$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ebb739b8-a0ed-4449-8c62-99ff6b94b1c3/5353635b-bf0d-33da-9876-6f3bcd648b22.roa File: 5353635b-bf0d-33da-9876-6f3bcd648b22.roa (raw, json) Hash identifier: s880Y+Hho6vuYVFV4v5vG0lkin6WXZDomsKUrrGCBZs= Subject key identifier: 1E:4D:92:16:76:7F:08:71:B7:B1:ED:F8:20:F8:8D:3E:CC:03:76:95 Certificate issuer: /CN=ebb739b8-a0ed-4449-8c62-99ff6b94b1c3 Certificate serial: 010D0C9F4328584EC7A1D21FA992C270EC4DEC80 Authority key identifier: EE:FE:6D:FB:B0:55:03:BC:DA:B3:01:9A:91:11:03:C2:E7:54:DB:63 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ebb739b8-a0ed-4449-8c62-99ff6b94b1c3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ebb739b8-a0ed-4449-8c62-99ff6b94b1c3/5353635b-bf0d-33da-9876-6f3bcd648b22.roa Signing time: Sun 09 Aug 2026 13:00:12 +0000 ROA not before: Sun 09 Aug 2026 13:00:12 +0000 ROA not after: Sat 07 Nov 2026 14:00:12 +0000 asID: 19528 IP address blocks: 74.209.174.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ebb739b8-a0ed-4449-8c62-99ff6b94b1c3/ebb739b8-a0ed-4449-8c62-99ff6b94b1c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ebb739b8-a0ed-4449-8c62-99ff6b94b1c3/ebb739b8-a0ed-4449-8c62-99ff6b94b1c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ebb739b8-a0ed-4449-8c62-99ff6b94b1c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 22 Aug 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:c7:a1:d2:1f:a9:92:c2:70:ec:4d:ec:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ebb739b8-a0ed-4449-8c62-99ff6b94b1c3 Validity Not Before: Aug 9 13:00:12 2026 GMT Not After : Nov 7 14:00:12 2026 GMT Subject: CN=b30e8fe2-8e88-4e8e-b589-4ab5185a5455 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:58:07:f6:f3:c4:f3:6b:ec:a4:67:b8:16:cb: a6:81:40:77:0a:14:d0:40:d2:e9:4f:43:5f:09:03: 66:32:a4:93:2e:8c:76:4e:2e:37:ec:60:27:47:b3: 0e:17:59:eb:0b:71:5f:d0:88:9e:f7:fd:ad:80:f5: 66:ce:9b:cf:6c:b8:8c:f0:e1:63:76:18:8d:c7:f8: f9:26:37:61:06:2c:b0:7c:e6:06:b7:9d:c7:c6:79: 45:8f:dc:6c:49:98:df:e9:94:3b:d4:ff:0d:b5:c9: 3b:ce:bc:3f:f1:36:17:29:c9:bc:c9:c3:a3:0a:f7: 6c:35:70:f8:9d:40:10:83:86:4e:36:94:54:58:1e: 0f:65:d7:5f:f9:db:a7:e9:d3:6d:df:4f:26:80:0e: aa:1a:94:a4:a9:77:7e:15:c8:97:fa:a6:fc:2d:1b: ca:94:a8:40:c9:3a:7e:81:45:a0:c2:dd:05:51:93: 07:75:12:d8:66:3c:06:74:57:e1:3e:fd:69:65:d8: 0a:2b:ae:7d:15:06:74:43:1c:69:db:06:6d:8f:ca: e9:86:52:fd:d1:dc:8f:c2:87:ab:31:8d:38:dd:ce: ea:56:71:bb:3e:39:f2:10:68:21:cf:0a:39:69:49: ae:16:91:46:28:5b:e3:56:c8:13:04:98:2e:a7:b1: 68:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:4D:92:16:76:7F:08:71:B7:B1:ED:F8:20:F8:8D:3E:CC:03:76:95 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ebb739b8-a0ed-4449-8c62-99ff6b94b1c3/5353635b-bf0d-33da-9876-6f3bcd648b22.