$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/9a02ed3b-3fe5-3496-aa98-53ba142188c5.roa File: 9a02ed3b-3fe5-3496-aa98-53ba142188c5.roa (raw, json) Hash identifier: 1+JFHlG129cOTGB2LQsr0mLToamWa80MhK5iyHrkNPU= Subject key identifier: 52:8F:2D:D4:40:AC:7A:57:1F:EA:EA:4B:D7:1F:F7:96:73:9C:2E:D6 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584E0866403E4A91A2F1030B7280 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/9a02ed3b-3fe5-3496-aa98-53ba142188c5.roa Signing time: Tue 02 Jun 2026 01:00:10 +0000 ROA not before: Tue 02 Jun 2026 01:00:10 +0000 ROA not after: Mon 31 Aug 2026 01:00:10 +0000 asID: 15169 IP address blocks: 74.125.140.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:08:66:40:3e:4a:91:a2:f1:03:0b:72:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jun 2 01:00:10 2026 GMT Not After : Aug 31 01:00:10 2026 GMT Subject: CN=5372a8b2-87b0-47fd-acce-58d06bea78b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:30:cb:5b:41:20:ef:ce:8a:3d:ec:27:c1:49: 1a:fb:fe:0c:da:8f:09:59:5f:b0:de:54:a8:50:fd: b3:77:4a:b3:af:2c:26:8b:e1:0f:94:76:9b:37:65: 97:96:f3:df:37:f2:57:ec:42:4a:69:1f:8c:da:aa: a6:db:3b:a8:c1:53:c2:62:8a:a1:fd:6d:8d:be:0c: 73:9c:e4:a3:6c:a7:c7:1e:69:3d:f3:4b:bb:b8:78: e2:5c:a2:43:45:4d:ef:38:50:5a:e6:d4:41:9c:ca: 3c:b3:a1:06:9d:f0:79:f9:1b:16:a5:95:72:b8:d4: 89:24:38:8a:2a:11:19:c5:d0:f6:bf:ab:b6:28:2a: e1:c3:01:b6:34:ea:85:44:2f:89:2f:05:f2:50:cc: ea:d4:c5:11:b9:24:43:0e:8b:fd:8f:ae:52:5e:92: c8:a1:42:09:d4:ed:85:fb:35:41:3f:10:b0:80:5b: 56:a7:49:30:0e:27:48:bc:4c:e4:05:11:dd:f6:a2: 7b:ab:d0:f9:b4:4b:2b:aa:4e:58:1c:3b:e2:b6:eb: 5f:98:d7:86:33:7d:9a:58:9e:f9:ec:c5:25:fe:95: 80:7a:e8:60:f3:31:4e:97:93:07:0e:1c:e9:18:67: 81:61:95:5a:b9:44:a8:79:81:16:c5:00:e5:c5:67: 9e:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:8F:2D:D4:40:AC:7A:57:1F:EA:EA:4B:D7:1F:F7:96:73:9C:2E:D6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/9a02ed3b-3fe5-3496-aa98-53ba142188c5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 74.125.140.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:10:73:d4:e4:ca:52:4f:f8:68:63:1e:d3:52:b3:26:9d:70: 89:8a:2a:d3:46:c6:74:60:42:08:e0:d2:92:6c:5a:6e:a2:cf: 43:fc:1e:24:da:01:a9:21:f3:2d:46:7d:86:93:3e:ff:b2:fe: 50:c6:bb:ea:44:3b:2a:4a:11:e7:7e:30:5f:17:46:25:9d:9f: c6:05:d9:18:3e:5b:1a:d2:67:76:e6:6f:eb:1c:38:73:f9:df: 99:d8:d9:65:6c:d7:7f:a7:44:09:08:b3:0d:7e:97:23:ef:91: 2c:a0:73:31:d1:9a:34:cc:25:aa:ec:8b:9a:18:81:70:a8:56: f4:e9:41:6c:ca:28:a0:c1:f3:9c:9d:82:45:f8:58:0c:dd:6c: 02:bc:72:ef:a0:27:f8:97:5a:90:52:47:44:13:19:69:fc:25: f1:94:85:5a:cf:3e:71:39:29:98:e4:a5:58:2b:b1:8b:48:a6: a1:ea:35:71:c7:7a:d7:d3:47:df:e4:1e:55:18:42:55:c5:05: ab:da:92:0a:6f:9f:0e:84:02:52:fd:98:27:fa:2e:e4:f0:31: 68:eb:8b:e4:3a:03:2d:ed:6c:a0:73:fe:6c:84:92:81:89:3a: f4:ee:27:1d:81:08:f0:1d:b2:79:62:4f:1c:25:db:6d:39:cf: ef:9e:a5:5b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4IZkA+SpGi8QMLcoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDYwMjAxMDAxMFoXDTI2MDgzMTAxMDAxMFowLzEtMCsGA1UEAxMk NTM3MmE4YjItODdiMC00N2ZkLWFjY2UtNThkMDZiZWE3OGIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsTDLW0Eg786KPewnwUka+/4M2o8JWV+w3lSo UP2zd0qzrywmi+EPlHabN2WXlvPfN/JX7EJKaR+M2qqm2zuowVPCYoqh/W2Nvgxz nOSjbKfHHmk980u7uHjiXKJDRU3vOFBa5tRBnMo8s6EGnfB5+RsWpZVyuNSJJDiK KhEZxdD2v6u2KCrhwwG2NOqFRC+JLwXyUMzq1MURuSRDDov9j65SXpLIoUIJ1O2F +zVBPxCwgFtWp0kwDidIvEzkBRHd9qJ7q9D5tEsrqk5YHDvitutfmNeGM32aWJ75 7MUl/pWAeuhg8zFOl5MHDhzpGGeBYZVauUSoeYEWxQDlxWeexwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFKPLdRArHpXH+rqS9cf95ZznC7WMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvOWEwMmVkM2ItM2ZlNS0z NDk2LWFhOTgtNTNiYTE0MjE4OGM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASn2MMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE0Qc9TkylJP+GhjHtNSsyadcImKKtNGxnRgQgjg0pJsWm6iz0P8HiTa Aakh8y1GfYaTPv+y/lDGu+pEOypKEed+MF8XRiWdn8YF2Rg+WxrSZ3bmb+scOHP5 35nY2WVs13+nRAkIsw1+lyPvkSygczHRmjTMJarsi5oYgXCoVvTpQWzKKKDB85yd gkX4WAzdbAK8cu+gJ/iXWpBSR0QTGWn8JfGUhVrPPnE5KZjkpVgrsYtIpqHqNXHH etfTR9/kHlUYQlXFBavakgpvnw6EAlL9mCf6LuTwMWjri+Q6Ay3tbKBz/myEkoGJ OvTuJx2BCPAdsnliTxwl2205z++epVs= -----END CERTIFICATE-----Generated at Sat Jun 13 13:32:23 2026 by rpki-client