$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/f23eb91b-fe9f-397f-a93b-4ba8e9d79e63.roa File: f23eb91b-fe9f-397f-a93b-4ba8e9d79e63.roa (raw, json) Hash identifier: rjSsOcGAOCVKPz8hfWX3qECqG6oC/HX6TMdHPQnUBsU= Subject key identifier: A1:BD:21:6E:E2:41:94:49:57:A9:77:21:1C:F0:9E:5E:B9:97:3B:00 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584B6797DBBA490167AC69D9F640 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/f23eb91b-fe9f-397f-a93b-4ba8e9d79e63.roa Signing time: Sat 04 Oct 2025 01:00:33 +0000 ROA not before: Sat 04 Oct 2025 01:00:33 +0000 ROA not after: Fri 02 Jan 2026 02:00:33 +0000 asID: 15169 IP address blocks: 74.125.124.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:67:97:db:ba:49:01:67:ac:69:d9:f6:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Oct 4 01:00:33 2025 GMT Not After : Jan 2 02:00:33 2026 GMT Subject: CN=c54736de-06b5-46cb-849e-dce309a80972 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:6d:6d:5c:a3:22:a6:03:31:4b:06:38:65:e1: 69:86:6e:3a:65:fd:12:53:e5:23:29:34:0d:61:f6: 18:98:fe:f2:80:ac:81:35:1d:ef:0c:c8:e1:69:25: 0a:44:a0:9d:b0:d0:18:2e:fc:1a:79:69:8e:c9:ca: c5:e6:a4:b8:88:fe:8e:6f:e8:78:01:7e:83:57:31: 80:04:96:31:4f:05:dd:e4:ee:e7:64:54:86:f3:e5: 8f:eb:0c:5b:e1:6f:71:b0:27:6d:cd:ca:dd:c8:74: 67:f0:55:e1:e3:fb:3e:21:d0:cd:84:39:e9:2c:9c: b8:38:ab:cb:28:e0:ba:bd:25:8f:26:0e:70:58:52: c6:9f:ec:5f:94:fc:f9:2e:1b:36:1a:e2:4a:33:2b: 8e:fa:13:31:3d:b2:bd:9d:39:51:a9:09:e5:05:e7: 19:c1:1c:2b:86:04:d5:07:a7:50:4a:4b:eb:b5:f0: 12:92:c2:18:77:4a:04:05:39:a1:43:9f:d0:0f:72: 33:89:36:1f:6e:f1:75:ac:d0:38:24:c6:e9:08:c4: c9:cd:f3:72:96:6f:81:80:bc:d8:bd:8d:94:ad:6c: 3f:7b:f7:e1:6b:73:3c:db:af:2b:77:8e:91:fd:25: 38:8d:ff:01:e1:10:87:a0:d7:ae:02:86:30:3f:c5: 70:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:BD:21:6E:E2:41:94:49:57:A9:77:21:1C:F0:9E:5E:B9:97:3B:00 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/f23eb91b-fe9f-397f-a93b-4ba8e9d79e63.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 74.125.124.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a9:a9:37:86:22:04:0c:35:3d:d5:9f:6d:ed:ae:90:d7:42:78: 80:9b:13:68:ce:fa:37:22:0d:6f:63:2e:48:8e:c9:d5:2a:40: 65:ab:92:db:de:7a:f0:55:1c:f6:e5:9d:88:32:09:0d:59:0f: 8c:9b:0e:d1:1c:92:cf:4a:35:09:a0:b6:81:3e:ef:b0:b8:04: c7:08:aa:57:20:57:b7:5f:ae:7e:0e:a1:21:b4:ec:f6:00:2d: 43:e0:fa:ba:0e:3b:fa:87:3c:e3:a9:92:71:37:6b:49:92:a1: 9e:59:1d:ec:8f:f0:09:cb:b0:23:e5:93:b1:54:1c:df:1c:27: 9d:b8:54:5c:66:53:ba:01:e7:e1:19:ec:3b:4c:9d:b0:d4:53: 36:9a:52:db:5a:81:3e:08:01:57:f8:aa:5a:e4:82:3c:a6:cb: 29:82:cc:77:df:8c:ba:bb:28:a6:05:93:72:9f:f6:a5:c8:4f: 0e:cc:9c:7b:1d:d5:9f:a5:f3:4c:95:59:6b:f1:ca:e2:f2:29: 0c:37:b5:8a:51:36:5c:b7:e3:7b:92:1b:39:b7:a4:0a:0d:83: 1f:59:c2:7f:84:31:75:aa:b2:9c:57:75:d3:c7:3e:19:0e:0a: 56:84:e3:08:81:bf:93:c8:7d:ef:f0:5f:72:4d:59:b1:e1:30: ef:42:93:f3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtnl9u6SQFnrGnZ9kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MTAwNDAxMDAzM1oXDTI2MDEwMjAyMDAzM1owLzEtMCsGA1UEAxMk YzU0NzM2ZGUtMDZiNS00NmNiLTg0OWUtZGNlMzA5YTgwOTcyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv21tXKMipgMxSwY4ZeFphm46Zf0SU+UjKTQN YfYYmP7ygKyBNR3vDMjhaSUKRKCdsNAYLvwaeWmOycrF5qS4iP6Ob+h4AX6DVzGA BJYxTwXd5O7nZFSG8+WP6wxb4W9xsCdtzcrdyHRn8FXh4/s+IdDNhDnpLJy4OKvL KOC6vSWPJg5wWFLGn+xflPz5Lhs2GuJKMyuO+hMxPbK9nTlRqQnlBecZwRwrhgTV B6dQSkvrtfASksIYd0oEBTmhQ5/QD3IziTYfbvF1rNA4JMbpCMTJzfNylm+BgLzY vY2UrWw/e/fha3M8268rd46R/SU4jf8B4RCHoNeuAoYwP8VwbQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKG9IW7iQZRJV6l3IRzwnl65lzsAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZjIzZWI5MWItZmU5Zi0z OTdmLWE5M2ItNGJhOGU5ZDc5ZTYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASn18MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKmpN4YiBAw1PdWfbe2ukNdCeICbE2jO+jciDW9jLkiOydUqQGWrktve evBVHPblnYgyCQ1ZD4ybDtEcks9KNQmgtoE+77C4BMcIqlcgV7dfrn4OoSG07PYA LUPg+roOO/qHPOOpknE3a0mSoZ5ZHeyP8AnLsCPlk7FUHN8cJ524VFxmU7oB5+EZ 7DtMnbDUUzaaUttagT4IAVf4qlrkgjymyymCzHffjLq7KKYFk3Kf9qXITw7MnHsd 1Z+l80yVWWvxyuLyKQw3tYpRNly343uSGzm3pAoNgx9Zwn+EMXWqspxXddPHPhkO ClaE4wiBv5PIfe/wX3JNWbHhMO9Ck/M= -----END CERTIFICATE-----Generated at Tue Nov 4 23:32:40 2025 by rpki-client