$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/c3af61be-d608-31cf-8e45-94b0de256680.roa File: c3af61be-d608-31cf-8e45-94b0de256680.roa (raw, json) Hash identifier: 5ll6WxILwVfcIv07lPOTbFn7toc10DS2yIxufh3X4iA= Subject key identifier: E5:D8:40:74:44:CB:1C:82:E9:09:88:0F:05:AF:6F:9A:31:C9:4A:23 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584D27AA86E4A34BEC23456E8F00 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/c3af61be-d608-31cf-8e45-94b0de256680.roa Signing time: Fri 13 Mar 2026 13:00:40 +0000 ROA not before: Fri 13 Mar 2026 13:00:40 +0000 ROA not after: Thu 11 Jun 2026 13:00:40 +0000 asID: 15169 IP address blocks: 74.125.130.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 19 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:27:aa:86:e4:a3:4b:ec:23:45:6e:8f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Mar 13 13:00:40 2026 GMT Not After : Jun 11 13:00:40 2026 GMT Subject: CN=3d1fe95a-0a15-45b9-bccc-5dc09e176d79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:68:d6:a3:44:6c:95:aa:d6:c6:ad:a8:a3:99: b6:bc:91:ba:cd:24:01:fe:70:91:87:3e:d6:e3:4e: ed:15:63:d7:6a:60:58:57:31:a8:9d:e6:b9:91:97: ea:66:20:76:2b:22:7b:80:8a:11:31:f3:84:d0:10: 4b:8b:e1:1e:cb:0c:2d:d9:c7:19:f0:dc:4f:41:bc: 7d:88:6e:d3:f8:b5:44:7e:6e:82:6f:10:36:85:d1: b8:6b:d8:85:3e:d2:5a:e1:cb:02:13:6f:bc:ac:49: 84:2d:82:93:6a:c3:bd:38:18:16:61:90:c6:1e:17: be:30:43:71:0e:5e:03:45:03:c0:00:4f:16:a1:6d: fc:18:d9:f5:59:2f:81:99:08:02:81:fc:02:e7:3f: 8b:2e:2f:64:a5:72:ef:fd:ea:bc:35:74:da:db:28: df:d9:19:9b:4c:28:38:07:a1:4d:06:d4:93:52:ef: 00:ce:9c:2d:46:a0:9d:73:53:bf:09:7b:cc:f2:ba: 89:65:c2:ac:2e:1b:4d:ff:a1:88:16:c3:d7:7b:61: 32:f1:7a:d8:a3:84:a0:a7:1f:ce:0f:e1:10:3a:04: bc:81:92:f9:e4:c9:1b:fe:b4:36:5d:5b:2f:97:10: 57:b6:eb:2c:db:50:95:e0:2b:8c:65:92:12:0d:aa: 84:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:D8:40:74:44:CB:1C:82:E9:09:88:0F:05:AF:6F:9A:31:C9:4A:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/c3af61be-d608-31cf-8e45-94b0de256680.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 74.125.130.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:6e:71:79:b3:13:44:40:fa:87:a4:26:6a:da:71:c9:ee:69: ca:fc:1b:bf:c3:a5:11:2a:9a:a4:e4:a8:14:1e:b9:b1:21:7a: 24:4d:1a:1b:1f:7a:2a:38:2c:15:1a:7c:8e:a6:be:39:15:8e: a4:1b:43:44:3a:7d:62:e8:bc:97:30:8b:55:fb:d5:59:e3:1c: 68:e7:6f:6a:4b:09:c5:ec:e0:8d:9c:f2:19:33:8b:a9:66:85: 5d:32:46:f3:ba:e4:61:26:d8:de:d9:66:46:fe:05:fc:57:03: de:dc:27:bb:16:5a:3f:d0:43:96:67:6a:48:87:97:32:a4:33: 6b:b3:08:c4:a3:75:45:21:53:0f:0b:11:83:24:f3:97:66:63: 1d:9f:76:74:0a:d8:c8:af:39:3f:27:62:06:ee:76:f4:1e:02: 75:c5:40:8c:5e:bb:69:7a:4f:7f:e2:18:90:02:72:a4:ba:8a: 4a:2b:04:bd:25:a0:1c:91:99:e5:2f:54:fe:9f:e4:c3:9f:a5: 45:a5:d4:58:38:3e:2b:c5:45:ec:df:b0:fc:d3:9a:4f:e6:81: b0:59:ee:3d:96:37:99:06:e9:0c:55:86:02:87:83:13:bd:1c: bf:79:ee:18:ae:11:2f:87:c9:d0:49:8a:37:fb:ef:5d:78:2f: 1f:e7:0f:37 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0nqobko0vsI0VujwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDMxMzEzMDA0MFoXDTI2MDYxMTEzMDA0MFowLzEtMCsGA1UEAxMk M2QxZmU5NWEtMGExNS00NWI5LWJjY2MtNWRjMDllMTc2ZDc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3WjWo0RslarWxq2oo5m2vJG6zSQB/nCRhz7W 407tFWPXamBYVzGonea5kZfqZiB2KyJ7gIoRMfOE0BBLi+Eeywwt2ccZ8NxPQbx9 iG7T+LVEfm6CbxA2hdG4a9iFPtJa4csCE2+8rEmELYKTasO9OBgWYZDGHhe+MENx Dl4DRQPAAE8WoW38GNn1WS+BmQgCgfwC5z+LLi9kpXLv/eq8NXTa2yjf2RmbTCg4 B6FNBtSTUu8AzpwtRqCdc1O/CXvM8rqJZcKsLhtN/6GIFsPXe2Ey8XrYo4Sgpx/O D+EQOgS8gZL55Mkb/rQ2XVsvlxBXtuss21CV4CuMZZISDaqELwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOXYQHREyxyC6QmIDwWvb5oxyUojMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYzNhZjYxYmUtZDYwOC0z MWNmLThlNDUtOTRiMGRlMjU2NjgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASn2CMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFhucXmzE0RA+oekJmraccnuacr8G7/DpREqmqTkqBQeubEheiRNGhsf eio4LBUafI6mvjkVjqQbQ0Q6fWLovJcwi1X71VnjHGjnb2pLCcXs4I2c8hkzi6lm hV0yRvO65GEm2N7ZZkb+BfxXA97cJ7sWWj/QQ5ZnakiHlzKkM2uzCMSjdUUhUw8L EYMk85dmYx2fdnQK2MivOT8nYgbudvQeAnXFQIxeu2l6T3/iGJACcqS6ikorBL0l oByRmeUvVP6f5MOfpUWl1Fg4PivFRezfsPzTmk/mgbBZ7j2WN5kG6QxVhgKHgxO9 HL957hiuES+HydBJijf77114Lx/nDzc= -----END CERTIFICATE-----Generated at Wed Mar 18 20:31:47 2026 by rpki-client