$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/f23eb91b-fe9f-397f-a93b-4ba8e9d79e63.roa File: f23eb91b-fe9f-397f-a93b-4ba8e9d79e63.roa (raw, json) Hash identifier: lVa5d3nYe+OLfWF0rvXAgfKZKJOeBa41z2e29FBa1FE= Subject key identifier: 17:37:43:32:6E:F4:8D:41:D0:39:37:41:78:11:EC:A9:84:C3:5B:80 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584F4C3DD6F61F52044E15C95260 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/f23eb91b-fe9f-397f-a93b-4ba8e9d79e63.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 15169 IP address blocks: 74.125.124.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Nov 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:d6:f6:1f:52:04:4e:15:c9:52:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=631108b0-a8a5-4ec4-9fed-f8e01c70dc00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:b3:ff:07:41:5a:17:01:aa:23:82:00:bb:b5: 79:92:8d:41:6e:dd:3b:b3:53:c6:0c:0f:98:d5:cd: f2:7e:db:76:bb:77:8e:95:fb:6d:46:8c:dd:74:89: d1:1c:25:e0:47:27:2a:74:b9:5f:b9:36:eb:4b:7c: ea:ae:15:e2:f5:49:f9:30:9a:b3:91:64:d8:0c:ba: 81:2b:4b:47:65:5b:c5:7d:8f:3b:e0:24:c0:55:87: 6f:68:9a:d0:59:21:ae:77:98:0c:0a:74:48:6d:60: 08:99:2f:4b:79:ce:ee:b8:6b:20:61:01:67:71:a9: 5b:31:4d:ab:2c:77:d5:8c:fa:08:63:e5:82:87:78: a6:fe:96:5d:20:50:5b:4f:28:3a:0d:43:4d:ae:fc: 9f:50:82:60:ad:e1:ca:20:2b:9d:33:88:b4:17:b9: 39:a9:e8:f5:58:cc:b8:a1:6e:e2:b4:32:b0:c9:26: f9:81:9b:4e:47:c0:d0:6a:f8:dc:7a:72:2b:23:d2: 2e:71:41:de:e9:ea:2f:99:07:e9:ea:24:e0:b1:60: 97:ce:33:ef:36:0d:93:f0:3a:31:a5:2f:38:5d:13: bb:eb:10:31:c0:2b:dd:ec:68:2a:17:66:50:73:e4: 34:b0:62:ee:e3:a1:14:51:c2:13:01:20:a7:b3:43: 84:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:37:43:32:6E:F4:8D:41:D0:39:37:41:78:11:EC:A9:84:C3:5B:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/f23eb91b-fe9f-397f-a93b-4ba8e9d79e63.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 74.125.124.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:4e:83:22:8a:c0:30:2e:06:da:5c:f1:dc:12:f2:ec:43:55: 6d:2a:6a:95:25:5c:95:e2:c5:53:1a:e3:86:e8:72:28:dd:fc: 76:07:fb:07:0b:df:0e:bd:48:ee:54:ff:c0:fa:e2:81:c9:28: 35:83:20:74:8c:a0:69:50:b8:ff:85:65:65:a7:06:0a:f9:2c: f7:50:59:cb:a9:af:9e:15:5e:56:39:f9:ef:db:82:70:9d:f1: f1:0e:2a:ed:cb:06:e6:e4:30:5b:bc:7c:d7:6d:48:45:76:b2: c5:53:58:11:2f:02:c1:d4:83:2c:2c:41:b5:88:e1:6b:b7:e5: 40:df:ac:72:55:12:db:45:41:e6:17:79:8b:39:d6:07:6c:68: ba:2a:73:e5:d3:54:33:c2:7b:83:ee:a1:41:b9:bf:9a:6f:66: 52:2d:ac:3e:04:18:7e:64:ef:72:21:bc:21:b9:1e:0f:40:d3: 01:ae:31:96:50:fb:e3:a3:b6:bd:52:ba:b8:f0:2e:53:e8:c8: eb:d1:c4:47:95:78:75:bc:08:71:b2:e8:fb:0d:ec:16:21:c0: af:01:8e:37:f2:ac:43:e7:8a:eb:61:d5:0a:70:d1:ad:e1:7f: 4b:74:7e:51:c3:0e:6d:9d:68:ae:26:83:20:de:9a:47:a5:b6: 8b:0b:ca:34 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPdb2H1IEThXJUmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk NjMxMTA4YjAtYThhNS00ZWM0LTlmZWQtZjhlMDFjNzBkYzAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmrP/B0FaFwGqI4IAu7V5ko1Bbt07s1PGDA+Y 1c3yftt2u3eOlfttRozddInRHCXgRycqdLlfuTbrS3zqrhXi9Un5MJqzkWTYDLqB K0tHZVvFfY874CTAVYdvaJrQWSGud5gMCnRIbWAImS9Lec7uuGsgYQFncalbMU2r LHfVjPoIY+WCh3im/pZdIFBbTyg6DUNNrvyfUIJgreHKICudM4i0F7k5qej1WMy4 oW7itDKwySb5gZtOR8DQavjcenIrI9IucUHe6eovmQfp6iTgsWCXzjPvNg2T8Dox pS84XRO76xAxwCvd7GgqF2ZQc+Q0sGLu46EUUcITASCns0OE5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBc3QzJu9I1B0Dk3QXgR7KmEw1uAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZjIzZWI5MWItZmU5Zi0z OTdmLWE5M2ItNGJhOGU5ZDc5ZTYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASn18MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAChOgyKKwDAuBtpc8dwS8uxDVW0qapUlXJXixVMa44bocijd/HYH+wcL 3w69SO5U/8D64oHJKDWDIHSMoGlQuP+FZWWnBgr5LPdQWcupr54VXlY5+e/bgnCd 8fEOKu3LBubkMFu8fNdtSEV2ssVTWBEvAsHUgywsQbWI4Wu35UDfrHJVEttFQeYX eYs51gdsaLoqc+XTVDPCe4PuoUG5v5pvZlItrD4EGH5k73IhvCG5Hg9A0wGuMZZQ ++Ojtr1SurjwLlPoyOvRxEeVeHW8CHGy6PsN7BYhwK8BjjfyrEPniuth1Qpw0a3h f0t0flHDDm2daK4mgyDemkeltosLyjQ= -----END CERTIFICATE-----Generated at Thu Nov 5 18:56:09 2026 by rpki-client