$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/b0d886b9-49ff-3718-b905-7163e2c9f557.roa File: b0d886b9-49ff-3718-b905-7163e2c9f557.roa (raw, json) Hash identifier: iVAlfOy2M2YSCGyH1B/H5fJiL9VdHK6yBCiGVQblP8o= Subject key identifier: A7:A0:5D:02:A7:7A:C9:ED:9F:18:C6:92:A5:3B:BC:34:B7:6F:53:43 Certificate issuer: /CN=8511b8dc-74ba-47e5-af4a-7c4e6b777d92 Certificate serial: 010D0C9F4328584F3A17CF414B26B9B83919B480 Authority key identifier: D7:F3:DF:A9:F7:40:F0:2B:51:D8:42:27:F2:DC:C2:E1:DF:60:75:0E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/b0d886b9-49ff-3718-b905-7163e2c9f557.roa Signing time: Sat 19 Sep 2026 13:00:12 +0000 ROA not before: Sat 19 Sep 2026 13:00:12 +0000 ROA not after: Fri 18 Dec 2026 14:00:12 +0000 asID: 4540 IP address blocks: 74.221.24.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3a:17:cf:41:4b:26:b9:b8:39:19:b4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8511b8dc-74ba-47e5-af4a-7c4e6b777d92 Validity Not Before: Sep 19 13:00:12 2026 GMT Not After : Dec 18 14:00:12 2026 GMT Subject: CN=f1e7420c-4dee-4444-91ed-facf8ffea05e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:33:ce:5a:10:fd:55:55:e1:ce:de:bc:f0:5c: 72:3f:e6:0f:95:9d:64:6e:dc:f4:9e:ac:8b:1d:39: 8a:1f:0d:9b:a1:dd:28:eb:a3:69:c4:ed:eb:a8:1e: bc:fe:fd:26:f8:61:42:50:91:80:77:0a:23:f1:10: 7b:b8:26:61:94:fb:1f:54:77:54:c3:5e:a2:fe:01: d5:dd:1b:e1:c7:b9:35:da:5e:bb:98:2c:c6:88:2b: c7:3f:41:41:5d:2c:8e:fb:be:4e:3e:96:f9:6b:fc: fb:dd:65:73:77:f3:6e:63:2e:da:35:23:8b:bc:2c: 9b:cf:d9:a6:e9:9d:7b:99:b3:65:ef:3f:ac:4a:57: 96:95:0a:40:1a:8f:a9:a7:10:bc:fd:f1:39:cb:5e: 22:8e:fe:23:79:25:f9:e2:8a:ae:aa:5f:00:86:ca: 7e:61:d3:b2:22:e0:ca:12:fa:20:cf:c5:c8:4d:7d: f4:73:92:80:a1:60:f5:82:bd:d6:97:e3:32:50:6b: 64:02:74:30:06:f0:78:e5:20:15:2e:a3:7f:21:48: 8d:c6:ef:a0:31:e7:a3:47:17:2d:73:ac:01:74:1f: 62:7f:bc:0a:fd:0f:04:84:9b:2d:98:9b:6d:2b:26: 38:da:c3:dc:50:f0:a1:2a:2f:24:50:9c:91:c0:12: f4:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:A0:5D:02:A7:7A:C9:ED:9F:18:C6:92:A5:3B:BC:34:B7:6F:53:43 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/b0d886b9-49ff-3718-b905-7163e2c9f557.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.crl X509v3 Authority Key Identifier: keyid:D7:F3:DF:A9:F7:40:F0:2B:51:D8:42:27:F2:DC:C2:E1:DF:60:75:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer sbgp-ipAddrBlock: critical IPv4: 74.221.24.