$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/da38760b-7c4b-3063-aad0-6b742e88b1a9.roa File: da38760b-7c4b-3063-aad0-6b742e88b1a9.roa (raw, json) Hash identifier: /+pXVTEiY29hfqIkpxUsXF/fKHiR/tsEEUqGjOQ08O0= Subject key identifier: E8:C3:B5:32:FD:2E:6D:E4:39:59:52:A7:20:87:80:14:5F:0F:CB:D0 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584A86DBCBDC942B4B66A47B0180 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/da38760b-7c4b-3063-aad0-6b742e88b1a9.roa Signing time: Tue 15 Jul 2025 13:01:04 +0000 ROA not before: Tue 15 Jul 2025 13:01:04 +0000 ROA not after: Mon 13 Oct 2025 13:01:04 +0000 asID: 15169 IP address blocks: 74.125.132.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:86:db:cb:dc:94:2b:4b:66:a4:7b:01:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jul 15 13:01:04 2025 GMT Not After : Oct 13 13:01:04 2025 GMT Subject: CN=ceb89947-fce2-47bc-bda1-cab8118dc72a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:ad:59:75:10:7b:4b:9e:fb:dc:23:59:3d:30: a1:7c:1c:db:54:3c:ef:18:de:cd:19:f6:e5:b2:24: 3b:b0:21:52:f1:c4:a7:ea:99:e0:80:22:39:a7:9a: 49:88:62:bc:36:9f:2e:fc:0e:61:e7:60:0f:14:8b: 68:c4:e0:85:9b:c7:ab:20:24:2a:a4:1b:2f:78:5a: a8:38:c4:d4:65:4b:d5:6d:b5:7e:df:b8:64:bd:ff: 21:f0:0e:de:16:49:09:2b:2c:26:3a:ee:af:fa:6a: 7e:71:92:02:23:c9:a2:76:58:79:c8:f7:c8:ca:9f: a6:54:f3:ad:72:30:bb:47:25:28:f6:77:91:dd:ed: 33:02:f0:1b:59:8d:90:53:d5:1f:39:46:11:87:a6: fb:ab:b1:0f:73:7d:66:c2:4f:9f:29:f2:6f:fb:be: 21:1e:9c:c6:59:91:ce:af:62:72:cd:a2:2c:76:66: f0:d9:e4:29:1d:52:5a:91:90:4d:bc:74:cd:0d:ca: 36:de:dd:a7:8e:38:54:25:cb:57:98:94:b1:e3:f3: 15:04:41:31:47:52:b0:4d:2d:47:3d:82:66:a1:b1: a1:ff:86:1e:6c:b0:b8:07:44:0f:71:40:7c:45:eb: 0d:8d:97:9b:e2:57:a6:ad:6d:e0:c5:a6:88:8f:5b: 25:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:C3:B5:32:FD:2E:6D:E4:39:59:52:A7:20:87:80:14:5F:0F:CB:D0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/da38760b-7c4b-3063-aad0-6b742e88b1a9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 74.125.132.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b4:01:04:50:f6:0d:0c:dd:af:62:bd:a3:40:41:dd:8d:92:09: 33:80:35:79:a0:23:01:29:36:c9:59:0f:01:6e:3d:4b:3a:25: 73:eb:3c:2d:c4:ac:13:a6:38:65:bc:bf:72:79:da:43:83:14: df:c7:5d:06:8c:d8:5f:e3:9e:b0:ff:5d:05:31:71:96:4d:8c: 45:87:ef:b2:fe:82:bf:db:dc:6b:a6:89:31:5c:dd:99:02:86: 3a:be:56:76:6c:5d:ef:b6:19:bd:6e:d8:bd:1d:20:36:9e:7c: eb:53:61:31:f6:50:65:8c:8c:b8:90:6b:54:00:82:62:d3:56: a5:5a:b1:ad:52:40:f7:90:38:f9:eb:e3:a0:65:75:3a:d0:9d: ec:ce:88:2c:e3:66:fd:f6:42:c9:0a:f1:a1:15:74:2f:da:d6: 48:14:77:91:ad:d5:aa:23:cf:d9:b8:0c:2a:db:ae:1f:29:ac: 31:26:29:2c:e4:11:27:b7:cc:2f:35:1c:ef:a8:b0:4d:0d:d8: 4c:dd:91:1b:2a:e7:1e:d7:32:e5:0f:46:75:b7:22:2f:80:49: 29:d9:68:16:59:1e:37:a6:6d:42:10:db:ba:27:74:1f:96:27: 51:2d:36:c8:d9:c5:3d:c3:ed:ff:35:d4:ae:95:f6:a9:37:04: 58:0a:e9:4b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqG28vclCtLZqR7AYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDcxNTEzMDEwNFoXDTI1MTAxMzEzMDEwNFowLzEtMCsGA1UEAxMk Y2ViODk5NDctZmNlMi00N2JjLWJkYTEtY2FiODExOGRjNzJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAha1ZdRB7S5773CNZPTChfBzbVDzvGN7NGfbl siQ7sCFS8cSn6pnggCI5p5pJiGK8Np8u/A5h52APFItoxOCFm8erICQqpBsveFqo OMTUZUvVbbV+37hkvf8h8A7eFkkJKywmOu6v+mp+cZICI8midlh5yPfIyp+mVPOt cjC7RyUo9neR3e0zAvAbWY2QU9UfOUYRh6b7q7EPc31mwk+fKfJv+74hHpzGWZHO r2JyzaIsdmbw2eQpHVJakZBNvHTNDco23t2njjhUJctXmJSx4/MVBEExR1KwTS1H PYJmobGh/4YebLC4B0QPcUB8ResNjZeb4lemrW3gxaaIj1slNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOjDtTL9Lm3kOVlSpyCHgBRfD8vQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZGEzODc2MGItN2M0Yi0z MDYzLWFhZDAtNmI3NDJlODhiMWE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASn2EMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALQBBFD2DQzdr2K9o0BB3Y2SCTOANXmgIwEpNslZDwFuPUs6JXPrPC3E rBOmOGW8v3J52kODFN/HXQaM2F/jnrD/XQUxcZZNjEWH77L+gr/b3GumiTFc3ZkC hjq+VnZsXe+2Gb1u2L0dIDaefOtTYTH2UGWMjLiQa1QAgmLTVqVasa1SQPeQOPnr 46BldTrQnezOiCzjZv32QskK8aEVdC/a1kgUd5Gt1aojz9m4DCrbrh8prDEmKSzk ESe3zC81HO+osE0N2EzdkRsq5x7XMuUPRnW3Ii+ASSnZaBZZHjembUIQ27ondB+W J1EtNsjZxT3D7f811K6V9qk3BFgK6Us= -----END CERTIFICATE-----Generated at Mon Aug 4 19:07:58 2025 by rpki-client