$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/cd0c675e-d5a4-3880-94ad-b6166913174b.roa File: cd0c675e-d5a4-3880-94ad-b6166913174b.roa (raw, json) Hash identifier: 5hkGrqLivFWa89D2ez3YVxV0IK4K17tnEf+KksOUW90= Subject key identifier: 05:8C:6F:28:64:51:92:AE:DB:1D:8A:E3:73:A0:40:0A:7C:A1:EC:08 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584D27AA36BAD5C2D334A72E8380 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/cd0c675e-d5a4-3880-94ad-b6166913174b.roa Signing time: Fri 13 Mar 2026 13:00:40 +0000 ROA not before: Fri 13 Mar 2026 13:00:40 +0000 ROA not after: Thu 11 Jun 2026 13:00:40 +0000 asID: 15169 IP address blocks: 74.125.236.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:27:aa:36:ba:d5:c2:d3:34:a7:2e:83:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Mar 13 13:00:40 2026 GMT Not After : Jun 11 13:00:40 2026 GMT Subject: CN=e93037d1-7eb2-4222-8523-1c960a9648f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:2c:aa:fb:22:84:05:7f:cf:ae:56:99:e1:4e: 44:36:40:ce:41:ea:5a:d2:32:09:40:8e:af:76:5c: b7:52:8f:ae:74:e0:33:ad:da:f1:9c:60:97:a8:17: 1d:61:01:d0:28:61:f7:3c:86:2f:04:58:e7:45:fc: cc:c8:90:64:0e:a7:12:ba:dd:14:af:d1:95:e5:1c: 0e:cc:ed:c8:63:62:65:b0:3f:af:da:c6:52:6a:07: 86:ef:e7:a1:9b:89:ae:46:97:04:87:5e:91:f6:2f: ec:a8:4f:7b:f9:ae:3c:1d:44:0b:3d:f7:5f:2a:18: 78:4a:4a:df:0f:72:85:22:8e:12:d2:a2:c2:36:27: 90:70:7c:de:ee:a0:d2:65:aa:c2:b3:15:c2:46:a9: 1a:64:86:cf:99:4b:01:d4:e2:c8:67:4e:b5:97:df: 3f:a6:aa:78:ed:db:ab:a8:a6:0d:69:54:d3:21:1d: 1a:ea:13:76:00:a9:1d:50:e9:b7:ae:47:1f:5a:af: ba:c4:5a:cf:d2:97:40:e1:70:31:14:ae:e5:34:3a: 9c:c9:b8:f9:1a:a8:6b:24:28:bd:95:d4:20:07:31: 76:06:b9:ce:98:cf:fc:c0:76:ec:5e:38:d4:37:7a: 92:23:70:17:3d:58:d4:96:39:de:f3:50:25:7e:2c: ec:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:8C:6F:28:64:51:92:AE:DB:1D:8A:E3:73:A0:40:0A:7C:A1:EC:08 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/cd0c675e-d5a4-3880-94ad-b6166913174b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 74.125.236.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 98:fc:53:c6:56:33:c4:83:fb:cb:8e:2d:19:66:c3:d1:eb:55: 08:68:1e:4d:d0:08:cf:ff:f1:3c:44:98:d7:2a:11:a5:cf:e2: 83:11:bb:a9:de:80:f1:bb:43:b8:0a:78:6c:91:b6:d2:a8:6f: 73:3c:fb:7a:b6:9c:3e:4d:07:75:ac:0d:75:33:5e:83:61:fc: fa:e4:fa:b2:22:38:36:01:44:7a:21:9f:96:55:2a:19:8c:3b: 0c:92:24:ce:8f:0d:80:77:bd:70:3d:11:1e:29:a4:1e:f6:24: 59:3d:69:3b:c2:dd:8c:da:9b:b6:bd:26:a2:b3:1b:a9:57:29: 95:08:fc:99:fc:50:a7:4f:e0:9e:94:7d:ae:96:a5:6c:0b:f2: a9:e4:82:ad:64:7f:75:0c:05:58:04:c5:77:51:a9:fa:76:40: 43:51:89:c9:44:7a:37:92:b1:9f:b6:ee:d6:46:35:56:42:b0: a7:51:36:8a:45:b8:a2:a8:17:6a:07:6c:3e:de:b2:6e:45:cd: 4a:be:77:1b:5e:94:0b:ba:9e:5d:f3:93:03:7f:2e:46:40:c1: 61:ba:19:45:c2:6d:b0:ec:ec:d8:d4:c0:33:74:65:95:ee:f0: 31:22:df:2b:48:06:0b:94:3a:4e:ba:8d:3f:17:af:89:99:18: 61:79:e6:86 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0nqja61cLTNKcug4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDMxMzEzMDA0MFoXDTI2MDYxMTEzMDA0MFowLzEtMCsGA1UEAxMk ZTkzMDM3ZDEtN2ViMi00MjIyLTg1MjMtMWM5NjBhOTY0OGYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAriyq+yKEBX/PrlaZ4U5ENkDOQepa0jIJQI6v dly3Uo+udOAzrdrxnGCXqBcdYQHQKGH3PIYvBFjnRfzMyJBkDqcSut0Ur9GV5RwO zO3IY2JlsD+v2sZSageG7+ehm4muRpcEh16R9i/sqE97+a48HUQLPfdfKhh4Skrf D3KFIo4S0qLCNieQcHze7qDSZarCsxXCRqkaZIbPmUsB1OLIZ061l98/pqp47dur qKYNaVTTIR0a6hN2AKkdUOm3rkcfWq+6xFrP0pdA4XAxFK7lNDqcybj5GqhrJCi9 ldQgBzF2BrnOmM/8wHbsXjjUN3qSI3AXPVjUljne81AlfizsTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAWMbyhkUZKu2x2K43OgQAp8oewIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvY2QwYzY3NWUtZDVhNC0z ODgwLTk0YWQtYjYxNjY5MTMxNzRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASn3sMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJj8U8ZWM8SD+8uOLRlmw9HrVQhoHk3QCM//8TxEmNcqEaXP4oMRu6ne gPG7Q7gKeGyRttKob3M8+3q2nD5NB3WsDXUzXoNh/Prk+rIiODYBRHohn5ZVKhmM OwySJM6PDYB3vXA9ER4ppB72JFk9aTvC3Yzam7a9JqKzG6lXKZUI/Jn8UKdP4J6U fa6WpWwL8qnkgq1kf3UMBVgExXdRqfp2QENRiclEejeSsZ+27tZGNVZCsKdRNopF uKKoF2oHbD7esm5FzUq+dxtelAu6nl3zkwN/LkZAwWG6GUXCbbDs7NjUwDN0ZZXu 8DEi3ytIBguUOk66jT8Xr4mZGGF55oY= -----END CERTIFICATE-----Generated at Thu Mar 26 10:20:37 2026 by rpki-client