$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/e3915931-4b98-37d0-9c3f-412e30a2485a.roa File: e3915931-4b98-37d0-9c3f-412e30a2485a.roa (raw, json) Hash identifier: zwk5+SNtg04YipfwE1i5pVyr20A8N8HCb7intsoQT7o= Subject key identifier: 9D:6D:45:56:C9:60:AC:CA:36:3E:6D:09:5F:5D:42:4C:8E:D6:97:B0 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584D27AA9DC576BCDC6A1F825AA0 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/e3915931-4b98-37d0-9c3f-412e30a2485a.roa Signing time: Fri 13 Mar 2026 13:00:40 +0000 ROA not before: Fri 13 Mar 2026 13:00:40 +0000 ROA not after: Thu 11 Jun 2026 13:00:40 +0000 asID: 15169 IP address blocks: 74.125.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 19 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:27:aa:9d:c5:76:bc:dc:6a:1f:82:5a:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Mar 13 13:00:40 2026 GMT Not After : Jun 11 13:00:40 2026 GMT Subject: CN=10176ab6-37f2-460d-9835-95b3e0245fd2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:ed:a1:df:f5:b8:ab:9e:73:e2:4e:0f:52:f8: ea:09:10:fa:ee:15:ee:5c:4a:db:d1:aa:9c:18:5b: 96:16:9b:75:de:17:59:00:ec:d7:7f:b4:d8:e6:18: 9f:40:f2:2e:da:1e:ce:dc:55:3b:32:75:87:bc:d7: 9e:2b:ed:9b:f0:75:22:96:48:fd:ac:c8:38:c3:d6: ee:69:3a:bd:2b:02:e6:32:69:84:0b:65:57:0d:3b: b3:e3:3d:e4:89:a4:3a:87:a5:2c:e8:a6:db:e3:91: 5c:4d:f2:05:ec:8d:21:1f:ce:52:b3:0e:32:7c:51: 55:a7:29:f9:fd:3c:b7:be:fe:14:c6:af:b9:91:ba: a9:2b:d8:19:c7:0a:16:8d:c3:01:2f:8d:f8:fe:2e: 8e:37:d1:bf:e3:11:60:0b:26:bd:36:f3:2b:16:15: 0a:39:13:f1:72:05:75:12:a1:40:b8:49:45:58:73: aa:8d:dc:66:c9:e2:6f:a0:b0:46:ae:6b:4c:61:49: 70:0e:d8:39:fa:e9:5c:78:bb:8c:69:87:ab:0b:b4: 42:bf:89:73:8f:03:71:a2:85:9e:f5:09:c2:4e:f6: bb:17:18:e0:78:99:83:f0:68:63:dd:fa:48:43:36: 6a:77:28:cf:a9:4f:7a:7b:f1:b2:17:b8:64:07:d7: 42:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:6D:45:56:C9:60:AC:CA:36:3E:6D:09:5F:5D:42:4C:8E:D6:97:B0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/e3915931-4b98-37d0-9c3f-412e30a2485a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 74.125.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:6a:25:46:1a:5a:0e:94:3d:ad:cc:c1:17:47:24:bf:51:0a: 99:2c:14:e8:e3:11:bb:ab:67:ee:be:a2:46:c7:7c:5d:75:b7: 7d:14:b3:b6:78:04:d9:10:85:c0:b7:55:47:02:84:4e:f8:5f: 1b:eb:fa:72:6f:d7:c0:7c:45:75:8b:bf:b7:be:ac:03:94:79: df:4d:f0:cd:80:ff:6a:cc:4b:24:b2:4f:88:b0:69:d0:ab:70: 4d:00:d0:3b:33:40:a2:18:a2:24:e4:54:ad:17:da:c8:3f:c7: c5:48:ef:72:18:81:53:54:07:c4:20:8c:ee:51:fc:d7:ac:50: 8b:1b:c7:23:8b:23:a7:4f:30:81:07:e3:b4:38:ef:2f:35:b5: 51:6a:df:a8:02:ac:de:74:a1:67:ba:2e:99:93:17:01:49:08: 55:3d:7e:25:8c:32:30:e1:c1:68:6e:20:04:06:4c:33:ce:09: 3e:a3:5d:2b:75:77:fa:7d:6c:98:a6:a9:84:4c:70:bd:1b:bf: e5:35:9a:4d:73:e8:75:76:3f:07:3f:91:6c:a8:9a:bc:2f:23: 60:c4:f2:e4:51:33:f0:f8:35:3d:0a:b8:96:03:c7:39:67:5e: a8:d7:6f:00:46:7e:a6:8d:47:75:ee:ff:10:4c:9d:0a:39:46: d0:b2:ef:a1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0nqp3Fdrzcah+CWqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDMxMzEzMDA0MFoXDTI2MDYxMTEzMDA0MFowLzEtMCsGA1UEAxMk MTAxNzZhYjYtMzdmMi00NjBkLTk4MzUtOTViM2UwMjQ1ZmQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnO2h3/W4q55z4k4PUvjqCRD67hXuXErb0aqc GFuWFpt13hdZAOzXf7TY5hifQPIu2h7O3FU7MnWHvNeeK+2b8HUilkj9rMg4w9bu aTq9KwLmMmmEC2VXDTuz4z3kiaQ6h6Us6Kbb45FcTfIF7I0hH85Ssw4yfFFVpyn5 /Ty3vv4Uxq+5kbqpK9gZxwoWjcMBL434/i6ON9G/4xFgCya9NvMrFhUKORPxcgV1 EqFAuElFWHOqjdxmyeJvoLBGrmtMYUlwDtg5+ulceLuMaYerC7RCv4lzjwNxooWe 9QnCTva7FxjgeJmD8Ghj3fpIQzZqdyjPqU96e/GyF7hkB9dCpQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ1tRVbJYKzKNj5tCV9dQkyO1pewMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZTM5MTU5MzEtNGI5OC0z N2QwLTljM2YtNDEyZTMwYTI0ODVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASn2AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC5qJUYaWg6UPa3MwRdHJL9RCpksFOjjEburZ+6+okbHfF11t30Us7Z4 BNkQhcC3VUcChE74Xxvr+nJv18B8RXWLv7e+rAOUed9N8M2A/2rMSySyT4iwadCr cE0A0DszQKIYoiTkVK0X2sg/x8VI73IYgVNUB8QgjO5R/NesUIsbxyOLI6dPMIEH 47Q47y81tVFq36gCrN50oWe6LpmTFwFJCFU9fiWMMjDhwWhuIAQGTDPOCT6jXSt1 d/p9bJimqYRMcL0bv+U1mk1z6HV2Pwc/kWyomrwvI2DE8uRRM/D4NT0KuJYDxzln XqjXbwBGfqaNR3Xu/xBMnQo5RtCy76E= -----END CERTIFICATE-----Generated at Wed Mar 18 20:32:50 2026 by rpki-client