$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/0983f839-866b-32f3-a6d3-1e8a2d9ae49f.roa File: 0983f839-866b-32f3-a6d3-1e8a2d9ae49f.roa (raw, json) Hash identifier: 3xIG/LLtuhKu/ZuXY+tKrSnUIni43teEdvKAXsoG5is= Subject key identifier: 6A:BD:73:D7:F7:0C:BD:79:16:D2:67:D5:C7:30:BD:CF:E4:07:90:F1 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584D27AA58770C2FF32A41953B40 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/0983f839-866b-32f3-a6d3-1e8a2d9ae49f.roa Signing time: Fri 13 Mar 2026 13:00:40 +0000 ROA not before: Fri 13 Mar 2026 13:00:40 +0000 ROA not after: Thu 11 Jun 2026 13:00:40 +0000 asID: 15169 IP address blocks: 74.125.138.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 19 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:27:aa:58:77:0c:2f:f3:2a:41:95:3b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Mar 13 13:00:40 2026 GMT Not After : Jun 11 13:00:40 2026 GMT Subject: CN=7c84eb89-5111-4047-a3ee-6447725b6060 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:f1:ed:86:3c:30:27:5f:71:78:f1:4a:4a:ed: 39:9c:44:e2:93:c7:67:59:8a:e5:4a:78:7c:c4:9d: d4:96:18:c4:92:59:3e:84:6b:7a:aa:d7:3c:8a:8b: 31:45:86:28:35:de:22:ce:c4:dd:7e:2c:a2:96:15: 5b:6b:02:98:10:a5:cf:84:cf:60:bb:56:6a:16:65: 9c:03:20:20:0d:86:9a:c8:ee:5b:80:dd:d1:97:a4: a8:6e:15:9c:fd:00:38:a5:5e:2d:9c:22:e1:5b:56: f7:3a:cb:e9:c1:c0:d7:f9:06:30:c3:d4:ec:85:12: 32:ea:5d:15:72:93:27:25:22:8d:37:7d:ee:a6:cc: ad:e9:17:48:5b:6d:4b:9e:b7:48:c0:2d:0d:35:b7: af:6c:d6:67:0a:b6:a5:d8:49:51:f7:8e:bf:8c:f5: 4b:01:ae:89:ad:5f:5a:57:63:94:b4:af:2f:ad:8a: 32:96:4e:c5:be:05:b5:88:71:ef:b0:0d:3d:6e:bd: 81:3a:5f:74:15:97:6f:d2:d8:41:0e:c7:2a:8b:9f: c6:c3:7d:ba:38:f3:a6:44:c2:96:ff:ea:e5:6c:48: 63:94:5f:52:05:46:4a:23:44:c0:4f:6b:c1:5f:2d: 8f:07:79:1e:6b:92:ad:63:14:e6:d2:69:2a:69:35: ac:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:BD:73:D7:F7:0C:BD:79:16:D2:67:D5:C7:30:BD:CF:E4:07:90:F1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/0983f839-866b-32f3-a6d3-1e8a2d9ae49f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 74.125.138.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:9f:95:f9:ca:fc:e9:df:82:37:c5:6f:25:50:d3:7a:15:c9: f6:22:7b:dd:e3:83:8e:2c:ea:cb:56:16:55:f2:43:cd:f6:51: 6b:39:a8:0a:e5:92:45:8a:68:03:f7:11:a7:a8:46:8d:85:83: e1:3d:ab:00:00:33:71:9b:1f:e2:cc:c8:2f:9c:11:77:d7:d9: 25:14:6f:5e:e7:58:f6:e1:2a:8f:03:e3:16:cc:19:4a:c7:18: eb:ac:7a:ba:11:74:e6:7b:57:e3:b2:8a:2d:9f:bb:ac:93:12: 53:97:dc:62:d2:38:60:85:31:69:90:84:82:e1:b4:e4:02:6b: 08:8f:b5:26:2c:62:ca:17:5e:a5:27:e3:dc:f9:6d:d0:9d:9d: 6f:30:d9:34:ad:1f:1c:2c:31:da:4b:cb:c7:02:03:ad:92:06: 97:f2:16:d2:55:f1:d5:3c:6c:23:fe:43:07:73:ca:58:a7:cf: 3c:2d:26:f0:09:d2:99:48:b1:f5:78:52:70:b2:be:0a:f8:58: 93:f6:51:3a:87:6d:a5:c6:3e:8f:13:27:08:57:0f:17:79:24: 76:96:11:e9:3b:a8:a8:13:05:51:a1:a0:13:a1:c5:06:f7:20: 26:ee:45:75:e2:59:bc:c2:90:89:38:84:c9:6e:64:9c:6f:73: 6d:a8:49:0d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0nqlh3DC/zKkGVO0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDMxMzEzMDA0MFoXDTI2MDYxMTEzMDA0MFowLzEtMCsGA1UEAxMk N2M4NGViODktNTExMS00MDQ3LWEzZWUtNjQ0NzcyNWI2MDYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6/HthjwwJ19xePFKSu05nETik8dnWYrlSnh8 xJ3UlhjEklk+hGt6qtc8iosxRYYoNd4izsTdfiyilhVbawKYEKXPhM9gu1ZqFmWc AyAgDYaayO5bgN3Rl6SobhWc/QA4pV4tnCLhW1b3OsvpwcDX+QYww9TshRIy6l0V cpMnJSKNN33upsyt6RdIW21LnrdIwC0NNbevbNZnCral2ElR946/jPVLAa6JrV9a V2OUtK8vrYoylk7FvgW1iHHvsA09br2BOl90FZdv0thBDscqi5/Gw326OPOmRMKW /+rlbEhjlF9SBUZKI0TAT2vBXy2PB3kea5KtYxTm0mkqaTWsXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGq9c9f3DL15FtJn1ccwvc/kB5DxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMDk4M2Y4MzktODY2Yi0z MmYzLWE2ZDMtMWU4YTJkOWFlNDlmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASn2KMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACqflfnK/OnfgjfFbyVQ03oVyfYie93jg44s6stWFlXyQ832UWs5qArl kkWKaAP3EaeoRo2Fg+E9qwAAM3GbH+LMyC+cEXfX2SUUb17nWPbhKo8D4xbMGUrH GOuseroRdOZ7V+Oyii2fu6yTElOX3GLSOGCFMWmQhILhtOQCawiPtSYsYsoXXqUn 49z5bdCdnW8w2TStHxwsMdpLy8cCA62SBpfyFtJV8dU8bCP+QwdzylinzzwtJvAJ 0plIsfV4UnCyvgr4WJP2UTqHbaXGPo8TJwhXDxd5JHaWEek7qKgTBVGhoBOhxQb3 ICbuRXXiWbzCkIk4hMluZJxvc22oSQ0= -----END CERTIFICATE-----Generated at Wed Mar 18 20:30:08 2026 by rpki-client