$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/17ffddb4-f9f8-380b-a246-0aaa5b4c00f3.roa File: 17ffddb4-f9f8-380b-a246-0aaa5b4c00f3.roa (raw, json) Hash identifier: T/zRJhcr0dx4GLdXZYEgz1IS0Jw/PJaJY5uGa0185kI= Subject key identifier: F0:5F:1C:D1:4F:50:0E:24:55:31:2C:67:68:49:A7:E0:7C:48:7A:41 Certificate issuer: /CN=8511b8dc-74ba-47e5-af4a-7c4e6b777d92 Certificate serial: 010D0C9F4328584E97B50209D5049DA9ADAD1FC0 Authority key identifier: D7:F3:DF:A9:F7:40:F0:2B:51:D8:42:27:F2:DC:C2:E1:DF:60:75:0E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/17ffddb4-f9f8-380b-a246-0aaa5b4c00f3.roa Signing time: Thu 23 Jul 2026 09:00:11 +0000 ROA not before: Thu 23 Jul 2026 09:00:11 +0000 ROA not after: Wed 21 Oct 2026 09:00:11 +0000 asID: 4540 IP address blocks: 74.221.16.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:97:b5:02:09:d5:04:9d:a9:ad:ad:1f:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8511b8dc-74ba-47e5-af4a-7c4e6b777d92 Validity Not Before: Jul 23 09:00:11 2026 GMT Not After : Oct 21 09:00:11 2026 GMT Subject: CN=db7a0b7d-a5a0-4768-9696-644a8a433737 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:4a:8c:cb:3c:69:ad:5b:39:d4:d0:23:e0:b4: 8f:86:00:0a:73:50:65:76:98:36:3c:7d:72:74:b6: 2a:19:b8:38:6c:07:ee:4d:3a:c1:62:93:47:25:1c: 8c:1e:1b:53:f7:69:cb:73:c4:6c:db:b2:de:d3:45: 06:c4:6f:22:c3:f0:bc:32:0c:ab:31:53:d3:68:e7: 1e:ad:28:e5:77:67:b3:7f:84:c7:fd:a3:85:89:a4: c1:1b:8d:2f:ad:15:6b:4a:30:21:79:2a:ea:d0:c0: 22:a2:70:81:1c:6c:a4:01:cf:9e:db:d2:68:cd:00: a8:0b:d8:9b:a5:e8:5e:b0:f0:eb:4a:f4:75:31:c9: ce:21:3b:1d:e1:f9:f7:4e:fa:c3:77:c6:ca:f6:03: b8:7b:96:f1:7f:34:bf:ef:c8:49:c6:f4:58:5a:e3: b2:ce:bd:9e:33:8e:01:32:f8:97:33:4c:17:3b:91: 07:c5:82:2b:d1:5b:3c:25:66:48:75:41:dc:ca:26: d1:50:8a:35:0c:a0:3a:03:b1:cb:5d:72:b7:4e:f6: 0b:30:42:49:5f:6b:d8:60:2f:a1:86:3f:c9:fd:89: bf:9f:58:d1:47:76:b1:2f:f9:ad:c6:af:1c:68:b0: a3:5d:60:84:9b:5f:65:79:b9:8c:f6:c9:35:b1:6c: a3:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:5F:1C:D1:4F:50:0E:24:55:31:2C:67:68:49:A7:E0:7C:48:7A:41 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/17ffddb4-f9f8-380b-a246-0aaa5b4c00f3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.crl X509v3 Authority Key Identifier: keyid:D7:F3:DF:A9:F7:40:F0:2B:51:D8:42:27:F2:DC:C2:E1:DF:60:75:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer sbgp-ipAddrBlock: critical IPv4: 74.221.16.