWZiYmI1OTZmYTBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA23X6T5hSbREMmXMaBAUpBuppuL5qIq4jfDUC oEioQNVHNaBSuVkBAyN3IrdFkMzAx3YNiOCe43CTRSQSFCc+QBPO7hFZFbO0OKFs 3z5aSKVyy7ff87d0KBYrBf+HLh3Sc4bWtWPNmu4dbVne9ULDfSpIXo7Ak+KdsolD L0O91TJitQbhYmk4JfSB07CMDxDbUP9PpYIpiEAHZ+ujECk46V76g88JgPZREaGB 665fXgVfVsB7hL92iIJaUyVnMSIuREyO1pHh5FmrSLplcDsTXP52fjfmfVIDntjP +rlVWF6mFdaSpWEVJj/2RgNEICZB94r8+ec8V/kTHLzMrJIcJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCoyrIT/CD0rqsTBEIF/XerBT2GjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYzIzYTk5M2EtYjM3OS0z MzU2LWEyMWQtNDQ3ZjZmNjM2MDBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASn3JMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJq0Sarh0y0ZXdR5mZDUIZ7TDr/RzCQK+Ddp6xlDKCV6ZttrV1+QCo2H jVbJmzGs9lxTanmalBv+/BEdpt2TUBb3IMOQuLHjNag5W20c1JXr8a2El+n+rws8 Eg63eVdAtlCM954myDJEAGNecE+uQegPl0m9NIEEyPyzFJPlV5QsSv6AfvATOmWX pMBAAnp+Juw5i9aSJLR6Rf5gFnoH5HC934pWl3MCvt9kF2uLtHLpcbLdD2d8ExUl 421J0vZGxRmc0X53GUnDderhdCUt8O0+nxAgRImZNkIcSHMeKZcShjD/wtJNMPV3 m7ngtKXO+uZLfIslb4jtF+VJ7q8rbMs= -----END CERTIFICATE-----Generated at Mon Aug 4 19:07:29 2025 by rpki-client