$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/b0d886b9-49ff-3718-b905-7163e2c9f557.roa File: b0d886b9-49ff-3718-b905-7163e2c9f557.roa (raw, json) Hash identifier: muV0LGG3e5DhsF7QrNGhmCZJNp5fAfsZZy014OSEgAE= Subject key identifier: 3A:A2:66:E0:38:15:E7:86:32:DF:B6:B0:B5:AA:40:6F:B0:60:ED:9A Certificate issuer: /CN=8511b8dc-74ba-47e5-af4a-7c4e6b777d92 Certificate serial: 010D0C9F4328584DB7702E5966EE7E0638A30C00 Authority key identifier: D7:F3:DF:A9:F7:40:F0:2B:51:D8:42:27:F2:DC:C2:E1:DF:60:75:0E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/b0d886b9-49ff-3718-b905-7163e2c9f557.roa Signing time: Mon 04 May 2026 01:00:25 +0000 ROA not before: Mon 04 May 2026 01:00:25 +0000 ROA not after: Sun 02 Aug 2026 01:00:25 +0000 asID: 4540 IP address blocks: 74.221.24.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:b7:70:2e:59:66:ee:7e:06:38:a3:0c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8511b8dc-74ba-47e5-af4a-7c4e6b777d92 Validity Not Before: May 4 01:00:25 2026 GMT Not After : Aug 2 01:00:25 2026 GMT Subject: CN=d7718b38-6691-4245-95ce-5e4ae46bacd3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:2c:24:ae:c1:38:6c:ca:80:18:aa:4a:09:0c: ce:a6:6e:b2:8f:d4:28:86:24:95:0c:37:dc:5e:03: b9:89:e7:d3:d8:a1:92:f5:ac:40:ad:53:bb:56:d6: cc:21:54:cd:56:01:9b:73:07:28:e6:47:fd:92:cb: 54:e2:50:36:91:bc:03:37:93:7c:21:44:34:76:55: 66:db:fa:a7:2f:7a:1a:20:7f:2b:ec:0a:f8:d8:7b: 4a:27:a9:81:18:93:4c:e3:78:a7:a0:05:22:0f:8e: 0a:ef:02:a4:04:35:47:1c:40:ae:8d:5c:01:1a:c3: 76:25:f5:43:18:86:71:30:65:46:4a:16:34:58:d1: 48:38:4f:4f:f2:6f:1d:10:b6:2f:05:07:ee:fe:a9: d7:f8:dd:56:52:9a:b4:a3:5c:b3:0c:6d:8e:97:41: 7d:17:2c:a8:d7:25:7f:df:14:1a:cb:51:7f:9c:5c: 6e:42:9f:0c:57:7c:ea:a7:6e:24:23:17:36:ea:ea: e5:24:11:60:23:99:82:8f:6a:1a:51:6c:67:a6:03: 92:21:ed:78:f0:f4:8f:0b:e5:fd:0f:df:92:63:0d: cb:9a:52:b6:f0:e6:7e:88:c6:66:ea:72:07:b0:2d: 17:73:1b:7b:19:67:ca:df:3e:c8:63:28:bb:9a:64: cc:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:A2:66:E0:38:15:E7:86:32:DF:B6:B0:B5:AA:40:6F:B0:60:ED:9A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/b0d886b9-49ff-3718-b905-7163e2c9f557.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.crl X509v3 Authority Key Identifier: keyid:D7:F3:DF:A9:F7:40:F0:2B:51:D8:42:27:F2:DC:C2:E1:DF:60:75:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer sbgp-ipAddrBlock: critical IPv4: 74.221.24.