$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a861bb2f-1cd0-3c47-b85a-3442470b9349.roa File: a861bb2f-1cd0-3c47-b85a-3442470b9349.roa (raw, json) Hash identifier: uz0qboyYH4wq4SCsYojAvY10mVyeFks+Yg6t7VTfViA= Subject key identifier: 3D:64:EC:44:B8:C3:9F:56:30:C4:3C:5B:CF:AE:16:EB:E9:C1:7A:AB Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584F4C3D88E7307DABA13CAC02A0 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a861bb2f-1cd0-3c47-b85a-3442470b9349.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 15169 IP address blocks: 74.125.235.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:88:e7:30:7d:ab:a1:3c:ac:02:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=ececdb35-efe9-405d-b9fe-5d0d7bc8a7ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:9f:ef:8b:b1:e0:f7:da:9f:44:62:94:3b:12: 16:9c:8c:04:53:a5:56:02:f5:e7:a9:a9:e9:67:df: 27:9f:be:d2:b6:fc:fb:c0:15:60:d5:0e:91:3c:3f: 5a:b3:04:71:75:b2:22:2b:27:29:26:ce:81:8a:41: d0:8f:8c:db:7d:03:4f:c7:c4:24:de:37:74:29:79: 61:ea:25:74:03:82:e5:dd:b9:f2:b0:6b:3a:57:0d: 53:32:c3:bf:4e:aa:3b:5b:79:7b:f4:6d:79:ee:5a: 45:c2:ad:55:1d:59:1b:21:8a:18:e0:83:64:ef:93: 09:be:c8:31:d6:a2:b0:6a:ad:b0:55:fc:4e:3e:3b: fc:46:8e:0c:3b:f0:a6:f1:5b:b2:96:cc:44:05:55: f5:e3:7d:4e:37:41:ec:17:7c:6b:cc:5a:dd:f2:fb: 83:14:65:d4:8c:87:ca:98:aa:c0:7b:70:89:64:f7: c2:6f:93:ac:90:a7:91:b7:2e:c4:87:cf:26:2c:ca: 0d:6a:cd:a0:1e:ff:8f:4f:75:95:d2:08:5b:c6:af: 53:94:d9:7b:ec:96:78:63:fa:f7:f6:1f:f6:fc:ec: 92:8b:43:63:d6:50:46:63:92:66:40:c7:a3:f7:ef: 7c:73:29:41:dc:00:db:95:33:15:46:e9:3d:2d:0e: d5:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:64:EC:44:B8:C3:9F:56:30:C4:3C:5B:CF:AE:16:EB:E9:C1:7A:AB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a861bb2f-1cd0-3c47-b85a-3442470b9349.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 74.125.235.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:38:1c:6c:41:e1:14:b8:ea:a2:07:9f:c1:39:e6:7b:bd:7a: c0:34:41:a7:78:46:cf:09:1f:c4:dd:15:cb:9f:33:9a:61:06: ad:5c:b0:ec:56:f7:f8:27:b7:bb:fc:0c:0e:60:8a:2a:1f:1e: ea:6d:70:37:86:b8:27:dd:33:2e:fe:3a:3b:58:06:07:d3:2f: 99:fa:86:a6:b1:3c:7b:1c:f9:73:e8:8f:4d:75:9c:8f:7a:7d: 51:9f:57:57:28:ef:29:7f:e3:0a:55:77:9d:84:58:fa:b6:c2: 97:df:75:34:14:04:24:a1:26:35:f0:24:e4:47:6a:3e:a4:cd: 9e:bb:cd:24:46:72:f4:d6:ad:f7:4d:d2:2d:4c:7d:77:a2:f5: 4c:97:07:6d:45:2d:4f:2e:49:b2:df:0a:1d:46:c3:82:c1:be: 6c:93:6e:1f:fa:c6:89:2e:be:46:19:c9:f2:1d:d4:d2:96:c8: ea:38:aa:33:96:a5:a7:c9:92:38:96:51:4d:94:85:50:ab:79: 91:91:37:50:c4:e6:0e:9c:21:3b:53:55:52:43:0f:6d:e7:0f: e7:7c:bf:0b:b0:57:9f:2d:d9:d3:fb:10:f9:ba:eb:0c:de:52: 43:82:dc:c1:8b:10:ae:ba:34:34:2b:7d:d1:9d:8d:c4:72:e7: 27:fe:14:b4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPYjnMH2roTysAqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk ZWNlY2RiMzUtZWZlOS00MDVkLWI5ZmUtNWQwZDdiYzhhN2FjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlp/vi7Hg99qfRGKUOxIWnIwEU6VWAvXnqanp Z98nn77Stvz7wBVg1Q6RPD9aswRxdbIiKycpJs6BikHQj4zbfQNPx8Qk3jd0KXlh 6iV0A4Ll3bnysGs6Vw1TMsO/Tqo7W3l79G157lpFwq1VHVkbIYoY4INk75MJvsgx 1qKwaq2wVfxOPjv8Ro4MO/Cm8VuylsxEBVX1431ON0HsF3xrzFrd8vuDFGXUjIfK mKrAe3CJZPfCb5OskKeRty7Eh88mLMoNas2gHv+PT3WV0ghbxq9TlNl77JZ4Y/r3 9h/2/OySi0Nj1lBGY5JmQMej9+98cylB3ADblTMVRuk9LQ7VYwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD1k7ES4w59WMMQ8W8+uFuvpwXqrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYTg2MWJiMmYtMWNkMC0z YzQ3LWI4NWEtMzQ0MjQ3MGI5MzQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASn3rMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFc4HGxB4RS46qIHn8E55nu9esA0Qad4Rs8JH8TdFcufM5phBq1csOxW 9/gnt7v8DA5giiofHuptcDeGuCfdMy7+OjtYBgfTL5n6hqaxPHsc+XPoj011nI96 fVGfV1co7yl/4wpVd52EWPq2wpffdTQUBCShJjXwJORHaj6kzZ67zSRGcvTWrfdN 0i1MfXei9UyXB21FLU8uSbLfCh1Gw4LBvmyTbh/6xokuvkYZyfId1NKWyOo4qjOW pafJkjiWUU2UhVCreZGRN1DE5g6cITtTVVJDD23nD+d8vwuwV58t2dP7EPm66wze UkOC3MGLEK66NDQrfdGdjcRy5yf+FLQ= -----END CERTIFICATE-----Generated at Tue Sep 29 11:45:54 2026 by rpki-client