$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8921fd4d-606e-360e-a20a-517ba967da1b.roa File: 8921fd4d-606e-360e-a20a-517ba967da1b.roa (raw, json) Hash identifier: lh8IgNCnwlF5Mxj6rjgFf8eggNpmI1ww35qNirYkdng= Subject key identifier: E8:9E:84:6F:87:C8:0E:A8:BD:59:9A:04:BB:2A:F5:4E:CB:1D:CC:0A Certificate issuer: /CN=8511b8dc-74ba-47e5-af4a-7c4e6b777d92 Certificate serial: 010D0C9F4328584F3A17CF66B88E104C8D5AAA00 Authority key identifier: D7:F3:DF:A9:F7:40:F0:2B:51:D8:42:27:F2:DC:C2:E1:DF:60:75:0E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8921fd4d-606e-360e-a20a-517ba967da1b.roa Signing time: Sat 19 Sep 2026 13:00:12 +0000 ROA not before: Sat 19 Sep 2026 13:00:12 +0000 ROA not after: Fri 18 Dec 2026 14:00:12 +0000 asID: 4540 IP address blocks: 74.50.176.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3a:17:cf:66:b8:8e:10:4c:8d:5a:aa:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8511b8dc-74ba-47e5-af4a-7c4e6b777d92 Validity Not Before: Sep 19 13:00:12 2026 GMT Not After : Dec 18 14:00:12 2026 GMT Subject: CN=7eafd720-8383-44eb-900d-87863278fb9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:b7:d9:0a:66:52:ae:3b:8a:69:d3:61:d5:9b: 28:8c:dd:44:32:4a:22:59:7f:13:7d:51:d2:f2:95: 82:db:f7:30:6b:83:ec:71:f2:0e:b1:be:ae:20:c4: 96:e0:75:ed:1b:db:95:ec:7d:6f:fa:2f:02:d4:87: 97:fd:84:ba:1f:4b:5f:34:92:63:48:ef:1b:7d:84: 43:af:4b:06:6f:ff:80:dd:30:1f:ab:81:24:ce:91: 05:ab:ee:ce:6c:79:20:cd:01:8a:fd:92:91:37:7c: 3f:4a:49:bc:11:15:8c:b8:70:19:c5:9a:78:8b:8c: 02:69:37:87:48:39:44:5c:a3:66:72:37:af:9f:22: 4f:cd:c5:bf:c7:a5:3b:50:45:35:76:b0:e3:1f:9a: dc:df:1e:a6:c8:ca:b2:f2:1b:ea:df:df:a1:9c:16: b9:c9:3d:6d:84:78:3e:55:d8:a6:ed:d7:b9:08:64: f0:50:ae:c8:7b:df:15:3c:3e:97:fc:74:db:1f:82: 30:1b:18:6a:3e:fb:ca:4b:4d:1e:f3:9d:b2:99:0f: 29:31:f6:37:6c:9a:be:9a:a3:8e:49:02:34:2e:35: f1:59:83:79:7f:68:f3:6a:b3:50:86:ef:87:19:e2: 8d:75:e2:80:af:63:b0:86:cd:2c:95:51:6d:4a:d3: 60:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:9E:84:6F:87:C8:0E:A8:BD:59:9A:04:BB:2A:F5:4E:CB:1D:CC:0A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8921fd4d-606e-360e-a20a-517ba967da1b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.crl X509v3 Authority Key Identifier: keyid:D7:F3:DF:A9:F7:40:F0:2B:51:D8:42:27:F2:DC:C2:E1:DF:60:75:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer sbgp-ipAddrBlock: critical IPv4: 74.50.176.