$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3bb6068b-be48-4cc9-ad75-338daae24880/b2961625-afdd-3c57-ae0c-90c9e114d526.roa File: b2961625-afdd-3c57-ae0c-90c9e114d526.roa (raw, json) Hash identifier: 15G8NWRmW0JR2kHXE8W6Zr+vDMT5ehMlyWJXuQkEaMk= Subject key identifier: 54:C0:25:84:49:59:12:C6:06:D8:57:AF:F2:B0:80:19:5A:49:BD:4F Certificate issuer: /CN=3bb6068b-be48-4cc9-ad75-338daae24880 Certificate serial: 010D0C9F4328584ED001EDE57DFA9B4958E46C00 Authority key identifier: 6E:D4:F1:96:20:A7:E8:9A:EF:DD:7E:10:E9:42:93:80:A6:AA:52:04 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3bb6068b-be48-4cc9-ad75-338daae24880.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3bb6068b-be48-4cc9-ad75-338daae24880/b2961625-afdd-3c57-ae0c-90c9e114d526.roa Signing time: Wed 12 Aug 2026 13:00:12 +0000 ROA not before: Wed 12 Aug 2026 13:00:12 +0000 ROA not after: Tue 10 Nov 2026 14:00:12 +0000 asID: 7029 IP address blocks: 74.117.216.0/21 maxlen: 21 74.117.220.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3bb6068b-be48-4cc9-ad75-338daae24880/3bb6068b-be48-4cc9-ad75-338daae24880.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3bb6068b-be48-4cc9-ad75-338daae24880/3bb6068b-be48-4cc9-ad75-338daae24880.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3bb6068b-be48-4cc9-ad75-338daae24880.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Sep 2026 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:d0:01:ed:e5:7d:fa:9b:49:58:e4:6c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3bb6068b-be48-4cc9-ad75-338daae24880 Validity Not Before: Aug 12 13:00:12 2026 GMT Not After : Nov 10 14:00:12 2026 GMT Subject: CN=a5e2ff8c-5c27-406c-b171-9119b95085c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:ae:d0:aa:2d:71:e2:17:d2:4c:5f:fb:6d:de: ad:d0:d8:34:62:bf:7a:43:7f:96:f6:1a:fe:93:c9: 67:43:7f:be:26:84:53:f0:28:b7:3a:16:80:fd:c8: e7:f3:da:57:78:3f:56:3a:39:18:10:83:80:be:a1: b5:27:b7:0e:fa:0c:57:91:06:80:3d:97:e8:18:ce: c9:c7:ae:d4:dc:8f:28:f0:07:75:b0:3c:e7:bb:49: 67:06:64:f7:6d:53:fe:73:9d:6d:c1:f2:27:2a:9e: 10:72:de:2f:cd:c1:80:69:6d:78:9d:3b:de:5c:7e: 77:7a:07:5e:01:2b:90:0b:aa:07:62:54:83:c0:84: 67:1f:21:01:39:5f:ab:4a:a1:5f:c3:78:c4:ba:a7: 4c:85:4a:1d:a0:a9:1f:74:54:8f:5d:6c:e8:a0:c7: 92:07:f5:95:52:b0:29:25:87:cb:15:e1:f9:47:d7: 5f:a7:d5:2c:f2:5d:a8:23:57:73:f8:0f:3a:15:a5: 70:4d:9b:d4:57:a5:78:d1:5d:43:72:a3:ed:a5:a5: 20:0a:fc:b7:f4:99:c2:f1:a7:d7:bb:c1:13:2d:ad: 81:43:e8:0c:3b:62:42:b6:b5:83:9b:2d:36:78:9c: b1:b4:f5:08:f7:de:b6:f8:7d:8e:34:a8:eb:68:b3: fb:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:C0:25:84:49:59:12:C6:06:D8:57:AF:F2:B0:80:19:5A:49:BD:4F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3bb6068b-be48-4cc9-ad75-338daae24880/b2961625-afdd-3c57-ae0c-90c9e114d526.