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:98:39:84:86:2c:6d:5a:17:8a:3a:af:ee:1d:24:de:a1:ff: de:9e:70:f1:f9:f4:05:3c:17:55:4f:66:72:44:01:e1:14:a4: 52:cb:5e:e8:bd:8f:60:0d:20:d6:2c:7c:0b:11:b2:ed:92:1f: 8b:62:61:f2:6f:a6:33:80:c4:b1:54:f2:ca:a9:c7:b3:79:3c: 97:ac:1f:ad:b7:7f:78:4b:c1:f8:e3:53:2c:d5:35:1c:70:4f: a3:e7:f8:b7:10:71:96:db:cf:64:db:48:1f:80:2b:6a:84:0e: f5:0f:a8:65:36:0e:51:7d:f3:0e:8b:46:f4:b6:1a:24:03:78: f7:9d:6f:e3:2b:53:66:b7:5e:5d:46:53:eb:5a:34:c5:35:83: d2:39:91:1d:af:a8:54:c0:b0:fd:a0:68:e2:45:24:bc:5e:54: 6e:16:21:cc:71:33:32:0b:cb:a5:a6:8d:a7:77:cb:be:8b:fe: 2a:80:54:38:40:db:ad:ad:cb:b3:84:7e:05:88:0a:eb:04:29: 1f:6f:db:49:04:24:18:5a:cf:fd:97:43:45:12:eb:e6:a8:af: 6a:a8:9e:f4:48:40:a9:ec:ef:31:04:88:8f:86:71:17:60:b6: 5d:bd:8f:88:83:f9:f1:7a:26:dd:c2:84:6b:f2:78:e8:b7:71: 39:cc:6d:86 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6XtQIJ1QSdqa2tH8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODUxMWI4ZGMtNzRiYS00N2U1LWFmNGEtN2M0ZTZiNzc3 ZDkyMB4XDTI2MDcyMzA5MDAxMVoXDTI2MTAyMTA5MDAxMVowLzEtMCsGA1UEAxMk ZGI3YTBiN2QtYTVhMC00NzY4LTk2OTYtNjQ0YThhNDMzNzM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkEqMyzxprVs51NAj4LSPhgAKc1Bldpg2PH1y dLYqGbg4bAfuTTrBYpNHJRyMHhtT92nLc8Rs27Le00UGxG8iw/C8MgyrMVPTaOce rSjld2ezf4TH/aOFiaTBG40vrRVrSjAheSrq0MAionCBHGykAc+e29JozQCoC9ib pehesPDrSvR1McnOITsd4fn3TvrDd8bK9gO4e5bxfzS/78hJxvRYWuOyzr2eM44B MviXM0wXO5EHxYIr0Vs8JWZIdUHcyibRUIo1DKA6A7HLXXK3TvYLMEJJX2vYYC+h hj/J/Ym/n1jRR3axL/mtxq8caLCjXWCEm19lebmM9sk1sWyj8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPBfHNFPUA4kVTEsZ2hJp+B8SHpBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS84NTEx YjhkYy03NGJhLTQ3ZTUtYWY0YS03YzRlNmI3NzdkOTIvMTdmZmRkYjQtZjlmOC0z ODBiLWEyNDYtMGFhYTViNGMwMGYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvODUxMWI4ZGMtNzRiYS00N2U1LWFm NGEtN2M0ZTZiNzc3ZDkyLzg1MTFiOGRjLTc0YmEtNDdlNS1hZjRhLTdjNGU2Yjc3 N2Q5Mi5jcmwwHwYDVR0jBBgwFoAU1/PfqfdA8CtR2EIn8tzC4d9gdQ4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS84NTExYjhkYy03NGJhLTQ3ZTUtYWY0YS03YzRl NmI3NzdkOTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDSt0QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAISYOYSGLG1aF4o6r+4dJN6h/96ecPH59AU8F1VPZnJEAeEUpFLLXui9 j2ANINYsfAsRsu2SH4tiYfJvpjOAxLFU8sqpx7N5PJesH623f3hLwfjjUyzVNRxw T6Pn+LcQcZbbz2TbSB+AK2qEDvUPqGU2DlF98w6LRvS2GiQDePedb+MrU2a3Xl1G U+taNMU1g9I5kR2vqFTAsP2gaOJFJLxeVG4WIcxxMzILy6Wmjad3y76L/iqAVDhA 262ty7OEfgWICusEKR9v20kEJBhaz/2XQ0US6+aor2qonvRIQKns7zEEiI+GcRdg tl29j4iD+fF6Jt3ChGvyeOi3cTnMbYY= -----END CERTIFICATE-----Generated at Fri Jul 24 02:12:15 2026 by rpki-client