$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/17ffddb4-f9f8-380b-a246-0aaa5b4c00f3.roa File: 17ffddb4-f9f8-380b-a246-0aaa5b4c00f3.roa (raw, json) Hash identifier: PMNbERMeltLxGE0uLnNYMCTAPZXtjB3t8Nt1Ts7Aeg4= Subject key identifier: 99:67:47:81:5E:28:C2:55:94:79:5E:D8:87:D9:A4:B9:05:3E:0E:8E Certificate issuer: /CN=8511b8dc-74ba-47e5-af4a-7c4e6b777d92 Certificate serial: 010D0C9F4328584B153C16C1F01646715912CA60 Authority key identifier: D7:F3:DF:A9:F7:40:F0:2B:51:D8:42:27:F2:DC:C2:E1:DF:60:75:0E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/17ffddb4-f9f8-380b-a246-0aaa5b4c00f3.roa Signing time: Thu 04 Sep 2025 13:00:41 +0000 ROA not before: Thu 04 Sep 2025 13:00:41 +0000 ROA not after: Wed 03 Dec 2025 14:00:41 +0000 asID: 4540 IP address blocks: 74.221.16.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:15:3c:16:c1:f0:16:46:71:59:12:ca:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8511b8dc-74ba-47e5-af4a-7c4e6b777d92 Validity Not Before: Sep 4 13:00:41 2025 GMT Not After : Dec 3 14:00:41 2025 GMT Subject: CN=e0015a8b-574a-491d-8bc8-4a9865c39881 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:57:58:72:b9:10:49:5b:d1:02:95:e5:6f:08: 9d:d9:32:fe:24:ed:86:42:a6:df:88:b3:0e:c2:e0: 87:79:95:7f:c6:fe:76:9c:aa:9a:a3:80:22:0c:27: db:c8:07:4e:45:3a:0e:4b:6b:e1:cc:ef:19:dd:eb: b8:34:a2:ce:91:0f:f4:c4:f7:1a:12:2b:96:b4:60: 4a:37:17:6d:d8:a8:c3:9b:37:44:d5:a3:c1:24:b6: 6e:cf:1b:b7:6d:a5:8f:3e:ca:f2:0e:b7:37:af:7a: 9a:2f:c0:24:e6:fd:69:5a:7f:78:84:6e:cc:56:c1: 13:77:f4:44:98:a9:53:e0:93:c3:ae:4c:08:99:e7: 92:a3:c8:6a:53:a9:91:24:8f:d5:30:ee:3b:24:1e: 9e:ea:02:cb:64:af:99:0c:2d:4c:9c:00:95:71:24: c1:c6:be:1c:65:62:94:61:64:72:6f:34:36:67:ff: 5e:93:e0:01:3e:ba:a3:19:3c:0a:08:9d:98:fa:2a: b7:02:aa:ed:d6:7d:59:90:bf:16:cc:bb:11:5f:b8: 70:95:f6:a2:43:ec:a8:b9:12:57:2b:c5:f2:e5:01: 9c:8e:ff:ec:3e:88:8e:9e:b3:c6:88:f7:aa:ae:cb: ad:dd:d7:ba:89:94:97:a5:46:ca:fb:d9:83:f0:a2: 5a:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:67:47:81:5E:28:C2:55:94:79:5E:D8:87:D9:A4:B9:05:3E:0E:8E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/17ffddb4-f9f8-380b-a246-0aaa5b4c00f3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.crl X509v3 Authority Key Identifier: keyid:D7:F3:DF:A9:F7:40:F0:2B:51:D8:42:27:F2:DC:C2:E1:DF:60:75:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer sbgp-ipAddrBlock: critical IPv4: 74.221.16.