$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/0983f839-866b-32f3-a6d3-1e8a2d9ae49f.roa File: 0983f839-866b-32f3-a6d3-1e8a2d9ae49f.roa (raw, json) Hash identifier: nXWDFZRHJH/ubT3RlElqiSEDM8CO3NW+Q8bUlQRGVZo= Subject key identifier: B0:A7:C8:7A:A8:14:14:F5:24:64:2E:7A:A0:07:2C:FA:17:83:0F:EE Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584F4C3D979CA7B9C404ABE49500 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/0983f839-866b-32f3-a6d3-1e8a2d9ae49f.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 15169 IP address blocks: 74.125.138.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:97:9c:a7:b9:c4:04:ab:e4:95:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=52dfabeb-dc3a-47e5-bde6-1a75838a023f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:e4:5d:0d:7f:4b:98:31:4c:c6:a8:30:c9:74: b3:bd:ef:d3:25:8c:0c:07:da:7f:72:8a:1b:36:e6: 8b:5a:18:3c:2c:ad:25:6d:5e:e9:3b:8f:9b:45:77: 61:86:15:e2:32:90:ad:a5:ca:c3:b6:c3:14:2a:cb: 6d:1b:26:a4:99:86:dd:af:3e:82:6d:95:5a:6c:0c: a2:16:13:8c:e2:5e:10:84:14:9b:cd:02:a6:94:c5: 14:a0:e7:37:cc:08:63:70:21:8d:fb:1a:5a:a1:5e: 4f:fb:9e:cc:38:2d:27:34:d4:45:b5:80:ce:79:98: e8:3f:25:55:38:c7:63:ae:5b:bf:18:fb:8b:d8:9f: f5:ef:24:e1:38:72:18:9b:c2:4c:42:ea:37:c9:45: 7b:d0:2f:32:7a:af:30:6c:35:25:8f:81:3a:b0:05: ef:ed:58:fa:eb:9f:b1:82:b8:c0:87:36:2f:00:d1: 42:d4:dc:e1:d5:07:c5:70:62:be:c9:a3:64:9a:ef: 6e:15:f0:86:ea:a6:94:bb:5f:fa:36:de:53:3b:96: 9b:ee:59:fc:ff:4b:9b:c3:ea:dc:b6:d7:ab:3b:91: f9:7f:01:db:e8:24:db:89:97:90:5f:1a:54:fe:95: a9:16:0c:ce:6e:75:1e:f0:78:00:1b:b7:52:1d:e0: 23:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:A7:C8:7A:A8:14:14:F5:24:64:2E:7A:A0:07:2C:FA:17:83:0F:EE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/0983f839-866b-32f3-a6d3-1e8a2d9ae49f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 74.125.138.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ac:e0:dd:e5:24:5a:5a:37:5f:39:e9:4d:5e:78:3d:d6:96:d1: b6:eb:34:d8:4f:38:f4:cb:46:36:7d:54:f9:8b:c3:0d:f9:c9: 78:d5:5b:a6:3d:ce:92:48:86:c9:9a:b1:43:df:14:c3:92:36: 65:fc:33:31:ea:aa:da:57:cd:c9:32:7d:45:5f:6f:e0:b8:8e: 54:f0:d8:60:52:16:ee:fc:96:29:9c:ed:79:3d:25:2f:3f:c9: db:5c:c6:74:de:e9:b9:ef:b6:bb:04:31:50:cd:a1:8d:c8:99: 45:2b:7a:99:af:6c:67:eb:0f:9a:4e:7e:7d:21:fd:0c:03:bf: c3:a5:ae:f7:2c:bb:16:e3:bf:e6:f8:a8:c7:58:4a:63:f4:bc: 9c:6b:83:b5:b8:9e:15:a2:20:0c:f0:79:14:b2:df:50:49:34: 5d:4d:3a:a6:45:08:cc:2d:19:af:53:6c:d3:cb:9c:ff:b6:0a: 00:49:e8:ee:50:1a:b9:fd:44:7a:48:51:bf:6d:51:6f:79:74: d2:7c:60:95:76:77:d3:4e:5e:3c:37:51:3e:9d:47:cd:de:21: 4d:51:fe:4d:ea:a8:fc:09:6c:84:76:8b:d4:37:f9:c4:bc:7c: 5d:11:51:d0:9a:0c:a4:95:f9:7c:30:01:44:23:16:b9:e8:ab: 42:e0:70:eb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPZecp7nEBKvklQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk NTJkZmFiZWItZGMzYS00N2U1LWJkZTYtMWE3NTgzOGEwMjNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3+RdDX9LmDFMxqgwyXSzve/TJYwMB9p/coob NuaLWhg8LK0lbV7pO4+bRXdhhhXiMpCtpcrDtsMUKsttGyakmYbdrz6CbZVabAyi FhOM4l4QhBSbzQKmlMUUoOc3zAhjcCGN+xpaoV5P+57MOC0nNNRFtYDOeZjoPyVV OMdjrlu/GPuL2J/17yThOHIYm8JMQuo3yUV70C8yeq8wbDUlj4E6sAXv7Vj665+x grjAhzYvANFC1Nzh1QfFcGK+yaNkmu9uFfCG6qaUu1/6Nt5TO5ab7ln8/0ubw+rc tterO5H5fwHb6CTbiZeQXxpU/pWpFgzObnUe8HgAG7dSHeAj+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLCnyHqoFBT1JGQueqAHLPoXgw/uMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMDk4M2Y4MzktODY2Yi0z MmYzLWE2ZDMtMWU4YTJkOWFlNDlmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASn2KMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKzg3eUkWlo3XznpTV54PdaW0bbrNNhPOPTLRjZ9VPmLww35yXjVW6Y9 zpJIhsmasUPfFMOSNmX8MzHqqtpXzckyfUVfb+C4jlTw2GBSFu78limc7Xk9JS8/ ydtcxnTe6bnvtrsEMVDNoY3ImUUrepmvbGfrD5pOfn0h/QwDv8Olrvcsuxbjv+b4 qMdYSmP0vJxrg7W4nhWiIAzweRSy31BJNF1NOqZFCMwtGa9TbNPLnP+2CgBJ6O5Q Grn9RHpIUb9tUW95dNJ8YJV2d9NOXjw3UT6dR83eIU1R/k3qqPwJbIR2i9Q3+cS8 fF0RUdCaDKSV+XwwAUQjFrnoq0LgcOs= -----END CERTIFICATE-----Generated at Sun Sep 27 12:10:58 2026 by rpki-client