$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/1c4d5663-0127-34cc-91b2-0dc6e7b985c4.roa File: 1c4d5663-0127-34cc-91b2-0dc6e7b985c4.roa (raw, json) Hash identifier: wIiGVpAS4HrsJCBQDKzwPeZbEOsM60jmo0btHhzVCno= Subject key identifier: 4F:61:E4:4B:D0:EC:0A:2E:BC:77:BD:C3:C3:41:D4:67:17:57:B9:15 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584F4C3DABA6878F7F28A7380BC0 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/1c4d5663-0127-34cc-91b2-0dc6e7b985c4.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 15169 IP address blocks: 74.125.199.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:ab:a6:87:8f:7f:28:a7:38:0b:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=35c0f3c3-7768-4b74-8bfb-fa01911697c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:06:bf:70:83:c0:a8:6d:fc:d2:f5:c4:97:58: e3:09:b4:59:ec:64:4f:5c:94:dd:54:ab:10:87:e7: c1:d3:45:fc:6f:34:49:d7:52:7a:4f:05:10:b7:7d: 7c:4d:46:67:3a:c6:76:d0:b0:d3:87:81:43:47:23: ff:c1:e3:cd:0e:ba:18:6a:22:3d:93:04:5c:8e:67: 31:0d:f1:c5:bb:78:a6:12:0d:25:2f:00:04:bd:7e: fe:bc:1a:06:a3:77:9a:b9:e5:d4:94:cc:49:8c:b2: ca:b7:49:d6:51:ba:b4:69:44:0f:24:95:0d:e9:cb: 6e:1c:49:20:87:79:63:e6:0e:b2:75:3c:63:20:45: c1:03:92:8b:4d:6d:4c:79:3e:42:74:b1:54:9f:2e: cb:38:7a:e3:a6:b7:4c:e9:62:08:ee:8f:0b:d2:d8: e8:97:2f:e7:38:8e:57:5e:54:ea:73:76:35:e6:04: d1:7b:34:22:a9:b6:61:f1:6c:c5:39:c3:96:4a:c1: 16:a5:9b:b5:dd:13:70:8a:67:a4:97:ed:67:3d:be: d6:ec:bf:35:f3:7d:15:ca:0f:98:d9:cb:85:b9:3e: dc:25:02:d6:b1:1b:7d:15:02:16:e7:91:1d:3d:1f: a0:41:2e:61:d7:fe:64:6d:29:87:c1:24:a0:1b:8a: be:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:61:E4:4B:D0:EC:0A:2E:BC:77:BD:C3:C3:41:D4:67:17:57:B9:15 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/1c4d5663-0127-34cc-91b2-0dc6e7b985c4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 74.125.199.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:91:47:1b:19:e1:cc:c5:d8:01:8f:de:49:46:18:2f:f7:9c: cb:fc:1d:3a:69:2e:b6:13:8d:a9:84:59:1b:6a:dd:e9:43:d0: 27:93:44:59:ed:a7:d1:a0:49:51:11:42:41:ec:a8:5b:ca:03: 25:b3:d8:bd:9b:8d:3e:58:81:5e:dd:83:b3:d8:06:48:1d:20: 94:c9:24:8e:f6:78:d8:80:f9:ef:c6:7f:30:c5:1b:6a:88:e0: 57:68:d7:80:08:86:3d:e2:3a:b9:c1:ab:ee:1a:ba:21:fc:69: 81:56:96:4a:19:66:4e:77:65:cf:16:e8:0f:e0:c3:19:65:4d: 4f:9b:66:c9:f5:f7:b3:1f:66:30:13:ce:36:7b:fa:83:92:1e: 59:ce:39:2e:5e:2e:41:be:67:7a:76:67:29:7c:66:44:9e:4e: 16:fd:56:a8:46:73:2c:ee:28:fc:79:23:9e:68:ea:0d:fc:de: 6b:c5:22:5e:5b:7a:9a:48:96:c5:4a:e1:ec:c9:d2:5c:67:f5: 81:f8:df:6e:1b:2a:a1:33:34:ef:2b:32:c1:63:97:48:69:95: d9:a1:09:77:39:dc:d1:bf:8a:4c:f5:48:ec:6e:b9:ca:39:81: b2:58:b1:70:2a:40:46:6e:06:8d:02:b2:27:a8:5c:d6:9a:65: b8:d4:78:d2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPaumh49/KKc4C8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk MzVjMGYzYzMtNzc2OC00Yjc0LThiZmItZmEwMTkxMTY5N2M0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkAa/cIPAqG380vXEl1jjCbRZ7GRPXJTdVKsQ h+fB00X8bzRJ11J6TwUQt318TUZnOsZ20LDTh4FDRyP/wePNDroYaiI9kwRcjmcx DfHFu3imEg0lLwAEvX7+vBoGo3eaueXUlMxJjLLKt0nWUbq0aUQPJJUN6ctuHEkg h3lj5g6ydTxjIEXBA5KLTW1MeT5CdLFUny7LOHrjprdM6WII7o8L0tjoly/nOI5X XlTqc3Y15gTRezQiqbZh8WzFOcOWSsEWpZu13RNwimekl+1nPb7W7L81830Vyg+Y 2cuFuT7cJQLWsRt9FQIW55EdPR+gQS5h1/5kbSmHwSSgG4q+8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE9h5EvQ7AouvHe9w8NB1GcXV7kVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMWM0ZDU2NjMtMDEyNy0z NGNjLTkxYjItMGRjNmU3Yjk4NWM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASn3HMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFSRRxsZ4czF2AGP3klGGC/3nMv8HTppLrYTjamEWRtq3elD0CeTRFnt p9GgSVERQkHsqFvKAyWz2L2bjT5YgV7dg7PYBkgdIJTJJI72eNiA+e/GfzDFG2qI 4Fdo14AIhj3iOrnBq+4auiH8aYFWlkoZZk53Zc8W6A/gwxllTU+bZsn197MfZjAT zjZ7+oOSHlnOOS5eLkG+Z3p2Zyl8ZkSeThb9VqhGcyzuKPx5I55o6g383mvFIl5b eppIlsVK4ezJ0lxn9YH4324bKqEzNO8rMsFjl0hpldmhCXc53NG/ikz1SOxuuco5 gbJYsXAqQEZuBo0CsieoXNaaZbjUeNI= -----END CERTIFICATE-----Generated at Sun Sep 27 04:31:35 2026 by rpki-client