$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/5e6f751c-d25e-3084-9777-cc41c119db99.roa File: 5e6f751c-d25e-3084-9777-cc41c119db99.roa (raw, json) Hash identifier: m6rwxORKQTUPG1NfZShDk0N7oJurmF/2fsGh/FXRw2c= Subject key identifier: 8D:84:71:00:3D:72:35:27:E4:76:E1:B8:05:40:52:C3:6C:74:EA:28 Certificate issuer: /CN=8511b8dc-74ba-47e5-af4a-7c4e6b777d92 Certificate serial: 010D0C9F4328584F3A17CF19B9C2B2B0261150C0 Authority key identifier: D7:F3:DF:A9:F7:40:F0:2B:51:D8:42:27:F2:DC:C2:E1:DF:60:75:0E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/5e6f751c-d25e-3084-9777-cc41c119db99.roa Signing time: Sat 19 Sep 2026 13:00:12 +0000 ROA not before: Sat 19 Sep 2026 13:00:12 +0000 ROA not after: Fri 18 Dec 2026 14:00:12 +0000 asID: 4540 IP address blocks: 74.126.120.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3a:17:cf:19:b9:c2:b2:b0:26:11:50:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8511b8dc-74ba-47e5-af4a-7c4e6b777d92 Validity Not Before: Sep 19 13:00:12 2026 GMT Not After : Dec 18 14:00:12 2026 GMT Subject: CN=e867bcfe-ad81-43b5-a750-4c8a2997e5e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:de:57:ac:73:82:7f:8c:e5:69:78:ed:21:11: 26:55:77:96:83:4f:e7:de:31:86:3b:aa:bf:7b:f5: db:46:82:42:a8:50:c9:1d:c1:62:73:c2:a9:a1:15: d2:10:12:a7:94:dc:8d:3b:f5:1d:3c:84:19:f5:f3: 0a:94:43:50:e7:14:3c:4e:b3:17:12:38:93:a2:d4: ee:6c:59:1f:16:11:cd:98:14:ef:bf:21:31:d3:b6: 0f:5d:c5:93:10:ad:24:94:87:3d:a6:7d:b3:2c:0f: ef:8a:ae:10:db:f2:cf:05:52:de:3a:c8:83:45:6b: 34:87:9f:87:64:9a:15:54:dc:db:26:2c:d4:a7:f3: 87:fd:19:4b:65:f9:48:99:e6:33:0f:b8:30:21:ef: ea:c5:99:50:8a:e3:ea:65:97:cd:2f:29:a3:ee:08: d3:7d:21:f3:f5:bb:a8:e4:55:91:be:56:03:2d:31: 7a:c6:19:ca:43:44:14:b1:9a:ed:1e:ba:d8:01:71: 9c:b1:5c:d4:1a:4f:11:bb:75:9a:64:18:c3:d9:4c: f7:e1:5f:16:f1:19:97:9d:a0:4a:30:37:2d:67:93: 03:03:7b:4a:ef:10:8e:d7:17:23:f7:84:b6:75:8e: 19:af:09:bc:5a:06:64:d2:2b:f9:8d:ee:99:10:d6: ae:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:84:71:00:3D:72:35:27:E4:76:E1:B8:05:40:52:C3:6C:74:EA:28 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/5e6f751c-d25e-3084-9777-cc41c119db99.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.crl X509v3 Authority Key Identifier: keyid:D7:F3:DF:A9:F7:40:F0:2B:51:D8:42:27:F2:DC:C2:E1:DF:60:75:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer sbgp-ipAddrBlock: critical IPv4: 74.126.120.