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c7:9a:f6:50:42:25:96:22:c4:41:fd:0a:e2:ec:c3:92:ea:eb: 39:47:86:2b:af:71:15:f0:6f:12:51:43:23:17:01:32:93:10: 64:30:d8:0e:bc:6d:c6:a7:c4:63:50:1a:bd:8e:da:fb:54:e6: 64:8d:31:05:62:0e:cf:d6:28:8f:55:1e:5e:dc:9e:1b:bd:c5: 80:67:11:bd:52:c7:2c:f6:da:b7:34:1f:83:b7:f1:f6:58:e8: fe:46:ed:4f:6c:5f:ba:86:b5:01:9a:96:11:7c:97:94:4a:06: 87:88:28:64:15:33:97:ad:54:98:89:2c:61:9b:18:ee:41:f6: 8b:82:26:a3:7f:68:12:99:63:ab:14:2d:d5:66:54:8e:3c:61: ea:d7:0c:92:02:c7:20:d5:b3:5a:09:e2:39:57:ea:72:6a:b8: b7:85:46:54:4a:01:5c:bc:ea:48:cd:83:61:2e:29:42:6f:5c: e6:6f:0a:44:81:45:8d:23:15:3a:5f:73:cd:d9:6d:18:43:9b: 05:67:e9:f1:87:61:71:6f:45:58:8b:1b:84:72:97:a6:df:99: d7:97:6e:6a:07:81:c3:57:7a:e4:ea:53:e5:30:24:81:fb:6c: f2:c5:bd:cd:d0:53:d0:ae:8e:24:8e:c9:02:db:dc:29:71:48: 97:62:b6:61 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsVPBbB8BZGcVkSymAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODUxMWI4ZGMtNzRiYS00N2U1LWFmNGEtN2M0ZTZiNzc3 ZDkyMB4XDTI1MDkwNDEzMDA0MVoXDTI1MTIwMzE0MDA0MVowLzEtMCsGA1UEAxMk ZTAwMTVhOGItNTc0YS00OTFkLThiYzgtNGE5ODY1YzM5ODgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjldYcrkQSVvRApXlbwid2TL+JO2GQqbfiLMO wuCHeZV/xv52nKqao4AiDCfbyAdORToOS2vhzO8Z3eu4NKLOkQ/0xPcaEiuWtGBK Nxdt2KjDmzdE1aPBJLZuzxu3baWPPsryDrc3r3qaL8Ak5v1pWn94hG7MVsETd/RE mKlT4JPDrkwImeeSo8hqU6mRJI/VMO47JB6e6gLLZK+ZDC1MnACVcSTBxr4cZWKU YWRybzQ2Z/9ek+ABPrqjGTwKCJ2Y+iq3Aqrt1n1ZkL8WzLsRX7hwlfaiQ+youRJX K8Xy5QGcjv/sPoiOnrPGiPeqrsut3de6iZSXpUbK+9mD8KJaDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJlnR4FeKMJVlHle2IfZpLkFPg6OMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS84NTEx YjhkYy03NGJhLTQ3ZTUtYWY0YS03YzRlNmI3NzdkOTIvMTdmZmRkYjQtZjlmOC0z ODBiLWEyNDYtMGFhYTViNGMwMGYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvODUxMWI4ZGMtNzRiYS00N2U1LWFm NGEtN2M0ZTZiNzc3ZDkyLzg1MTFiOGRjLTc0YmEtNDdlNS1hZjRhLTdjNGU2Yjc3 N2Q5Mi5jcmwwHwYDVR0jBBgwFoAU1/PfqfdA8CtR2EIn8tzC4d9gdQ4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS84NTExYjhkYy03NGJhLTQ3ZTUtYWY0YS03YzRl NmI3NzdkOTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDSt0QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMea9lBCJZYixEH9CuLsw5Lq6zlHhiuvcRXwbxJRQyMXATKTEGQw2A68 bcanxGNQGr2O2vtU5mSNMQViDs/WKI9VHl7cnhu9xYBnEb1Sxyz22rc0H4O38fZY 6P5G7U9sX7qGtQGalhF8l5RKBoeIKGQVM5etVJiJLGGbGO5B9ouCJqN/aBKZY6sU LdVmVI48YerXDJICxyDVs1oJ4jlX6nJquLeFRlRKAVy86kjNg2EuKUJvXOZvCkSB RY0jFTpfc83ZbRhDmwVn6fGHYXFvRViLG4Ryl6bfmdeXbmoHgcNXeuTqU+UwJIH7 bPLFvc3QU9CujiSOyQLb3ClxSJditmE= -----END CERTIFICATE-----Generated at Fri Oct 10 22:25:31 2025 by rpki-client