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ebb739b8-a0ed-4449-8c62-99ff6b94b1c3/ebb739b8-a0ed-4449-8c62-99ff6b94b1c3.crl X509v3 Authority Key Identifier: keyid:EE:FE:6D:FB:B0:55:03:BC:DA:B3:01:9A:91:11:03:C2:E7:54:DB:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ebb739b8-a0ed-4449-8c62-99ff6b94b1c3.cer sbgp-ipAddrBlock: critical IPv4: 74.209.174.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:eb:35:87:93:65:34:c7:24:26:ff:79:5e:04:a9:87:2d:4b: cb:d7:6c:db:4c:51:60:8e:d6:d8:24:7f:d1:9f:94:c4:0b:22: f7:0e:33:24:fc:fb:ee:59:47:42:c7:df:c6:39:02:6a:d1:14: 01:2c:56:45:6c:d2:67:35:86:2f:c3:f7:c0:73:0f:3a:ff:88: 71:50:18:e3:d2:2b:95:8d:b2:96:29:e1:71:32:69:c0:51:e6: f2:98:ba:61:9a:30:15:b7:c8:2d:71:8f:67:45:81:96:fe:50: 87:27:6f:0a:0a:aa:1a:9f:65:63:6a:da:7b:d9:fc:28:17:f6: 95:4b:a4:67:12:c0:c3:ea:94:03:8d:a7:f9:42:c5:77:00:7a: f1:5e:6f:07:a9:79:a6:4d:36:44:ed:3e:37:0a:6d:c1:ca:b4: 31:fa:1a:15:19:ef:46:55:44:9b:10:cc:17:35:84:76:03:a3: c2:05:27:1c:5a:f2:2b:a6:a6:97:bf:d1:7b:d0:2b:89:45:d9: 24:85:9a:a7:1a:cb:5e:a9:71:6d:a4:25:b7:22:9d:01:c5:fa: 8d:6f:1b:d3:bc:cf:31:37:90:35:b6:5e:c9:98:8d:9b:48:77: eb:37:2f:78:09:5c:ab:01:fd:b9:48:79:93:ef:5c:dd:60:17: 2e:ec:d2:c5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7HodIfqZLCcOxN7IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWJiNzM5YjgtYTBlZC00NDQ5LThjNjItOTlmZjZiOTRi MWMzMB4XDTI2MDgwOTEzMDAxMloXDTI2MTEwNzE0MDAxMlowLzEtMCsGA1UEAxMk YjMwZThmZTItOGU4OC00ZThlLWI1ODktNGFiNTE4NWE1NDU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAulgH9vPE82vspGe4FsumgUB3ChTQQNLpT0Nf CQNmMqSTLox2Ti437GAnR7MOF1nrC3Ff0Iie9/2tgPVmzpvPbLiM8OFjdhiNx/j5 JjdhBiywfOYGt53HxnlFj9xsSZjf6ZQ71P8Ntck7zrw/8TYXKcm8ycOjCvdsNXD4 nUAQg4ZONpRUWB4PZddf+dun6dNt308mgA6qGpSkqXd+FciX+qb8LRvKlKhAyTp+ gUWgwt0FUZMHdRLYZjwGdFfhPv1pZdgKK659FQZ0Qxxp2wZtj8rphlL90dyPwoer MY043c7qVnG7PjnyEGghzwo5aUmuFpFGKFvjVsgTBJgup7FoSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB5NkhZ2fwhxt7Ht+CD4jT7MA3aVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9lYmI3 MzliOC1hMGVkLTQ0NDktOGM2Mi05OWZmNmI5NGIxYzMvNTM1MzYzNWItYmYwZC0z M2RhLTk4NzYtNmYzYmNkNjQ4YjIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZWJiNzM5YjgtYTBlZC00NDQ5LThj NjItOTlmZjZiOTRiMWMzL2ViYjczOWI4LWEwZWQtNDQ0OS04YzYyLTk5ZmY2Yjk0 YjFjMy5jcmwwHwYDVR0jBBgwFoAU7v5t+7BVA7zaswGakREDwudU22MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9lYmI3MzliOC1hMGVkLTQ0NDktOGM2Mi05OWZm NmI5NGIxYzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAStGuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACvrNYeTZTTHJCb/eV4EqYctS8vXbNtMUWCO1tgkf9GflMQLIvcOMyT8 ++5ZR0LH38Y5AmrRFAEsVkVs0mc1hi/D98BzDzr/iHFQGOPSK5WNspYp4XEyacBR 5vKYumGaMBW3yC1xj2dFgZb+UIcnbwoKqhqfZWNq2nvZ/CgX9pVLpGcSwMPqlAON p/lCxXcAevFebwepeaZNNkTtPjcKbcHKtDH6GhUZ70ZVRJsQzBc1hHYDo8IFJxxa 8iumppe/0XvQK4lF2SSFmqcay16pcW2kJbcinQHF+o1vG9O8zzE3kDW2XsmYjZtI d+s3L3gJXKsB/blIeZPvXN1gFy7s0sU= -----END CERTIFICATE-----Generated at Fri Aug 21 02:03:13 2026 by rpki-client