$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/da38760b-7c4b-3063-aad0-6b742e88b1a9.roa File: da38760b-7c4b-3063-aad0-6b742e88b1a9.roa (raw, json) Hash identifier: fz5qPri0DJhd0LjGLXrQZ0yBb3bqj92XODswoTmQ9jg= Subject key identifier: A6:62:E1:FF:E7:84:93:CB:08:F3:71:74:00:32:CA:0C:FB:BB:46:57 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584D27AA89DB0AD3B4F672CC8180 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/da38760b-7c4b-3063-aad0-6b742e88b1a9.roa Signing time: Fri 13 Mar 2026 13:00:40 +0000 ROA not before: Fri 13 Mar 2026 13:00:40 +0000 ROA not after: Thu 11 Jun 2026 13:00:40 +0000 asID: 15169 IP address blocks: 74.125.132.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 19 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:27:aa:89:db:0a:d3:b4:f6:72:cc:81:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Mar 13 13:00:40 2026 GMT Not After : Jun 11 13:00:40 2026 GMT Subject: CN=47e1a453-89aa-4190-8696-6ddc88843c7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:87:83:68:ea:77:79:57:a8:34:bf:65:be:9e: 50:77:89:e9:05:56:d0:47:e1:52:91:7a:57:a9:73: 37:20:6e:a5:5a:e9:fa:95:02:99:11:f4:43:2e:ff: 1d:38:31:19:6b:99:47:37:3e:bf:d8:67:58:3b:36: 83:50:ad:ae:87:16:67:57:19:41:b8:72:89:da:4f: 60:35:26:ed:d1:dc:e9:b3:a9:55:ad:2b:2e:01:26: 10:12:32:c9:44:8e:38:25:d7:42:a8:bd:a9:30:27: ed:b3:82:c2:d0:9c:53:8c:3a:86:ab:9f:83:b2:6e: 4b:4d:02:0a:f4:07:d9:84:2e:c9:8d:fb:8a:87:b8: f4:67:0c:13:25:04:cc:e5:b3:f0:8a:87:f9:14:e6: 7a:46:36:1b:5b:83:e0:fe:b0:06:6f:e1:d6:60:70: 60:1f:de:01:85:99:6c:95:aa:43:4e:a4:48:75:e5: 53:15:95:6b:5a:71:5d:7a:2f:03:77:9a:4e:f4:68: 0d:15:2c:9b:18:5e:bb:82:ce:c0:17:7a:53:ea:13: 96:67:54:01:f4:1a:4e:a0:d3:32:27:19:2e:7c:65: 21:f0:16:f6:57:cf:17:42:dc:6c:5e:5a:d3:21:5b: 94:85:19:53:00:3a:2e:ef:0c:38:06:1a:07:2a:5b: 4e:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:62:E1:FF:E7:84:93:CB:08:F3:71:74:00:32:CA:0C:FB:BB:46:57 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/da38760b-7c4b-3063-aad0-6b742e88b1a9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 74.125.132.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:3b:a5:87:d9:3c:95:54:01:6a:5c:d5:ba:18:d6:29:a9:16: 6f:cc:1e:d6:b3:0c:69:c5:0c:35:67:e1:e7:8f:de:57:c7:55: 3f:4f:af:eb:c7:a6:16:b0:16:f5:39:2b:74:48:ab:66:8c:5d: 83:61:83:b7:e3:94:c0:ea:40:96:fa:98:31:be:fa:40:51:3e: 29:1e:f4:42:42:5c:16:91:a0:b5:b8:78:35:f9:51:19:58:13: 34:07:66:12:19:a1:79:be:b7:92:2c:01:11:33:53:2d:6a:34: 8c:cc:0c:77:39:bf:b5:63:f1:7a:63:fd:fa:b7:d5:dd:8f:bc: 58:71:5c:12:2b:5a:b4:7e:fc:90:15:83:d0:0a:bb:02:8e:f5: 2a:ec:de:5c:2f:1f:8f:a4:de:7f:76:85:9c:66:d9:51:79:b1: 77:b8:77:98:81:92:19:53:f9:87:51:f9:0a:c6:e7:f4:cb:59: 3a:9d:aa:81:ee:80:16:14:fb:33:d8:dc:85:d2:8e:be:57:fe: f7:5f:1a:a6:e8:e6:1a:a1:7b:19:28:ac:7b:86:2e:3e:59:3a: 30:16:34:e0:b0:a8:44:04:6b:47:78:43:0d:40:27:40:4e:e6: 37:19:0f:83:b8:c4:52:d2:4d:86:ea:39:24:da:5e:52:6b:97: 50:90:5e:a5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0nqonbCtO09nLMgYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDMxMzEzMDA0MFoXDTI2MDYxMTEzMDA0MFowLzEtMCsGA1UEAxMk NDdlMWE0NTMtODlhYS00MTkwLTg2OTYtNmRkYzg4ODQzYzdkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyoeDaOp3eVeoNL9lvp5Qd4npBVbQR+FSkXpX qXM3IG6lWun6lQKZEfRDLv8dODEZa5lHNz6/2GdYOzaDUK2uhxZnVxlBuHKJ2k9g NSbt0dzps6lVrSsuASYQEjLJRI44JddCqL2pMCfts4LC0JxTjDqGq5+Dsm5LTQIK 9AfZhC7JjfuKh7j0ZwwTJQTM5bPwiof5FOZ6RjYbW4Pg/rAGb+HWYHBgH94BhZls lapDTqRIdeVTFZVrWnFdei8Dd5pO9GgNFSybGF67gs7AF3pT6hOWZ1QB9BpOoNMy JxkufGUh8Bb2V88XQtxsXlrTIVuUhRlTADou7ww4BhoHKltOYwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKZi4f/nhJPLCPNxdAAyygz7u0ZXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZGEzODc2MGItN2M0Yi0z MDYzLWFhZDAtNmI3NDJlODhiMWE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASn2EMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADo7pYfZPJVUAWpc1boY1impFm/MHtazDGnFDDVn4eeP3lfHVT9Pr+vH phawFvU5K3RIq2aMXYNhg7fjlMDqQJb6mDG++kBRPike9EJCXBaRoLW4eDX5URlY EzQHZhIZoXm+t5IsAREzUy1qNIzMDHc5v7Vj8Xpj/fq31d2PvFhxXBIrWrR+/JAV g9AKuwKO9Srs3lwvH4+k3n92hZxm2VF5sXe4d5iBkhlT+YdR+QrG5/TLWTqdqoHu gBYU+zPY3IXSjr5X/vdfGqbo5hqhexkorHuGLj5ZOjAWNOCwqEQEa0d4Qw1AJ0BO 5jcZD4O4xFLSTYbqOSTaXlJrl1CQXqU= -----END CERTIFICATE-----Generated at Wed Mar 18 20:30:30 2026 by rpki-client