$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/17ffddb4-f9f8-380b-a246-0aaa5b4c00f3.roa File: 17ffddb4-f9f8-380b-a246-0aaa5b4c00f3.roa (raw, json) Hash identifier: PsccbElNeAXNhDH6leZMHGWBjc2OJTDJZcyDgG7Qslg= Subject key identifier: 4D:62:59:80:B9:FC:71:04:FD:C8:C4:FC:B0:06:8A:0E:40:0F:57:F0 Certificate issuer: /CN=8511b8dc-74ba-47e5-af4a-7c4e6b777d92 Certificate serial: 010D0C9F4328584F3A17CF3450E28B96013BCE80 Authority key identifier: D7:F3:DF:A9:F7:40:F0:2B:51:D8:42:27:F2:DC:C2:E1:DF:60:75:0E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/17ffddb4-f9f8-380b-a246-0aaa5b4c00f3.roa Signing time: Sat 19 Sep 2026 13:00:12 +0000 ROA not before: Sat 19 Sep 2026 13:00:12 +0000 ROA not after: Fri 18 Dec 2026 14:00:12 +0000 asID: 4540 IP address blocks: 74.221.16.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3a:17:cf:34:50:e2:8b:96:01:3b:ce:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8511b8dc-74ba-47e5-af4a-7c4e6b777d92 Validity Not Before: Sep 19 13:00:12 2026 GMT Not After : Dec 18 14:00:12 2026 GMT Subject: CN=119ef412-8fae-45df-9fb0-70d692188475 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:04:06:a4:68:93:be:d9:f8:2d:e2:9a:65:e7: 09:9e:0c:be:b3:d5:25:66:16:49:d9:a5:14:a9:10: 1d:52:5c:ec:7e:fb:5d:c9:db:73:69:ff:20:4e:68: 0d:86:d7:5b:25:da:6b:33:06:a4:5f:c1:40:24:a7: e4:be:19:9e:67:77:7e:4a:12:aa:e3:43:aa:0d:87: 64:94:7f:1d:81:3f:f6:6b:97:79:c0:ce:47:0a:b2: 48:74:7d:fd:b2:97:ce:08:2e:2e:26:b8:5c:6e:69: 09:0c:c2:e4:80:c1:13:f1:a8:fc:34:08:68:0e:41: af:69:51:e2:e7:cc:a1:7c:33:57:75:a7:14:e0:25: 53:05:08:0e:5b:38:fd:0e:20:44:78:79:00:53:35: 39:1f:49:7e:5a:17:04:a6:bb:3b:6c:1e:2c:d8:17: 66:ab:14:2a:e4:b6:29:2c:a9:d3:b8:cd:8d:a8:00: 76:ea:2e:e1:d6:95:68:a9:2d:33:de:e9:98:80:90: a4:8f:d7:61:5f:06:00:51:56:03:d1:2c:d3:90:1a: 56:94:bd:a8:50:e8:d8:c8:71:38:c4:a9:24:b1:b5: 7f:59:62:96:90:df:9b:c9:46:c7:a0:37:29:fd:2b: 45:4d:58:b7:50:bc:1d:77:d8:dc:01:8b:de:b7:df: a1:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:62:59:80:B9:FC:71:04:FD:C8:C4:FC:B0:06:8A:0E:40:0F:57:F0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/17ffddb4-f9f8-380b-a246-0aaa5b4c00f3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.crl X509v3 Authority Key Identifier: keyid:D7:F3:DF:A9:F7:40:F0:2B:51:D8:42:27:F2:DC:C2:E1:DF:60:75:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer sbgp-ipAddrBlock: critical IPv4: 74.221.16.