$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/e3915931-4b98-37d0-9c3f-412e30a2485a.roa File: e3915931-4b98-37d0-9c3f-412e30a2485a.roa (raw, json) Hash identifier: zi4jv1Kj+fHhSkJq9daq7RVGhP4yy8hQ+xo1WmWJn88= Subject key identifier: 8C:EF:19:7C:1F:AE:64:44:06:B2:E5:8B:11:8D:28:6C:69:69:FB:8A Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584E08663AAAF33B1D4E576AE980 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/e3915931-4b98-37d0-9c3f-412e30a2485a.roa Signing time: Tue 02 Jun 2026 01:00:10 +0000 ROA not before: Tue 02 Jun 2026 01:00:10 +0000 ROA not after: Mon 31 Aug 2026 01:00:10 +0000 asID: 15169 IP address blocks: 74.125.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:08:66:3a:aa:f3:3b:1d:4e:57:6a:e9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jun 2 01:00:10 2026 GMT Not After : Aug 31 01:00:10 2026 GMT Subject: CN=ffb21b79-dece-494c-b919-70b8d1deea80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:6b:9b:45:19:6a:40:08:d6:ae:bc:39:fe:89: 08:d1:a5:3e:b6:c1:64:a7:97:77:b4:49:9a:d9:b4: 35:92:51:81:4d:2e:5f:98:2a:6d:e6:ec:ac:c4:a5: c6:22:01:26:71:68:57:35:6b:da:09:9a:d8:8e:cc: e3:f0:c8:48:18:06:e9:ca:45:dd:cc:6b:54:63:e1: d9:a0:f7:5a:37:37:f6:8b:ba:24:b5:79:0d:27:86: 34:4a:9d:89:98:2a:94:4a:d7:b7:a7:2a:83:58:be: 27:59:41:8a:b4:63:6a:42:76:fe:29:09:df:7c:b5: 4e:ec:d8:01:e9:3d:93:ff:7f:d0:2c:c3:d7:41:65: 66:8e:e2:0e:8d:43:60:ce:4b:66:71:43:37:0d:ad: da:b8:2f:05:49:81:85:3f:f4:e4:f8:ae:a2:cf:40: 6a:e7:d9:80:30:81:06:e3:a6:57:eb:2c:6b:bb:a0: 15:40:cf:de:95:50:12:6c:bf:4b:5e:ab:f0:3f:07: 8f:c7:d3:ca:00:c5:0d:d6:2b:6a:e9:a2:3b:ba:7d: ba:c4:a5:9f:db:e3:1a:3a:72:c1:4c:5b:c6:1a:98: 4b:a9:74:ff:18:61:fc:cd:d1:c8:a0:4b:95:eb:ef: 2d:27:7d:60:1b:83:77:68:46:64:40:7f:ae:c4:c0: 75:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:EF:19:7C:1F:AE:64:44:06:B2:E5:8B:11:8D:28:6C:69:69:FB:8A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/e3915931-4b98-37d0-9c3f-412e30a2485a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 74.125.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 98:02:6c:16:c2:ab:80:71:da:c1:9f:3c:a4:b6:05:fa:d2:2d: 81:e7:a6:91:d4:23:83:4d:aa:35:27:90:14:34:10:78:11:af: 1b:26:59:54:80:07:7f:99:01:50:d4:49:f7:47:32:80:22:c3: 3b:d1:9f:14:32:9e:f1:c6:19:29:f0:09:ae:91:18:b1:87:8b: 8d:b6:ce:27:b7:cf:b7:99:3e:ef:e2:e9:5b:f6:d0:1c:b5:1a: d2:6c:0c:83:5b:b2:d9:0c:30:bb:57:3a:a0:3c:fb:d0:68:3f: 88:96:ef:58:03:78:0c:7b:ac:36:a7:50:d0:b8:31:d6:c0:01: 78:94:a6:37:09:b4:35:48:bb:40:19:a5:1a:48:82:4a:b2:89: db:91:e1:4a:84:6c:81:58:ea:c8:c2:3b:bd:e9:87:b0:b6:6d: 28:0c:4b:d0:5b:63:c6:ed:00:a0:51:af:fd:3b:9f:78:0f:8c: 87:3f:4d:5d:c6:68:57:bb:8d:75:9f:e3:89:c6:ab:9a:26:e0: f8:14:ef:60:02:b4:33:0b:36:ed:ed:55:e0:44:c6:dd:ba:2b: 66:5f:fe:ec:f5:5a:94:c0:86:6d:25:e4:a1:c7:cd:69:87:26: 74:4d:9a:93:a0:9b:9e:48:81:d9:8e:5e:ac:07:09:3b:a7:a0: 29:8b:5f:d2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4IZjqq8zsdTldq6YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDYwMjAxMDAxMFoXDTI2MDgzMTAxMDAxMFowLzEtMCsGA1UEAxMk ZmZiMjFiNzktZGVjZS00OTRjLWI5MTktNzBiOGQxZGVlYTgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr2ubRRlqQAjWrrw5/okI0aU+tsFkp5d3tEma 2bQ1klGBTS5fmCpt5uysxKXGIgEmcWhXNWvaCZrYjszj8MhIGAbpykXdzGtUY+HZ oPdaNzf2i7oktXkNJ4Y0Sp2JmCqUSte3pyqDWL4nWUGKtGNqQnb+KQnffLVO7NgB 6T2T/3/QLMPXQWVmjuIOjUNgzktmcUM3Da3auC8FSYGFP/Tk+K6iz0Bq59mAMIEG 46ZX6yxru6AVQM/elVASbL9LXqvwPwePx9PKAMUN1itq6aI7un26xKWf2+MaOnLB TFvGGphLqXT/GGH8zdHIoEuV6+8tJ31gG4N3aEZkQH+uxMB1LQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIzvGXwfrmREBrLlixGNKGxpafuKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZTM5MTU5MzEtNGI5OC0z N2QwLTljM2YtNDEyZTMwYTI0ODVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASn2AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJgCbBbCq4Bx2sGfPKS2BfrSLYHnppHUI4NNqjUnkBQ0EHgRrxsmWVSA B3+ZAVDUSfdHMoAiwzvRnxQynvHGGSnwCa6RGLGHi422zie3z7eZPu/i6Vv20By1 GtJsDINbstkMMLtXOqA8+9BoP4iW71gDeAx7rDanUNC4MdbAAXiUpjcJtDVIu0AZ pRpIgkqyiduR4UqEbIFY6sjCO73ph7C2bSgMS9BbY8btAKBRr/07n3gPjIc/TV3G aFe7jXWf44nGq5om4PgU72ACtDMLNu3tVeBExt26K2Zf/uz1WpTAhm0l5KHHzWmH JnRNmpOgm55IgdmOXqwHCTunoCmLX9I= -----END CERTIFICATE-----Generated at Sat Jun 13 13:27:15 2026 by rpki-client