$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/c9b8f0b1-802e-32fc-a9ce-8a216a959966.roa File: c9b8f0b1-802e-32fc-a9ce-8a216a959966.roa (raw, json) Hash identifier: lno32njCs0JMLxTorhaWVS3aih2D+2FE6XTOBnrFD7A= Subject key identifier: 03:C8:88:EC:AC:A8:E5:DC:EB:C3:7A:3B:4B:6D:F2:02:55:3A:13:99 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584F4C3DA0D8356E41DFAC184500 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/c9b8f0b1-802e-32fc-a9ce-8a216a959966.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 15169 IP address blocks: 74.125.176.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:a0:d8:35:6e:41:df:ac:18:45:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=760be61d-a53a-48b0-b32f-dca3bca31f24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:1a:09:70:a6:68:e9:86:aa:0f:7d:65:85:66: 2f:93:23:c8:11:9f:d8:03:31:18:6b:e3:c0:67:fb: 13:f6:52:95:69:64:39:11:7c:05:a1:b6:01:4c:d6: 98:d4:b3:82:5e:38:c6:86:98:cf:37:8a:49:e5:eb: bf:db:bf:94:8b:35:d1:01:59:26:18:a0:31:2b:75: 64:2e:3e:66:b9:02:24:b4:5d:4d:d6:45:ad:9b:be: ed:25:f7:57:1e:9c:66:55:2d:7a:ad:e4:31:e7:33: ab:37:b8:ce:41:4e:a2:8c:fd:7b:46:90:df:4b:7e: c8:29:35:8c:6a:b0:88:92:95:c0:78:64:a5:2a:f8: d7:dd:88:c3:62:54:32:7b:4a:9f:07:68:76:c5:87: 15:a8:48:b2:02:20:ec:fc:81:7c:25:bd:85:72:6f: a7:c3:82:f0:33:fa:97:df:96:57:f1:bb:63:4f:61: 3c:7e:2e:25:7e:73:03:bd:d0:84:18:db:27:ec:35: 08:16:97:b7:70:fa:73:9a:a8:d0:91:01:0f:50:3e: 50:14:b4:21:92:2c:49:5c:97:08:17:4e:47:d9:98: cf:a6:22:0d:14:ad:3b:72:1d:3f:b3:d4:48:97:0e: 3c:ad:a3:b0:4f:ce:e9:a1:e1:91:e2:b3:a4:92:91: 86:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:C8:88:EC:AC:A8:E5:DC:EB:C3:7A:3B:4B:6D:F2:02:55:3A:13:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/c9b8f0b1-802e-32fc-a9ce-8a216a959966.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 74.125.176.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b4:6a:3c:0f:39:75:a4:4e:59:52:63:11:a7:05:5b:59:27:78: 77:cf:00:ab:f4:8c:cd:9c:3a:80:a0:93:28:64:0b:b5:20:11: 53:c2:06:9d:9e:c6:fa:a8:f5:f0:c3:4d:dc:ad:c9:5f:ff:cc: 9f:7f:c5:f7:8b:7a:30:4d:9c:dd:f7:c7:12:7f:f4:fd:8c:01: fc:bc:d9:fd:84:c3:2e:db:4f:11:50:95:59:2c:7d:bb:c4:88: 56:88:c5:ae:d3:88:ce:61:50:90:0a:07:8f:e5:89:ad:95:25: 78:f4:25:5e:ce:1e:f0:c3:13:e3:14:d8:fb:e5:f0:a8:9e:a4: ea:81:1b:49:aa:db:63:43:72:d0:c1:9b:bf:52:22:36:59:84: d1:7c:09:6b:8a:46:c0:49:e4:a9:65:cc:69:27:90:45:9a:3a: 4f:96:1d:20:40:db:ba:7c:e6:7a:20:fd:66:54:cb:30:8c:42: 01:44:90:2d:84:f8:97:05:84:24:39:43:ef:1c:a1:1c:9f:c2: ef:ea:5d:65:38:51:b9:1f:aa:1f:54:41:52:6f:20:ba:f6:0e: 3d:25:c0:0e:92:e5:25:5c:41:84:21:a8:23:af:27:b8:65:15: 45:28:70:fc:82:43:67:47:6f:d2:21:6f:7a:05:42:71:10:32: 93:8d:22:02 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPaDYNW5B36wYRQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk NzYwYmU2MWQtYTUzYS00OGIwLWIzMmYtZGNhM2JjYTMxZjI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvBoJcKZo6YaqD31lhWYvkyPIEZ/YAzEYa+PA Z/sT9lKVaWQ5EXwFobYBTNaY1LOCXjjGhpjPN4pJ5eu/27+UizXRAVkmGKAxK3Vk Lj5muQIktF1N1kWtm77tJfdXHpxmVS16reQx5zOrN7jOQU6ijP17RpDfS37IKTWM arCIkpXAeGSlKvjX3YjDYlQye0qfB2h2xYcVqEiyAiDs/IF8Jb2Fcm+nw4LwM/qX 35ZX8btjT2E8fi4lfnMDvdCEGNsn7DUIFpe3cPpzmqjQkQEPUD5QFLQhkixJXJcI F05H2ZjPpiINFK07ch0/s9RIlw48raOwT87poeGR4rOkkpGGkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAPIiOysqOXc68N6O0tt8gJVOhOZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYzliOGYwYjEtODAyZS0z MmZjLWE5Y2UtOGEyMTZhOTU5OTY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQESn2wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALRqPA85daROWVJjEacFW1kneHfPAKv0jM2cOoCgkyhkC7UgEVPCBp2e xvqo9fDDTdytyV//zJ9/xfeLejBNnN33xxJ/9P2MAfy82f2Ewy7bTxFQlVksfbvE iFaIxa7TiM5hUJAKB4/lia2VJXj0JV7OHvDDE+MU2Pvl8KiepOqBG0mq22NDctDB m79SIjZZhNF8CWuKRsBJ5KllzGknkEWaOk+WHSBA27p85nog/WZUyzCMQgFEkC2E +JcFhCQ5Q+8coRyfwu/qXWU4Ubkfqh9UQVJvILr2Dj0lwA6S5SVcQYQhqCOvJ7hl FUUocPyCQ2dHb9Ihb3oFQnEQMpONIgI= -----END CERTIFICATE-----Generated at Sun Sep 27 12:11:39 2026 by rpki-client