$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/cc17325d-904d-38a2-ac55-8ee4a0a677b6.roa File: cc17325d-904d-38a2-ac55-8ee4a0a677b6.roa (raw, json) Hash identifier: yuimih5Ghb5BHnoDcuskQxElO67Jm04yIdmeYkIpYeE= Subject key identifier: C7:3C:56:A2:8F:A2:DB:41:50:B9:50:D7:91:7D:80:F5:BB:91:F1:52 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584A9D30F26A04B998FD321CC300 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/cc17325d-904d-38a2-ac55-8ee4a0a677b6.roa Signing time: Wed 23 Jul 2025 13:01:02 +0000 ROA not before: Wed 23 Jul 2025 13:01:02 +0000 ROA not after: Tue 21 Oct 2025 13:01:02 +0000 asID: 15169 IP address blocks: 74.125.28.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9d:30:f2:6a:04:b9:98:fd:32:1c:c3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jul 23 13:01:02 2025 GMT Not After : Oct 21 13:01:02 2025 GMT Subject: CN=29158be3-42df-4261-8285-d85b1f706cc3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:79:15:97:97:b0:39:8d:13:29:da:81:38:08: 5a:7a:00:28:3b:05:6c:ac:31:c5:c9:cf:ac:fd:c3: c7:e8:67:c6:fe:67:d8:75:4e:52:07:2e:73:d3:2a: b1:8c:3e:00:f2:50:ce:a3:4b:79:3b:84:e6:db:98: 22:5b:ef:b7:bf:13:aa:ae:3a:dd:31:93:c7:d7:0c: 79:dd:5a:0e:0f:76:16:2e:9e:4a:b4:e4:6d:9d:19: ec:9b:e1:a0:fa:b9:a5:59:2e:56:91:b3:38:9a:55: 88:35:cc:63:ac:c4:69:b7:b6:2b:4e:3b:63:fb:9a: 98:96:e6:c0:46:38:8b:6f:3e:e6:77:54:30:b6:1c: 5a:8e:9a:46:fc:74:6e:81:33:d2:06:68:30:77:56: f3:7b:9b:d9:9b:a4:cf:3e:1a:7f:65:be:74:98:71: a8:ea:1e:e8:14:c7:ce:df:46:36:8b:cb:a4:75:5b: ef:7c:25:14:95:39:f1:70:f4:d5:3f:6c:4c:38:8f: 97:95:9c:4c:ab:7a:86:52:56:54:42:94:da:eb:09: c1:b6:e9:e0:c3:c1:e4:4a:0b:8f:66:7f:05:cc:42: 87:31:f9:81:9c:20:66:d8:4f:df:40:df:98:8a:cf: c4:77:28:78:45:09:11:c4:95:99:cd:14:91:30:97: 8a:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:3C:56:A2:8F:A2:DB:41:50:B9:50:D7:91:7D:80:F5:BB:91:F1:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/cc17325d-904d-38a2-ac55-8ee4a0a677b6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 74.125.28.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:d6:3b:ac:fc:fa:9e:90:51:97:4f:62:0b:13:5b:c7:15:6c: 2b:5b:ff:cd:08:a2:9e:75:82:f0:68:88:df:3e:7e:85:a9:67: ac:b1:5b:19:16:b7:61:40:70:63:4d:ac:bb:33:a3:6e:5a:06: 42:e4:6b:23:e9:03:f2:70:69:33:44:d0:b6:f2:65:89:dc:7e: 58:d7:12:05:5a:f5:c4:59:13:2c:4b:3b:e1:c6:64:53:77:49: c1:90:1f:f8:c0:8e:ce:6c:6b:35:ff:fb:47:e5:ed:b5:b2:a4: 32:c5:17:1a:35:b9:88:5a:75:9a:a1:fa:4c:c9:a7:db:37:06: ba:f4:72:9c:02:a8:38:36:f7:f9:31:f8:fd:48:ab:c4:63:ab: 13:f9:fb:e9:e5:71:75:44:93:e2:b0:a3:68:cf:d1:06:8f:8b: 0c:9b:a9:9b:84:5d:7d:55:ac:e6:c3:a2:fc:3c:a0:cf:aa:b6: 7d:a1:8c:21:94:53:f6:fd:34:b2:10:a6:d9:71:20:dd:2b:76: 50:17:6f:60:dc:d3:cb:06:4f:61:d8:3c:a0:a0:be:21:90:0d: 9d:fd:b2:50:1e:d3:8b:a2:cb:c3:da:77:ca:ec:2c:0a:87:1f: f1:d8:85:8b:ed:d0:37:7e:da:a4:d6:a5:bc:6a:e8:5e:92:2b: f6:f6:28:39 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqdMPJqBLmY/TIcwwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDcyMzEzMDEwMloXDTI1MTAyMTEzMDEwMlowLzEtMCsGA1UEAxMk MjkxNThiZTMtNDJkZi00MjYxLTgyODUtZDg1YjFmNzA2Y2MzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7HkVl5ewOY0TKdqBOAhaegAoOwVsrDHFyc+s /cPH6GfG/mfYdU5SBy5z0yqxjD4A8lDOo0t5O4Tm25giW++3vxOqrjrdMZPH1wx5 3VoOD3YWLp5KtORtnRnsm+Gg+rmlWS5WkbM4mlWINcxjrMRpt7YrTjtj+5qYlubA RjiLbz7md1QwthxajppG/HRugTPSBmgwd1bze5vZm6TPPhp/Zb50mHGo6h7oFMfO 30Y2i8ukdVvvfCUUlTnxcPTVP2xMOI+XlZxMq3qGUlZUQpTa6wnBtungw8HkSguP Zn8FzEKHMfmBnCBm2E/fQN+Yis/Edyh4RQkRxJWZzRSRMJeKZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMc8VqKPottBULlQ15F9gPW7kfFSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvY2MxNzMyNWQtOTA0ZC0z OGEyLWFjNTUtOGVlNGEwYTY3N2I2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASn0cMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAITWO6z8+p6QUZdPYgsTW8cVbCtb/80Iop51gvBoiN8+foWpZ6yxWxkW t2FAcGNNrLszo25aBkLkayPpA/JwaTNE0LbyZYncfljXEgVa9cRZEyxLO+HGZFN3 ScGQH/jAjs5sazX/+0fl7bWypDLFFxo1uYhadZqh+kzJp9s3Brr0cpwCqDg29/kx +P1Iq8RjqxP5++nlcXVEk+Kwo2jP0QaPiwybqZuEXX1VrObDovw8oM+qtn2hjCGU U/b9NLIQptlxIN0rdlAXb2Dc08sGT2HYPKCgviGQDZ39slAe04uiy8Pad8rsLAqH H/HYhYvt0Dd+2qTWpbxq6F6SK/b2KDk= -----END CERTIFICATE-----Generated at Mon Aug 4 15:27:21 2025 by rpki-client