$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/1c68adcb-e030-30cd-9cd4-6a7353a50978.roa File: 1c68adcb-e030-30cd-9cd4-6a7353a50978.roa (raw, json) Hash identifier: sUKs/H8XRejxfFOVNvjt70xbWaYgTt0BrCCErXKAq8A= Subject key identifier: 2B:22:12:2C:3C:C7:4C:CF:61:99:43:11:41:E5:5E:82:7F:60:94:84 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584E0865FEDAB72FA365A3B0C150 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/1c68adcb-e030-30cd-9cd4-6a7353a50978.roa Signing time: Tue 02 Jun 2026 01:00:10 +0000 ROA not before: Tue 02 Jun 2026 01:00:10 +0000 ROA not after: Mon 31 Aug 2026 01:00:10 +0000 asID: 15169 IP address blocks: 74.125.142.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:08:65:fe:da:b7:2f:a3:65:a3:b0:c1:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jun 2 01:00:10 2026 GMT Not After : Aug 31 01:00:10 2026 GMT Subject: CN=82dd92de-5d10-4fcd-8515-ee9e8f7b9db5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:42:3e:57:a3:05:f6:4e:1b:66:6b:b7:e0:49: 9d:14:c2:dd:c2:4d:39:17:26:0e:de:2a:05:62:4e: 23:85:c4:68:99:04:56:17:42:b1:bb:07:b8:a1:34: 9f:ce:5e:6d:58:3a:e5:0c:c7:9a:7d:4a:b7:2a:99: dc:e6:5d:68:ea:d9:91:4b:db:4a:af:91:b2:a3:f6: af:47:aa:59:92:eb:92:d8:37:3e:6a:b7:90:f2:49: d7:e4:73:29:5b:9e:c1:38:eb:da:f1:64:8d:18:f7: 9b:bd:75:6d:78:e1:f9:b4:77:de:5a:d3:3b:ec:5e: b7:57:df:57:4a:32:c1:82:40:aa:8d:a1:c2:13:f2: 83:50:7a:9c:3a:61:ff:be:62:18:6e:a3:1d:3d:56: f9:09:ef:8f:48:7c:4f:10:81:1f:e5:4a:8a:14:88: d2:17:9d:49:aa:77:dc:01:90:63:3d:1c:d7:1b:f6: 8c:a2:8c:65:e9:d9:2d:4c:c5:d4:6b:96:4c:7d:39: 25:19:98:44:4d:7a:0c:d7:e7:db:92:64:d7:31:27: b5:9b:f2:a7:e9:a8:c6:ec:34:ef:02:f7:75:cd:ac: 92:56:7a:03:09:e7:9c:95:ee:ed:1f:fd:50:9b:31: 36:7f:e9:ed:04:b7:af:b8:72:6d:40:ba:9a:b9:a3: 65:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:22:12:2C:3C:C7:4C:CF:61:99:43:11:41:E5:5E:82:7F:60:94:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/1c68adcb-e030-30cd-9cd4-6a7353a50978.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 74.125.142.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ad:b4:a9:a0:37:7e:f6:da:d8:33:cc:a1:0d:07:e8:a3:a0:11: bf:17:cf:ea:eb:4a:2c:e6:59:b5:e6:0d:2b:f1:70:dc:a3:f3: 85:b3:bc:8b:33:00:5b:35:7f:36:af:86:d2:76:d6:4f:64:ec: 19:81:70:93:90:5d:e1:c8:17:f0:25:e8:eb:fc:50:2b:31:b7: 9e:aa:c2:c3:25:81:59:aa:2a:ca:61:76:ad:9c:be:1d:0b:28: f9:4b:87:ba:92:d5:e5:04:75:81:c7:82:35:87:ff:47:9d:f1: 1f:df:00:aa:56:df:9e:8f:2c:74:e9:32:03:76:92:eb:2e:b8: c1:47:51:00:b4:4b:66:f9:f2:5a:e2:6f:62:d9:30:44:7b:64: 15:9e:96:c8:94:05:a4:4a:5a:aa:62:72:49:25:22:3e:73:5d: f4:82:43:1d:50:d9:d8:2c:9c:ae:64:60:40:9c:10:4f:5f:7e: ef:b1:a9:fc:e8:3b:92:ac:38:1c:47:7b:0d:ba:2e:ef:c4:dc: 82:81:a4:ea:ac:2e:18:33:a4:57:56:d6:1d:b7:36:a1:41:69: 3c:1d:43:11:6f:05:10:aa:f1:03:82:1d:57:b6:80:da:2f:2d: 15:46:d0:79:e1:1d:9d:a4:d4:44:ea:25:12:d6:a5:25:29:da: d5:15:75:3c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4IZf7aty+jZaOwwVAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDYwMjAxMDAxMFoXDTI2MDgzMTAxMDAxMFowLzEtMCsGA1UEAxMk ODJkZDkyZGUtNWQxMC00ZmNkLTg1MTUtZWU5ZThmN2I5ZGI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtUI+V6MF9k4bZmu34EmdFMLdwk05FyYO3ioF Yk4jhcRomQRWF0Kxuwe4oTSfzl5tWDrlDMeafUq3Kpnc5l1o6tmRS9tKr5Gyo/av R6pZkuuS2Dc+areQ8knX5HMpW57BOOva8WSNGPebvXVteOH5tHfeWtM77F63V99X SjLBgkCqjaHCE/KDUHqcOmH/vmIYbqMdPVb5Ce+PSHxPEIEf5UqKFIjSF51Jqnfc AZBjPRzXG/aMooxl6dktTMXUa5ZMfTklGZhETXoM1+fbkmTXMSe1m/Kn6ajG7DTv Avd1zaySVnoDCeecle7tH/1QmzE2f+ntBLevuHJtQLqauaNlCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCsiEiw8x0zPYZlDEUHlXoJ/YJSEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMWM2OGFkY2ItZTAzMC0z MGNkLTljZDQtNmE3MzUzYTUwOTc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASn2OMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK20qaA3fvba2DPMoQ0H6KOgEb8Xz+rrSizmWbXmDSvxcNyj84WzvIsz AFs1fzavhtJ21k9k7BmBcJOQXeHIF/Al6Ov8UCsxt56qwsMlgVmqKsphdq2cvh0L KPlLh7qS1eUEdYHHgjWH/0ed8R/fAKpW356PLHTpMgN2kusuuMFHUQC0S2b58lri b2LZMER7ZBWelsiUBaRKWqpickklIj5zXfSCQx1Q2dgsnK5kYECcEE9ffu+xqfzo O5KsOBxHew26Lu/E3IKBpOqsLhgzpFdW1h23NqFBaTwdQxFvBRCq8QOCHVe2gNov LRVG0HnhHZ2k1ETqJRLWpSUp2tUVdTw= -----END CERTIFICATE-----Generated at Sat Jun 13 09:19:20 2026 by rpki-client