$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/f9a9e133-b66d-37bd-bcc0-405b1ae35f2e.roa File: f9a9e133-b66d-37bd-bcc0-405b1ae35f2e.roa (raw, json) Hash identifier: HFOit1s4NpGtHX+Xycjl1nGrx0R884Gn14S4UZvN0PI= Subject key identifier: B9:42:7C:EE:84:DE:F5:13:45:4A:A7:61:00:B7:97:C4:19:8B:65:1E Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584F4C3D92C9B8FB751C7B976F40 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/f9a9e133-b66d-37bd-bcc0-405b1ae35f2e.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 15169 IP address blocks: 74.125.206.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:92:c9:b8:fb:75:1c:7b:97:6f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=b81c2707-9995-407b-999e-bc45b3f35b2c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:e5:fd:4a:99:e9:11:8e:5f:2f:65:3f:ef:ec: b8:2a:33:c8:85:b5:cd:66:4d:98:09:04:c5:ab:3f: 68:a1:7b:0a:38:96:2b:c8:b5:f7:1c:29:d1:16:8b: 95:a7:e4:5e:5a:d4:ae:d5:07:9d:d6:30:bc:69:09: 40:88:f0:78:15:ae:91:fc:08:6b:23:2f:60:0c:6b: ff:5e:75:bd:e7:e0:9f:75:7e:9e:b9:f1:40:70:35: da:90:7e:6e:cd:04:2b:42:f7:ab:70:af:0c:02:a7: ac:0f:7b:9a:ae:95:16:ee:f6:4b:db:92:36:15:47: 1f:ac:96:1e:b4:00:5a:3d:32:8b:c5:6d:21:eb:a3: dc:d5:36:38:1a:2e:71:8c:5a:1e:e1:0e:45:4b:aa: db:ce:f5:31:ca:43:8c:f9:4e:bc:26:c3:17:e6:3b: 52:43:20:7a:62:ce:8f:bd:90:e2:d3:2b:62:3a:9d: 03:37:d8:2b:6b:b1:5f:3e:9f:0b:2b:aa:dc:e2:53: 74:3c:39:63:c3:52:b1:9f:5e:d4:c3:d0:fd:96:3e: af:8c:a6:40:81:e3:91:19:8a:14:86:20:9b:05:cf: 48:48:9a:a1:50:f0:40:91:c5:6c:0e:0f:c1:5e:b0: 04:ef:68:c3:ae:95:ea:e3:4c:33:37:65:e1:69:b2: cf:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:42:7C:EE:84:DE:F5:13:45:4A:A7:61:00:B7:97:C4:19:8B:65:1E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/f9a9e133-b66d-37bd-bcc0-405b1ae35f2e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 74.125.206.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:5e:21:35:69:2f:fe:c8:87:33:09:67:cd:61:31:76:4e:2d: 25:14:cc:f2:0c:ec:ca:02:ec:21:5c:cf:85:1f:c1:7a:f6:f2: 0f:f8:b3:5d:1c:a6:7b:26:38:b1:33:27:17:4d:ed:7c:3a:a0: 94:6c:65:40:ee:51:d7:c0:19:ef:63:fe:98:46:0c:1e:a5:3b: 53:3d:58:93:a3:c7:4e:0e:8c:ad:53:5b:63:c7:b0:a9:c6:d3: a9:ed:b8:ba:d9:b8:6c:57:38:4a:25:8e:15:5a:12:74:f2:3d: b7:82:5f:dc:92:01:4f:82:79:17:10:d4:b6:97:58:5b:76:a3: e9:51:68:47:30:44:80:34:15:2c:a9:ff:44:d6:65:ae:9b:c0: aa:ba:22:da:5d:a8:30:91:00:02:f1:43:99:31:96:c1:91:8f: bd:c7:4b:98:35:c0:94:47:4e:3b:ea:ef:05:cf:cf:50:fd:ce: 71:4a:c0:e4:5e:b1:38:2e:7f:bd:58:e1:81:95:f6:53:51:8f: f0:57:74:24:f3:5e:f5:98:36:80:f8:71:84:d6:0d:1a:98:4e: 1c:a5:7d:1f:a4:88:63:89:3e:2d:42:6c:5a:dc:b0:4c:98:60: f9:d3:6d:c6:e6:fa:4c:34:bf:4b:36:96:b8:26:a3:45:c4:9d: 0c:3f:6b:f8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPZLJuPt1HHuXb0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk YjgxYzI3MDctOTk5NS00MDdiLTk5OWUtYmM0NWIzZjM1YjJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmOX9SpnpEY5fL2U/7+y4KjPIhbXNZk2YCQTF qz9ooXsKOJYryLX3HCnRFouVp+ReWtSu1Qed1jC8aQlAiPB4Fa6R/AhrIy9gDGv/ XnW95+CfdX6eufFAcDXakH5uzQQrQvercK8MAqesD3uarpUW7vZL25I2FUcfrJYe tABaPTKLxW0h66Pc1TY4Gi5xjFoe4Q5FS6rbzvUxykOM+U68JsMX5jtSQyB6Ys6P vZDi0ytiOp0DN9gra7FfPp8LK6rc4lN0PDljw1Kxn17Uw9D9lj6vjKZAgeORGYoU hiCbBc9ISJqhUPBAkcVsDg/BXrAE72jDrpXq40wzN2XhabLPzQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLlCfO6E3vUTRUqnYQC3l8QZi2UeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZjlhOWUxMzMtYjY2ZC0z N2JkLWJjYzAtNDA1YjFhZTM1ZjJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASn3OMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFheITVpL/7IhzMJZ81hMXZOLSUUzPIM7MoC7CFcz4UfwXr28g/4s10c pnsmOLEzJxdN7Xw6oJRsZUDuUdfAGe9j/phGDB6lO1M9WJOjx04OjK1TW2PHsKnG 06ntuLrZuGxXOEoljhVaEnTyPbeCX9ySAU+CeRcQ1LaXWFt2o+lRaEcwRIA0FSyp /0TWZa6bwKq6ItpdqDCRAALxQ5kxlsGRj73HS5g1wJRHTjvq7wXPz1D9znFKwORe sTguf71Y4YGV9lNRj/BXdCTzXvWYNoD4cYTWDRqYThylfR+kiGOJPi1CbFrcsEyY YPnTbcbm+kw0v0s2lrgmo0XEnQw/a/g= -----END CERTIFICATE-----Generated at Sat Sep 26 14:19:38 2026 by rpki-client