$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/cf9de6ed-2ca4-32e5-901d-ba845a2dce7a.roa File: cf9de6ed-2ca4-32e5-901d-ba845a2dce7a.roa (raw, json) Hash identifier: 3X2ldtYHl6cVl+7GfWbdEuDtCXazhQN4nnIi5XSQjj0= Subject key identifier: C2:22:72:5D:41:24:6F:34:96:36:AB:49:7D:60:BA:30:76:F3:F0:F9 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584D27AA8C6EC5F4B25BBF072700 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/cf9de6ed-2ca4-32e5-901d-ba845a2dce7a.roa Signing time: Fri 13 Mar 2026 13:00:40 +0000 ROA not before: Fri 13 Mar 2026 13:00:40 +0000 ROA not after: Thu 11 Jun 2026 13:00:40 +0000 asID: 15169 IP address blocks: 74.125.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 19 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:27:aa:8c:6e:c5:f4:b2:5b:bf:07:27:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Mar 13 13:00:40 2026 GMT Not After : Jun 11 13:00:40 2026 GMT Subject: CN=048ff761-78cf-43c3-bd19-1a86349c0a01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:28:60:29:7c:e4:a1:20:fc:20:05:1b:8b:71: 4d:d9:90:bc:ad:f5:2c:0e:8b:4c:86:25:54:32:4a: 1e:e4:dd:11:ac:a3:0c:59:f5:af:33:b9:38:4a:36: b0:c4:68:a4:08:cf:c9:ab:75:f3:f7:be:8d:e6:50: 96:c4:d5:27:ab:a2:7b:ed:e6:bd:cf:b4:28:a8:aa: 7c:a4:52:ce:6c:93:0a:73:8a:d7:34:c2:99:92:b6: b1:01:a1:b8:1d:39:82:c9:b9:d5:bc:85:be:48:a1: d3:c8:06:91:7e:20:80:d1:c6:9f:1a:94:64:76:c7: 94:a6:28:9e:88:3d:5f:0e:f7:95:ce:a6:04:7e:59: af:d1:b9:71:b2:0b:f7:ed:d7:81:2b:55:d1:6d:20: 2a:5a:bd:17:b4:c2:4c:82:6c:0c:d1:d6:4e:df:9d: 1e:f0:b9:e3:bd:da:3c:de:09:68:c5:fe:24:1a:b8: d5:c4:98:bf:01:8e:87:93:6d:6f:d3:9f:bb:f9:7f: 34:a9:8a:42:ff:fd:b2:bf:6a:2e:b4:90:52:e5:40: 19:ab:c8:bf:22:8c:86:bb:a6:6d:cd:5c:c8:be:e6: 1c:f5:f4:75:06:c9:65:0d:19:ce:1c:7c:16:8c:d0: c7:6a:d4:e2:9c:9d:62:dc:cc:d3:df:e5:69:ac:ae: de:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:22:72:5D:41:24:6F:34:96:36:AB:49:7D:60:BA:30:76:F3:F0:F9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/cf9de6ed-2ca4-32e5-901d-ba845a2dce7a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 74.125.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:7c:50:75:ad:59:92:53:4a:8a:dd:15:30:93:1f:3f:77:05: 5a:f7:cd:02:9f:e0:8e:2b:48:78:4c:59:c9:2c:8f:37:a3:8e: 35:aa:1e:39:4b:a5:ca:9b:e5:c6:8b:46:0d:5d:f6:08:83:86: 08:3c:8a:94:65:79:2f:8f:95:1f:87:ef:58:a1:7f:da:91:5d: 02:bf:18:d9:56:c5:31:d2:2f:ec:65:97:d1:58:22:39:21:46: ff:ec:6b:bb:4e:b9:07:17:1e:06:07:ec:f5:ad:01:e9:57:a1: 76:cd:d8:b3:8d:d3:a6:05:54:1f:9f:e9:ef:94:dc:9b:07:aa: e6:7a:bb:cb:5a:db:02:b8:98:fb:49:83:d3:c2:58:5a:83:97: b2:e3:83:18:9d:93:fb:68:a7:30:38:6a:03:d7:c4:fa:a3:25: a5:69:d3:06:d0:1a:33:2d:e6:ca:ed:e8:3a:0a:a6:2b:27:35: ca:59:39:aa:c0:84:12:98:06:a1:c7:ad:90:49:36:c2:d3:bf: b5:f5:f9:b6:5d:26:9c:b0:60:09:e0:5f:a8:c1:2a:46:3e:0e: b8:d8:69:e7:10:09:15:d7:b1:d5:ca:ae:96:c8:f6:d3:41:15: a4:a8:a7:86:89:59:e5:04:97:f6:73:c2:07:da:df:27:fa:c6: 2f:ca:2f:29 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE0nqoxuxfSyW78HJwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDMxMzEzMDA0MFoXDTI2MDYxMTEzMDA0MFowLzEtMCsGA1UEAxMk MDQ4ZmY3NjEtNzhjZi00M2MzLWJkMTktMWE4NjM0OWMwYTAxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhihgKXzkoSD8IAUbi3FN2ZC8rfUsDotMhiVU Mkoe5N0RrKMMWfWvM7k4SjawxGikCM/Jq3Xz976N5lCWxNUnq6J77ea9z7QoqKp8 pFLObJMKc4rXNMKZkraxAaG4HTmCybnVvIW+SKHTyAaRfiCA0cafGpRkdseUpiie iD1fDveVzqYEflmv0blxsgv37deBK1XRbSAqWr0XtMJMgmwM0dZO350e8Lnjvdo8 3gloxf4kGrjVxJi/AY6Hk21v05+7+X80qYpC//2yv2outJBS5UAZq8i/IoyGu6Zt zVzIvuYc9fR1BsllDRnOHHwWjNDHatTinJ1i3MzT3+VprK7eoQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFMIicl1BJG80ljarSX1gujB28/D5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvY2Y5ZGU2ZWQtMmNhNC0z MmU1LTkwMWQtYmE4NDVhMmRjZTdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMASn0wVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAD3xQda1ZklNKit0VMJMfP3cFWvfNAp/gjitIeExZySyPN6OONaoeOUul ypvlxotGDV32CIOGCDyKlGV5L4+VH4fvWKF/2pFdAr8Y2VbFMdIv7GWX0VgiOSFG /+xru065BxceBgfs9a0B6Vehds3Ys43TpgVUH5/p75Tcmweq5nq7y1rbAriY+0mD 08JYWoOXsuODGJ2T+2inMDhqA9fE+qMlpWnTBtAaMy3myu3oOgqmKyc1ylk5qsCE EpgGocetkEk2wtO/tfX5tl0mnLBgCeBfqMEqRj4OuNhp5xAJFdex1cqulsj200EV pKinholZ5QSX9nPCB9rfJ/rGL8ovKQ== -----END CERTIFICATE-----Generated at Wed Mar 18 20:29:34 2026 by rpki-client