$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/c7638a2d-de94-31cd-8168-33b5ac54fb2b.roa File: c7638a2d-de94-31cd-8168-33b5ac54fb2b.roa (raw, json) Hash identifier: SefPr3o+qLm970wYeOqpUqxabRXM1LApAia9sh+4e7s= Subject key identifier: 28:76:A8:44:45:53:99:F9:5D:AF:FA:A3:EA:37:BC:8E:AE:24:26:01 Certificate issuer: /CN=8511b8dc-74ba-47e5-af4a-7c4e6b777d92 Certificate serial: 010D0C9F4328584DB7702DF7CA9B1D2B63B5B140 Authority key identifier: D7:F3:DF:A9:F7:40:F0:2B:51:D8:42:27:F2:DC:C2:E1:DF:60:75:0E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/c7638a2d-de94-31cd-8168-33b5ac54fb2b.roa Signing time: Mon 04 May 2026 01:00:25 +0000 ROA not before: Mon 04 May 2026 01:00:25 +0000 ROA not after: Sun 02 Aug 2026 01:00:25 +0000 asID: 4540 IP address blocks: 74.116.112.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:b7:70:2d:f7:ca:9b:1d:2b:63:b5:b1:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8511b8dc-74ba-47e5-af4a-7c4e6b777d92 Validity Not Before: May 4 01:00:25 2026 GMT Not After : Aug 2 01:00:25 2026 GMT Subject: CN=d8231f56-bb21-4146-a2e8-984d80630f4b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:0a:08:6a:c3:40:39:4d:62:78:5d:bd:3b:ce: 18:68:5e:40:a7:63:d6:14:f8:6a:9d:5e:d6:8d:92: 8e:e5:62:84:6c:c4:84:f3:f3:84:4e:b2:de:b3:e5: ff:95:bb:2d:02:93:c4:61:9c:d1:10:42:66:98:7b: 7a:ad:80:09:02:06:8b:36:43:2c:42:02:fa:ed:8d: a6:0d:da:ae:ff:1a:47:88:c3:af:87:8b:eb:f1:ce: 0c:a0:e9:57:64:c2:8d:c2:30:0c:51:c7:ad:84:1c: 95:14:a5:6d:4f:23:35:29:fe:50:ad:9f:91:22:1a: b2:64:a6:3d:74:c6:a8:9a:9e:c5:dc:b8:cf:9b:3c: d2:c3:04:86:2b:31:d6:71:5f:28:b0:39:d2:dd:28: 80:2c:65:a9:f2:58:5b:7f:c9:b6:4b:f1:ea:fd:6f: 0a:6f:90:2e:97:e9:84:8b:c0:92:86:22:1e:4f:40: 46:f1:85:c8:52:e2:67:8d:94:de:e4:f0:1a:8a:95: b0:15:bf:4a:1a:8e:5c:35:f3:d3:fd:9e:17:bb:6b: f7:01:02:b1:26:ae:4e:25:51:4e:1f:5d:45:36:f1: be:a9:01:13:74:aa:a1:01:c7:9c:ea:fc:7e:ac:cc: 4f:d4:56:b8:ce:33:52:2e:5c:15:5c:c7:0f:6d:5b: 01:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:76:A8:44:45:53:99:F9:5D:AF:FA:A3:EA:37:BC:8E:AE:24:26:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/c7638a2d-de94-31cd-8168-33b5ac54fb2b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.crl X509v3 Authority Key Identifier: keyid:D7:F3:DF:A9:F7:40:F0:2B:51:D8:42:27:F2:DC:C2:E1:DF:60:75:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer sbgp-ipAddrBlock: critical IPv4: 74.116.112.