$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8f2c8793-be20-36a0-9939-24dfde4496ac.roa File: 8f2c8793-be20-36a0-9939-24dfde4496ac.roa (raw, json) Hash identifier: fmZFEKo0TxnxM4+zTJVnNzOr+Qa1jDLdH0kp1UIp1E8= Subject key identifier: 15:4D:F5:EA:B9:45:86:76:8B:18:53:74:61:FA:F9:C0:6A:72:07:12 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584D27AA632930E7970EAE650BC0 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8f2c8793-be20-36a0-9939-24dfde4496ac.roa Signing time: Fri 13 Mar 2026 13:00:40 +0000 ROA not before: Fri 13 Mar 2026 13:00:40 +0000 ROA not after: Thu 11 Jun 2026 13:00:40 +0000 asID: 15169 IP address blocks: 74.125.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 19 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:27:aa:63:29:30:e7:97:0e:ae:65:0b:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Mar 13 13:00:40 2026 GMT Not After : Jun 11 13:00:40 2026 GMT Subject: CN=6ec8b5e3-0608-4069-bde4-ce13c392b38c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:6c:86:57:27:d6:3b:73:db:6c:ca:9f:3b:92: ac:24:8b:67:25:d9:6d:44:9a:f3:19:45:9b:c7:d0: f7:26:fa:62:13:d7:e3:dc:4b:03:15:a8:7a:99:51: c1:19:ef:92:bf:07:fb:8d:71:25:a7:e5:44:4e:e3: d9:ba:3a:e9:62:f5:4d:ab:90:6e:6b:e5:7d:cf:b7: 88:3b:13:cd:c3:af:f6:c1:1f:aa:25:b1:32:a2:0f: 79:02:ac:f3:c8:58:30:7f:0a:b1:19:67:2c:9a:94: b6:6f:3c:03:e7:c1:2d:f6:5f:8d:b2:91:8d:97:e2: 5f:2c:bb:c2:bd:ee:e7:e6:8e:6b:50:31:43:01:2d: eb:04:1b:c0:c1:bb:bd:ac:97:b8:bb:21:5c:ee:04: d5:b8:4e:7a:76:e8:4b:e4:a6:22:e7:af:7e:72:16: 9e:8c:35:87:8f:a5:fd:d4:5a:34:b7:d4:06:2f:7d: 79:5e:7d:bf:20:76:c7:01:9b:e2:5e:bb:11:90:d2: 06:54:51:ac:be:a3:14:41:2c:e7:9b:10:2a:69:e2: e3:6d:44:31:71:58:ed:c2:24:12:88:80:d6:bb:23: f1:b0:86:5b:74:53:48:d3:18:40:b8:5b:89:40:1f: f2:80:7f:ff:90:02:3b:34:c6:86:b3:a0:db:6d:03: f6:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:4D:F5:EA:B9:45:86:76:8B:18:53:74:61:FA:F9:C0:6A:72:07:12 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8f2c8793-be20-36a0-9939-24dfde4496ac.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 74.125.133.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9e:cb:8b:ef:50:92:88:c6:2a:25:ff:59:f4:9f:ec:cb:74:b8: 05:ee:99:15:f1:3e:fb:d0:5b:b7:3f:bd:19:d5:1a:7d:6e:12: ec:b4:b5:85:36:57:7f:87:73:85:1c:5e:00:91:d8:32:3f:2f: 4b:ca:87:ee:af:34:a7:66:40:c5:48:32:43:43:24:c4:26:21: df:38:36:4d:9a:7a:c8:85:07:86:c7:53:50:ac:e2:dc:e2:b0: 03:0d:7c:1e:c2:a3:d5:44:ef:a7:17:20:04:b9:06:36:7d:3e: 85:4c:22:e1:9a:33:5c:00:88:0f:7d:72:eb:4e:bf:79:02:06: 79:1b:d3:b8:af:90:c2:64:a0:25:13:fa:f7:25:d6:ad:02:44: 67:85:15:34:cd:d6:6e:54:89:72:91:4c:04:8e:96:c4:10:95: d2:5e:ae:bd:3f:ed:77:68:07:db:88:83:87:26:1f:08:cb:8d: 01:f2:12:d4:9b:d2:cb:f6:0a:d5:c5:f0:07:44:d7:ec:0e:f8: 0d:d8:cb:bb:cd:41:54:fa:f3:52:dd:cf:61:01:06:7d:d1:fe: c5:50:44:49:59:02:2a:a6:ae:31:f5:4e:e4:3d:ee:fe:02:d7: 92:b0:eb:6d:37:24:af:d1:32:bf:22:df:67:3d:8a:c5:7c:d0: 1c:8e:20:b3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0nqmMpMOeXDq5lC8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDMxMzEzMDA0MFoXDTI2MDYxMTEzMDA0MFowLzEtMCsGA1UEAxMk NmVjOGI1ZTMtMDYwOC00MDY5LWJkZTQtY2UxM2MzOTJiMzhjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt2yGVyfWO3PbbMqfO5KsJItnJdltRJrzGUWb x9D3JvpiE9fj3EsDFah6mVHBGe+Svwf7jXElp+VETuPZujrpYvVNq5Bua+V9z7eI OxPNw6/2wR+qJbEyog95AqzzyFgwfwqxGWcsmpS2bzwD58Et9l+NspGNl+JfLLvC ve7n5o5rUDFDAS3rBBvAwbu9rJe4uyFc7gTVuE56duhL5KYi569+chaejDWHj6X9 1Fo0t9QGL315Xn2/IHbHAZviXrsRkNIGVFGsvqMUQSznmxAqaeLjbUQxcVjtwiQS iIDWuyPxsIZbdFNI0xhAuFuJQB/ygH//kAI7NMaGs6DbbQP2+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBVN9eq5RYZ2ixhTdGH6+cBqcgcSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvOGYyYzg3OTMtYmUyMC0z NmEwLTk5MzktMjRkZmRlNDQ5NmFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASn2FMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ7Li+9QkojGKiX/WfSf7Mt0uAXumRXxPvvQW7c/vRnVGn1uEuy0tYU2 V3+Hc4UcXgCR2DI/L0vKh+6vNKdmQMVIMkNDJMQmId84Nk2aesiFB4bHU1Cs4tzi sAMNfB7Co9VE76cXIAS5BjZ9PoVMIuGaM1wAiA99cutOv3kCBnkb07ivkMJkoCUT +vcl1q0CRGeFFTTN1m5UiXKRTASOlsQQldJerr0/7XdoB9uIg4cmHwjLjQHyEtSb 0sv2CtXF8AdE1+wO+A3Yy7vNQVT681Ldz2EBBn3R/sVQRElZAiqmrjH1TuQ97v4C 15Kw6203JK/RMr8i32c9isV80ByOILM= -----END CERTIFICATE-----Generated at Wed Mar 18 20:34:11 2026 by rpki-client