$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/c6a55aa7-b824-3eea-ac2b-6f1cdab8cbb5.roa File: c6a55aa7-b824-3eea-ac2b-6f1cdab8cbb5.roa (raw, json) Hash identifier: 1ZeiyESB0hUo0rhTLapj/J7IXF3fMaZ4R81OV2uWDM4= Subject key identifier: 70:71:11:0A:57:D2:1B:12:55:36:6A:8F:F2:68:97:FE:8F:39:ED:E2 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584D27AA3CFD49B63A0103C1D540 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/c6a55aa7-b824-3eea-ac2b-6f1cdab8cbb5.roa Signing time: Fri 13 Mar 2026 13:00:40 +0000 ROA not before: Fri 13 Mar 2026 13:00:40 +0000 ROA not after: Thu 11 Jun 2026 13:00:40 +0000 asID: 15169 IP address blocks: 74.125.38.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 19 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:27:aa:3c:fd:49:b6:3a:01:03:c1:d5:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Mar 13 13:00:40 2026 GMT Not After : Jun 11 13:00:40 2026 GMT Subject: CN=d415c4f2-e197-443d-a1bf-0d7b991b6193 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:e3:0c:e0:59:22:8c:1b:7b:41:b5:07:86:96: 99:9f:df:2e:58:58:da:5a:d8:60:fa:e8:92:6b:26: 2b:f9:31:61:71:12:c1:ce:41:22:cd:35:3d:ec:bc: 9e:24:39:4e:63:ed:6f:25:50:66:1a:d8:74:e4:6a: 0e:25:19:36:ac:4a:da:d6:ae:cf:e5:20:a0:01:58: 95:26:e6:6c:3d:3c:b3:d7:08:0d:71:ba:5d:c6:cf: 24:15:9d:e0:d7:95:27:36:3f:d0:75:24:c6:4e:44: f4:f3:25:82:6b:ce:b1:d1:a5:30:47:f7:17:51:27: 9b:f1:bd:c5:ce:15:84:54:48:f4:d1:dd:bd:b2:9f: 4f:3a:f6:19:19:31:d3:13:f4:47:f2:c7:0d:d1:f5: b8:ca:d1:17:c8:87:c0:0c:1c:85:b2:29:a6:58:1e: e3:5a:b1:3a:6b:ff:fa:be:86:67:93:15:05:0d:be: 15:4a:2b:94:05:cc:73:e1:a0:b4:49:bf:54:17:ec: d8:a0:5a:03:de:75:0d:b4:6b:e0:b3:81:67:fe:af: 9b:72:bb:85:77:af:55:d7:f1:59:3d:df:88:4a:0e: 7a:45:86:18:9d:0a:6b:e4:f7:0c:6d:eb:e0:4f:45: 99:18:fa:f7:01:d6:f7:4e:15:f7:b1:d8:26:45:22: 78:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:71:11:0A:57:D2:1B:12:55:36:6A:8F:F2:68:97:FE:8F:39:ED:E2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/c6a55aa7-b824-3eea-ac2b-6f1cdab8cbb5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 74.125.38.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ae:0f:a7:38:53:ca:dd:41:48:8f:6f:a7:86:b1:2f:1b:0a:e8: 11:e1:0a:60:cf:35:01:55:ba:55:65:60:79:f0:e8:17:5b:0a: 89:9d:62:8a:46:a7:e3:03:b4:77:57:58:51:d1:b4:1d:a5:68: 78:e6:b2:49:5a:e7:65:a1:09:3f:83:14:f0:39:31:e1:63:89: 1b:c0:2f:ac:0b:5d:b2:4f:5f:31:6d:6a:a1:32:23:6c:7e:13: 08:9a:62:92:e2:37:30:29:b4:77:29:23:d4:15:eb:f6:f7:b6: 9c:20:8b:0e:f7:94:44:04:28:1c:84:04:a5:61:be:6d:9d:c3: df:be:d0:ce:a5:6b:49:c4:5f:c5:9a:ab:7a:d6:35:53:ab:5b: d1:4c:9c:cc:78:d1:8f:38:a2:c0:6c:eb:91:80:9e:14:88:03: f5:9e:61:d6:ce:ef:25:32:5e:1c:26:3d:46:e6:a0:93:1a:db: e5:05:23:3b:9c:ca:0e:c5:38:46:b9:1e:4e:72:2f:68:b1:27: 39:ee:ab:c4:fa:8e:28:54:d0:b9:aa:f1:35:1c:15:ca:49:c7: a5:0b:65:51:08:92:92:9c:e7:98:2f:11:c2:47:67:b6:66:5c: 95:5c:70:c6:a1:15:39:2e:0c:b3:5d:e9:40:d9:f1:ed:29:54: ec:6d:3d:f3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0nqjz9SbY6AQPB1UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDMxMzEzMDA0MFoXDTI2MDYxMTEzMDA0MFowLzEtMCsGA1UEAxMk ZDQxNWM0ZjItZTE5Ny00NDNkLWExYmYtMGQ3Yjk5MWI2MTkzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnuMM4FkijBt7QbUHhpaZn98uWFjaWthg+uiS ayYr+TFhcRLBzkEizTU97LyeJDlOY+1vJVBmGth05GoOJRk2rEra1q7P5SCgAViV JuZsPTyz1wgNcbpdxs8kFZ3g15UnNj/QdSTGTkT08yWCa86x0aUwR/cXUSeb8b3F zhWEVEj00d29sp9POvYZGTHTE/RH8scN0fW4ytEXyIfADByFsimmWB7jWrE6a//6 voZnkxUFDb4VSiuUBcxz4aC0Sb9UF+zYoFoD3nUNtGvgs4Fn/q+bcruFd69V1/FZ Pd+ISg56RYYYnQpr5PcMbevgT0WZGPr3Adb3ThX3sdgmRSJ4swIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHBxEQpX0hsSVTZqj/Jol/6POe3iMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYzZhNTVhYTctYjgyNC0z ZWVhLWFjMmItNmYxY2RhYjhjYmI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASn0mMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK4PpzhTyt1BSI9vp4axLxsK6BHhCmDPNQFVulVlYHnw6BdbComdYopG p+MDtHdXWFHRtB2laHjmskla52WhCT+DFPA5MeFjiRvAL6wLXbJPXzFtaqEyI2x+ EwiaYpLiNzAptHcpI9QV6/b3tpwgiw73lEQEKByEBKVhvm2dw9++0M6la0nEX8Wa q3rWNVOrW9FMnMx40Y84osBs65GAnhSIA/WeYdbO7yUyXhwmPUbmoJMa2+UFIzuc yg7FOEa5Hk5yL2ixJznuq8T6jihU0Lmq8TUcFcpJx6ULZVEIkpKc55gvEcJHZ7Zm XJVccMahFTkuDLNd6UDZ8e0pVOxtPfM= -----END CERTIFICATE-----Generated at Wed Mar 18 20:29:51 2026 by rpki-client