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:11:e1:a3:85:5b:a1:6e:84:b1:18:b0:df:9a:10:77:c0:6b: 9c:19:a0:b9:0d:53:95:74:61:d1:1e:b5:bf:52:41:43:ad:5c: 85:fe:1f:79:f7:bf:ae:56:54:a3:d2:58:92:8f:44:9c:c6:e2: cd:f8:7f:ea:c9:c2:9f:0e:7b:44:b1:33:d4:cd:4f:9b:65:aa: ef:13:54:13:32:f3:11:1c:fc:13:34:e0:e9:3a:8a:90:92:2b: d7:2a:61:97:31:dd:3f:d8:0f:51:e1:cf:27:9d:2c:05:18:e4: e2:b5:ef:7d:3a:f1:34:2a:6b:4c:13:a3:f8:de:98:0b:5a:49: 92:01:94:31:f0:8a:f7:21:94:77:3d:c9:03:20:b4:6b:04:0c: 95:32:b7:79:cd:f5:b4:2f:c9:f8:a0:67:06:3f:b0:10:b7:f2: fd:e5:76:93:5b:e8:7d:f3:91:c0:0c:eb:f9:a7:26:69:36:eb: b5:13:c8:cf:66:23:d5:be:b2:95:f6:84:5e:c6:34:e3:7a:e7: 8f:07:e1:84:7a:33:b2:23:63:f8:7d:00:06:6f:45:a3:93:f4: 12:14:28:b2:e0:20:38:1b:1d:5a:ab:bb:35:af:a7:f1:0c:f0: c2:fb:5c:fe:6f:49:c1:41:68:56:45:fc:df:01:13:1e:f3:00: 15:b9:30:2f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE86F880UOKLlgE7zoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODUxMWI4ZGMtNzRiYS00N2U1LWFmNGEtN2M0ZTZiNzc3 ZDkyMB4XDTI2MDkxOTEzMDAxMloXDTI2MTIxODE0MDAxMlowLzEtMCsGA1UEAxMk MTE5ZWY0MTItOGZhZS00NWRmLTlmYjAtNzBkNjkyMTg4NDc1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6gQGpGiTvtn4LeKaZecJngy+s9UlZhZJ2aUU qRAdUlzsfvtdydtzaf8gTmgNhtdbJdprMwakX8FAJKfkvhmeZ3d+ShKq40OqDYdk lH8dgT/2a5d5wM5HCrJIdH39spfOCC4uJrhcbmkJDMLkgMET8aj8NAhoDkGvaVHi 58yhfDNXdacU4CVTBQgOWzj9DiBEeHkAUzU5H0l+WhcEprs7bB4s2BdmqxQq5LYp LKnTuM2NqAB26i7h1pVoqS0z3umYgJCkj9dhXwYAUVYD0SzTkBpWlL2oUOjYyHE4 xKkksbV/WWKWkN+byUbHoDcp/StFTVi3ULwdd9jcAYvet9+huQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE1iWYC5/HEE/cjE/LAGig5AD1fwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS84NTEx YjhkYy03NGJhLTQ3ZTUtYWY0YS03YzRlNmI3NzdkOTIvMTdmZmRkYjQtZjlmOC0z ODBiLWEyNDYtMGFhYTViNGMwMGYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvODUxMWI4ZGMtNzRiYS00N2U1LWFm NGEtN2M0ZTZiNzc3ZDkyLzg1MTFiOGRjLTc0YmEtNDdlNS1hZjRhLTdjNGU2Yjc3 N2Q5Mi5jcmwwHwYDVR0jBBgwFoAU1/PfqfdA8CtR2EIn8tzC4d9gdQ4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS84NTExYjhkYy03NGJhLTQ3ZTUtYWY0YS03YzRl NmI3NzdkOTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDSt0QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIsR4aOFW6FuhLEYsN+aEHfAa5wZoLkNU5V0YdEetb9SQUOtXIX+H3n3 v65WVKPSWJKPRJzG4s34f+rJwp8Oe0SxM9TNT5tlqu8TVBMy8xEc/BM04Ok6ipCS K9cqYZcx3T/YD1HhzyedLAUY5OK173068TQqa0wTo/jemAtaSZIBlDHwivchlHc9 yQMgtGsEDJUyt3nN9bQvyfigZwY/sBC38v3ldpNb6H3zkcAM6/mnJmk267UTyM9m I9W+spX2hF7GNON6548H4YR6M7IjY/h9AAZvRaOT9BIUKLLgIDgbHVqruzWvp/EM 8ML7XP5vScFBaFZF/N8BEx7zABW5MC8= -----END CERTIFICATE-----Generated at Sat Sep 26 12:15:50 2026 by rpki-client