$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/1c68adcb-e030-30cd-9cd4-6a7353a50978.roa File: 1c68adcb-e030-30cd-9cd4-6a7353a50978.roa (raw, json) Hash identifier: punXJHez2+jk+t/vjIs79GommkDgjbEMeqx7J1h1tQc= Subject key identifier: 16:1A:F9:1A:ED:A4:F8:0D:9C:0C:4F:81:16:31:59:C7:34:E4:C1:6D Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584D27AA499756C7DBB004C1A080 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/1c68adcb-e030-30cd-9cd4-6a7353a50978.roa Signing time: Fri 13 Mar 2026 13:00:40 +0000 ROA not before: Fri 13 Mar 2026 13:00:40 +0000 ROA not after: Thu 11 Jun 2026 13:00:40 +0000 asID: 15169 IP address blocks: 74.125.142.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 19 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:27:aa:49:97:56:c7:db:b0:04:c1:a0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Mar 13 13:00:40 2026 GMT Not After : Jun 11 13:00:40 2026 GMT Subject: CN=d7897661-815b-487d-be82-f8d74fb38284 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:50:f4:e6:3d:07:1b:3f:9c:51:46:71:8f:35: 4a:a1:62:2d:1e:fd:46:21:cc:f8:ca:4c:83:c1:2f: 86:a2:21:15:38:05:9d:1e:ea:41:eb:dc:da:26:e7: 15:15:49:dc:dd:ac:89:a7:cc:7e:c2:40:6c:6f:d9: 9e:0a:1b:57:f3:74:3d:26:4f:27:e8:3d:cc:d7:b0: fb:8d:18:6b:c7:84:7b:a7:1a:e4:07:d4:56:8f:c7: e3:f0:2e:57:c0:91:13:97:30:0d:f1:da:23:6b:9f: d2:9e:e1:49:2d:b2:69:ed:1f:96:6d:fe:fa:d4:01: e7:03:33:75:e5:5d:ad:23:ef:82:50:ff:b8:82:86: 32:1c:99:07:e8:b9:fd:1d:c7:3d:9b:1f:b0:bc:98: 34:fe:a6:9b:38:00:10:19:32:3e:8c:8e:a6:dd:42: f9:f8:18:be:13:99:42:7d:76:18:b2:27:27:bd:0b: ac:53:a7:c4:a0:6b:f6:ba:f1:1e:20:33:c2:0f:77: 41:d5:03:26:21:a5:5f:71:7e:dc:f4:9c:4e:93:1e: bb:29:fe:c6:1a:10:4f:46:e2:3a:43:17:36:f2:d4: 10:76:1d:87:5a:da:84:1a:30:ef:76:08:67:1c:b7: b9:79:be:17:56:46:0d:36:62:98:55:6a:49:f7:c0: 99:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:1A:F9:1A:ED:A4:F8:0D:9C:0C:4F:81:16:31:59:C7:34:E4:C1:6D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/1c68adcb-e030-30cd-9cd4-6a7353a50978.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 74.125.142.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:0d:ba:fb:54:94:42:9d:7e:07:25:28:9a:99:98:a7:0c:ee: 0b:5c:cc:28:dd:8e:16:ab:d2:0b:7e:c2:73:1a:b3:f3:fc:c0: c6:85:57:c3:8c:7f:f7:f7:e8:9f:3d:af:18:70:60:de:d8:5c: 55:c6:b8:57:9f:27:51:98:02:7b:1f:da:40:8a:e8:2d:1a:e5: a9:24:b7:50:67:25:0f:25:b8:d1:31:97:83:af:2b:f9:af:07: a5:a9:fb:ef:6f:32:69:8a:72:bd:45:04:6d:66:b6:b8:29:f6: 26:f3:0a:d9:95:e8:51:b1:78:23:41:36:a0:81:23:83:d3:5c: 4f:ec:7d:af:5f:1c:26:e2:90:72:41:72:f4:68:e0:25:51:b2: 00:af:00:01:81:ba:65:93:b7:89:4b:2a:1c:13:14:81:56:ec: 35:04:06:3c:37:32:be:df:52:c3:6e:45:dc:db:88:bc:93:12: 07:a9:63:3f:c6:bb:f0:3a:9e:23:b3:eb:fa:3c:33:66:e2:39: 6e:7a:6e:4f:6c:83:2b:5a:67:c5:6d:2c:4d:ca:f5:05:3d:43: 08:56:5b:8c:9e:36:3b:08:65:24:ce:a9:d6:f5:5c:c3:02:4a: 8e:35:18:bd:a1:c0:fa:a3:30:bd:ce:d2:ba:26:b4:51:cc:91: 39:96:95:d4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0nqkmXVsfbsATBoIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDMxMzEzMDA0MFoXDTI2MDYxMTEzMDA0MFowLzEtMCsGA1UEAxMk ZDc4OTc2NjEtODE1Yi00ODdkLWJlODItZjhkNzRmYjM4Mjg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiFD05j0HGz+cUUZxjzVKoWItHv1GIcz4ykyD wS+GoiEVOAWdHupB69zaJucVFUnc3ayJp8x+wkBsb9meChtX83Q9Jk8n6D3M17D7 jRhrx4R7pxrkB9RWj8fj8C5XwJETlzAN8doja5/SnuFJLbJp7R+Wbf761AHnAzN1 5V2tI++CUP+4goYyHJkH6Ln9Hcc9mx+wvJg0/qabOAAQGTI+jI6m3UL5+Bi+E5lC fXYYsicnvQusU6fEoGv2uvEeIDPCD3dB1QMmIaVfcX7c9JxOkx67Kf7GGhBPRuI6 Qxc28tQQdh2HWtqEGjDvdghnHLe5eb4XVkYNNmKYVWpJ98CZQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBYa+RrtpPgNnAxPgRYxWcc05MFtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMWM2OGFkY2ItZTAzMC0z MGNkLTljZDQtNmE3MzUzYTUwOTc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASn2OMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFwNuvtUlEKdfgclKJqZmKcM7gtczCjdjhar0gt+wnMas/P8wMaFV8OM f/f36J89rxhwYN7YXFXGuFefJ1GYAnsf2kCK6C0a5akkt1BnJQ8luNExl4OvK/mv B6Wp++9vMmmKcr1FBG1mtrgp9ibzCtmV6FGxeCNBNqCBI4PTXE/sfa9fHCbikHJB cvRo4CVRsgCvAAGBumWTt4lLKhwTFIFW7DUEBjw3Mr7fUsNuRdzbiLyTEgepYz/G u/A6niOz6/o8M2biOW56bk9sgytaZ8VtLE3K9QU9QwhWW4yeNjsIZSTOqdb1XMMC So41GL2hwPqjML3O0romtFHMkTmWldQ= -----END CERTIFICATE-----Generated at Wed Mar 18 20:29:50 2026 by rpki-client