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3bb6068b-be48-4cc9-ad75-338daae24880/3bb6068b-be48-4cc9-ad75-338daae24880.crl X509v3 Authority Key Identifier: keyid:6E:D4:F1:96:20:A7:E8:9A:EF:DD:7E:10:E9:42:93:80:A6:AA:52:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3bb6068b-be48-4cc9-ad75-338daae24880.cer sbgp-ipAddrBlock: critical IPv4: 74.117.216.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 99:6b:0a:1e:be:68:12:c4:57:78:88:ba:49:07:af:83:8e:95: b7:82:28:9f:0d:d2:84:56:ff:67:a0:ba:49:04:5a:2b:64:e4: 7d:08:32:c3:c1:d3:6a:0a:f6:fd:f8:1c:34:cc:db:d1:c3:62: 3a:ae:3c:8c:88:36:ed:48:39:18:79:3a:83:25:bc:0a:b8:c4: ff:ae:64:fa:a7:13:2a:87:f5:04:5d:29:74:ba:ab:cb:08:b5: 78:41:8d:f3:64:00:d3:41:75:49:90:54:65:0f:7a:16:ec:30: 63:4a:79:a6:19:71:1e:87:1d:f8:e0:32:08:40:d0:7d:e0:4d: 11:1d:bb:73:9e:eb:f6:72:79:a8:1b:2c:01:64:1f:5a:91:d4: 4e:21:82:21:b0:c9:2e:89:06:90:f5:4a:40:fe:89:35:52:9e: 3d:17:14:c1:aa:e4:17:75:c6:ec:5b:ab:f3:97:23:89:61:e2: 00:d9:87:2b:f0:87:35:e9:55:93:4e:2a:a4:e8:04:31:25:bf: 2a:7e:68:8d:37:dc:b9:f6:49:ad:48:f1:80:05:ad:c1:3a:ce: f1:f7:79:17:74:72:2d:db:95:f1:6a:43:32:de:90:80:f0:b6: da:3a:c6:3e:3b:e7:06:84:eb:c9:43:d8:7a:7c:c7:79:e3:9e: c1:69:bd:bd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7QAe3lffqbSVjkbAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2JiNjA2OGItYmU0OC00Y2M5LWFkNzUtMzM4ZGFhZTI0 ODgwMB4XDTI2MDgxMjEzMDAxMloXDTI2MTExMDE0MDAxMlowLzEtMCsGA1UEAxMk YTVlMmZmOGMtNWMyNy00MDZjLWIxNzEtOTExOWI5NTA4NWMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAma7Qqi1x4hfSTF/7bd6t0Ng0Yr96Q3+W9hr+ k8lnQ3++JoRT8Ci3OhaA/cjn89pXeD9WOjkYEIOAvqG1J7cO+gxXkQaAPZfoGM7J x67U3I8o8Ad1sDznu0lnBmT3bVP+c51twfInKp4Qct4vzcGAaW14nTveXH53egde ASuQC6oHYlSDwIRnHyEBOV+rSqFfw3jEuqdMhUodoKkfdFSPXWzooMeSB/WVUrAp JYfLFeH5R9dfp9Us8l2oI1dz+A86FaVwTZvUV6V40V1DcqPtpaUgCvy39JnC8afX u8ETLa2BQ+gMO2JCtrWDmy02eJyxtPUI9962+H2ONKjraLP7BwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFTAJYRJWRLGBthXr/KwgBlaSb1PMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zYmI2 MDY4Yi1iZTQ4LTRjYzktYWQ3NS0zMzhkYWFlMjQ4ODAvYjI5NjE2MjUtYWZkZC0z YzU3LWFlMGMtOTBjOWUxMTRkNTI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvM2JiNjA2OGItYmU0OC00Y2M5LWFk NzUtMzM4ZGFhZTI0ODgwLzNiYjYwNjhiLWJlNDgtNGNjOS1hZDc1LTMzOGRhYWUy NDg4MC5jcmwwHwYDVR0jBBgwFoAUbtTxliCn6Jrv3X4Q6UKTgKaqUgQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zYmI2MDY4Yi1iZTQ4LTRjYzktYWQ3NS0zMzhk YWFlMjQ4ODAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDSnXYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJlrCh6+aBLEV3iIukkHr4OOlbeCKJ8N0oRW/2egukkEWitk5H0IMsPB 02oK9v34HDTM29HDYjquPIyINu1IORh5OoMlvAq4xP+uZPqnEyqH9QRdKXS6q8sI tXhBjfNkANNBdUmQVGUPehbsMGNKeaYZcR6HHfjgMghA0H3gTREdu3Oe6/Zyeagb LAFkH1qR1E4hgiGwyS6JBpD1SkD+iTVSnj0XFMGq5Bd1xuxbq/OXI4lh4gDZhyvw hzXpVZNOKqToBDElvyp+aI033Ln2Sa1I8YAFrcE6zvH3eRd0ci3blfFqQzLekIDw tto6xj475waE68lD2Hp8x3njnsFpvb0= -----END CERTIFICATE-----Generated at Tue Sep 1 03:42:58 2026 by rpki-client