$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac57a4e4-4771-4b87-be6a-e3b27f5ac5dd/b84aedd6-f81f-327a-9ea2-d6c488a03d44.roa File: b84aedd6-f81f-327a-9ea2-d6c488a03d44.roa (raw, json) Hash identifier: gAWKdMZAd1nkoPcGxmxCfKYZkm/5kCHZN7kNfGJh2Vg= Subject key identifier: 5E:A5:B8:AF:C9:F1:69:70:01:AB:50:3B:B7:3A:9A:E7:C1:6F:7B:B7 Certificate issuer: /CN=ac57a4e4-4771-4b87-be6a-e3b27f5ac5dd Certificate serial: 010D0C9F4328584F067231DA7BB6126179D3A280 Authority key identifier: D5:D9:87:C4:51:CF:76:02:76:15:6C:18:DA:C5:C6:0F:CD:C9:FD:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac57a4e4-4771-4b87-be6a-e3b27f5ac5dd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac57a4e4-4771-4b87-be6a-e3b27f5ac5dd/b84aedd6-f81f-327a-9ea2-d6c488a03d44.roa Signing time: Tue 01 Sep 2026 01:00:12 +0000 ROA not before: Tue 01 Sep 2026 01:00:12 +0000 ROA not after: Mon 30 Nov 2026 02:00:12 +0000 asID: 26395 IP address blocks: 74.51.240.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac57a4e4-4771-4b87-be6a-e3b27f5ac5dd/ac57a4e4-4771-4b87-be6a-e3b27f5ac5dd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac57a4e4-4771-4b87-be6a-e3b27f5ac5dd/ac57a4e4-4771-4b87-be6a-e3b27f5ac5dd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac57a4e4-4771-4b87-be6a-e3b27f5ac5dd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:06:72:31:da:7b:b6:12:61:79:d3:a2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ac57a4e4-4771-4b87-be6a-e3b27f5ac5dd Validity Not Before: Sep 1 01:00:12 2026 GMT Not After : Nov 30 02:00:12 2026 GMT Subject: CN=5a71abc4-631b-4315-adce-3e8844c7f950 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:2b:1a:80:4c:04:c8:bd:bd:5a:4c:2c:c7:1a: 0d:e2:84:08:3b:cc:21:4c:f6:b5:7d:08:e4:32:96: d4:08:4b:4a:cf:9b:5e:3c:b7:a1:63:64:81:3b:ad: 4b:e6:fb:89:45:ed:d1:b2:b1:f4:a5:05:90:7e:7d: 46:13:be:ad:ef:7b:cd:8d:f5:ac:ee:d1:20:2a:13: 8c:9d:85:e8:93:94:77:65:9a:3f:e0:09:45:4b:a4: 89:a7:08:78:f7:cc:d5:f4:0a:c1:20:b6:e8:ef:57: 08:dc:fb:04:a8:4a:e1:31:04:d3:78:e3:95:a3:b4: cc:0e:44:06:d5:a5:53:05:a7:fc:47:f3:4b:dd:67: e3:02:41:7e:74:cd:5c:b1:91:50:32:de:1d:03:db: 05:38:5d:49:26:05:32:42:bc:ca:4e:30:e5:2a:77: d6:98:b0:44:f9:92:8a:61:bf:a4:66:f1:c5:54:42: 48:c5:46:2d:ea:a9:61:af:4e:bb:c6:1e:ab:ac:17: 52:d8:04:12:02:62:9d:af:1c:e2:2b:ce:15:40:8c: 00:1f:85:92:df:6d:8e:2e:e1:5a:e6:50:eb:40:49: a7:95:3b:b1:df:77:90:b5:5d:7f:05:b7:66:fc:0c: 9f:8f:65:9b:ee:e2:d5:77:da:2e:ad:e7:01:ac:92: cd:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:A5:B8:AF:C9:F1:69:70:01:AB:50:3B:B7:3A:9A:E7:C1:6F:7B:B7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac57a4e4-4771-4b87-be6a-e3b27f5ac5dd/b84aedd6-f81f-327a-9ea2-d6c488a03d44.