$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5042fc88-5f01-39b3-8b5f-8932f28aa563.roa File: 5042fc88-5f01-39b3-8b5f-8932f28aa563.roa (raw, json) Hash identifier: zDaQyHHLEHRSkLs/Fvhj1527TM4WYNXwB4llVVIjBfQ= Subject key identifier: E7:46:85:B4:93:17:FC:19:18:0D:CC:7F:0A:92:0A:FF:45:30:72:44 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584F4C3D95AA75036F736BC2A680 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5042fc88-5f01-39b3-8b5f-8932f28aa563.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 396982 IP address blocks: 74.125.64.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:95:aa:75:03:6f:73:6b:c2:a6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=544a6716-41be-4a30-a699-f6cf37ac7bfb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:27:c1:f4:50:ad:bc:a8:bb:86:be:3c:6a:d7: 93:06:46:3e:a5:4d:0f:fd:f0:83:1b:5c:0e:fa:11: 46:ea:74:d5:de:ea:55:8c:9d:5f:c2:a0:d3:ce:7e: 64:cb:04:cf:fc:71:ae:dc:0e:88:54:ac:d3:64:87: 9a:af:5f:db:07:9d:b7:08:94:99:31:fd:62:4f:e2: 2f:e5:37:f5:65:b4:e8:eb:de:44:54:08:3c:0a:44: 8c:3a:92:f4:7f:1d:8f:b2:c3:ed:06:fd:f1:d4:a3: 5d:32:3f:5b:5d:7c:0f:f9:17:af:02:4f:cb:c5:9b: 22:eb:95:2e:9a:06:04:4a:a1:91:91:b8:d1:f8:1b: 0f:35:ab:53:47:fa:59:dd:0b:48:66:a1:ef:0c:10: 4d:80:0c:ba:5d:50:9a:3f:bd:86:9c:6b:be:d4:fd: 2a:c8:c1:dc:72:93:c3:46:92:f5:49:8d:e6:c6:13: 04:02:94:9f:db:94:66:37:b4:7c:fb:5a:8f:ff:3e: 9f:5d:56:c4:c8:cd:6f:7b:a5:c0:0c:5f:16:98:4d: 93:bc:cb:35:29:8c:99:15:42:08:e9:9e:e0:21:43: 6b:fe:ec:52:1d:c1:54:bb:d2:86:da:90:1b:06:fa: ae:fd:28:2a:36:8d:33:61:0b:0c:6f:00:bf:c0:51: fe:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:46:85:B4:93:17:FC:19:18:0D:CC:7F:0A:92:0A:FF:45:30:72:44 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5042fc88-5f01-39b3-8b5f-8932f28aa563.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 74.125.64.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:2d:85:ac:fe:f4:1b:62:7d:82:bc:6f:69:65:5b:d4:f4:60: 72:89:c9:84:3b:35:b1:f8:cd:98:56:3b:aa:31:76:90:1c:22: 78:01:db:53:40:bc:85:8d:8c:a7:09:80:6f:db:5d:cd:19:b2: 61:7d:0c:3f:4e:49:7e:b9:6c:96:42:5d:96:bd:19:d9:6e:8f: 94:dd:f4:48:1e:ff:91:97:89:d2:f2:17:9b:f3:9b:0e:91:62: 39:57:97:05:b4:d0:aa:25:8c:3e:bc:76:e9:44:e7:d5:e0:06: bc:4e:4f:4b:e0:d0:8b:7f:cd:a7:23:bf:2c:5b:9c:85:b3:ec: 09:b0:e4:6b:6d:3f:67:d4:8f:16:17:17:02:3c:43:94:e1:54: 14:44:fc:ed:94:66:93:51:da:5d:58:62:7c:03:11:af:52:cf: 61:80:fc:61:07:d9:17:b1:86:18:5c:1e:87:9b:39:2e:9f:a4: 0a:cb:7a:a5:82:d1:a2:84:ec:ce:b5:ff:c9:4f:d6:21:4f:2f: 94:93:52:5f:cd:f4:26:64:cc:f5:75:f6:41:75:cc:b8:4a:8a: b0:6f:0a:36:89:b5:8a:f9:20:f4:7e:82:9e:ae:ec:95:78:29: b2:7d:01:4b:5d:1d:c6:f5:9b:39:4a:bd:e9:0d:74:19:cb:5e: b4:fa:45:48 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPZWqdQNvc2vCpoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk NTQ0YTY3MTYtNDFiZS00YTMwLWE2OTktZjZjZjM3YWM3YmZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjCfB9FCtvKi7hr48ateTBkY+pU0P/fCDG1wO +hFG6nTV3upVjJ1fwqDTzn5kywTP/HGu3A6IVKzTZIear1/bB523CJSZMf1iT+Iv 5Tf1ZbTo695EVAg8CkSMOpL0fx2PssPtBv3x1KNdMj9bXXwP+RevAk/LxZsi65Uu mgYESqGRkbjR+BsPNatTR/pZ3QtIZqHvDBBNgAy6XVCaP72GnGu+1P0qyMHccpPD RpL1SY3mxhMEApSf25RmN7R8+1qP/z6fXVbEyM1ve6XADF8WmE2TvMs1KYyZFUII 6Z7gIUNr/uxSHcFUu9KG2pAbBvqu/SgqNo0zYQsMbwC/wFH+9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOdGhbSTF/wZGA3MfwqSCv9FMHJEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNTA0MmZjODgtNWYwMS0z OWIzLThiNWYtODkzMmYyOGFhNTYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASn1AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEYthaz+9BtifYK8b2llW9T0YHKJyYQ7NbH4zZhWO6oxdpAcIngB21NA vIWNjKcJgG/bXc0ZsmF9DD9OSX65bJZCXZa9Gdluj5Td9Ege/5GXidLyF5vzmw6R YjlXlwW00KoljD68dulE59XgBrxOT0vg0It/zacjvyxbnIWz7Amw5GttP2fUjxYX FwI8Q5ThVBRE/O2UZpNR2l1YYnwDEa9Sz2GA/GEH2RexhhhcHoebOS6fpArLeqWC 0aKE7M61/8lP1iFPL5STUl/N9CZkzPV19kF1zLhKirBvCjaJtYr5IPR+gp6u7JV4 KbJ9AUtdHcb1mzlKvekNdBnLXrT6RUg= -----END CERTIFICATE-----Generated at Sat Sep 26 05:56:39 2026 by rpki-client