$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/3c13f0ec-08e2-3c38-b1fe-be19f6060acc.roa File: 3c13f0ec-08e2-3c38-b1fe-be19f6060acc.roa (raw, json) Hash identifier: HGGWmFNLmWenKfHqa9s/RLgGkhLl/eu+4xGNtsSZcKI= Subject key identifier: 27:0F:85:37:18:D2:73:A6:26:AC:63:DD:E4:80:89:A1:15:CD:C6:29 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584F6292EAEC7A6EAF8B1636A4C0 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/3c13f0ec-08e2-3c38-b1fe-be19f6060acc.roa Signing time: Sun 04 Oct 2026 01:00:13 +0000 ROA not before: Sun 04 Oct 2026 01:00:13 +0000 ROA not after: Sat 02 Jan 2027 02:00:13 +0000 asID: 15169 IP address blocks: 74.125.25.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Nov 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:62:92:ea:ec:7a:6e:af:8b:16:36:a4:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Oct 4 01:00:13 2026 GMT Not After : Jan 2 02:00:13 2027 GMT Subject: CN=80be3f6b-e949-45d8-9a86-7f049dcb7211 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:4e:cd:f2:f3:1c:2f:55:61:61:ab:28:09:96: e6:d5:5d:87:ef:74:45:99:c2:20:8d:40:5d:56:b0: 2c:4b:95:d9:41:e7:10:cb:b0:f4:b5:7c:72:e3:ac: b2:8b:d9:d8:bf:0f:24:2e:27:46:06:84:91:ac:3e: 2d:d0:6e:d6:88:76:21:78:bd:8c:19:05:41:25:a8: ea:28:7e:6b:7b:a8:0a:18:bf:87:08:da:d2:b8:19: ec:20:41:ff:33:00:08:8a:d2:3f:11:eb:89:15:a6: 18:3f:8d:9b:bf:44:02:c2:1b:ae:c8:d9:2b:f3:13: cc:bc:a8:46:bc:9e:4b:55:7c:97:67:e4:7d:71:5e: e8:9e:02:01:b4:d6:e4:b8:56:cb:2a:b0:4f:ea:9b: 8c:e3:40:a2:9d:b2:2b:f8:1c:5f:bd:9c:c7:fb:72: 03:a6:aa:ff:35:8e:ee:1c:43:0e:ee:d4:a7:f9:93: 58:a7:4a:09:f9:bf:eb:a8:e4:e5:0c:fc:6e:3e:7e: a0:48:9e:6b:5d:30:f6:4a:7d:f3:49:fa:f0:85:56: d3:8c:b8:9e:30:87:55:5c:f0:15:d5:ee:f9:2c:40: 29:56:da:b6:64:4c:8a:5b:e7:e4:7a:a8:2a:71:1c: c1:18:80:d0:37:ba:fa:a3:39:10:bf:81:fb:fa:5f: 2d:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:0F:85:37:18:D2:73:A6:26:AC:63:DD:E4:80:89:A1:15:CD:C6:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/3c13f0ec-08e2-3c38-b1fe-be19f6060acc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 74.125.25.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:2a:d3:2d:06:c8:ff:48:41:fe:5c:bc:cd:51:6d:6d:b3:68: 16:fd:63:4a:88:3e:5a:62:a7:42:f6:45:05:c8:26:3c:27:28: 52:d5:5a:3f:81:ec:41:54:d7:53:01:07:72:e9:71:0a:64:d8: 8c:08:ec:2e:82:eb:ec:08:05:14:d6:a3:e7:9b:67:2d:a8:65: d1:99:3b:fa:40:0c:e0:8e:eb:aa:bd:60:a4:53:88:1c:cf:65: 5e:ab:b6:88:e2:ff:c6:3a:0f:35:82:48:98:d8:32:f2:28:38: be:24:e6:3d:ce:4d:3b:f9:55:e5:c6:97:b1:f7:5f:72:b7:48: 68:27:11:57:2f:9b:fb:9c:a1:4f:50:b6:3f:e5:fd:fb:67:f9: 2a:87:99:c8:f1:07:a4:35:34:3f:70:3f:e9:de:a4:a3:3b:e2: 8b:2b:9e:df:b1:c6:7a:35:1f:0b:1f:ed:f2:9b:b9:47:ea:e4: 18:de:ea:80:61:5c:3f:a6:bb:15:a2:2e:c0:be:c4:00:af:66: 95:a4:28:c5:52:e6:d6:63:4d:c9:a8:60:cf:7f:f4:53:47:8a: 41:fd:f7:a6:8a:e2:9b:eb:dc:ce:89:7c:bb:84:bf:c9:50:f5: 50:7a:00:7e:87:ac:ec:ab:3e:bf:04:30:77:e7:04:34:58:fe: b0:51:20:69 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9ikursem6vixY2pMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MTAwNDAxMDAxM1oXDTI3MDEwMjAyMDAxM1owLzEtMCsGA1UEAxMk ODBiZTNmNmItZTk0OS00NWQ4LTlhODYtN2YwNDlkY2I3MjExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg07N8vMcL1VhYasoCZbm1V2H73RFmcIgjUBd VrAsS5XZQecQy7D0tXxy46yyi9nYvw8kLidGBoSRrD4t0G7WiHYheL2MGQVBJajq KH5re6gKGL+HCNrSuBnsIEH/MwAIitI/EeuJFaYYP42bv0QCwhuuyNkr8xPMvKhG vJ5LVXyXZ+R9cV7ongIBtNbkuFbLKrBP6puM40CinbIr+BxfvZzH+3IDpqr/NY7u HEMO7tSn+ZNYp0oJ+b/rqOTlDPxuPn6gSJ5rXTD2Sn3zSfrwhVbTjLieMIdVXPAV 1e75LEApVtq2ZEyKW+fkeqgqcRzBGIDQN7r6ozkQv4H7+l8t+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCcPhTcY0nOmJqxj3eSAiaEVzcYpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvM2MxM2YwZWMtMDhlMi0z YzM4LWIxZmUtYmUxOWY2MDYwYWNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASn0ZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHgq0y0GyP9IQf5cvM1RbW2zaBb9Y0qIPlpip0L2RQXIJjwnKFLVWj+B 7EFU11MBB3LpcQpk2IwI7C6C6+wIBRTWo+ebZy2oZdGZO/pADOCO66q9YKRTiBzP ZV6rtoji/8Y6DzWCSJjYMvIoOL4k5j3OTTv5VeXGl7H3X3K3SGgnEVcvm/ucoU9Q tj/l/ftn+SqHmcjxB6Q1ND9wP+nepKM74osrnt+xxno1Hwsf7fKbuUfq5Bje6oBh XD+muxWiLsC+xACvZpWkKMVS5tZjTcmoYM9/9FNHikH996aK4pvr3M6JfLuEv8lQ 9VB6AH6HrOyrPr8EMHfnBDRY/rBRIGk= -----END CERTIFICATE-----Generated at Sun Nov 15 12:20:58 2026 by rpki-client