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:6b:45:dc:8d:02:44:cc:aa:b5:82:02:bd:ef:55:d6:a8:25: 29:f2:f3:52:c7:f9:17:d5:c7:9c:4c:2a:5e:65:38:75:79:66: 35:cf:b0:55:e7:6f:06:6d:d7:f8:fa:71:7b:b0:07:29:4f:ac: c7:ee:93:1a:39:b6:b9:e9:02:19:fd:06:70:87:af:15:68:72: 15:09:37:2b:5f:d7:13:45:97:26:36:23:db:5a:35:8d:41:7f: 33:41:3f:46:c0:81:ee:6d:e3:88:6f:7a:2f:7f:48:a1:7d:6f: 7e:03:47:ca:87:03:b7:76:b4:de:ef:cb:19:78:b3:cf:8a:fc: c8:0b:10:07:8d:42:53:a4:e2:ab:3f:44:ae:ea:0b:a4:a2:41: ba:bc:09:2a:31:3e:bb:3e:9d:e8:6c:e6:2e:38:71:a4:72:e3: d0:c1:1a:14:04:d4:2a:23:42:68:28:76:18:6b:1b:da:4e:72: 99:05:e6:9e:e0:7e:f8:2e:0f:ba:3e:a4:09:51:7c:54:50:1d: b7:68:5b:4e:aa:04:c8:bb:21:3c:79:35:be:66:6f:bc:a2:96: 1f:68:c6:43:89:6a:13:f8:88:cd:7b:a9:af:eb:82:4b:c2:94: 5d:0e:cd:7b:59:9f:11:a5:f4:89:2a:73:a8:9f:56:34:00:92: 16:34:d1:e6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE23cC5ZZu5+BjijDAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODUxMWI4ZGMtNzRiYS00N2U1LWFmNGEtN2M0ZTZiNzc3 ZDkyMB4XDTI2MDUwNDAxMDAyNVoXDTI2MDgwMjAxMDAyNVowLzEtMCsGA1UEAxMk ZDc3MThiMzgtNjY5MS00MjQ1LTk1Y2UtNWU0YWU0NmJhY2QzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoSwkrsE4bMqAGKpKCQzOpm6yj9QohiSVDDfc XgO5iefT2KGS9axArVO7VtbMIVTNVgGbcwco5kf9kstU4lA2kbwDN5N8IUQ0dlVm 2/qnL3oaIH8r7Ar42HtKJ6mBGJNM43inoAUiD44K7wKkBDVHHECujVwBGsN2JfVD GIZxMGVGShY0WNFIOE9P8m8dELYvBQfu/qnX+N1WUpq0o1yzDG2Ol0F9Fyyo1yV/ 3xQay1F/nFxuQp8MV3zqp24kIxc26urlJBFgI5mCj2oaUWxnpgOSIe148PSPC+X9 D9+SYw3LmlK28OZ+iMZm6nIHsC0Xcxt7GWfK3z7IYyi7mmTMRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDqiZuA4FeeGMt+2sLWqQG+wYO2aMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS84NTEx YjhkYy03NGJhLTQ3ZTUtYWY0YS03YzRlNmI3NzdkOTIvYjBkODg2YjktNDlmZi0z NzE4LWI5MDUtNzE2M2UyYzlmNTU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvODUxMWI4ZGMtNzRiYS00N2U1LWFm NGEtN2M0ZTZiNzc3ZDkyLzg1MTFiOGRjLTc0YmEtNDdlNS1hZjRhLTdjNGU2Yjc3 N2Q5Mi5jcmwwHwYDVR0jBBgwFoAU1/PfqfdA8CtR2EIn8tzC4d9gdQ4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS84NTExYjhkYy03NGJhLTQ3ZTUtYWY0YS03YzRl NmI3NzdkOTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDSt0YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHJrRdyNAkTMqrWCAr3vVdaoJSny81LH+RfVx5xMKl5lOHV5ZjXPsFXn bwZt1/j6cXuwBylPrMfukxo5trnpAhn9BnCHrxVochUJNytf1xNFlyY2I9taNY1B fzNBP0bAge5t44hvei9/SKF9b34DR8qHA7d2tN7vyxl4s8+K/MgLEAeNQlOk4qs/ RK7qC6SiQbq8CSoxPrs+nehs5i44caRy49DBGhQE1CojQmgodhhrG9pOcpkF5p7g fvguD7o+pAlRfFRQHbdoW06qBMi7ITx5Nb5mb7yilh9oxkOJahP4iM17qa/rgkvC lF0OzXtZnxGl9Ikqc6ifVjQAkhY00eY= -----END CERTIFICATE-----Generated at Wed May 13 11:14:55 2026 by rpki-client