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac57a4e4-4771-4b87-be6a-e3b27f5ac5dd/ac57a4e4-4771-4b87-be6a-e3b27f5ac5dd.crl X509v3 Authority Key Identifier: keyid:D5:D9:87:C4:51:CF:76:02:76:15:6C:18:DA:C5:C6:0F:CD:C9:FD:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac57a4e4-4771-4b87-be6a-e3b27f5ac5dd.cer sbgp-ipAddrBlock: critical IPv4: 74.51.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:ff:3c:90:bf:c3:34:1a:3b:44:26:0e:a4:36:62:2a:03:19: 80:ce:1c:e6:66:4f:6c:8f:69:a5:40:66:e5:8f:cf:f2:d9:17: d1:c9:4c:e8:46:5d:20:38:57:1b:22:d6:c5:5a:ac:f1:03:44: 31:f7:96:1b:df:d9:9b:f9:3a:13:2c:5a:5b:ea:37:b9:31:e6: 98:c9:e8:6d:3a:f9:c1:53:37:40:f2:57:21:4c:bd:72:a5:b9: 1d:b3:52:b1:ec:e3:64:41:5b:d1:bb:33:f5:41:63:4b:8b:53: 1c:0f:74:b4:6d:69:12:91:a4:4f:da:bb:12:19:c5:2e:d9:92: 62:9c:68:e4:df:1d:39:07:33:1f:cb:cb:7f:ba:db:c1:62:4c: 32:ef:46:36:5f:3f:12:07:9d:cd:0e:a1:84:5c:77:ee:f6:93: ba:23:6f:5f:8e:ec:67:df:23:8f:51:dd:95:20:e3:9a:95:70: cd:64:d4:ee:9f:55:1e:50:bb:e8:57:51:73:ad:3c:64:6e:d0: d8:94:87:f4:2c:66:ca:c7:4d:20:82:7c:b2:af:e5:64:45:1c: 71:1b:35:3c:77:ce:b7:23:c4:99:f9:3b:a8:39:d9:4c:9b:44: f2:f8:49:05:a6:06:13:97:ca:cc:cb:3a:0d:76:d7:25:61:d4: 8c:cd:8e:7f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8GcjHae7YSYXnTooAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWM1N2E0ZTQtNDc3MS00Yjg3LWJlNmEtZTNiMjdmNWFj NWRkMB4XDTI2MDkwMTAxMDAxMloXDTI2MTEzMDAyMDAxMlowLzEtMCsGA1UEAxMk NWE3MWFiYzQtNjMxYi00MzE1LWFkY2UtM2U4ODQ0YzdmOTUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtCsagEwEyL29WkwsxxoN4oQIO8whTPa1fQjk MpbUCEtKz5tePLehY2SBO61L5vuJRe3RsrH0pQWQfn1GE76t73vNjfWs7tEgKhOM nYXok5R3ZZo/4AlFS6SJpwh498zV9ArBILbo71cI3PsEqErhMQTTeOOVo7TMDkQG 1aVTBaf8R/NL3WfjAkF+dM1csZFQMt4dA9sFOF1JJgUyQrzKTjDlKnfWmLBE+ZKK Yb+kZvHFVEJIxUYt6qlhr067xh6rrBdS2AQSAmKdrxziK84VQIwAH4WS322OLuFa 5lDrQEmnlTux33eQtV1/Bbdm/Ayfj2Wb7uLVd9ourecBrJLNPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF6luK/J8WlwAatQO7c6mufBb3u3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hYzU3 YTRlNC00NzcxLTRiODctYmU2YS1lM2IyN2Y1YWM1ZGQvYjg0YWVkZDYtZjgxZi0z MjdhLTllYTItZDZjNDg4YTAzZDQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYWM1N2E0ZTQtNDc3MS00Yjg3LWJl NmEtZTNiMjdmNWFjNWRkL2FjNTdhNGU0LTQ3NzEtNGI4Ny1iZTZhLWUzYjI3ZjVh YzVkZC5jcmwwHwYDVR0jBBgwFoAU1dmHxFHPdgJ2FWwY2sXGD83J/ckwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hYzU3YTRlNC00NzcxLTRiODctYmU2YS1lM2Iy N2Y1YWM1ZGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQESjPwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEP/PJC/wzQaO0QmDqQ2YioDGYDOHOZmT2yPaaVAZuWPz/LZF9HJTOhG XSA4Vxsi1sVarPEDRDH3lhvf2Zv5OhMsWlvqN7kx5pjJ6G06+cFTN0DyVyFMvXKl uR2zUrHs42RBW9G7M/VBY0uLUxwPdLRtaRKRpE/auxIZxS7ZkmKcaOTfHTkHMx/L y3+628FiTDLvRjZfPxIHnc0OoYRcd+72k7ojb1+O7GffI49R3ZUg45qVcM1k1O6f VR5Qu+hXUXOtPGRu0NiUh/QsZsrHTSCCfLKv5WRFHHEbNTx3zrcjxJn5O6g52Uyb RPL4SQWmBhOXyszLOg121yVh1IzNjn8= -----END CERTIFICATE-----Generated at Sat Sep 5 05:26:19 2026 by rpki-client