$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/df2e2f0f-0ef1-3b15-8474-16e7683a8f30.roa File: df2e2f0f-0ef1-3b15-8474-16e7683a8f30.roa (raw, json) Hash identifier: 6SYQiyvg8yXzgDo2cwnJP6IS/zD3AQQ4Si0uBNN6AAE= Subject key identifier: 43:90:C9:56:2C:1D:E5:33:71:B5:79:9E:5A:E8:96:88:47:9A:4B:4B Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584D27AA657E089A088385BDC1C0 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/df2e2f0f-0ef1-3b15-8474-16e7683a8f30.roa Signing time: Fri 13 Mar 2026 13:00:40 +0000 ROA not before: Fri 13 Mar 2026 13:00:40 +0000 ROA not after: Thu 11 Jun 2026 13:00:40 +0000 asID: 15169 IP address blocks: 74.125.198.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 19 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:27:aa:65:7e:08:9a:08:83:85:bd:c1:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Mar 13 13:00:40 2026 GMT Not After : Jun 11 13:00:40 2026 GMT Subject: CN=ad364be1-6dfd-4bbc-a2c1-7d7cc972e405 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:8b:ca:e6:f5:a5:08:7e:f6:98:5d:35:66:1d: 95:25:c9:31:da:a6:ce:26:08:e1:3d:75:45:09:59: 82:b9:17:ed:9a:15:82:ea:4f:a8:4e:59:cb:d8:9b: 99:8e:1d:1f:5f:be:07:88:df:9e:9d:6b:1c:f4:8c: 5c:e9:71:19:12:78:29:0d:5f:d7:8f:58:f3:48:cf: 68:f5:c1:d4:1a:a5:e4:ee:a9:0f:16:6e:51:8c:d7: af:d4:6c:cc:ab:e4:80:5e:20:ad:67:cf:d7:74:23: 66:96:f8:15:55:ce:fd:a7:b3:d0:61:cd:c9:a1:d6: b4:3e:47:51:71:06:c9:69:20:c2:dc:e9:8b:64:9f: c1:69:95:06:7a:06:b9:0f:56:b6:8e:c5:5f:1c:94: a2:4c:32:e0:9e:ed:6d:67:a2:e5:d4:4b:37:b0:9b: 4c:aa:83:c4:bf:61:7f:6d:5c:27:ef:26:98:5b:ee: 8b:4b:02:32:4c:69:11:a0:68:02:c2:db:f1:d6:80: aa:3f:0c:82:27:7e:d3:cc:75:88:de:82:09:9b:f5: 4a:49:99:12:9a:45:65:9f:b7:e6:87:af:4d:ef:ce: 7f:a4:e6:8c:e3:62:13:e2:6b:e1:53:9a:8f:c6:f8: a3:d5:de:9c:7f:63:a5:8c:d0:f9:10:74:ee:b3:5a: 84:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:90:C9:56:2C:1D:E5:33:71:B5:79:9E:5A:E8:96:88:47:9A:4B:4B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/df2e2f0f-0ef1-3b15-8474-16e7683a8f30.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 74.125.198.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b8:73:d2:2e:81:57:7f:19:48:77:3c:a5:8a:75:8a:1b:66:44: 54:a5:e8:df:27:40:8d:da:b8:48:66:d5:34:8d:c7:64:5b:0c: 72:1c:a5:5a:01:59:33:e2:49:0e:f7:8f:02:d5:e2:5e:c9:bd: 78:59:f4:a3:74:fe:26:c5:c0:91:84:6a:19:dd:38:79:4a:a0: ad:bc:e7:ae:b6:89:a1:b4:69:79:66:a5:d4:26:63:85:ed:52: 1d:17:d2:f9:73:29:35:4a:c8:37:9f:9c:fe:a3:d7:eb:73:8e: 31:06:8a:bd:31:ad:54:b7:56:f0:b2:01:c8:c4:f4:25:0d:14: c2:da:ef:d2:40:e0:69:11:6e:d5:48:19:ec:41:02:34:c4:d5: 2f:81:86:79:79:69:34:72:02:73:51:16:6c:ae:c9:3f:db:44: a0:f6:0f:22:3d:f9:64:6f:3d:42:1f:a9:9f:d7:40:10:52:9d: f9:b1:0b:e1:69:4a:5c:d1:f8:f8:be:7a:ce:ce:ff:81:95:aa: 7d:d4:f8:0b:93:4a:3c:de:df:4e:24:36:f1:cd:21:e0:08:14: cd:f2:0c:e7:ba:6f:ac:44:27:60:e7:63:86:63:46:7d:7a:81: f5:fb:66:15:5a:2d:5c:e6:ac:8d:8e:c4:72:f9:f8:b9:f3:e1: d2:7a:c5:44 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0nqmV+CJoIg4W9wcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDMxMzEzMDA0MFoXDTI2MDYxMTEzMDA0MFowLzEtMCsGA1UEAxMk YWQzNjRiZTEtNmRmZC00YmJjLWEyYzEtN2Q3Y2M5NzJlNDA1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuYvK5vWlCH72mF01Zh2VJckx2qbOJgjhPXVF CVmCuRftmhWC6k+oTlnL2JuZjh0fX74HiN+enWsc9Ixc6XEZEngpDV/Xj1jzSM9o 9cHUGqXk7qkPFm5RjNev1GzMq+SAXiCtZ8/XdCNmlvgVVc79p7PQYc3Joda0PkdR cQbJaSDC3OmLZJ/BaZUGega5D1a2jsVfHJSiTDLgnu1tZ6Ll1Es3sJtMqoPEv2F/ bVwn7yaYW+6LSwIyTGkRoGgCwtvx1oCqPwyCJ37TzHWI3oIJm/VKSZkSmkVln7fm h69N785/pOaM42IT4mvhU5qPxvij1d6cf2OljND5EHTus1qEYwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEOQyVYsHeUzcbV5nlrolohHmktLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZGYyZTJmMGYtMGVmMS0z YjE1LTg0NzQtMTZlNzY4M2E4ZjMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASn3GMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALhz0i6BV38ZSHc8pYp1ihtmRFSl6N8nQI3auEhm1TSNx2RbDHIcpVoB WTPiSQ73jwLV4l7JvXhZ9KN0/ibFwJGEahndOHlKoK285662iaG0aXlmpdQmY4Xt Uh0X0vlzKTVKyDefnP6j1+tzjjEGir0xrVS3VvCyAcjE9CUNFMLa79JA4GkRbtVI GexBAjTE1S+Bhnl5aTRyAnNRFmyuyT/bRKD2DyI9+WRvPUIfqZ/XQBBSnfmxC+Fp SlzR+Pi+es7O/4GVqn3U+AuTSjze304kNvHNIeAIFM3yDOe6b6xEJ2DnY4ZjRn16 gfX7ZhVaLVzmrI2OxHL5+Lnz4dJ6xUQ= -----END CERTIFICATE-----Generated at Wed Mar 18 20:33:38 2026 by rpki-client