$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/5e6f751c-d25e-3084-9777-cc41c119db99.roa File: 5e6f751c-d25e-3084-9777-cc41c119db99.roa (raw, json) Hash identifier: SJcBJ39Lby+VJ/YwM8RepvR9ed3S7o5X+oRhY0peyWU= Subject key identifier: 60:AF:1E:1F:5E:85:91:55:61:21:D6:9F:64:95:94:DE:68:DF:C7:82 Certificate issuer: /CN=8511b8dc-74ba-47e5-af4a-7c4e6b777d92 Certificate serial: 010D0C9F4328584B153C168CD80BD02AA55EC180 Authority key identifier: D7:F3:DF:A9:F7:40:F0:2B:51:D8:42:27:F2:DC:C2:E1:DF:60:75:0E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/5e6f751c-d25e-3084-9777-cc41c119db99.roa Signing time: Thu 04 Sep 2025 13:00:41 +0000 ROA not before: Thu 04 Sep 2025 13:00:41 +0000 ROA not after: Wed 03 Dec 2025 14:00:41 +0000 asID: 4540 IP address blocks: 74.126.120.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:15:3c:16:8c:d8:0b:d0:2a:a5:5e:c1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8511b8dc-74ba-47e5-af4a-7c4e6b777d92 Validity Not Before: Sep 4 13:00:41 2025 GMT Not After : Dec 3 14:00:41 2025 GMT Subject: CN=59edc9f5-aece-46f5-a51a-478a5ca214e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:15:7b:f2:87:eb:37:dc:56:48:16:dd:4d:7d: 27:0b:44:27:0f:14:42:3e:e2:49:d1:7a:bb:5a:fd: 9d:3f:de:78:05:ee:9b:a8:b4:25:56:3d:8b:c8:65: 0b:67:de:71:69:0b:c4:70:41:dd:16:c9:5f:f8:19: 28:d9:c6:04:c3:80:a1:70:9c:d8:76:b8:b3:75:85: 9e:9d:c2:c4:74:e8:81:3c:3e:c1:72:7d:1d:56:7d: 5a:94:27:d0:48:50:d7:ee:20:17:fa:9c:d0:a2:50: 83:e6:3c:2f:80:57:d5:b0:5c:48:eb:b6:7a:4a:c1: 02:98:a9:05:ea:53:ae:a5:ae:74:f9:a8:09:0c:4d: 1d:67:e3:df:00:dd:4a:67:ff:ba:12:e9:b7:0d:eb: 67:6d:70:59:3e:d1:74:a9:bf:19:d8:17:ac:8e:71: 5b:22:23:c8:b9:ad:80:60:e3:5d:bb:be:87:ef:0f: 07:0c:d1:b0:50:ff:24:ee:4d:1d:42:08:ae:ea:5f: 4c:29:cd:c1:fc:7e:ae:b4:12:45:d1:27:c2:ee:b2: 71:d5:e3:2b:56:94:04:7d:37:ec:cc:e1:ea:03:ba: da:2a:57:10:8b:6b:1f:ab:86:80:40:9d:ff:35:5f: 25:b0:ca:93:9d:9e:18:ea:be:51:f6:e8:45:3f:af: 18:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:AF:1E:1F:5E:85:91:55:61:21:D6:9F:64:95:94:DE:68:DF:C7:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/5e6f751c-d25e-3084-9777-cc41c119db99.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.crl X509v3 Authority Key Identifier: keyid:D7:F3:DF:A9:F7:40:F0:2B:51:D8:42:27:F2:DC:C2:E1:DF:60:75:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer sbgp-ipAddrBlock: critical IPv4: 74.126.120.