$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/04b9aae5-9a08-3015-90f0-2164c4501787.roa File: 04b9aae5-9a08-3015-90f0-2164c4501787.roa (raw, json) Hash identifier: IQbPlzP7y/c7AIjmBSrF23IpDuggJ/p3w8kHBq262rk= Subject key identifier: 20:E4:8C:DF:9E:6E:E2:C5:8F:D1:D4:90:9D:BD:02:01:D6:7D:F3:4E Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584D27AA70115351A5F03B79D980 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/04b9aae5-9a08-3015-90f0-2164c4501787.roa Signing time: Fri 13 Mar 2026 13:00:40 +0000 ROA not before: Fri 13 Mar 2026 13:00:40 +0000 ROA not after: Thu 11 Jun 2026 13:00:40 +0000 asID: 15169 IP address blocks: 74.125.70.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 19 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:27:aa:70:11:53:51:a5:f0:3b:79:d9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Mar 13 13:00:40 2026 GMT Not After : Jun 11 13:00:40 2026 GMT Subject: CN=eb298d00-07cd-4ea2-a1bb-976950d899c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:cb:0a:d1:1d:c5:6c:33:f9:53:e2:de:37:69: b0:8c:ac:cb:54:cc:e1:2b:b8:ae:2b:88:15:dc:51: dd:fc:2f:2b:46:0c:ac:2f:00:b6:59:8c:af:a5:2a: 32:d8:e4:80:9f:2f:c4:82:a9:fc:97:ac:b1:69:2c: b4:c4:6c:db:e3:f5:d0:0d:5e:1f:28:17:a9:5c:bb: fe:09:37:fa:bb:35:d7:18:7a:4e:6a:3f:99:fa:f6: 09:a8:f0:d4:0c:b6:fd:a9:4b:05:ee:e4:fb:13:72: b6:38:8f:2a:96:a3:5a:37:91:88:16:84:c0:dc:e3: da:d0:a0:53:45:47:21:a2:52:98:3a:83:c8:91:49: 33:1c:af:a1:0a:93:7b:52:63:6a:3b:96:27:61:00: f2:6f:ac:15:d7:18:cf:c7:89:8a:51:1a:74:8c:1a: c2:c5:4e:e5:f0:6f:d2:bf:ba:19:aa:18:30:90:09: f0:b5:73:0e:2a:2f:9b:ec:d4:e4:06:df:cf:39:67: fd:1d:8c:d3:00:a4:ce:8e:b8:c4:d2:2f:de:59:28: 8c:90:29:be:66:13:9e:33:07:0e:b9:5b:22:47:bc: 24:cd:15:f6:27:18:fa:f2:43:22:a5:c3:ca:a7:8b: f8:6c:ae:fd:c3:ff:b7:c6:7b:2c:6c:c8:0d:33:e3: 7a:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:E4:8C:DF:9E:6E:E2:C5:8F:D1:D4:90:9D:BD:02:01:D6:7D:F3:4E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/04b9aae5-9a08-3015-90f0-2164c4501787.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 74.125.70.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:15:d4:94:42:81:45:f3:67:46:cd:2a:f6:13:96:ae:02:d9: 7c:7e:b1:d0:c9:10:40:18:e6:eb:21:56:f4:00:50:d7:0a:c8: 25:e1:b7:25:6b:07:1e:69:18:66:34:98:7e:fb:b8:55:19:cc: 16:ee:17:e5:8c:f6:33:81:ab:5f:8b:4b:d5:01:1e:b5:25:ef: c9:6a:80:82:e9:5b:d7:b2:08:c6:f9:6f:87:d9:5f:ae:a0:46: d3:93:f5:ec:64:47:9a:c0:5e:3f:ca:51:b1:9e:8a:09:98:52: 0d:68:0c:e9:b7:ae:27:ef:f9:55:3e:dd:7e:8a:17:ec:82:71: b9:4f:bb:e4:2f:ad:40:48:fc:4d:f1:b1:c2:d8:a6:38:2a:fa: 17:d7:84:68:6a:0f:59:ef:da:8d:16:4a:b8:13:30:e3:b9:a4: f7:7d:6f:0b:7a:60:af:26:dd:ef:fd:eb:b3:79:c7:2c:a7:4d: c9:01:b2:84:02:ec:9a:fb:8e:22:4c:aa:50:13:ab:d9:e9:aa: 17:e1:f9:d3:d9:97:9b:99:ce:5a:25:a0:e3:af:85:90:a2:80: 5f:7e:0a:1a:90:ab:0f:de:69:25:bb:52:60:74:df:26:39:43: 35:b8:75:ec:98:6f:64:19:7f:c1:17:9f:fc:4b:ee:4f:c0:64: bc:c6:cb:a7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0nqnARU1Gl8Dt52YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDMxMzEzMDA0MFoXDTI2MDYxMTEzMDA0MFowLzEtMCsGA1UEAxMk ZWIyOThkMDAtMDdjZC00ZWEyLWExYmItOTc2OTUwZDg5OWMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr8sK0R3FbDP5U+LeN2mwjKzLVMzhK7iuK4gV 3FHd/C8rRgysLwC2WYyvpSoy2OSAny/Egqn8l6yxaSy0xGzb4/XQDV4fKBepXLv+ CTf6uzXXGHpOaj+Z+vYJqPDUDLb9qUsF7uT7E3K2OI8qlqNaN5GIFoTA3OPa0KBT RUcholKYOoPIkUkzHK+hCpN7UmNqO5YnYQDyb6wV1xjPx4mKURp0jBrCxU7l8G/S v7oZqhgwkAnwtXMOKi+b7NTkBt/POWf9HYzTAKTOjrjE0i/eWSiMkCm+ZhOeMwcO uVsiR7wkzRX2Jxj68kMipcPKp4v4bK79w/+3xnssbMgNM+N6rwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCDkjN+ebuLFj9HUkJ29AgHWffNOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMDRiOWFhZTUtOWEwOC0z MDE1LTkwZjAtMjE2NGM0NTAxNzg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASn1GMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFUV1JRCgUXzZ0bNKvYTlq4C2Xx+sdDJEEAY5ushVvQAUNcKyCXhtyVr Bx5pGGY0mH77uFUZzBbuF+WM9jOBq1+LS9UBHrUl78lqgILpW9eyCMb5b4fZX66g RtOT9exkR5rAXj/KUbGeigmYUg1oDOm3rifv+VU+3X6KF+yCcblPu+QvrUBI/E3x scLYpjgq+hfXhGhqD1nv2o0WSrgTMOO5pPd9bwt6YK8m3e/967N5xyynTckBsoQC 7Jr7jiJMqlATq9npqhfh+dPZl5uZzloloOOvhZCigF9+ChqQqw/eaSW7UmB03yY5 QzW4deyYb2QZf8EXn/xL7k/AZLzGy6c= -----END CERTIFICATE-----Generated at Wed Mar 18 20:31:56 2026 by rpki-client