$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/17ffddb4-f9f8-380b-a246-0aaa5b4c00f3.roa File: 17ffddb4-f9f8-380b-a246-0aaa5b4c00f3.roa (raw, json) Hash identifier: EdoLsvKejm0it9vdGCv58euy7jg0+t4dycz9i4TUaFo= Subject key identifier: C9:C5:3B:5F:0D:AB:49:47:11:14:73:41:39:8F:4A:2D:2F:5E:31:A8 Certificate issuer: /CN=8511b8dc-74ba-47e5-af4a-7c4e6b777d92 Certificate serial: 010D0C9F4328584A34801C19EBBF2FCAE4422C80 Authority key identifier: D7:F3:DF:A9:F7:40:F0:2B:51:D8:42:27:F2:DC:C2:E1:DF:60:75:0E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/17ffddb4-f9f8-380b-a246-0aaa5b4c00f3.roa Signing time: Mon 16 Jun 2025 01:00:49 +0000 ROA not before: Mon 16 Jun 2025 01:00:49 +0000 ROA not after: Sun 14 Sep 2025 01:00:49 +0000 asID: 4540 IP address blocks: 74.221.16.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:34:80:1c:19:eb:bf:2f:ca:e4:42:2c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8511b8dc-74ba-47e5-af4a-7c4e6b777d92 Validity Not Before: Jun 16 01:00:49 2025 GMT Not After : Sep 14 01:00:49 2025 GMT Subject: CN=dc14f366-bc42-40bf-a90e-185f97afd75a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:df:5c:62:ef:f3:3f:85:80:3f:0c:38:11:ce: 90:fd:ee:6f:04:8d:4a:8b:b2:0e:49:92:09:d3:0d: 3f:ee:3a:c2:b1:e0:2f:b0:73:75:a0:bd:c5:ab:e1: 1a:e8:fa:08:df:6f:4b:ee:7e:75:63:c7:5b:5a:49: 6a:13:22:ef:0a:c1:e9:f8:1e:b4:49:6b:e9:74:39: 78:25:87:80:db:31:27:6d:44:0f:28:79:1f:15:18: 32:23:e6:59:17:47:1e:4b:ad:6b:cf:87:dc:4b:fa: db:dd:ac:5f:bc:d1:70:5f:f9:d7:61:7f:ff:ad:20: 02:c7:0f:15:1a:1e:16:38:ff:c2:a4:fa:d5:ac:53: 09:eb:e1:b2:ae:1c:cc:8c:cd:81:24:a6:4b:b4:fa: 4f:a0:da:83:b9:3b:cf:06:eb:2f:37:54:a7:d8:2d: f6:d0:5d:91:ea:92:4e:e3:57:27:bb:92:51:2f:08: 3c:9e:b0:87:a2:42:64:c6:dd:05:87:30:51:4d:be: ec:b9:d2:26:04:18:b0:59:04:26:b7:8d:8c:b0:ad: 27:19:fd:f8:bc:df:f7:98:18:f6:92:59:3a:ec:cd: ab:60:c7:16:fa:5e:98:c7:64:1b:94:de:15:c6:85: cd:ef:29:2d:8d:42:f3:31:12:8f:84:a8:dd:de:ae: 3f:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:C5:3B:5F:0D:AB:49:47:11:14:73:41:39:8F:4A:2D:2F:5E:31:A8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/17ffddb4-f9f8-380b-a246-0aaa5b4c00f3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.crl X509v3 Authority Key Identifier: keyid:D7:F3:DF:A9:F7:40:F0:2B:51:D8:42:27:F2:DC:C2:E1:DF:60:75:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer sbgp-ipAddrBlock: critical IPv4: 74.221.16.