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:52:f1:9d:57:8b:5e:d3:75:35:71:54:21:91:1e:6d:2e:d0: 6b:2c:06:d7:76:03:a0:d3:ae:a3:48:65:f8:77:50:7c:a3:3b: e6:bc:69:2b:30:c6:11:eb:ed:3d:73:2d:83:38:bc:64:ca:8b: 28:85:c4:06:88:0a:f6:0f:f7:9d:4b:41:b5:c1:1e:44:14:90: 33:3e:c1:a4:e8:4a:1e:22:4d:6d:35:fe:f3:b9:a0:dd:a6:c4: 1a:5e:c9:b5:7e:00:96:e9:8c:aa:2a:76:8d:29:84:b0:10:dc: 45:9e:5a:ed:db:36:4c:0c:fa:18:c2:82:f9:70:a4:c7:75:f0: cc:08:dc:75:2f:1c:fe:16:f4:84:08:e3:58:b5:3c:c6:88:cb: d1:ad:fa:38:50:50:a1:ab:bb:a4:20:b3:4d:24:dd:a9:94:41: a3:08:3c:86:ba:b5:6c:db:1d:31:78:8f:06:e4:b3:9f:00:7d: 67:20:33:fa:47:32:a4:f3:71:15:82:dd:af:13:1e:0d:53:b4: 3f:5c:24:0f:c6:34:08:0c:25:5d:23:45:69:72:69:32:87:70: fd:f4:4e:77:62:32:16:e0:c0:b6:a5:db:c7:82:e1:2b:43:60: 63:99:6a:ef:e2:03:7f:8a:05:6e:63:da:ee:da:bc:d5:c3:be: 59:84:b0:65 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsVPBaM2AvQKqVewYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODUxMWI4ZGMtNzRiYS00N2U1LWFmNGEtN2M0ZTZiNzc3 ZDkyMB4XDTI1MDkwNDEzMDA0MVoXDTI1MTIwMzE0MDA0MVowLzEtMCsGA1UEAxMk NTllZGM5ZjUtYWVjZS00NmY1LWE1MWEtNDc4YTVjYTIxNGU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnRV78ofrN9xWSBbdTX0nC0QnDxRCPuJJ0Xq7 Wv2dP954Be6bqLQlVj2LyGULZ95xaQvEcEHdFslf+Bko2cYEw4ChcJzYdrizdYWe ncLEdOiBPD7Bcn0dVn1alCfQSFDX7iAX+pzQolCD5jwvgFfVsFxI67Z6SsECmKkF 6lOupa50+agJDE0dZ+PfAN1KZ/+6Eum3DetnbXBZPtF0qb8Z2BesjnFbIiPIua2A YONdu76H7w8HDNGwUP8k7k0dQgiu6l9MKc3B/H6utBJF0SfC7rJx1eMrVpQEfTfs zOHqA7raKlcQi2sfq4aAQJ3/NV8lsMqTnZ4Y6r5R9uhFP68YewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGCvHh9ehZFVYSHWn2SVlN5o38eCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS84NTEx YjhkYy03NGJhLTQ3ZTUtYWY0YS03YzRlNmI3NzdkOTIvNWU2Zjc1MWMtZDI1ZS0z MDg0LTk3NzctY2M0MWMxMTlkYjk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvODUxMWI4ZGMtNzRiYS00N2U1LWFm NGEtN2M0ZTZiNzc3ZDkyLzg1MTFiOGRjLTc0YmEtNDdlNS1hZjRhLTdjNGU2Yjc3 N2Q5Mi5jcmwwHwYDVR0jBBgwFoAU1/PfqfdA8CtR2EIn8tzC4d9gdQ4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS84NTExYjhkYy03NGJhLTQ3ZTUtYWY0YS03YzRl NmI3NzdkOTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDSn54MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACRS8Z1Xi17TdTVxVCGRHm0u0GssBtd2A6DTrqNIZfh3UHyjO+a8aSsw xhHr7T1zLYM4vGTKiyiFxAaICvYP951LQbXBHkQUkDM+waToSh4iTW01/vO5oN2m xBpeybV+AJbpjKoqdo0phLAQ3EWeWu3bNkwM+hjCgvlwpMd18MwI3HUvHP4W9IQI 41i1PMaIy9Gt+jhQUKGru6Qgs00k3amUQaMIPIa6tWzbHTF4jwbks58AfWcgM/pH MqTzcRWC3a8THg1TtD9cJA/GNAgMJV0jRWlyaTKHcP30TndiMhbgwLal28eC4StD YGOZau/iA3+KBW5j2u7avNXDvlmEsGU= -----END CERTIFICATE-----Generated at Fri Oct 10 22:29:49 2025 by rpki-client