$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/00f4b672-01de-3ed6-a7b2-131a4ac7483f.roa File: 00f4b672-01de-3ed6-a7b2-131a4ac7483f.roa (raw, json) Hash identifier: zHXWKxTSiENpk4Vb4QnsTf8RKBxnHf2VffCHxvkOkg0= Subject key identifier: C0:90:52:A7:91:91:8E:12:9E:42:65:26:CA:1F:A2:05:C7:EC:F0:FC Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584D3DFFCF425DBF3C634A162900 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/00f4b672-01de-3ed6-a7b2-131a4ac7483f.roa Signing time: Sat 21 Mar 2026 13:00:39 +0000 ROA not before: Sat 21 Mar 2026 13:00:39 +0000 ROA not after: Fri 19 Jun 2026 13:00:39 +0000 asID: 15169 IP address blocks: 74.125.31.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3d:ff:cf:42:5d:bf:3c:63:4a:16:29:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Mar 21 13:00:39 2026 GMT Not After : Jun 19 13:00:39 2026 GMT Subject: CN=9e59a877-ef12-4915-84ba-502a1631f4ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:16:5d:24:cc:fd:82:34:48:e4:88:93:95:1e: ea:58:a3:ce:dc:44:9e:eb:31:bc:07:8e:96:f2:fa: e1:ec:de:ac:17:e2:bb:83:a5:14:0e:2b:2d:ca:ca: 7f:da:39:47:55:2b:df:71:cc:01:ab:d6:fc:20:c4: a2:29:62:43:03:da:91:a3:96:2d:84:58:26:e3:4b: 3a:e7:ab:0c:58:e2:53:76:50:bc:16:a9:d4:f2:d7: 55:90:94:db:ff:95:5e:f7:8d:59:f2:c3:62:76:76: e2:be:68:7e:0b:1f:c7:69:6b:31:71:0f:b0:36:bb: b5:f5:c7:51:fe:cd:a9:08:62:cf:82:b1:5c:9c:82: 90:db:c0:6e:c3:fe:86:c2:d2:11:2d:5a:7c:09:c1: fb:95:a2:8c:97:c1:ef:5c:79:b7:56:44:5d:9c:66: 96:01:1c:bb:8f:1e:f5:df:42:5e:4b:51:38:bc:1d: 19:84:c6:c6:ea:b5:c9:2a:d6:a3:c6:57:44:85:12: 14:98:57:8b:0c:b5:f5:da:ee:ff:f6:10:d3:a2:7a: 00:ad:fe:c5:d1:de:d8:c2:2a:c4:86:e5:bb:c6:6e: bb:f7:0f:54:52:ee:86:51:6b:9d:b3:fe:d3:26:f0: 1e:e5:9b:ea:54:d4:8c:f4:a4:88:f9:98:d9:e8:bb: 8f:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:90:52:A7:91:91:8E:12:9E:42:65:26:CA:1F:A2:05:C7:EC:F0:FC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/00f4b672-01de-3ed6-a7b2-131a4ac7483f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 74.125.31.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:a5:68:e3:80:33:01:af:21:f1:5f:95:bb:7e:2c:c6:93:7f: 10:6b:c2:19:62:6a:d7:ed:e1:a4:82:a4:e8:4d:98:66:38:89: e9:3e:65:4f:2d:82:66:56:d0:e0:78:dd:9e:af:41:cf:a5:dd: 43:80:86:9a:2d:c6:10:84:9b:3d:02:54:5b:88:cc:26:0b:65: e6:ec:ec:8c:88:04:ca:25:11:1b:14:2b:80:9c:87:86:1a:31: e4:aa:aa:01:48:88:48:77:0b:8f:e0:c6:3d:38:f3:0b:94:30: 23:03:13:8f:6b:8c:12:e4:91:8e:11:64:41:4c:cd:fc:51:a8: 86:2c:7b:c5:2f:62:91:0d:8c:c8:60:2d:02:62:1b:b7:27:d9: f9:78:64:05:b9:14:09:61:55:12:8e:34:46:ce:52:5f:5b:e6: 63:a6:41:5d:db:fb:f1:58:e3:91:e9:b4:86:02:5a:e9:7f:3d: 33:f7:33:5b:26:15:46:0c:af:8d:14:a4:3e:67:6b:ed:10:59: 99:88:ae:5e:4b:21:84:df:98:76:b3:e3:12:40:43:c7:a9:92: 09:b1:59:89:b3:10:e6:91:45:3c:2b:d2:8a:1b:50:1b:42:42: 3c:fd:ef:85:a9:68:df:74:b7:6a:f2:a1:4e:bf:36:fd:a2:e3: 89:dd:0f:6e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE09/89CXb88Y0oWKQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDMyMTEzMDAzOVoXDTI2MDYxOTEzMDAzOVowLzEtMCsGA1UEAxMk OWU1OWE4NzctZWYxMi00OTE1LTg0YmEtNTAyYTE2MzFmNGFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAphZdJMz9gjRI5IiTlR7qWKPO3ESe6zG8B46W 8vrh7N6sF+K7g6UUDistysp/2jlHVSvfccwBq9b8IMSiKWJDA9qRo5YthFgm40s6 56sMWOJTdlC8FqnU8tdVkJTb/5Ve941Z8sNidnbivmh+Cx/HaWsxcQ+wNru19cdR /s2pCGLPgrFcnIKQ28Buw/6GwtIRLVp8CcH7laKMl8HvXHm3VkRdnGaWARy7jx71 30JeS1E4vB0ZhMbG6rXJKtajxldEhRIUmFeLDLX12u7/9hDTonoArf7F0d7YwirE huW7xm679w9UUu6GUWuds/7TJvAe5ZvqVNSM9KSI+ZjZ6LuPowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMCQUqeRkY4SnkJlJsofogXH7PD8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMDBmNGI2NzItMDFkZS0z ZWQ2LWE3YjItMTMxYTRhYzc0ODNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASn0fMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABqlaOOAMwGvIfFflbt+LMaTfxBrwhliatft4aSCpOhNmGY4iek+ZU8t gmZW0OB43Z6vQc+l3UOAhpotxhCEmz0CVFuIzCYLZebs7IyIBMolERsUK4Cch4Ya MeSqqgFIiEh3C4/gxj048wuUMCMDE49rjBLkkY4RZEFMzfxRqIYse8UvYpENjMhg LQJiG7cn2fl4ZAW5FAlhVRKONEbOUl9b5mOmQV3b+/FY45HptIYCWul/PTP3M1sm FUYMr40UpD5na+0QWZmIrl5LIYTfmHaz4xJAQ8epkgmxWYmzEOaRRTwr0oobUBtC Qjz974WpaN90t2ryoU6/Nv2i44ndD24= -----END CERTIFICATE-----Generated at Thu Mar 26 10:17:23 2026 by rpki-client