$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8921fd4d-606e-360e-a20a-517ba967da1b.roa File: 8921fd4d-606e-360e-a20a-517ba967da1b.roa (raw, json) Hash identifier: w94PwYV1fYdr09Yr0FmevmxvZxTtp63KJF7pBCp+TZg= Subject key identifier: 2D:20:C0:EB:CE:2A:9B:BE:E1:53:DF:04:CD:07:E7:AA:66:79:A0:5F Certificate issuer: /CN=8511b8dc-74ba-47e5-af4a-7c4e6b777d92 Certificate serial: 010D0C9F4328584B153C173682B173655A496800 Authority key identifier: D7:F3:DF:A9:F7:40:F0:2B:51:D8:42:27:F2:DC:C2:E1:DF:60:75:0E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8921fd4d-606e-360e-a20a-517ba967da1b.roa Signing time: Thu 04 Sep 2025 13:00:41 +0000 ROA not before: Thu 04 Sep 2025 13:00:41 +0000 ROA not after: Wed 03 Dec 2025 14:00:41 +0000 asID: 4540 IP address blocks: 74.50.176.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:15:3c:17:36:82:b1:73:65:5a:49:68:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8511b8dc-74ba-47e5-af4a-7c4e6b777d92 Validity Not Before: Sep 4 13:00:41 2025 GMT Not After : Dec 3 14:00:41 2025 GMT Subject: CN=7e599504-4d9a-4da5-900e-6d6129260742 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:55:d9:44:3c:78:7a:01:53:0e:ae:8a:2c:6e: d7:72:3a:3f:8b:32:74:d5:10:e2:d8:c4:40:b6:e4: c4:7f:10:04:99:f1:71:0e:22:b5:56:4d:20:5c:1e: 30:85:90:19:7b:61:35:f4:48:1d:5f:63:5b:35:8c: b4:f1:3a:5d:cb:2a:5b:87:64:ff:30:4f:53:9c:d9: d3:99:9f:85:13:5e:31:34:b4:b1:a1:80:d4:20:44: a9:d3:64:48:e3:ff:14:e1:3c:1c:21:29:49:35:5d: 47:9a:60:5c:47:e3:cd:47:46:f8:c4:36:57:75:68: d4:8c:33:1c:10:86:e5:4d:52:54:55:60:9e:24:ed: 5c:98:c4:f2:97:c2:78:f3:c7:85:26:ce:e8:b9:b3: a5:fc:ee:90:59:70:5b:74:02:90:50:81:2b:5f:3b: e1:a2:7e:2f:fe:b4:49:58:2e:11:6e:a9:ae:4a:23: 72:b9:61:16:a2:1d:e6:6d:8e:a9:a8:5b:eb:6e:e7: 70:01:2c:c2:d7:9b:e0:c9:ab:1d:8f:83:b0:51:6b: f3:c8:74:6c:8f:81:9f:e3:24:97:9c:7a:5f:d3:4b: 71:f2:e7:7d:a1:fa:28:66:37:c2:26:63:53:88:5d: b1:95:8b:bc:56:fc:03:11:44:36:e5:e6:d5:95:e4: b8:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:20:C0:EB:CE:2A:9B:BE:E1:53:DF:04:CD:07:E7:AA:66:79:A0:5F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8921fd4d-606e-360e-a20a-517ba967da1b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.crl X509v3 Authority Key Identifier: keyid:D7:F3:DF:A9:F7:40:F0:2B:51:D8:42:27:F2:DC:C2:E1:DF:60:75:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer sbgp-ipAddrBlock: critical IPv4: 74.50.176.