$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/67d0a2bf-1fee-3c11-a30d-239424246d39.roa File: 67d0a2bf-1fee-3c11-a30d-239424246d39.roa (raw, json) Hash identifier: jWkzFfKeCQgtwmEya0rOAr42bqnlnN1OMH5yCM9+lAI= Subject key identifier: 3F:DA:B8:64:A6:98:0C:38:AF:8D:12:4A:A8:EA:49:49:BC:55:47:4E Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584F4C3DD2B2E24A0BE9B56EEEC0 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/67d0a2bf-1fee-3c11-a30d-239424246d39.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 15169 IP address blocks: 74.125.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Nov 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:d2:b2:e2:4a:0b:e9:b5:6e:ee:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=a1d7909e-4cfb-46be-92c5-0c1c7a458b02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:f5:5c:37:34:42:3a:7b:7b:8a:7d:43:82:80: cb:74:4e:d6:62:5c:6e:87:b4:c8:df:74:99:45:a2: e6:9d:52:da:b2:70:89:37:58:6c:14:a4:a0:02:6b: af:93:fb:83:7e:09:0b:27:42:13:30:5b:54:04:ff: ed:23:a0:a5:d5:33:12:21:51:39:cd:1c:65:f6:cc: 64:90:28:40:03:96:76:8e:f9:93:ce:f3:92:5a:fa: 50:62:4e:7a:2a:06:78:e2:82:f0:db:8d:a4:81:1b: 9d:99:3c:f6:76:e6:66:3e:79:40:0f:26:34:e6:28: f3:b5:fd:b5:5e:68:70:a9:08:59:d9:d8:47:bf:00: dd:26:0a:fb:69:a8:e8:07:5e:4f:6b:e2:c9:e9:07: 94:ac:74:05:e8:13:ff:48:93:08:1a:00:2e:ff:58: 67:17:bb:bf:33:60:34:e0:76:a0:33:82:92:0f:25: 6d:61:ca:5d:e1:7c:c6:56:f0:93:19:79:31:5b:00: 6f:3a:47:8b:68:3a:5c:b1:56:d6:45:c5:98:b4:03: bd:08:cd:55:0c:c5:b4:2a:41:e3:2c:15:6c:2c:42: 63:aa:a9:74:dc:57:8b:11:f7:6e:34:c1:79:cc:91: e9:57:48:7e:2a:62:80:ab:94:2e:72:a7:60:6d:e0: 93:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:DA:B8:64:A6:98:0C:38:AF:8D:12:4A:A8:EA:49:49:BC:55:47:4E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/67d0a2bf-1fee-3c11-a30d-239424246d39.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 74.125.21.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:17:aa:4d:ec:0b:12:05:8e:0f:68:d2:c3:d6:f1:c1:80:e1: f9:fe:b3:ba:f6:19:52:53:82:5d:cc:49:99:cc:19:d0:ea:75: 02:6d:1d:15:ab:e8:27:ef:89:27:ef:af:bc:2a:43:b4:e1:73: 1d:f2:7b:aa:95:96:2a:86:00:84:0e:c0:3d:e6:ce:8d:c8:bc: 21:c4:9d:70:dc:48:0b:fb:a3:6a:37:c5:4b:f3:5c:1b:28:0d: 20:57:83:29:f2:c8:6d:a4:97:8e:78:8d:3c:71:69:52:bd:9c: 68:14:69:9b:53:03:32:e0:c3:41:d7:1e:11:a9:87:2e:4a:0f: 83:a7:43:a2:4a:db:54:c2:5d:58:cc:e4:33:ba:f0:2f:27:8c: e2:ea:39:59:29:94:00:1c:f6:d3:8f:8b:12:bb:68:f0:2f:a2: 11:7f:7f:6a:7a:e8:9b:1c:0b:76:85:82:bc:a7:24:41:0d:40: 47:1d:95:cf:65:81:e6:0d:de:91:a3:a0:21:22:9e:55:c8:41: 90:31:a6:cb:14:a9:2d:60:86:31:00:e6:04:99:1e:09:17:ec: b0:b3:8b:90:23:85:c6:88:2b:75:a3:9e:84:81:1a:ba:b9:c3: 4d:1e:ea:93:0f:c8:4d:d3:54:c9:22:92:61:0e:f1:9f:cb:72: 2a:78:09:6f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPdKy4koL6bVu7sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk YTFkNzkwOWUtNGNmYi00NmJlLTkyYzUtMGMxYzdhNDU4YjAyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4vVcNzRCOnt7in1DgoDLdE7WYlxuh7TI33SZ RaLmnVLasnCJN1hsFKSgAmuvk/uDfgkLJ0ITMFtUBP/tI6Cl1TMSIVE5zRxl9sxk kChAA5Z2jvmTzvOSWvpQYk56KgZ44oLw242kgRudmTz2duZmPnlADyY05ijztf21 XmhwqQhZ2dhHvwDdJgr7aajoB15Pa+LJ6QeUrHQF6BP/SJMIGgAu/1hnF7u/M2A0 4HagM4KSDyVtYcpd4XzGVvCTGXkxWwBvOkeLaDpcsVbWRcWYtAO9CM1VDMW0KkHj LBVsLEJjqql03FeLEfduNMF5zJHpV0h+KmKAq5QucqdgbeCTBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD/auGSmmAw4r40SSqjqSUm8VUdOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNjdkMGEyYmYtMWZlZS0z YzExLWEzMGQtMjM5NDI0MjQ2ZDM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASn0VMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIwXqk3sCxIFjg9o0sPW8cGA4fn+s7r2GVJTgl3MSZnMGdDqdQJtHRWr 6CfviSfvr7wqQ7Thcx3ye6qVliqGAIQOwD3mzo3IvCHEnXDcSAv7o2o3xUvzXBso DSBXgynyyG2kl454jTxxaVK9nGgUaZtTAzLgw0HXHhGphy5KD4OnQ6JK21TCXVjM 5DO68C8njOLqOVkplAAc9tOPixK7aPAvohF/f2p66JscC3aFgrynJEENQEcdlc9l geYN3pGjoCEinlXIQZAxpssUqS1ghjEA5gSZHgkX7LCzi5AjhcaIK3WjnoSBGrq5 w00e6pMPyE3TVMkikmEO8Z/Lcip4CW8= -----END CERTIFICATE-----Generated at Thu Nov 5 18:54:25 2026 by rpki-client