$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/cd0c675e-d5a4-3880-94ad-b6166913174b.roa File: cd0c675e-d5a4-3880-94ad-b6166913174b.roa (raw, json) Hash identifier: E97lFMSSp2DKZkIhYSaGnSgDIhwdeePzR2GqoMpgbPc= Subject key identifier: D1:58:D0:3F:16:53:AB:75:EE:9C:52:4C:06:4E:BF:AC:1A:55:2E:5D Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584F4C3D7FFBE3FA19F5F1D0FE00 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/cd0c675e-d5a4-3880-94ad-b6166913174b.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 15169 IP address blocks: 74.125.236.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Nov 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:7f:fb:e3:fa:19:f5:f1:d0:fe:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=f314cdc4-91ea-4f55-bf37-352443e79abd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:ca:5c:88:d4:e8:7a:ff:4e:ec:01:1b:6b:0f: b1:f2:16:2f:69:c4:9b:78:81:53:03:20:11:c6:66: 8e:9c:56:28:ce:4b:87:52:4f:9a:cf:24:05:8e:49: 78:cd:02:d0:93:53:1d:9d:f8:55:55:7d:cd:73:f6: 4f:69:9a:b0:f3:d7:d8:1c:f9:eb:93:87:8f:35:76: 4d:f2:00:b4:07:05:5d:6a:22:c0:f0:5c:92:57:a4: 66:f0:1b:55:e4:31:bd:a0:44:d1:dd:02:b5:5a:cd: 79:b2:3b:e5:b6:08:d7:e0:9c:9b:ab:6e:d9:2c:b5: ff:7a:21:31:7a:ca:5a:ca:0d:ce:bd:4b:c4:cc:30: 37:4b:34:fa:e1:fd:23:c6:a7:01:38:ec:b9:de:b2: da:04:18:6c:c6:47:d2:0d:44:62:60:68:f8:77:a8: a9:90:13:c6:f4:94:6a:7e:00:fa:06:c0:44:24:9d: 4f:8f:b6:e0:20:ac:8e:75:4e:e5:d9:fc:6b:61:02: ae:52:c5:91:4e:1e:ba:f4:70:2d:45:6a:db:23:1b: 9b:22:bf:c8:b6:7a:29:ed:e3:9e:4c:dc:1a:40:b0: 68:d4:4d:15:4b:26:fa:59:0a:c6:db:d9:86:8e:29: 13:2f:83:61:c9:c8:59:27:99:ab:08:6c:cb:e4:13: 4f:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:58:D0:3F:16:53:AB:75:EE:9C:52:4C:06:4E:BF:AC:1A:55:2E:5D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/cd0c675e-d5a4-3880-94ad-b6166913174b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 74.125.236.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:3d:7c:64:5c:17:fd:c0:fc:c9:a1:1f:5a:47:e8:d2:9b:b7: fc:ab:ee:3f:d4:40:6e:44:67:ec:7a:fe:83:d1:e4:59:07:73: 0e:c7:70:b4:5d:a7:54:77:ec:18:bc:71:f2:60:87:09:54:57: 4f:8b:b3:e0:6f:e1:f5:25:e6:6e:75:4d:c4:b9:fb:fe:07:d2: 80:7b:ba:97:fb:3e:96:b6:e4:92:6d:77:ea:7b:56:11:a7:80: 8c:cb:dc:0e:34:74:1e:03:e9:67:88:50:e7:c4:1e:9b:3e:c9: 61:52:30:be:b4:94:bb:5c:11:e5:a1:f4:17:6c:52:78:c4:43: da:30:70:be:47:8f:08:2f:13:ff:28:7f:f5:dc:4a:5d:d0:76: 2c:2c:a3:e3:c6:f7:ec:8d:fe:df:f3:57:7a:4f:75:07:fb:cc: 5d:92:07:e0:b4:0e:80:53:49:90:c8:ac:98:8b:2d:1f:1d:19: cf:bf:6a:7f:46:2f:03:66:c8:16:df:bf:0f:1e:01:a6:b7:48: bc:be:b3:70:89:81:b1:63:e7:dc:82:26:4c:9d:1d:2e:da:8e: 90:17:55:cd:71:f0:d3:0a:8f:91:e2:b3:6d:b1:bc:13:ee:c4: eb:f6:a9:bd:94:99:c2:82:c3:85:40:c8:26:69:8c:b7:1e:9f: 88:3f:c9:df -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPX/74/oZ9fHQ/gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk ZjMxNGNkYzQtOTFlYS00ZjU1LWJmMzctMzUyNDQzZTc5YWJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqcpciNToev9O7AEbaw+x8hYvacSbeIFTAyAR xmaOnFYozkuHUk+azyQFjkl4zQLQk1MdnfhVVX3Nc/ZPaZqw89fYHPnrk4ePNXZN 8gC0BwVdaiLA8FySV6Rm8BtV5DG9oETR3QK1Ws15sjvltgjX4Jybq27ZLLX/eiEx espayg3OvUvEzDA3SzT64f0jxqcBOOy53rLaBBhsxkfSDURiYGj4d6ipkBPG9JRq fgD6BsBEJJ1Pj7bgIKyOdU7l2fxrYQKuUsWRTh669HAtRWrbIxubIr/Itnop7eOe TNwaQLBo1E0VSyb6WQrG29mGjikTL4NhychZJ5mrCGzL5BNP9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNFY0D8WU6t17pxSTAZOv6waVS5dMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvY2QwYzY3NWUtZDVhNC0z ODgwLTk0YWQtYjYxNjY5MTMxNzRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASn3sMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFA9fGRcF/3A/MmhH1pH6NKbt/yr7j/UQG5EZ+x6/oPR5FkHcw7HcLRd p1R37Bi8cfJghwlUV0+Ls+Bv4fUl5m51TcS5+/4H0oB7upf7Ppa25JJtd+p7VhGn gIzL3A40dB4D6WeIUOfEHps+yWFSML60lLtcEeWh9BdsUnjEQ9owcL5HjwgvE/8o f/XcSl3Qdiwso+PG9+yN/t/zV3pPdQf7zF2SB+C0DoBTSZDIrJiLLR8dGc+/an9G LwNmyBbfvw8eAaa3SLy+s3CJgbFj59yCJkydHS7ajpAXVc1x8NMKj5His22xvBPu xOv2qb2UmcKCw4VAyCZpjLcen4g/yd8= -----END CERTIFICATE-----Generated at Thu Nov 5 17:27:07 2026 by rpki-client