$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/f23eb91b-fe9f-397f-a93b-4ba8e9d79e63.roa File: f23eb91b-fe9f-397f-a93b-4ba8e9d79e63.roa (raw, json) Hash identifier: aCGjuMWGFnyryNk3bJjeid4LFCLXaWnsawO9EOw+Wrw= Subject key identifier: F0:B1:17:9A:7C:2E:CE:FB:A3:04:F0:7F:EB:67:8F:84:92:62:4E:EE Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584D27AAB32944E37CC3A3CB2D00 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/f23eb91b-fe9f-397f-a93b-4ba8e9d79e63.roa Signing time: Fri 13 Mar 2026 13:00:40 +0000 ROA not before: Fri 13 Mar 2026 13:00:40 +0000 ROA not after: Thu 11 Jun 2026 13:00:40 +0000 asID: 15169 IP address blocks: 74.125.124.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 19 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:27:aa:b3:29:44:e3:7c:c3:a3:cb:2d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Mar 13 13:00:40 2026 GMT Not After : Jun 11 13:00:40 2026 GMT Subject: CN=058b7f2b-e017-454b-9496-adb38540ddc1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:b7:55:19:89:0f:e3:0d:03:bb:33:de:f2:75: 48:94:b4:69:0a:07:fb:61:84:d9:c9:27:3d:0d:c8: 6d:24:68:d1:41:3f:8b:0a:54:17:cf:3f:ae:c5:0d: ef:e5:cf:17:e1:ca:60:8e:a7:c2:71:b6:a0:3c:e4: 93:ee:3c:d6:dd:5f:2e:62:05:4f:fb:6b:6a:88:d4: 31:81:10:a4:81:2b:0c:69:aa:b4:3e:0a:93:cd:d9: 00:44:28:d4:46:22:e3:4c:c4:01:42:52:31:97:a5: 23:40:c0:a1:a4:4c:f1:df:22:35:11:de:aa:1c:4f: be:ab:ea:bc:42:89:1e:ed:12:19:d5:9e:52:33:1c: 91:82:4e:cf:6e:40:e5:1a:af:57:f7:30:dc:bc:45: f0:c2:da:0d:75:29:6d:f1:a4:cb:81:c7:48:42:98: c1:d8:49:fd:7e:f1:18:b3:20:14:4d:27:fc:53:fe: d5:b6:25:88:5d:0c:eb:f2:1e:eb:a6:ad:c2:a7:5f: 91:c2:b9:d8:c7:30:56:3e:41:8a:0c:fe:5c:3b:12: 80:14:ba:e5:f1:fc:40:cf:6d:96:97:b2:85:d5:93: 02:50:12:c9:9e:af:61:f0:92:0b:39:57:d7:96:3d: 42:85:74:39:73:f3:6f:52:5c:0e:5f:82:40:6a:5b: a6:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:B1:17:9A:7C:2E:CE:FB:A3:04:F0:7F:EB:67:8F:84:92:62:4E:EE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/f23eb91b-fe9f-397f-a93b-4ba8e9d79e63.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 74.125.124.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:ab:14:f1:2d:81:b2:bf:18:9d:9e:f9:8f:b5:5f:15:79:bb: b8:9f:87:21:e2:e9:b2:3b:36:52:42:6b:c2:1f:5d:6f:23:5c: 00:e3:ed:f2:d8:e9:df:1e:e4:0f:98:85:30:4b:83:ae:57:21: c4:52:08:1f:79:6d:ae:6a:a5:45:5f:e0:6a:55:20:57:21:9d: e1:45:1b:af:7f:24:e7:a7:0e:c6:a8:52:c9:92:bc:23:90:2b: 31:e6:7c:0e:45:ec:ec:89:4b:6a:92:a8:4e:3b:98:9d:4a:67: cf:b4:b8:d3:23:b9:81:6a:cc:c4:84:f8:0d:e1:1c:73:78:9a: 7b:64:f8:bf:8c:f8:59:2f:d6:ef:18:0b:21:15:84:e5:01:04: 8a:42:d8:5b:f0:dc:82:60:13:49:16:39:ab:25:55:61:02:b4: 62:75:ed:18:61:2d:51:fe:94:3f:71:41:6f:d8:89:3b:68:14: 7e:dc:5d:f5:1b:2e:2f:f2:85:ad:67:78:4d:63:1e:c9:fd:c2: f3:a1:0b:5c:6e:0e:a5:0f:9a:e1:c7:27:41:36:6e:47:3c:3f: da:af:83:4e:d7:be:f0:cf:18:6b:19:4d:7f:0a:df:68:4f:78: 1f:93:50:83:2d:cd:c4:e5:01:ac:1e:ec:42:f0:a9:ad:d1:51: 71:08:5a:45 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0nqrMpRON8w6PLLQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDMxMzEzMDA0MFoXDTI2MDYxMTEzMDA0MFowLzEtMCsGA1UEAxMk MDU4YjdmMmItZTAxNy00NTRiLTk0OTYtYWRiMzg1NDBkZGMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwLdVGYkP4w0DuzPe8nVIlLRpCgf7YYTZySc9 DchtJGjRQT+LClQXzz+uxQ3v5c8X4cpgjqfCcbagPOST7jzW3V8uYgVP+2tqiNQx gRCkgSsMaaq0PgqTzdkARCjURiLjTMQBQlIxl6UjQMChpEzx3yI1Ed6qHE++q+q8 Qoke7RIZ1Z5SMxyRgk7PbkDlGq9X9zDcvEXwwtoNdSlt8aTLgcdIQpjB2En9fvEY syAUTSf8U/7VtiWIXQzr8h7rpq3Cp1+RwrnYxzBWPkGKDP5cOxKAFLrl8fxAz22W l7KF1ZMCUBLJnq9h8JILOVfXlj1ChXQ5c/NvUlwOX4JAalumAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPCxF5p8Ls77owTwf+tnj4SSYk7uMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZjIzZWI5MWItZmU5Zi0z OTdmLWE5M2ItNGJhOGU5ZDc5ZTYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASn18MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJKrFPEtgbK/GJ2e+Y+1XxV5u7ifhyHi6bI7NlJCa8IfXW8jXADj7fLY 6d8e5A+YhTBLg65XIcRSCB95ba5qpUVf4GpVIFchneFFG69/JOenDsaoUsmSvCOQ KzHmfA5F7OyJS2qSqE47mJ1KZ8+0uNMjuYFqzMSE+A3hHHN4mntk+L+M+Fkv1u8Y CyEVhOUBBIpC2Fvw3IJgE0kWOaslVWECtGJ17RhhLVH+lD9xQW/YiTtoFH7cXfUb Li/yha1neE1jHsn9wvOhC1xuDqUPmuHHJ0E2bkc8P9qvg07XvvDPGGsZTX8K32hP eB+TUIMtzcTlAawe7ELwqa3RUXEIWkU= -----END CERTIFICATE-----Generated at Wed Mar 18 20:29:50 2026 by rpki-client