$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8f2c8793-be20-36a0-9939-24dfde4496ac.roa File: 8f2c8793-be20-36a0-9939-24dfde4496ac.roa (raw, json) Hash identifier: GUDXDKFJNhjzlDdPt8JyMTVPsw0u+XvEYVK7CyP5pwY= Subject key identifier: 04:F4:E5:21:FC:A3:F7:E2:A9:33:BC:C1:3A:FA:FC:65:EC:CA:83:B8 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584F4C3D9F00030E35CA392649E0 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8f2c8793-be20-36a0-9939-24dfde4496ac.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 15169 IP address blocks: 74.125.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:9f:00:03:0e:35:ca:39:26:49:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=11c6941c-236c-47d4-b5c4-d9834ab6aa01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:b9:6d:61:cd:fa:93:1f:de:d2:88:5f:0c:fd: 87:9f:62:ff:0e:ec:d6:82:3c:be:01:40:59:09:7c: fa:a4:c5:8e:71:c1:67:9a:66:97:89:ac:f2:97:07: 22:29:f8:ba:c6:25:cc:48:67:6f:20:04:fb:9c:19: 8f:3a:84:f3:a5:05:c6:68:57:df:12:fe:4b:16:47: 4c:cd:99:42:50:14:ef:5e:67:a8:08:ab:96:e7:9e: 92:09:99:31:05:51:41:37:96:44:1e:98:e7:d5:df: 27:21:cc:e3:22:de:e8:dd:da:fb:10:96:51:1b:61: e0:9e:f6:67:53:c5:82:50:c9:8e:b4:b6:cf:03:5a: f9:d6:f2:53:d7:60:c6:d0:4a:16:da:53:8f:cc:88: 2e:61:92:75:f2:eb:a4:86:ef:ca:33:06:1e:46:9e: ca:6b:64:d5:cf:04:c2:28:76:41:80:83:0a:40:26: c5:bd:b0:10:2b:55:78:6a:67:27:14:c7:78:04:e4: 8c:3e:0b:d8:f0:bc:fa:6b:ba:29:c3:6f:6c:a9:81: c7:b4:65:bb:c9:50:cc:00:e3:26:1b:69:1b:85:99: ba:6c:9c:22:a7:af:12:5c:cd:6f:e2:58:7c:6a:f3: 0b:69:e4:ca:91:a0:21:c5:a2:76:b7:d2:5b:8b:f9: 6b:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:F4:E5:21:FC:A3:F7:E2:A9:33:BC:C1:3A:FA:FC:65:EC:CA:83:B8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8f2c8793-be20-36a0-9939-24dfde4496ac.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 74.125.133.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:68:91:a6:ae:d0:ff:ce:54:fe:85:05:74:ed:f6:10:42:3b: f2:5c:58:a9:7a:c0:1c:29:9b:97:20:4d:5f:5d:56:67:8b:40: 8c:b7:16:d1:98:cf:1d:ef:06:06:af:12:f3:1d:6a:56:21:f1: a5:d6:03:12:34:aa:a0:d7:be:62:ac:98:31:ae:88:8c:24:c6: 1d:eb:22:7b:d2:d2:c1:69:10:f6:22:7d:4e:86:45:c9:9f:5d: bf:3e:7c:13:c9:fd:c4:87:71:70:b1:8b:0b:77:5e:88:cd:45: ea:07:77:06:67:92:cb:84:eb:ee:3d:f1:19:37:ae:0e:00:f1: 33:e2:a1:42:92:7e:11:72:b4:48:5b:f8:2c:7a:01:f3:d1:e4: f9:0f:69:57:b1:88:b5:ba:4e:7c:1c:dc:35:99:4b:1d:db:08: 0c:25:b7:5c:ef:0c:b8:8d:ca:85:3a:f2:1c:98:dc:b7:25:0d: 71:8e:88:d1:4b:56:c2:bc:b0:ba:de:43:8b:8b:99:eb:86:31: d9:1b:99:d7:8b:50:63:e3:a6:8c:08:e3:64:03:71:dc:e6:d9: 69:60:30:af:87:81:b6:04:65:fd:8e:ef:6b:20:f6:72:2f:fa: ce:78:73:96:51:3b:99:15:c8:cf:3d:cd:ee:d5:b5:e7:ae:c4: 24:ca:1d:6b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPZ8AAw41yjkmSeAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk MTFjNjk0MWMtMjM2Yy00N2Q0LWI1YzQtZDk4MzRhYjZhYTAxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqrltYc36kx/e0ohfDP2Hn2L/DuzWgjy+AUBZ CXz6pMWOccFnmmaXiazylwciKfi6xiXMSGdvIAT7nBmPOoTzpQXGaFffEv5LFkdM zZlCUBTvXmeoCKuW556SCZkxBVFBN5ZEHpjn1d8nIczjIt7o3dr7EJZRG2HgnvZn U8WCUMmOtLbPA1r51vJT12DG0EoW2lOPzIguYZJ18uukhu/KMwYeRp7Ka2TVzwTC KHZBgIMKQCbFvbAQK1V4amcnFMd4BOSMPgvY8Lz6a7opw29sqYHHtGW7yVDMAOMm G2kbhZm6bJwip68SXM1v4lh8avMLaeTKkaAhxaJ2t9Jbi/lr5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAT05SH8o/fiqTO8wTr6/GXsyoO4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvOGYyYzg3OTMtYmUyMC0z NmEwLTk5MzktMjRkZmRlNDQ5NmFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASn2FMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI1okaau0P/OVP6FBXTt9hBCO/JcWKl6wBwpm5cgTV9dVmeLQIy3FtGY zx3vBgavEvMdalYh8aXWAxI0qqDXvmKsmDGuiIwkxh3rInvS0sFpEPYifU6GRcmf Xb8+fBPJ/cSHcXCxiwt3XojNReoHdwZnksuE6+498Rk3rg4A8TPioUKSfhFytEhb +Cx6AfPR5PkPaVexiLW6Tnwc3DWZSx3bCAwlt1zvDLiNyoU68hyY3LclDXGOiNFL VsK8sLreQ4uLmeuGMdkbmdeLUGPjpowI42QDcdzm2WlgMK+HgbYEZf2O72sg9nIv +s54c5ZRO5kVyM89ze7VteeuxCTKHWs= -----END CERTIFICATE-----Generated at Sat Sep 26 13:04:43 2026 by rpki-client