$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/9c122302-21bd-3181-b59e-e7f1bb857cc0.roa File: 9c122302-21bd-3181-b59e-e7f1bb857cc0.roa (raw, json) Hash identifier: vDxEkifRgLrv1hX9a3VTMWsiKAnx1PMN70O9JYH34Fk= Subject key identifier: 58:81:34:4D:38:20:B3:A8:34:54:E8:B8:E2:C3:05:80:13:94:51:28 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584D27AA6E93B2FAC1E362FC9500 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/9c122302-21bd-3181-b59e-e7f1bb857cc0.roa Signing time: Fri 13 Mar 2026 13:00:40 +0000 ROA not before: Fri 13 Mar 2026 13:00:40 +0000 ROA not after: Thu 11 Jun 2026 13:00:40 +0000 asID: 15169 IP address blocks: 74.125.152.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 19 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:27:aa:6e:93:b2:fa:c1:e3:62:fc:95:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Mar 13 13:00:40 2026 GMT Not After : Jun 11 13:00:40 2026 GMT Subject: CN=95769cde-ac45-4bbe-af0a-6d9e6b11d752 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:7b:46:c0:0b:68:ab:fb:5b:06:94:f2:35:f8: 71:2f:bf:fd:8a:2b:fa:89:3c:da:9c:d9:5a:a1:de: 1b:f0:f6:75:6d:af:1d:9a:bd:6a:b6:70:ce:2f:9f: 2a:49:a1:cf:a0:0a:b2:78:bf:98:80:81:20:6c:f7: 7e:8e:f1:9f:a7:89:4d:1a:de:38:8b:f8:76:eb:4c: 48:bc:1a:a7:0c:85:76:e9:5f:dc:d4:80:32:1e:58: 5f:41:b3:dd:ec:24:17:85:5e:bf:4d:9d:7f:e2:e7: 0c:70:37:49:ea:26:9d:e9:6c:76:c8:af:a5:29:20: db:8b:c5:38:bf:77:4f:4b:47:74:e8:03:8d:1c:b7: 91:29:09:42:56:4d:70:f9:f4:e2:37:35:e3:61:f2: ef:44:be:cd:02:33:fb:2b:b8:93:72:40:40:70:de: 88:fd:02:ea:c1:a8:7e:d2:ad:04:51:9d:8a:f8:aa: 85:24:b7:5c:f6:16:09:78:30:53:84:1e:c7:22:0e: ec:05:ca:3b:01:7f:cf:3e:52:9e:73:4e:ad:26:8f: 2c:f0:50:1e:ac:4d:97:2b:e7:1f:ce:92:10:15:66: cf:55:23:36:b6:c5:af:b9:5b:96:15:19:f8:97:1a: 16:dd:b1:e5:72:03:ab:d3:2c:69:34:fd:35:c2:e1: 90:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:81:34:4D:38:20:B3:A8:34:54:E8:B8:E2:C3:05:80:13:94:51:28 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/9c122302-21bd-3181-b59e-e7f1bb857cc0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 74.125.152.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:03:46:57:2b:44:99:fb:13:bf:b7:15:3a:98:3b:77:9f:f3: ab:11:1c:9f:59:b0:e1:f6:46:af:98:58:c9:aa:57:d0:c6:26: 91:19:d6:77:00:20:60:1e:0c:32:7a:f8:11:d1:e4:36:05:28: 4f:a8:3a:24:e8:93:97:58:66:f4:d3:3a:b9:05:5f:97:9b:e4: 79:9f:27:8a:85:36:1c:28:bc:51:ec:57:d8:a7:93:11:05:52: d4:77:6c:fe:0c:64:f8:ea:8e:22:ef:a7:4b:22:38:41:ca:f6: 80:79:19:92:ce:10:c6:68:68:52:3d:0a:b7:ce:ec:4e:b7:fd: e0:59:6a:cb:11:b6:86:12:7f:7c:fb:93:ff:1d:0e:5c:41:c7: aa:0d:d5:48:91:1e:39:6d:7c:ee:f4:ed:c5:7d:ca:02:b5:f0: 7f:e1:8c:0d:90:34:ee:62:d3:f1:0a:0e:17:b8:a8:2b:f2:e2: 41:21:2c:77:c4:67:d1:9c:2c:de:80:99:ac:bd:ad:66:2d:26: 41:de:6b:39:d7:f8:a8:b4:c3:93:d3:82:ba:76:cb:2c:d4:22: 84:b1:7f:c6:77:aa:71:85:24:11:6a:92:aa:a6:3e:2a:cb:8f: 9c:11:81:f0:cb:2d:e2:f3:eb:24:8a:82:b8:3a:2c:ef:b9:ad: 93:cd:d6:f9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0nqm6TsvrB42L8lQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDMxMzEzMDA0MFoXDTI2MDYxMTEzMDA0MFowLzEtMCsGA1UEAxMk OTU3NjljZGUtYWM0NS00YmJlLWFmMGEtNmQ5ZTZiMTFkNzUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtHtGwAtoq/tbBpTyNfhxL7/9iiv6iTzanNla od4b8PZ1ba8dmr1qtnDOL58qSaHPoAqyeL+YgIEgbPd+jvGfp4lNGt44i/h260xI vBqnDIV26V/c1IAyHlhfQbPd7CQXhV6/TZ1/4ucMcDdJ6iad6Wx2yK+lKSDbi8U4 v3dPS0d06AONHLeRKQlCVk1w+fTiNzXjYfLvRL7NAjP7K7iTckBAcN6I/QLqwah+ 0q0EUZ2K+KqFJLdc9hYJeDBThB7HIg7sBco7AX/PPlKec06tJo8s8FAerE2XK+cf zpIQFWbPVSM2tsWvuVuWFRn4lxoW3bHlcgOr0yxpNP01wuGQ1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFiBNE04ILOoNFTouOLDBYATlFEoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvOWMxMjIzMDItMjFiZC0z MTgxLWI1OWUtZTdmMWJiODU3Y2MwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDSn2YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADADRlcrRJn7E7+3FTqYO3ef86sRHJ9ZsOH2Rq+YWMmqV9DGJpEZ1ncA IGAeDDJ6+BHR5DYFKE+oOiTok5dYZvTTOrkFX5eb5HmfJ4qFNhwovFHsV9inkxEF UtR3bP4MZPjqjiLvp0siOEHK9oB5GZLOEMZoaFI9CrfO7E63/eBZassRtoYSf3z7 k/8dDlxBx6oN1UiRHjltfO707cV9ygK18H/hjA2QNO5i0/EKDhe4qCvy4kEhLHfE Z9GcLN6Amay9rWYtJkHeaznX+Ki0w5PTgrp2yyzUIoSxf8Z3qnGFJBFqkqqmPirL j5wRgfDLLeLz6ySKgrg6LO+5rZPN1vk= -----END CERTIFICATE-----Generated at Wed Mar 18 20:30:08 2026 by rpki-client