$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/81a961f4-db80-3356-b4da-c158d6c9ab7b.roa File: 81a961f4-db80-3356-b4da-c158d6c9ab7b.roa (raw, json) Hash identifier: gJ73idfcrFqKXJ6nhUiNISpTWWQkYIKFjXxw3wnAW5s= Subject key identifier: 95:C6:C0:96:91:6C:D2:2C:D5:05:7A:56:23:5B:57:6C:C4:EC:73:46 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584F4C3DC5FB921E9FE9FFC43400 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/81a961f4-db80-3356-b4da-c158d6c9ab7b.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 15169 IP address blocks: 74.125.135.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Nov 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:c5:fb:92:1e:9f:e9:ff:c4:34:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=cd5034ec-3579-49f7-9738-c4dd7dd39228 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:46:d0:66:e1:b5:81:0b:fb:9c:b2:57:ed:0e: bd:50:4a:a7:ca:6b:f5:3b:c7:74:09:6e:1d:2c:d5: a7:0d:59:ef:ad:e9:d5:d9:25:6c:2a:da:a3:83:df: f5:50:c1:a2:2c:9d:3f:80:7f:be:b1:93:ae:46:8f: 17:bd:aa:2f:8d:b4:98:4d:81:ed:54:45:8c:d3:9f: 43:59:b0:d4:cb:53:32:84:b6:00:c8:ce:38:a2:ac: 39:b2:10:d9:d8:db:c4:9e:ea:22:b7:e9:1b:d2:17: f3:48:98:a2:7c:b3:be:47:b1:57:56:f7:1a:ba:46: 18:3b:3a:e2:f2:de:e2:ab:fa:14:fa:49:1a:d7:d2: d5:07:e8:59:86:a5:85:13:d5:60:d4:ce:cc:4d:2e: cc:55:21:e8:bd:d9:d5:fe:ac:a1:fa:c6:8f:04:f1: 94:b3:0c:6f:23:45:21:4c:94:c9:d0:75:7d:30:92: a9:d5:c0:f3:b2:f8:5b:de:3c:43:72:8c:6e:e4:c9: ba:f6:7c:c4:08:fa:46:0f:49:cc:e0:ad:a1:54:d9: 61:67:b1:b3:ac:86:66:b7:5c:ae:0a:fc:79:9a:7e: cf:4a:fa:c8:7f:c3:34:3a:95:6e:63:f9:c8:df:c0: 21:0d:5e:43:22:d2:43:ce:c9:07:9b:5e:d6:b0:84: 1f:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:C6:C0:96:91:6C:D2:2C:D5:05:7A:56:23:5B:57:6C:C4:EC:73:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/81a961f4-db80-3356-b4da-c158d6c9ab7b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 74.125.135.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:d7:12:9b:3f:79:2e:dc:69:d9:f3:07:f3:1f:4a:eb:4e:28: 65:07:80:e8:f7:71:6b:92:45:34:e1:d2:61:16:b7:dc:da:9d: 93:1c:b4:b4:6e:a6:5e:ac:47:8c:65:72:0f:22:19:9b:da:43: c3:71:61:41:b1:33:e5:f8:72:85:f5:8b:46:cc:80:ec:2b:98: f0:2a:78:34:dc:7b:96:10:69:28:81:c9:f2:d2:46:d2:80:da: 37:08:51:94:61:a3:82:75:c2:fb:cc:c8:7a:8c:f2:55:52:79: da:9e:29:9e:5f:40:7f:83:e4:36:9e:39:75:3c:79:af:34:d6: d7:95:3a:ef:73:b0:6f:6c:8d:f1:f4:a3:3e:6b:b1:ca:1e:ef: 44:09:75:86:39:88:d3:2a:e3:f0:78:5f:8b:9a:cb:35:05:8c: 10:77:08:ca:77:b8:57:67:12:2e:07:05:a8:ce:c9:74:86:95: 31:a9:94:6c:72:71:3e:8b:62:72:87:73:77:4a:4a:4a:42:fe: 42:c4:a5:77:ad:ac:01:cd:fc:7d:30:66:84:39:59:15:37:38: ee:8e:81:62:6e:1b:fc:c2:03:9b:12:53:66:75:41:1e:c8:83: 47:db:3f:a9:7c:4a:0d:64:a3:49:84:19:ba:d7:f9:81:6e:4f: 18:0e:fa:43 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPcX7kh6f6f/ENAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk Y2Q1MDM0ZWMtMzU3OS00OWY3LTk3MzgtYzRkZDdkZDM5MjI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh0bQZuG1gQv7nLJX7Q69UEqnymv1O8d0CW4d LNWnDVnvrenV2SVsKtqjg9/1UMGiLJ0/gH++sZOuRo8XvaovjbSYTYHtVEWM059D WbDUy1MyhLYAyM44oqw5shDZ2NvEnuoit+kb0hfzSJiifLO+R7FXVvcaukYYOzri 8t7iq/oU+kka19LVB+hZhqWFE9Vg1M7MTS7MVSHovdnV/qyh+saPBPGUswxvI0Uh TJTJ0HV9MJKp1cDzsvhb3jxDcoxu5Mm69nzECPpGD0nM4K2hVNlhZ7GzrIZmt1yu Cvx5mn7PSvrIf8M0OpVuY/nI38AhDV5DItJDzskHm17WsIQfpQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJXGwJaRbNIs1QV6ViNbV2zE7HNGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvODFhOTYxZjQtZGI4MC0z MzU2LWI0ZGEtYzE1OGQ2YzlhYjdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASn2HMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAALXEps/eS7cadnzB/MfSutOKGUHgOj3cWuSRTTh0mEWt9zanZMctLRu pl6sR4xlcg8iGZvaQ8NxYUGxM+X4coX1i0bMgOwrmPAqeDTce5YQaSiByfLSRtKA 2jcIUZRho4J1wvvMyHqM8lVSedqeKZ5fQH+D5DaeOXU8ea801teVOu9zsG9sjfH0 oz5rscoe70QJdYY5iNMq4/B4X4uayzUFjBB3CMp3uFdnEi4HBajOyXSGlTGplGxy cT6LYnKHc3dKSkpC/kLEpXetrAHN/H0wZoQ5WRU3OO6OgWJuG/zCA5sSU2Z1QR7I g0fbP6l8Sg1ko0mEGbrX+YFuTxgO+kM= -----END CERTIFICATE-----Generated at Thu Nov 5 18:51:00 2026 by rpki-client