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ac:48:84:f4:ca:68:b0:6c:13:66:00:81:78:cf:00:a7:20:8b: 37:ca:0a:2d:be:0d:de:ba:bc:1d:e2:a8:48:00:3b:89:8c:91: 44:14:5f:00:00:98:1f:26:c3:87:a5:c9:be:95:00:6e:20:66: 96:24:e2:0d:d5:bd:89:85:54:b9:cf:f2:fa:9b:2c:b8:1b:f0: 0c:08:e6:c5:03:00:7b:d4:d9:31:52:b5:67:8d:2b:d4:b3:9c: 57:14:77:0f:8c:d3:e5:7a:b3:ee:be:8f:76:75:2d:28:43:0a: 75:63:cc:17:8e:17:77:6c:dc:2b:17:9b:90:ae:2f:68:fa:60: de:17:c6:d1:b9:5d:5f:7a:99:70:b4:fe:43:f3:32:02:77:9d: 62:f6:37:c0:bc:2f:ed:3e:85:ee:ff:71:99:e5:4f:21:d9:00: 07:fc:f7:a3:e7:82:8d:81:3b:7b:5e:46:84:ed:a9:59:0d:25: 20:6a:94:09:14:ed:c0:2a:0b:07:0d:2f:41:67:53:b8:90:50: 70:d7:10:34:11:8b:3c:0b:5e:45:67:e0:71:6d:54:8f:fd:b2: 47:7d:a4:1c:18:94:31:c7:9e:7c:c8:54:c2:1e:cb:02:32:99: 0a:82:45:e6:38:ad:26:02:da:5c:6d:76:1c:a7:38:fe:fb:b5: ff:ed:9a:d6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo0gBwZ678vyuRCLIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODUxMWI4ZGMtNzRiYS00N2U1LWFmNGEtN2M0ZTZiNzc3 ZDkyMB4XDTI1MDYxNjAxMDA0OVoXDTI1MDkxNDAxMDA0OVowLzEtMCsGA1UEAxMk ZGMxNGYzNjYtYmM0Mi00MGJmLWE5MGUtMTg1Zjk3YWZkNzVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5N9cYu/zP4WAPww4Ec6Q/e5vBI1Ki7IOSZIJ 0w0/7jrCseAvsHN1oL3Fq+Ea6PoI329L7n51Y8dbWklqEyLvCsHp+B60SWvpdDl4 JYeA2zEnbUQPKHkfFRgyI+ZZF0ceS61rz4fcS/rb3axfvNFwX/nXYX//rSACxw8V Gh4WOP/CpPrVrFMJ6+GyrhzMjM2BJKZLtPpPoNqDuTvPBusvN1Sn2C320F2R6pJO 41cnu5JRLwg8nrCHokJkxt0FhzBRTb7sudImBBiwWQQmt42MsK0nGf34vN/3mBj2 klk67M2rYMcW+l6Yx2QblN4VxoXN7yktjULzMRKPhKjd3q4/2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMnFO18Nq0lHERRzQTmPSi0vXjGoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS84NTEx YjhkYy03NGJhLTQ3ZTUtYWY0YS03YzRlNmI3NzdkOTIvMTdmZmRkYjQtZjlmOC0z ODBiLWEyNDYtMGFhYTViNGMwMGYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvODUxMWI4ZGMtNzRiYS00N2U1LWFm NGEtN2M0ZTZiNzc3ZDkyLzg1MTFiOGRjLTc0YmEtNDdlNS1hZjRhLTdjNGU2Yjc3 N2Q5Mi5jcmwwHwYDVR0jBBgwFoAU1/PfqfdA8CtR2EIn8tzC4d9gdQ4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS84NTExYjhkYy03NGJhLTQ3ZTUtYWY0YS03YzRl NmI3NzdkOTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDSt0QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKxIhPTKaLBsE2YAgXjPAKcgizfKCi2+Dd66vB3iqEgAO4mMkUQUXwAA mB8mw4elyb6VAG4gZpYk4g3VvYmFVLnP8vqbLLgb8AwI5sUDAHvU2TFStWeNK9Sz nFcUdw+M0+V6s+6+j3Z1LShDCnVjzBeOF3ds3CsXm5CuL2j6YN4XxtG5XV96mXC0 /kPzMgJ3nWL2N8C8L+0+he7/cZnlTyHZAAf896Pngo2BO3teRoTtqVkNJSBqlAkU 7cAqCwcNL0FnU7iQUHDXEDQRizwLXkVn4HFtVI/9skd9pBwYlDHHnnzIVMIeywIy mQqCReY4rSYC2lxtdhynOP77tf/tmtY= -----END CERTIFICATE-----Generated at Mon Jun 30 04:05:03 2025 by rpki-client