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:58:b7:9a:22:4f:51:0d:98:11:62:a7:6d:35:92:56:bf:eb: 30:f2:b1:4c:93:af:fc:8f:96:15:95:ac:ef:84:ce:2d:61:52: 39:c2:93:df:33:c1:28:d9:c0:d0:6c:a5:c1:8c:1d:20:f8:90: 42:99:44:c2:23:48:c5:4e:3f:a1:5a:c0:d5:1d:e1:e4:69:34: 47:27:8a:27:1c:82:c2:b2:14:21:32:a2:03:75:33:52:fc:e7: 5a:c0:48:19:bc:20:4d:6c:38:ff:c4:ed:f4:a8:0e:fc:93:1b: 88:25:52:45:86:a9:f2:9c:ce:42:0a:c0:ed:c9:d4:98:c6:14: f3:01:a7:63:61:e7:55:47:05:b2:f9:db:6a:fa:ce:7d:8d:0d: a2:28:15:20:4a:bb:44:a6:2e:6c:fd:74:9c:fd:46:f2:48:31: fc:45:37:e7:ba:9f:e8:e1:aa:3e:97:c5:9c:e9:d8:44:35:b3: 25:c3:bd:a5:54:8b:0f:3b:6e:08:4b:da:6e:5f:c5:68:5d:a6: 83:e4:7b:05:8a:07:86:03:65:2c:b1:ed:cc:a6:d8:32:4c:52: 25:21:ef:80:85:65:7d:98:ff:63:39:45:62:f7:67:14:47:b6: 16:46:76:f6:f5:4f:85:be:28:e0:e5:2b:a3:29:eb:24:97:dd: 6a:fe:1e:c4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsVPBc2grFzZVpJaAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODUxMWI4ZGMtNzRiYS00N2U1LWFmNGEtN2M0ZTZiNzc3 ZDkyMB4XDTI1MDkwNDEzMDA0MVoXDTI1MTIwMzE0MDA0MVowLzEtMCsGA1UEAxMk N2U1OTk1MDQtNGQ5YS00ZGE1LTkwMGUtNmQ2MTI5MjYwNzQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjFXZRDx4egFTDq6KLG7Xcjo/izJ01RDi2MRA tuTEfxAEmfFxDiK1Vk0gXB4whZAZe2E19EgdX2NbNYy08Tpdyypbh2T/ME9TnNnT mZ+FE14xNLSxoYDUIESp02RI4/8U4TwcISlJNV1HmmBcR+PNR0b4xDZXdWjUjDMc EIblTVJUVWCeJO1cmMTyl8J488eFJs7oubOl/O6QWXBbdAKQUIErXzvhon4v/rRJ WC4RbqmuSiNyuWEWoh3mbY6pqFvrbudwASzC15vgyasdj4OwUWvzyHRsj4Gf4ySX nHpf00tx8ud9ofooZjfCJmNTiF2xlYu8VvwDEUQ25ebVleS4EwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC0gwOvOKpu+4VPfBM0H56pmeaBfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS84NTEx YjhkYy03NGJhLTQ3ZTUtYWY0YS03YzRlNmI3NzdkOTIvODkyMWZkNGQtNjA2ZS0z NjBlLWEyMGEtNTE3YmE5NjdkYTFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvODUxMWI4ZGMtNzRiYS00N2U1LWFm NGEtN2M0ZTZiNzc3ZDkyLzg1MTFiOGRjLTc0YmEtNDdlNS1hZjRhLTdjNGU2Yjc3 N2Q5Mi5jcmwwHwYDVR0jBBgwFoAU1/PfqfdA8CtR2EIn8tzC4d9gdQ4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS84NTExYjhkYy03NGJhLTQ3ZTUtYWY0YS03YzRl NmI3NzdkOTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDSjKwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB1Yt5oiT1ENmBFip201kla/6zDysUyTr/yPlhWVrO+Ezi1hUjnCk98z wSjZwNBspcGMHSD4kEKZRMIjSMVOP6FawNUd4eRpNEcniiccgsKyFCEyogN1M1L8 51rASBm8IE1sOP/E7fSoDvyTG4glUkWGqfKczkIKwO3J1JjGFPMBp2Nh51VHBbL5 22r6zn2NDaIoFSBKu0SmLmz9dJz9RvJIMfxFN+e6n+jhqj6XxZzp2EQ1syXDvaVU iw87bghL2m5fxWhdpoPkewWKB4YDZSyx7cym2DJMUiUh74CFZX2Y/2M5RWL3ZxRH thZGdvb1T4W+KODlK6Mp6ySX3Wr+HsQ= -----END CERTIFICATE-----Generated at Fri Oct 10 22:33:12 2025 by rpki-client