$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/e33fcabc-b77b-3869-b070-63c53fd0f768.roa File: e33fcabc-b77b-3869-b070-63c53fd0f768.roa (raw, json) Hash identifier: 8RrxkrjO3Ro0RQsoN1CR8h7xeiV+mol2iZIpFGBTcik= Subject key identifier: 89:24:B5:87:57:FC:18:F4:85:F2:A5:02:C2:28:74:4C:19:D3:1D:92 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584A86DB86F5AB230DB55F89BD00 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/e33fcabc-b77b-3869-b070-63c53fd0f768.roa Signing time: Tue 15 Jul 2025 13:01:04 +0000 ROA not before: Tue 15 Jul 2025 13:01:04 +0000 ROA not after: Mon 13 Oct 2025 13:01:04 +0000 asID: 15169 IP address blocks: 74.125.141.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:86:db:86:f5:ab:23:0d:b5:5f:89:bd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jul 15 13:01:04 2025 GMT Not After : Oct 13 13:01:04 2025 GMT Subject: CN=1d7a7ee3-d798-4659-980c-621d64cfd462 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:3a:70:06:06:4a:53:17:a6:23:34:bc:06:d5: e5:33:93:53:ef:d4:82:37:4d:8e:4c:f9:4d:72:56: ff:d4:96:41:3e:0b:b5:f2:b6:6f:54:27:34:53:a9: c3:cd:8e:6f:4f:b6:b8:a5:8a:70:0d:5d:56:89:72: f3:bb:5d:06:cb:72:fd:b1:f1:3a:41:af:69:c6:61: 89:f3:54:b4:ab:ea:e0:89:0c:d9:dc:df:63:ec:18: 13:fc:a6:bb:24:55:10:e6:64:d7:b7:b6:35:e5:79: d3:c8:46:9f:8a:74:9e:68:a5:04:5b:b4:19:5d:c3: 88:0d:59:93:58:42:47:41:8f:e1:3c:d4:20:7a:b6: c7:db:fe:b5:d5:b1:7c:6b:50:93:2d:d7:0f:72:a6: bf:28:07:e2:45:1c:9a:e9:b2:31:12:9a:2a:d1:98: e1:e6:87:7a:cf:3c:a5:15:f5:63:4b:16:f5:df:16: 1b:01:17:31:45:fa:15:76:b1:21:01:04:7e:27:26: 19:11:4a:8b:b1:84:46:fa:c7:80:56:f2:a6:ed:fd: f0:f1:47:39:a9:f2:ea:69:b9:ff:f7:21:de:ad:73: 56:76:f3:df:20:1d:fa:b6:0c:d0:0a:ce:4c:bb:7a: 4e:b2:f8:8a:d9:11:f8:2c:8d:2f:d9:9b:de:7d:41: 24:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:24:B5:87:57:FC:18:F4:85:F2:A5:02:C2:28:74:4C:19:D3:1D:92 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/e33fcabc-b77b-3869-b070-63c53fd0f768.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 74.125.141.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9a:d3:ca:0d:50:83:0f:e5:f1:9b:ff:6d:93:ff:58:61:ea:c0: 94:78:a9:7e:89:46:fb:bd:c1:96:8b:1a:26:f0:f5:55:5b:7f: 44:c2:7c:e6:0e:c7:5d:0b:62:4b:3c:f8:91:32:e2:3c:91:0c: 50:36:76:f5:27:19:15:86:f9:b5:94:95:9f:8e:0b:3b:91:4f: a8:b5:da:bf:3d:99:c7:74:3e:e0:78:1f:78:81:53:0e:95:74: 01:0b:6b:12:7b:48:bb:bc:2e:36:d2:07:76:4b:99:35:60:a8: 2b:df:cc:d3:21:43:09:c4:2d:ce:4f:37:f3:7e:c0:bd:8c:c0: e5:4f:ee:8c:6a:a5:3b:18:e6:63:cb:36:ad:c8:48:7e:38:c4: 2f:65:f5:51:31:33:6e:84:bd:3a:b6:01:1d:2f:9e:84:bd:0a: f4:9f:6c:84:8c:2e:c0:b2:4f:8d:8a:07:de:58:76:8b:7a:8b: 6e:ea:26:13:93:e0:64:7d:95:d6:1d:73:47:8a:f8:ea:34:8f: e5:52:7b:31:f9:13:10:ed:2a:01:c8:81:8a:a1:41:de:3f:82: f4:3a:0b:78:c1:1c:a8:f1:c1:93:ef:06:b1:ed:80:42:71:cb: d8:ad:3b:a9:ce:57:5c:0e:f9:84:e6:6d:d1:1e:2e:64:1c:c4: a3:7a:42:f2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqG24b1qyMNtV+JvQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDcxNTEzMDEwNFoXDTI1MTAxMzEzMDEwNFowLzEtMCsGA1UEAxMk MWQ3YTdlZTMtZDc5OC00NjU5LTk4MGMtNjIxZDY0Y2ZkNDYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlDpwBgZKUxemIzS8BtXlM5NT79SCN02OTPlN clb/1JZBPgu18rZvVCc0U6nDzY5vT7a4pYpwDV1WiXLzu10Gy3L9sfE6Qa9pxmGJ 81S0q+rgiQzZ3N9j7BgT/Ka7JFUQ5mTXt7Y15XnTyEafinSeaKUEW7QZXcOIDVmT WEJHQY/hPNQgerbH2/611bF8a1CTLdcPcqa/KAfiRRya6bIxEpoq0Zjh5od6zzyl FfVjSxb13xYbARcxRfoVdrEhAQR+JyYZEUqLsYRG+seAVvKm7f3w8Uc5qfLqabn/ 9yHerXNWdvPfIB36tgzQCs5Mu3pOsviK2RH4LI0v2ZvefUEkeQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIkktYdX/Bj0hfKlAsIodEwZ0x2SMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZTMzZmNhYmMtYjc3Yi0z ODY5LWIwNzAtNjNjNTNmZDBmNzY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASn2NMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJrTyg1Qgw/l8Zv/bZP/WGHqwJR4qX6JRvu9wZaLGibw9VVbf0TCfOYO x10LYks8+JEy4jyRDFA2dvUnGRWG+bWUlZ+OCzuRT6i12r89mcd0PuB4H3iBUw6V dAELaxJ7SLu8LjbSB3ZLmTVgqCvfzNMhQwnELc5PN/N+wL2MwOVP7oxqpTsY5mPL Nq3ISH44xC9l9VExM26EvTq2AR0vnoS9CvSfbISMLsCyT42KB95Ydot6i27qJhOT 4GR9ldYdc0eK+Oo0j+VSezH5ExDtKgHIgYqhQd4/gvQ6C3jBHKjxwZPvBrHtgEJx y9itO6nOV1wO+YTmbdEeLmQcxKN6QvI= -----END CERTIFICATE-----Generated at Mon Aug 4 15:35:00 2025 by rpki-client