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c4:52:bb:11:e3:7d:df:2a:ce:72:7f:ce:0d:3d:67:7f:ca:17: 22:ee:07:83:67:21:f0:17:36:9c:38:58:40:b8:ea:c7:90:60: 29:72:02:68:0f:4b:f1:2d:43:d8:40:8c:e6:27:28:f7:05:6e: 19:06:ba:3c:b3:12:f2:15:d6:21:5d:61:40:09:be:23:bb:c8: d8:f8:20:96:0d:aa:93:3a:b7:1c:1b:a9:87:a2:94:55:ad:15: 61:59:8e:ad:45:83:60:23:9f:28:11:3b:9c:cd:63:9d:66:95: 45:2a:16:a7:7c:a7:a4:6b:70:a7:9f:ee:e3:5b:3a:e8:64:7c: b5:37:af:21:fa:66:f3:9d:14:74:7b:57:6d:b1:00:ca:39:c6: 97:df:d1:77:b8:ba:df:8d:79:5b:e2:0b:9e:b1:58:f1:6f:31: 56:bb:14:f8:97:be:4b:9d:69:43:75:b9:d0:45:05:81:5b:90: ef:12:07:b3:af:a5:e1:e1:91:e5:5c:ea:f1:2a:65:be:87:95: 21:60:c3:c2:24:26:fe:c4:53:58:1d:7f:ff:1f:fb:f5:5d:a7: 3c:92:83:d8:9b:5d:4e:70:91:ce:00:af:a5:36:96:47:c3:b4: 88:c7:1e:f3:58:14:ce:ce:ff:98:56:d9:b4:1f:d9:8e:8f:fb: 45:97:75:f5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE86F89BSya5uDkZtIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODUxMWI4ZGMtNzRiYS00N2U1LWFmNGEtN2M0ZTZiNzc3 ZDkyMB4XDTI2MDkxOTEzMDAxMloXDTI2MTIxODE0MDAxMlowLzEtMCsGA1UEAxMk ZjFlNzQyMGMtNGRlZS00NDQ0LTkxZWQtZmFjZjhmZmVhMDVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiTPOWhD9VVXhzt688FxyP+YPlZ1kbtz0nqyL HTmKHw2bod0o66NpxO3rqB68/v0m+GFCUJGAdwoj8RB7uCZhlPsfVHdUw16i/gHV 3Rvhx7k12l67mCzGiCvHP0FBXSyO+75OPpb5a/z73WVzd/NuYy7aNSOLvCybz9mm 6Z17mbNl7z+sSleWlQpAGo+ppxC8/fE5y14ijv4jeSX54oquql8Ahsp+YdOyIuDK Evogz8XITX30c5KAoWD1gr3Wl+MyUGtkAnQwBvB45SAVLqN/IUiNxu+gMeejRxct c6wBdB9if7wK/Q8EhJstmJttKyY42sPcUPChKi8kUJyRwBL0yQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKegXQKnesntnxjGkqU7vDS3b1NDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS84NTEx YjhkYy03NGJhLTQ3ZTUtYWY0YS03YzRlNmI3NzdkOTIvYjBkODg2YjktNDlmZi0z NzE4LWI5MDUtNzE2M2UyYzlmNTU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvODUxMWI4ZGMtNzRiYS00N2U1LWFm NGEtN2M0ZTZiNzc3ZDkyLzg1MTFiOGRjLTc0YmEtNDdlNS1hZjRhLTdjNGU2Yjc3 N2Q5Mi5jcmwwHwYDVR0jBBgwFoAU1/PfqfdA8CtR2EIn8tzC4d9gdQ4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS84NTExYjhkYy03NGJhLTQ3ZTUtYWY0YS03YzRl NmI3NzdkOTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDSt0YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMRSuxHjfd8qznJ/zg09Z3/KFyLuB4NnIfAXNpw4WEC46seQYClyAmgP S/EtQ9hAjOYnKPcFbhkGujyzEvIV1iFdYUAJviO7yNj4IJYNqpM6txwbqYeilFWt FWFZjq1Fg2AjnygRO5zNY51mlUUqFqd8p6RrcKef7uNbOuhkfLU3ryH6ZvOdFHR7 V22xAMo5xpff0Xe4ut+NeVviC56xWPFvMVa7FPiXvkudaUN1udBFBYFbkO8SB7Ov peHhkeVc6vEqZb6HlSFgw8IkJv7EU1gdf/8f+/VdpzySg9ibXU5wkc4Ar6U2lkfD tIjHHvNYFM7O/5hW2bQf2Y6P+0WXdfU= -----END CERTIFICATE-----Generated at Sun Sep 27 05:53:23 2026 by rpki-client