$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/bf0ca975-c303-3fe2-acd5-fa91d979f203.roa File: bf0ca975-c303-3fe2-acd5-fa91d979f203.roa (raw, json) Hash identifier: HFK8uv6WkyjowA9pJCgaBve3NGHHMmpRmvlHxp2ruTU= Subject key identifier: DF:A5:0F:EC:4F:A9:FF:1C:DB:99:18:96:49:E6:CE:7B:04:7A:E3:3C Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584E1E446A4D9955BDF343578C80 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/bf0ca975-c303-3fe2-acd5-fa91d979f203.roa Signing time: Tue 09 Jun 2026 21:00:12 +0000 ROA not before: Tue 09 Jun 2026 21:00:12 +0000 ROA not after: Mon 07 Sep 2026 21:00:12 +0000 asID: 15169 IP address blocks: 74.125.125.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:1e:44:6a:4d:99:55:bd:f3:43:57:8c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jun 9 21:00:12 2026 GMT Not After : Sep 7 21:00:12 2026 GMT Subject: CN=4fb0ad30-5aad-4199-826a-2b196f4ebc06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:6a:e8:7d:99:74:0a:68:b8:b8:1f:9c:a6:a7: 89:55:9f:06:1c:91:94:42:82:40:da:b1:0d:fb:66: d4:02:3b:8b:78:b7:91:89:89:d1:15:63:1c:61:25: 73:a6:ec:21:dc:a9:5e:05:2d:47:67:42:91:0a:09: fe:5a:30:3d:d6:91:8a:c0:c8:01:ef:ef:58:85:b3: 4d:01:9a:c4:7d:a3:92:c9:15:b9:50:98:11:57:5e: 6c:14:cf:99:75:87:28:fe:a7:33:4c:4c:7e:9d:7d: 80:e6:22:7a:39:9a:24:11:95:4a:c8:4b:fc:17:62: da:8d:38:f7:7c:e3:ba:66:68:51:7e:19:2f:9e:92: c2:4f:a3:2f:bd:13:f7:31:31:1f:a0:d1:57:22:38: e6:62:46:89:81:88:3c:a6:2c:4f:d2:d5:48:18:dd: eb:b3:bb:aa:b1:60:d3:ca:0a:85:24:91:0b:09:49: 7a:3f:45:a4:3c:13:ca:21:18:92:31:26:c2:35:95: 5a:f2:27:fe:c6:af:4b:28:f1:b2:f1:6e:3f:f2:55: b4:1b:78:ea:1b:93:0b:32:a1:d0:2d:9d:5c:3b:4f: 10:1f:4c:ce:16:97:45:d8:c3:b9:16:31:7c:e3:58: a7:94:fe:9e:72:6b:8a:34:36:51:63:2d:40:ad:5a: d4:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:A5:0F:EC:4F:A9:FF:1C:DB:99:18:96:49:E6:CE:7B:04:7A:E3:3C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/bf0ca975-c303-3fe2-acd5-fa91d979f203.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 74.125.125.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:61:6d:96:05:64:2c:92:92:30:e1:b4:4f:63:93:4b:48:c0: 7e:5c:fb:0e:c8:01:4a:5e:e3:6e:39:ac:94:dd:2b:74:ed:31: d4:43:49:1b:6c:3c:f1:ca:26:c4:27:65:ec:69:b5:11:6b:29: 9c:0d:23:c5:6b:8b:fa:87:c5:79:ca:d2:77:15:c5:97:bd:74: 91:9b:4c:f5:80:9d:bb:fb:94:98:61:f2:f5:04:26:6c:15:77: 4a:c8:45:bd:fd:1e:83:46:f0:cf:e1:df:77:c6:f3:98:ab:f6: 94:5b:5b:19:bf:58:96:d0:75:81:49:24:b2:7b:b1:6d:eb:cd: d0:ea:30:07:4f:9b:cd:5d:1a:95:a2:76:bd:d2:26:28:cc:c1: 62:c1:a6:40:d0:8c:b4:53:55:06:b4:d6:10:ea:de:2f:dc:f5: a6:2f:f7:a9:ff:6a:6a:30:f5:7a:88:3a:1d:5d:e1:f9:8b:f3: f8:55:d9:cd:22:01:e7:66:d0:d4:7c:0e:54:4b:01:0d:bf:61: 7b:71:06:da:d7:31:a4:78:7f:c4:e6:d0:f7:fd:75:6b:41:bd: eb:b9:bc:3f:ba:6d:ae:a8:52:d9:88:40:35:2a:bb:6d:0b:8c: 34:d3:55:20:a3:de:ef:05:f4:39:24:8c:a8:74:67:75:89:5c: 74:85:b8:1c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4eRGpNmVW980NXjIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDYwOTIxMDAxMloXDTI2MDkwNzIxMDAxMlowLzEtMCsGA1UEAxMk NGZiMGFkMzAtNWFhZC00MTk5LTgyNmEtMmIxOTZmNGViYzA2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhmrofZl0Cmi4uB+cpqeJVZ8GHJGUQoJA2rEN +2bUAjuLeLeRiYnRFWMcYSVzpuwh3KleBS1HZ0KRCgn+WjA91pGKwMgB7+9YhbNN AZrEfaOSyRW5UJgRV15sFM+ZdYco/qczTEx+nX2A5iJ6OZokEZVKyEv8F2LajTj3 fOO6ZmhRfhkvnpLCT6MvvRP3MTEfoNFXIjjmYkaJgYg8pixP0tVIGN3rs7uqsWDT ygqFJJELCUl6P0WkPBPKIRiSMSbCNZVa8if+xq9LKPGy8W4/8lW0G3jqG5MLMqHQ LZ1cO08QH0zOFpdF2MO5FjF841inlP6ecmuKNDZRYy1ArVrU9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN+lD+xPqf8c25kYlknmznsEeuM8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYmYwY2E5NzUtYzMwMy0z ZmUyLWFjZDUtZmE5MWQ5NzlmMjAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASn19MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADlhbZYFZCySkjDhtE9jk0tIwH5c+w7IAUpe4245rJTdK3TtMdRDSRts PPHKJsQnZexptRFrKZwNI8Vri/qHxXnK0ncVxZe9dJGbTPWAnbv7lJhh8vUEJmwV d0rIRb39HoNG8M/h33fG85ir9pRbWxm/WJbQdYFJJLJ7sW3rzdDqMAdPm81dGpWi dr3SJijMwWLBpkDQjLRTVQa01hDq3i/c9aYv96n/amow9XqIOh1d4fmL8/hV2c0i Aedm0NR8DlRLAQ2/YXtxBtrXMaR4f8Tm0Pf9dWtBveu5vD+6ba6oUtmIQDUqu20L jDTTVSCj3u8F9DkkjKh0Z3WJXHSFuBw= -----END CERTIFICATE-----Generated at Sat Jun 13 09:20:19 2026 by rpki-client