$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/67d0a2bf-1fee-3c11-a30d-239424246d39.roa File: 67d0a2bf-1fee-3c11-a30d-239424246d39.roa (raw, json) Hash identifier: YaCgsXxXWU4c0b0cy2rqSqBsd4fAVdL7vvgjSXDsMNk= Subject key identifier: 0A:51:83:07:A5:A1:1E:E1:C1:26:35:3C:8D:57:E8:1A:CF:D4:51:53 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584D27AAAD40C8C9C24540BE9240 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/67d0a2bf-1fee-3c11-a30d-239424246d39.roa Signing time: Fri 13 Mar 2026 13:00:40 +0000 ROA not before: Fri 13 Mar 2026 13:00:40 +0000 ROA not after: Thu 11 Jun 2026 13:00:40 +0000 asID: 15169 IP address blocks: 74.125.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 19 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:27:aa:ad:40:c8:c9:c2:45:40:be:92:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Mar 13 13:00:40 2026 GMT Not After : Jun 11 13:00:40 2026 GMT Subject: CN=95e95059-be5c-49fd-8772-3a624ceb072e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:d0:65:4f:73:f9:7c:dc:58:0e:b0:dd:4c:88: 6e:54:e6:9c:fe:3d:a5:10:83:52:49:0c:9a:35:32: a3:ee:e3:93:d5:e8:b0:77:60:00:9d:54:74:6a:32: be:c1:74:f7:17:47:16:d9:0c:5e:33:4a:dc:e7:73: f3:bb:31:01:b0:20:16:7d:f2:2e:b8:f1:27:3a:9c: 2e:85:f6:e0:dd:66:a1:4d:c7:36:cd:68:1f:97:03: 1c:bc:2b:2d:f6:15:f5:be:c8:f4:fc:e5:33:36:a0: cb:ba:39:8d:9d:8d:25:66:ad:97:6a:67:0f:8f:3d: eb:3a:d1:20:10:aa:c3:fc:7f:7b:e9:d7:54:67:e2: bb:a2:a6:02:dc:4d:5a:d8:41:39:2b:cb:bc:17:dc: c7:81:dd:42:c1:a1:6b:d0:07:dd:b5:5e:2e:2a:44: 5e:40:75:81:d4:73:95:a2:a0:bf:f1:6b:d3:1f:f6: 72:ec:1e:5a:dc:37:06:13:e1:5f:4c:07:1b:82:f6: 8c:2a:60:b2:d3:ea:84:02:eb:a1:87:a6:a9:ca:78: 15:47:6f:7c:c1:d9:94:65:9e:0a:7d:e2:a8:80:de: da:87:0c:2c:62:8e:ab:60:1b:20:c5:0b:0c:20:56: fb:db:ce:70:ab:f9:e0:9e:41:36:9e:fb:fd:88:6d: 7b:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:51:83:07:A5:A1:1E:E1:C1:26:35:3C:8D:57:E8:1A:CF:D4:51:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/67d0a2bf-1fee-3c11-a30d-239424246d39.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 74.125.21.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:0c:01:cc:a7:ba:80:7a:6f:c3:b0:42:46:d4:97:70:83:7f: 9d:aa:db:6d:ee:fd:75:d4:52:d3:f9:90:bb:8c:cb:2a:86:ef: 2b:ec:1d:b1:ba:6a:60:48:aa:61:73:c0:f0:35:43:8a:0c:34: d3:84:06:d7:d2:d0:20:a9:61:d8:9f:ea:dd:76:8e:6f:0f:68: 4c:2a:a4:28:fd:0d:47:0c:8a:da:6b:5f:f0:7c:95:43:9d:3c: ee:a6:52:c1:62:f2:ef:fe:e6:e2:98:fe:25:2e:27:76:e9:71: cd:03:77:a2:70:47:b5:e5:73:72:e3:3f:0c:9d:d6:c7:36:a5: 05:34:ed:d7:6f:02:a2:90:97:15:28:89:be:43:ff:06:2c:55: 18:a7:3f:9c:27:b9:a6:48:9c:40:9f:fa:d3:1d:1f:28:f4:1a: af:e3:48:04:d0:e7:59:c1:be:6d:b0:7d:39:d3:c3:8a:f1:23: de:6e:a7:a5:97:50:98:95:3d:f6:b1:bf:d9:7b:cb:fd:37:93: 0a:b1:21:f8:3c:c2:b5:7b:5a:d9:af:89:58:1e:bd:8d:cd:a5: fe:c0:b6:12:0d:f6:fb:92:c0:26:2c:05:ae:e8:3a:a4:cf:d9: ee:e8:0f:3b:40:d8:5b:27:7a:7a:3f:e8:95:a2:b4:7e:b3:28: d8:73:09:1b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0nqq1AyMnCRUC+kkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDMxMzEzMDA0MFoXDTI2MDYxMTEzMDA0MFowLzEtMCsGA1UEAxMk OTVlOTUwNTktYmU1Yy00OWZkLTg3NzItM2E2MjRjZWIwNzJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArtBlT3P5fNxYDrDdTIhuVOac/j2lEINSSQya NTKj7uOT1eiwd2AAnVR0ajK+wXT3F0cW2QxeM0rc53PzuzEBsCAWffIuuPEnOpwu hfbg3WahTcc2zWgflwMcvCst9hX1vsj0/OUzNqDLujmNnY0lZq2XamcPjz3rOtEg EKrD/H976ddUZ+K7oqYC3E1a2EE5K8u8F9zHgd1CwaFr0AfdtV4uKkReQHWB1HOV oqC/8WvTH/Zy7B5a3DcGE+FfTAcbgvaMKmCy0+qEAuuhh6apyngVR298wdmUZZ4K feKogN7ahwwsYo6rYBsgxQsMIFb7285wq/ngnkE2nvv9iG17HQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFApRgweloR7hwSY1PI1X6BrP1FFTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNjdkMGEyYmYtMWZlZS0z YzExLWEzMGQtMjM5NDI0MjQ2ZDM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASn0VMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHwMAcynuoB6b8OwQkbUl3CDf52q223u/XXUUtP5kLuMyyqG7yvsHbG6 amBIqmFzwPA1Q4oMNNOEBtfS0CCpYdif6t12jm8PaEwqpCj9DUcMitprX/B8lUOd PO6mUsFi8u/+5uKY/iUuJ3bpcc0Dd6JwR7Xlc3LjPwyd1sc2pQU07ddvAqKQlxUo ib5D/wYsVRinP5wnuaZInECf+tMdHyj0Gq/jSATQ51nBvm2wfTnTw4rxI95up6WX UJiVPfaxv9l7y/03kwqxIfg8wrV7WtmviVgevY3Npf7AthIN9vuSwCYsBa7oOqTP 2e7oDztA2Fsneno/6JWitH6zKNhzCRs= -----END CERTIFICATE-----Generated at Wed Mar 18 20:32:54 2026 by rpki-client