$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/fd4a1de0-e8ce-3db0-a13b-6fc62bc5a392.roa File: fd4a1de0-e8ce-3db0-a13b-6fc62bc5a392.roa (raw, json) Hash identifier: lO3VWUd+rRNb64ycBMEyGa/jcdgFCMhRmkeVB+IwlIs= Subject key identifier: 93:AA:FC:E7:1B:8B:95:F0:93:4B:F4:6A:7A:67:26:3A:35:3A:F0:A9 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584F4C3D96A7136E9E6395A25E80 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/fd4a1de0-e8ce-3db0-a13b-6fc62bc5a392.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 15169 IP address blocks: 74.125.196.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Nov 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:96:a7:13:6e:9e:63:95:a2:5e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=984fb635-6df6-4a5a-bced-9ffdd22592dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:b4:62:da:86:16:c5:fa:de:a3:e8:96:4e:af: 68:f9:5c:10:6c:a2:0c:1e:dd:de:1e:c9:bb:41:e7: 72:d4:6f:26:12:bd:12:ae:fd:cb:68:7e:1d:32:90: cd:2a:53:c3:de:45:af:06:d5:61:d3:a9:8d:5f:0f: ec:f7:5b:64:ff:55:43:f1:24:d2:73:9c:89:69:08: 80:80:a8:1b:8b:8b:ca:1a:50:d7:79:84:e7:f7:a2: 60:47:e6:c0:43:7c:62:e9:16:cd:81:ef:77:e3:93: 2a:d0:49:8e:bd:b5:13:c3:59:89:c2:ef:db:d7:c4: 0e:4f:6a:e0:e9:ec:b9:92:08:de:04:10:9e:3f:21: be:62:11:d2:4e:6a:22:fd:9a:4e:e4:7a:f7:cf:30: ef:5d:cb:28:85:9a:1e:d2:50:84:8c:c7:c6:78:26: 45:0a:1f:bd:98:88:64:d8:fc:63:dd:1a:47:56:60: 35:d1:fc:63:7a:1a:c8:64:ab:b9:1e:38:ae:93:4b: 75:07:1f:75:45:d8:52:46:7b:15:74:e3:d3:5a:82: a6:fb:5b:71:bb:38:a2:4f:e1:38:18:b9:b0:a6:1f: c0:54:0e:ce:85:8b:31:d6:76:db:fc:26:9c:f1:0d: 78:03:bd:46:6d:5d:aa:45:bf:07:c2:27:9b:ed:ef: a1:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:AA:FC:E7:1B:8B:95:F0:93:4B:F4:6A:7A:67:26:3A:35:3A:F0:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/fd4a1de0-e8ce-3db0-a13b-6fc62bc5a392.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 74.125.196.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:58:4b:a3:d2:ff:96:b7:8f:fa:6a:19:a3:3a:a7:c3:d5:98: f1:7e:df:1a:4c:3e:8b:9c:53:79:7d:bd:b7:04:d8:d6:f4:dc: 99:9b:db:5e:28:c7:c2:de:2d:2b:64:42:af:d0:22:79:b9:7f: ba:27:ba:41:ea:6d:3a:fc:95:58:8c:b4:1b:20:59:18:82:37: 76:03:94:53:c6:72:b7:ff:07:71:15:d3:22:91:1c:6b:4a:58: ec:83:65:90:18:de:e4:50:05:8e:96:1a:44:2e:91:1b:4e:a0: b3:97:44:94:e7:87:57:58:20:c0:12:a0:3a:d9:c5:d1:58:44: d9:2f:06:ad:35:9a:fd:5f:f6:99:23:18:ed:22:7d:dd:37:1b: 4c:68:b3:9e:2a:2a:99:7e:f0:69:66:d2:dc:5c:9f:5e:83:1e: 6b:23:dc:d2:a2:e8:50:e6:e6:a9:60:85:ea:05:cc:3c:af:6d: 53:8c:bb:c1:91:21:3c:01:3c:0b:cd:40:b0:46:be:04:28:33: 07:8d:6b:dc:17:66:8f:49:29:dd:ff:8f:f3:10:96:61:0d:e8: 91:bf:e6:25:28:7f:10:14:32:14:65:68:b5:c5:80:fd:55:b1: 32:94:3f:40:21:3c:a2:57:35:9c:03:fc:25:48:f0:e4:c2:e4: bf:68:2b:58 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPZanE26eY5WiXoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk OTg0ZmI2MzUtNmRmNi00YTVhLWJjZWQtOWZmZGQyMjU5MmRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqrRi2oYWxfreo+iWTq9o+VwQbKIMHt3eHsm7 Qedy1G8mEr0Srv3LaH4dMpDNKlPD3kWvBtVh06mNXw/s91tk/1VD8STSc5yJaQiA gKgbi4vKGlDXeYTn96JgR+bAQ3xi6RbNge9345Mq0EmOvbUTw1mJwu/b18QOT2rg 6ey5kgjeBBCePyG+YhHSTmoi/ZpO5Hr3zzDvXcsohZoe0lCEjMfGeCZFCh+9mIhk 2Pxj3RpHVmA10fxjehrIZKu5Hjiuk0t1Bx91RdhSRnsVdOPTWoKm+1txuziiT+E4 GLmwph/AVA7OhYsx1nbb/Cac8Q14A71GbV2qRb8Hwieb7e+hjwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJOq/Ocbi5Xwk0v0anpnJjo1OvCpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZmQ0YTFkZTAtZThjZS0z ZGIwLWExM2ItNmZjNjJiYzVhMzkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASn3EMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGdYS6PS/5a3j/pqGaM6p8PVmPF+3xpMPoucU3l9vbcE2Nb03Jmb214o x8LeLStkQq/QInm5f7onukHqbTr8lViMtBsgWRiCN3YDlFPGcrf/B3EV0yKRHGtK WOyDZZAY3uRQBY6WGkQukRtOoLOXRJTnh1dYIMASoDrZxdFYRNkvBq01mv1f9pkj GO0ifd03G0xos54qKpl+8Glm0txcn16DHmsj3NKi6FDm5qlgheoFzDyvbVOMu8GR ITwBPAvNQLBGvgQoMweNa9wXZo9JKd3/j/MQlmEN6JG/5iUofxAUMhRlaLXFgP1V sTKUP0AhPKJXNZwD/CVI8OTC5L9oK1g= -----END CERTIFICATE-----Generated at Thu Nov 5 16:35:51 2026 by rpki-client