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a7:cd:8f:54:54:f8:eb:35:90:b5:4b:05:9e:08:40:e5:23:2f: 27:65:87:b9:1b:77:7d:0b:d2:62:eb:3e:63:97:79:fb:e3:7e: d0:48:09:59:cd:64:18:7b:ba:ed:6e:df:38:11:47:ff:42:ff: c5:77:e4:d4:e9:e5:ea:0c:a9:ef:26:4b:c9:2c:3b:fb:c3:04: e4:80:82:f1:f0:eb:ff:f9:91:01:66:f5:7e:63:ee:d0:12:05: 79:b8:d3:b3:0d:d0:f5:4e:f3:99:09:db:da:e9:00:c6:71:9d: a4:1f:a9:a8:03:8c:c7:0b:28:8b:25:a2:e1:28:16:43:4d:79: 75:30:44:f9:9b:0f:98:df:27:b8:80:6c:58:92:59:0d:36:4f: 60:4e:da:1a:76:b8:68:39:b6:88:ae:bd:fc:fc:36:f5:1f:5c: 5f:ba:7d:e5:ce:c0:8c:61:5b:c2:d3:12:99:b4:54:e6:80:83: 07:83:21:c6:1a:34:3b:1a:bb:72:ec:47:51:a3:f4:98:c7:a6: f8:d2:26:9d:7f:9a:7b:0a:bb:b1:67:83:60:5a:9b:73:72:c1: 97:38:9a:c2:30:37:78:e1:91:f8:e6:d2:a9:4c:61:c1:85:a0: a6:72:95:4c:55:c8:e6:74:25:8a:90:5f:cd:e9:10:5b:7a:48: 98:25:8a:8b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE23cC33ypsdK2O1sUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODUxMWI4ZGMtNzRiYS00N2U1LWFmNGEtN2M0ZTZiNzc3 ZDkyMB4XDTI2MDUwNDAxMDAyNVoXDTI2MDgwMjAxMDAyNVowLzEtMCsGA1UEAxMk ZDgyMzFmNTYtYmIyMS00MTQ2LWEyZTgtOTg0ZDgwNjMwZjRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2AoIasNAOU1ieF29O84YaF5Ap2PWFPhqnV7W jZKO5WKEbMSE8/OETrLes+X/lbstApPEYZzREEJmmHt6rYAJAgaLNkMsQgL67Y2m Ddqu/xpHiMOvh4vr8c4MoOlXZMKNwjAMUcethByVFKVtTyM1Kf5QrZ+RIhqyZKY9 dMaomp7F3LjPmzzSwwSGKzHWcV8osDnS3SiALGWp8lhbf8m2S/Hq/W8Kb5Aul+mE i8CShiIeT0BG8YXIUuJnjZTe5PAaipWwFb9KGo5cNfPT/Z4Xu2v3AQKxJq5OJVFO H11FNvG+qQETdKqhAcec6vx+rMxP1Fa4zjNSLlwVXMcPbVsBDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCh2qERFU5n5Xa/6o+o3vI6uJCYBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS84NTEx YjhkYy03NGJhLTQ3ZTUtYWY0YS03YzRlNmI3NzdkOTIvYzc2MzhhMmQtZGU5NC0z MWNkLTgxNjgtMzNiNWFjNTRmYjJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvODUxMWI4ZGMtNzRiYS00N2U1LWFm NGEtN2M0ZTZiNzc3ZDkyLzg1MTFiOGRjLTc0YmEtNDdlNS1hZjRhLTdjNGU2Yjc3 N2Q5Mi5jcmwwHwYDVR0jBBgwFoAU1/PfqfdA8CtR2EIn8tzC4d9gdQ4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS84NTExYjhkYy03NGJhLTQ3ZTUtYWY0YS03YzRl NmI3NzdkOTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDSnRwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKfNj1RU+Os1kLVLBZ4IQOUjLydlh7kbd30L0mLrPmOXefvjftBICVnN ZBh7uu1u3zgRR/9C/8V35NTp5eoMqe8mS8ksO/vDBOSAgvHw6//5kQFm9X5j7tAS BXm407MN0PVO85kJ29rpAMZxnaQfqagDjMcLKIslouEoFkNNeXUwRPmbD5jfJ7iA bFiSWQ02T2BO2hp2uGg5toiuvfz8NvUfXF+6feXOwIxhW8LTEpm0VOaAgweDIcYa NDsau3LsR1Gj9JjHpvjSJp1/mnsKu7Fng2Bam3NywZc4msIwN3jhkfjm0qlMYcGF oKZylUxVyOZ0JYqQX83pEFt6SJglios= -----END CERTIFICATE-----Generated at Wed May 13 10:41:00 2026 by rpki-client