$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/f23eb91b-fe9f-397f-a93b-4ba8e9d79e63.roa File: f23eb91b-fe9f-397f-a93b-4ba8e9d79e63.roa (raw, json) Hash identifier: c9Bf8X1Q9P9NUDZHnD+OuBXN36G7GqLycIzECRWBFR8= Subject key identifier: A6:1D:49:9B:67:B2:8F:50:DF:3B:B6:6E:BD:C4:D1:55:D7:B9:D6:C6 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584A86DBF0CAD3F9E94986EEDC80 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/f23eb91b-fe9f-397f-a93b-4ba8e9d79e63.roa Signing time: Tue 15 Jul 2025 13:01:04 +0000 ROA not before: Tue 15 Jul 2025 13:01:04 +0000 ROA not after: Mon 13 Oct 2025 13:01:04 +0000 asID: 15169 IP address blocks: 74.125.124.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:86:db:f0:ca:d3:f9:e9:49:86:ee:dc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jul 15 13:01:04 2025 GMT Not After : Oct 13 13:01:04 2025 GMT Subject: CN=cf395a4c-436a-4456-8573-e003eb1454ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:d0:d4:cb:42:3e:61:83:62:0c:8a:38:20:71: 8c:2a:13:f6:69:12:52:28:5e:c0:74:b5:6a:df:13: ce:c4:73:e0:74:e4:ad:e8:64:29:15:54:4c:9e:ce: 97:b3:2f:9a:e4:f0:ee:f3:68:5d:96:56:01:2a:23: 9b:18:94:9c:27:42:05:7d:d5:a7:46:55:0d:22:31: 38:3f:8d:41:64:cf:8f:a1:34:f0:8e:f8:96:23:d0: 52:31:06:f0:cd:d4:25:fb:ad:56:ef:8a:0b:4f:aa: 8a:1f:3a:af:18:21:aa:02:a6:24:ae:1a:38:06:d4: 48:7d:5a:7f:d9:bc:c1:6c:69:d5:fe:95:ea:43:07: 98:7f:52:91:64:cc:12:01:f2:66:52:3e:9b:6b:4c: 78:b2:e9:73:e4:53:50:ab:0d:db:10:89:66:f1:49: ee:17:4e:87:69:cf:4e:94:6b:37:32:6b:88:31:1a: 30:4d:1c:dc:5c:59:83:33:bf:9a:54:10:97:68:bf: 0f:12:ee:e0:67:71:8b:8e:51:e7:38:35:8e:7d:58: ca:98:42:21:97:ff:b1:3a:fc:0c:f8:51:6e:73:04: a5:38:d9:0e:bb:f2:f5:2a:fd:0e:65:af:df:8f:39: 32:c8:f5:79:b3:43:5b:f3:26:8b:6d:81:30:45:47: dc:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:1D:49:9B:67:B2:8F:50:DF:3B:B6:6E:BD:C4:D1:55:D7:B9:D6:C6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/f23eb91b-fe9f-397f-a93b-4ba8e9d79e63.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 74.125.124.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:63:a9:75:d0:56:85:c9:43:a1:71:50:8f:87:ad:00:ae:65: 18:83:0b:c5:22:39:70:e2:f3:b3:32:38:eb:29:33:37:4b:6f: e7:ca:f7:aa:00:eb:c6:5f:3d:76:14:cf:d8:b3:e3:56:66:c7: df:98:28:be:07:b4:13:14:f0:27:17:5f:cc:bf:a2:a0:cd:fa: 19:90:72:f1:47:76:c7:cc:95:ac:99:5f:c9:50:19:08:31:7f: cb:26:04:36:4e:09:a4:01:20:e8:0f:99:8d:78:23:ed:5b:13: 5f:51:7d:00:45:fd:e3:20:08:45:e9:1a:f1:72:28:88:f1:a3: 0e:67:9e:55:3a:c4:bf:3f:af:d8:af:05:e4:00:95:97:18:d7: 90:5c:54:12:b3:01:63:48:6b:cf:b6:11:8e:39:50:23:9c:c4: 74:15:7a:0d:cc:cc:15:f9:4c:85:13:0a:e1:5d:c9:3d:a6:50: e4:53:f1:89:1e:c5:4a:74:fb:51:df:4e:eb:b9:c5:04:98:29: 42:8d:3b:40:8c:ba:aa:ef:31:b6:9e:a2:da:38:51:13:7b:3f: fc:cf:79:cb:d2:cb:02:cb:09:63:37:00:ae:e9:0c:51:d7:7c: 7a:25:ee:f7:06:3c:86:88:a7:75:88:da:a3:ac:fa:64:da:33: 13:ee:69:db -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqG2/DK0/npSYbu3IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDcxNTEzMDEwNFoXDTI1MTAxMzEzMDEwNFowLzEtMCsGA1UEAxMk Y2YzOTVhNGMtNDM2YS00NDU2LTg1NzMtZTAwM2ViMTQ1NGFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoNDUy0I+YYNiDIo4IHGMKhP2aRJSKF7AdLVq 3xPOxHPgdOSt6GQpFVRMns6Xsy+a5PDu82hdllYBKiObGJScJ0IFfdWnRlUNIjE4 P41BZM+PoTTwjviWI9BSMQbwzdQl+61W74oLT6qKHzqvGCGqAqYkrho4BtRIfVp/ 2bzBbGnV/pXqQweYf1KRZMwSAfJmUj6ba0x4sulz5FNQqw3bEIlm8UnuF06Hac9O lGs3MmuIMRowTRzcXFmDM7+aVBCXaL8PEu7gZ3GLjlHnODWOfVjKmEIhl/+xOvwM +FFucwSlONkOu/L1Kv0OZa/fjzkyyPV5s0Nb8yaLbYEwRUfcRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKYdSZtnso9Q3zu2br3E0VXXudbGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZjIzZWI5MWItZmU5Zi0z OTdmLWE5M2ItNGJhOGU5ZDc5ZTYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASn18MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACZjqXXQVoXJQ6FxUI+HrQCuZRiDC8UiOXDi87MyOOspMzdLb+fK96oA 68ZfPXYUz9iz41Zmx9+YKL4HtBMU8CcXX8y/oqDN+hmQcvFHdsfMlayZX8lQGQgx f8smBDZOCaQBIOgPmY14I+1bE19RfQBF/eMgCEXpGvFyKIjxow5nnlU6xL8/r9iv BeQAlZcY15BcVBKzAWNIa8+2EY45UCOcxHQVeg3MzBX5TIUTCuFdyT2mUORT8Yke xUp0+1HfTuu5xQSYKUKNO0CMuqrvMbaeoto4URN7P/zPecvSywLLCWM3AK7pDFHX fHol7vcGPIaIp3WI2qOs+mTaMxPuads= -----END CERTIFICATE-----Generated at Sat Aug 23 15:30:54 2025 by rpki-client