$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/99fc7683-93e1-3003-8b29-335baef0e1f6.roa File: 99fc7683-93e1-3003-8b29-335baef0e1f6.roa (raw, json) Hash identifier: b2ycUD/2NQTXFvYCLJAOwDwFSjhjY4TK8cU/0awji2A= Subject key identifier: 6D:97:6D:75:77:B8:03:D0:A6:79:5D:37:8C:CB:BE:72:C7:8A:04:31 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584D27AA8B13D431A7C0AEC19000 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/99fc7683-93e1-3003-8b29-335baef0e1f6.roa Signing time: Fri 13 Mar 2026 13:00:40 +0000 ROA not before: Fri 13 Mar 2026 13:00:40 +0000 ROA not after: Thu 11 Jun 2026 13:00:40 +0000 asID: 15169 IP address blocks: 74.125.139.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 19 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:27:aa:8b:13:d4:31:a7:c0:ae:c1:90:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Mar 13 13:00:40 2026 GMT Not After : Jun 11 13:00:40 2026 GMT Subject: CN=fb9ddaf6-053d-4dba-b2f0-5f1440b1a81a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:d6:5c:d2:50:db:6d:76:56:b3:d1:73:06:f4: 2a:ec:d4:88:98:80:4a:13:ec:40:14:ab:2c:04:6f: 6b:6f:e0:db:2d:f3:3d:20:98:0b:08:67:5f:54:35: a2:30:93:c3:57:69:b2:ab:f7:b2:70:4c:fe:44:85: e3:24:06:d2:a3:ac:74:e8:32:b8:ac:82:15:29:35: 18:4e:b5:cf:fb:ff:ce:7d:87:ab:37:ba:72:27:8a: 0e:30:f0:49:b6:0a:a8:51:b4:eb:76:76:26:bb:ec: 65:b0:84:0f:9b:0c:3e:e7:52:80:a3:fa:57:ba:b3: d3:44:61:52:2d:1f:76:95:9a:12:29:e4:e4:64:c8: ef:f9:c8:68:1b:fc:d8:d9:ed:30:19:4d:fc:da:27: ec:af:f4:0b:3e:a4:ea:db:66:36:16:20:d1:10:51: bf:de:1e:92:a8:bb:89:9f:96:bd:79:65:6e:28:d1: 36:c4:ee:72:78:4f:a4:0c:85:02:1b:43:0c:7b:30: fc:d3:dd:9d:4b:f1:52:49:7c:b4:61:d4:c7:6c:a6: d1:f4:8f:cf:b9:82:84:61:6c:f2:63:4f:39:85:2e: 32:fc:a1:a4:44:4a:1a:b8:4d:0a:29:69:a7:b6:02: c1:ac:88:93:f3:2c:fa:01:82:d9:3b:db:47:3e:a0: f0:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:97:6D:75:77:B8:03:D0:A6:79:5D:37:8C:CB:BE:72:C7:8A:04:31 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/99fc7683-93e1-3003-8b29-335baef0e1f6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 74.125.139.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:6e:ae:08:10:48:59:4b:3c:fc:01:13:95:31:21:b1:ba:71: b5:6c:5e:3e:7d:80:5c:07:be:d6:74:84:99:1b:c3:3e:93:fc: f8:ed:f9:82:77:eb:3e:62:ad:46:32:4a:05:b5:29:0d:28:29: d2:c0:98:02:1e:c7:2f:79:06:e6:cf:d2:9a:36:0d:54:3c:9b: cc:b3:41:b6:a3:9b:fd:ce:aa:4e:98:de:20:dd:c7:55:92:11: be:43:1c:dd:5e:59:8e:0d:01:13:b4:5c:e4:fc:b7:8d:58:fd: 0f:51:94:b8:1f:b0:33:dc:77:2e:fa:50:dd:3c:90:c8:17:d5: 96:81:33:63:f4:a6:3f:68:c6:a2:ce:0d:5f:e4:a6:be:e8:c7: 9c:a1:24:99:f2:62:d9:98:37:30:95:eb:cb:7d:63:9a:44:0d: 9c:c8:59:7b:3d:f9:c1:6b:67:7f:8d:9a:66:91:46:76:70:73: e2:34:19:13:08:9e:e0:6b:46:16:12:b0:b7:d0:9e:69:51:ca: 48:a2:95:5d:94:48:b4:70:58:5b:a0:2d:a6:38:4b:0b:be:1d: ad:d1:b7:ad:81:25:d9:20:89:2b:1a:1c:f1:b0:43:ec:2d:9f: 66:fe:47:b4:08:9f:e6:41:2e:13:50:97:3b:80:c2:a6:9e:6a: f4:bd:83:b0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0nqosT1DGnwK7BkAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDMxMzEzMDA0MFoXDTI2MDYxMTEzMDA0MFowLzEtMCsGA1UEAxMk ZmI5ZGRhZjYtMDUzZC00ZGJhLWIyZjAtNWYxNDQwYjFhODFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn9Zc0lDbbXZWs9FzBvQq7NSImIBKE+xAFKss BG9rb+DbLfM9IJgLCGdfVDWiMJPDV2myq/eycEz+RIXjJAbSo6x06DK4rIIVKTUY TrXP+//OfYerN7pyJ4oOMPBJtgqoUbTrdnYmu+xlsIQPmww+51KAo/pXurPTRGFS LR92lZoSKeTkZMjv+choG/zY2e0wGU382ifsr/QLPqTq22Y2FiDREFG/3h6SqLuJ n5a9eWVuKNE2xO5yeE+kDIUCG0MMezD8092dS/FSSXy0YdTHbKbR9I/PuYKEYWzy Y085hS4y/KGkREoauE0KKWmntgLBrIiT8yz6AYLZO9tHPqDwSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG2XbXV3uAPQpnldN4zLvnLHigQxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvOTlmYzc2ODMtOTNlMS0z MDAzLThiMjktMzM1YmFlZjBlMWY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASn2LMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADxurggQSFlLPPwBE5UxIbG6cbVsXj59gFwHvtZ0hJkbwz6T/Pjt+YJ3 6z5irUYySgW1KQ0oKdLAmAIexy95BubP0po2DVQ8m8yzQbajm/3Oqk6Y3iDdx1WS Eb5DHN1eWY4NARO0XOT8t41Y/Q9RlLgfsDPcdy76UN08kMgX1ZaBM2P0pj9oxqLO DV/kpr7ox5yhJJnyYtmYNzCV68t9Y5pEDZzIWXs9+cFrZ3+NmmaRRnZwc+I0GRMI nuBrRhYSsLfQnmlRykiilV2USLRwWFugLaY4Swu+Ha3Rt62BJdkgiSsaHPGwQ+wt n2b+R7QIn+ZBLhNQlzuAwqaeavS9g7A= -----END CERTIFICATE-----Generated at Wed Mar 18 20:30:28 2026 by rpki-client