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b6:63:cc:69:72:6d:9a:de:fa:b6:f6:ca:95:20:c1:91:f2:1f: a2:c4:2f:02:fe:29:b8:d4:f7:95:57:2e:79:0c:44:63:41:83: 24:c8:46:93:43:6c:3e:2b:39:75:39:2b:54:39:44:08:3e:13: 06:fc:56:79:b1:2f:a2:13:3c:bc:93:ce:01:5e:64:26:ab:47: 86:ae:ef:9b:fc:41:aa:03:59:3b:0b:8b:03:9d:b5:8a:30:4e: ed:fa:a2:60:2c:71:ba:aa:2b:3a:97:8d:91:1a:0e:6d:65:12: f3:29:5f:ca:86:1a:58:2c:79:af:af:f0:85:69:89:86:d4:4b: 71:e8:63:32:71:5e:b0:a5:12:6f:92:be:95:f0:8c:31:da:9a: 69:9d:fb:4a:cc:57:67:d5:b9:90:04:e8:89:47:c9:45:7c:3f: 86:d3:b2:d4:97:87:62:64:9e:78:16:ae:98:10:c5:de:64:ea: 2a:5d:28:cc:b2:18:f6:4f:52:96:99:13:5a:3e:30:78:64:23: 52:c1:37:0e:e7:2c:fd:1f:61:6a:c2:45:04:d5:a6:4a:6e:07: 9f:b4:85:e0:72:ff:20:7a:48:24:72:29:dc:35:96:f1:e3:dc: 45:93:95:74:2f:85:4f:e5:bd:77:8c:b9:1e:8a:e8:85:4c:7b: c5:a9:20:21 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE86F88ZucKysCYRUMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODUxMWI4ZGMtNzRiYS00N2U1LWFmNGEtN2M0ZTZiNzc3 ZDkyMB4XDTI2MDkxOTEzMDAxMloXDTI2MTIxODE0MDAxMlowLzEtMCsGA1UEAxMk ZTg2N2JjZmUtYWQ4MS00M2I1LWE3NTAtNGM4YTI5OTdlNWUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAid5XrHOCf4zlaXjtIREmVXeWg0/n3jGGO6q/ e/XbRoJCqFDJHcFic8KpoRXSEBKnlNyNO/UdPIQZ9fMKlENQ5xQ8TrMXEjiTotTu bFkfFhHNmBTvvyEx07YPXcWTEK0klIc9pn2zLA/viq4Q2/LPBVLeOsiDRWs0h5+H ZJoVVNzbJizUp/OH/RlLZflImeYzD7gwIe/qxZlQiuPqZZfNLymj7gjTfSHz9buo 5FWRvlYDLTF6xhnKQ0QUsZrtHrrYAXGcsVzUGk8Ru3WaZBjD2Uz34V8W8RmXnaBK MDctZ5MDA3tK7xCO1xcj94S2dY4Zrwm8WgZk0iv5je6ZENaukwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI2EcQA9cjUn5HbhuAVAUsNsdOooMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS84NTEx YjhkYy03NGJhLTQ3ZTUtYWY0YS03YzRlNmI3NzdkOTIvNWU2Zjc1MWMtZDI1ZS0z MDg0LTk3NzctY2M0MWMxMTlkYjk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvODUxMWI4ZGMtNzRiYS00N2U1LWFm NGEtN2M0ZTZiNzc3ZDkyLzg1MTFiOGRjLTc0YmEtNDdlNS1hZjRhLTdjNGU2Yjc3 N2Q5Mi5jcmwwHwYDVR0jBBgwFoAU1/PfqfdA8CtR2EIn8tzC4d9gdQ4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS84NTExYjhkYy03NGJhLTQ3ZTUtYWY0YS03YzRl NmI3NzdkOTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDSn54MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALZjzGlybZre+rb2ypUgwZHyH6LELwL+KbjU95VXLnkMRGNBgyTIRpND bD4rOXU5K1Q5RAg+Ewb8VnmxL6ITPLyTzgFeZCarR4au75v8QaoDWTsLiwOdtYow Tu36omAscbqqKzqXjZEaDm1lEvMpX8qGGlgsea+v8IVpiYbUS3HoYzJxXrClEm+S vpXwjDHammmd+0rMV2fVuZAE6IlHyUV8P4bTstSXh2JknngWrpgQxd5k6ipdKMyy GPZPUpaZE1o+MHhkI1LBNw7nLP0fYWrCRQTVpkpuB5+0heBy/yB6SCRyKdw1lvHj 3EWTlXQvhU/lvXeMuR6K6IVMe8WpICE= -----END CERTIFICATE-----Generated at Sun Sep 27 04:24:04 2026 by rpki-client