$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d875254f-8bd7-3f5f-9364-3b965caa1f89.roa File: d875254f-8bd7-3f5f-9364-3b965caa1f89.roa (raw, json) Hash identifier: FOi+JmilvSpTNiCLWXbQDamg8enXWmPaoZicyUE/tyw= Subject key identifier: 97:B3:C9:66:4D:9F:AF:2D:01:FD:26:17:42:42:DF:8A:F4:45:F7:57 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584F6292EC6C4B9715A7E91BA700 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d875254f-8bd7-3f5f-9364-3b965caa1f89.roa Signing time: Sun 04 Oct 2026 01:00:13 +0000 ROA not before: Sun 04 Oct 2026 01:00:13 +0000 ROA not after: Sat 02 Jan 2027 02:00:13 +0000 asID: 15169 IP address blocks: 74.125.30.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Nov 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:62:92:ec:6c:4b:97:15:a7:e9:1b:a7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Oct 4 01:00:13 2026 GMT Not After : Jan 2 02:00:13 2027 GMT Subject: CN=34d4e52c-4661-4037-9fb9-180e4d3e108e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:5e:96:57:07:20:73:c2:5e:3d:c9:b3:09:89: 8d:73:bf:0d:ec:38:7b:6a:92:a3:d7:33:a1:60:87: ef:b1:95:bb:12:76:d2:46:f6:b8:3c:de:65:5d:df: 4c:1b:80:a4:38:5c:80:7e:96:f8:da:a8:5e:1c:0d: 39:69:19:40:a5:2c:64:85:13:4d:f8:cb:3e:7d:69: 88:bf:34:4a:4f:b7:a8:53:e1:ea:ed:12:e8:98:b9: e7:8f:f2:f3:35:24:6b:b5:11:3e:88:d3:d2:cc:81: db:f0:39:6c:f9:46:b4:47:d0:a3:83:95:a9:32:78: 41:c3:9e:b8:b4:00:d6:51:ca:a5:25:95:35:13:6a: cf:f4:04:92:a6:85:6e:b4:ed:92:76:b1:fd:c2:14: a8:8b:7a:18:d4:99:30:b9:33:bb:e6:2b:c8:ea:ff: de:93:7c:39:6a:f3:ce:a6:ab:e8:cd:ae:91:5a:fd: 6e:6c:fa:a7:a6:f2:28:48:53:d7:12:68:7b:aa:75: 54:05:58:9e:17:1c:74:48:b4:d6:1c:d0:00:a4:d4: 7d:c7:b0:79:eb:92:2b:ff:b4:e7:72:12:b9:1f:6f: 93:4f:3d:8c:39:00:31:b1:0d:d1:10:77:a9:27:21: 23:19:c7:63:84:fd:60:4d:1e:26:de:f7:16:e3:e8: 3b:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:B3:C9:66:4D:9F:AF:2D:01:FD:26:17:42:42:DF:8A:F4:45:F7:57 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d875254f-8bd7-3f5f-9364-3b965caa1f89.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 74.125.30.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b7:74:47:ba:d9:b4:a4:3c:14:bc:28:4d:4b:eb:a1:2d:e8:88: b6:24:f9:07:e8:a3:94:2e:0a:c5:b8:92:13:1b:24:6b:a9:b7: e3:df:50:3d:8c:5a:5a:f2:9e:30:54:16:38:91:d1:22:2c:1e: 54:b7:0f:72:4e:e9:f2:2b:e7:a5:82:78:a3:62:59:85:be:e2: 92:28:d1:7a:be:8e:35:e9:da:85:27:33:7d:59:87:0a:db:6e: 3e:de:70:88:06:78:86:f0:a7:05:e3:c0:41:5f:2c:a5:c3:c0: 23:98:eb:65:a5:08:22:d7:e4:03:80:92:18:88:b8:ee:b0:4b: 44:55:af:19:a5:73:5d:78:03:ec:4d:2f:3d:0b:ec:6c:7a:96: f5:b0:1c:41:ae:8c:e8:74:36:22:e8:63:ba:3b:ee:eb:1f:33: 49:3b:38:f8:84:7a:72:4d:39:b7:2b:b8:99:29:e8:e4:94:c6: 6a:3a:13:fb:b0:45:74:7f:9f:02:c1:d1:ed:6a:0d:00:13:2e: a0:ff:d6:1c:3a:78:21:2a:e1:9a:80:93:6d:7f:15:0e:9f:79: b4:3f:31:7b:ca:65:24:2c:51:f9:37:61:1b:88:bb:67:96:aa: 9e:86:f3:cb:3f:29:26:e5:bf:f4:13:55:48:3f:40:b3:dc:1a: bd:c7:7a:53 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9ikuxsS5cVp+kbpwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MTAwNDAxMDAxM1oXDTI3MDEwMjAyMDAxM1owLzEtMCsGA1UEAxMk MzRkNGU1MmMtNDY2MS00MDM3LTlmYjktMTgwZTRkM2UxMDhlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyl6WVwcgc8JePcmzCYmNc78N7Dh7apKj1zOh YIfvsZW7EnbSRva4PN5lXd9MG4CkOFyAfpb42qheHA05aRlApSxkhRNN+Ms+fWmI vzRKT7eoU+Hq7RLomLnnj/LzNSRrtRE+iNPSzIHb8Dls+Ua0R9Cjg5WpMnhBw564 tADWUcqlJZU1E2rP9ASSpoVutO2SdrH9whSoi3oY1JkwuTO75ivI6v/ek3w5avPO pqvoza6RWv1ubPqnpvIoSFPXEmh7qnVUBVieFxx0SLTWHNAApNR9x7B565Ir/7Tn chK5H2+TTz2MOQAxsQ3REHepJyEjGcdjhP1gTR4m3vcW4+g7ZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJezyWZNn68tAf0mF0JC34r0RfdXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZDg3NTI1NGYtOGJkNy0z ZjVmLTkzNjQtM2I5NjVjYWExZjg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASn0eMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALd0R7rZtKQ8FLwoTUvroS3oiLYk+Qfoo5QuCsW4khMbJGupt+PfUD2M WlrynjBUFjiR0SIsHlS3D3JO6fIr56WCeKNiWYW+4pIo0Xq+jjXp2oUnM31Zhwrb bj7ecIgGeIbwpwXjwEFfLKXDwCOY62WlCCLX5AOAkhiIuO6wS0RVrxmlc114A+xN Lz0L7Gx6lvWwHEGujOh0NiLoY7o77usfM0k7OPiEenJNObcruJkp6OSUxmo6E/uw RXR/nwLB0e1qDQATLqD/1hw6eCEq4ZqAk21/FQ6febQ/MXvKZSQsUfk3YRuIu2eW qp6G88s/KSblv/QTVUg/QLPcGr3HelM= -----END CERTIFICATE-----Generated at Sun Nov 15 08:50:21 2026 by rpki-client