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:cb:b3:12:af:3b:2f:51:8a:fe:df:e9:e2:17:e9:b5:32:d5: e3:34:17:e2:89:f3:58:5d:b6:a2:33:a6:7c:11:5e:b3:e0:1b: a6:bc:56:b3:ce:3c:a9:9d:56:be:2c:42:51:9c:4e:bd:1f:9b: 3e:ab:1b:c5:44:11:11:31:46:a9:e4:24:c4:20:f5:eb:31:86: 1b:0f:92:77:87:eb:85:d4:6e:bd:90:26:96:41:4f:90:5b:ff: 62:df:10:7f:4e:58:bc:f3:18:d4:e8:16:13:bb:fa:3b:d0:8f: 53:24:ad:75:35:df:58:84:fc:f0:1d:1d:5a:aa:75:c1:b1:3f: a3:b8:a6:a7:c1:b5:51:20:c8:dc:e3:02:53:20:7c:32:83:84: 60:c0:38:86:be:5d:71:60:e8:05:40:0c:f6:16:6d:ea:d3:a9: 32:5b:6d:56:82:4e:31:57:9c:53:50:a2:2e:e7:9d:15:b2:01: cb:f2:71:62:7c:36:f7:6c:5e:d6:75:e9:fd:bb:60:cc:8d:3c: 1c:7c:45:fa:92:bc:7a:8f:0d:36:7e:cf:fd:81:a2:f3:41:a8: cb:bd:fd:33:bf:bb:47:2e:1a:e2:ac:2c:d4:ed:c5:71:49:f7: 38:1b:b3:a7:1d:3b:a4:08:79:a1:e0:16:31:78:12:08:80:74: f9:57:b3:f8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE86F89muI4QTI1aqgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODUxMWI4ZGMtNzRiYS00N2U1LWFmNGEtN2M0ZTZiNzc3 ZDkyMB4XDTI2MDkxOTEzMDAxMloXDTI2MTIxODE0MDAxMlowLzEtMCsGA1UEAxMk N2VhZmQ3MjAtODM4My00NGViLTkwMGQtODc4NjMyNzhmYjlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl7fZCmZSrjuKadNh1ZsojN1EMkoiWX8TfVHS 8pWC2/cwa4PscfIOsb6uIMSW4HXtG9uV7H1v+i8C1IeX/YS6H0tfNJJjSO8bfYRD r0sGb/+A3TAfq4EkzpEFq+7ObHkgzQGK/ZKRN3w/Skm8ERWMuHAZxZp4i4wCaTeH SDlEXKNmcjevnyJPzcW/x6U7UEU1drDjH5rc3x6myMqy8hvq39+hnBa5yT1thHg+ Vdim7de5CGTwUK7Ie98VPD6X/HTbH4IwGxhqPvvKS00e852ymQ8pMfY3bJq+mqOO SQI0LjXxWYN5f2jzarNQhu+HGeKNdeKAr2Owhs0slVFtStNguwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOiehG+HyA6ovVmaBLsq9U7LHcwKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS84NTEx YjhkYy03NGJhLTQ3ZTUtYWY0YS03YzRlNmI3NzdkOTIvODkyMWZkNGQtNjA2ZS0z NjBlLWEyMGEtNTE3YmE5NjdkYTFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvODUxMWI4ZGMtNzRiYS00N2U1LWFm NGEtN2M0ZTZiNzc3ZDkyLzg1MTFiOGRjLTc0YmEtNDdlNS1hZjRhLTdjNGU2Yjc3 N2Q5Mi5jcmwwHwYDVR0jBBgwFoAU1/PfqfdA8CtR2EIn8tzC4d9gdQ4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS84NTExYjhkYy03NGJhLTQ3ZTUtYWY0YS03YzRl NmI3NzdkOTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDSjKwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADfLsxKvOy9Riv7f6eIX6bUy1eM0F+KJ81hdtqIzpnwRXrPgG6a8VrPO PKmdVr4sQlGcTr0fmz6rG8VEERExRqnkJMQg9esxhhsPkneH64XUbr2QJpZBT5Bb /2LfEH9OWLzzGNToFhO7+jvQj1MkrXU131iE/PAdHVqqdcGxP6O4pqfBtVEgyNzj AlMgfDKDhGDAOIa+XXFg6AVADPYWberTqTJbbVaCTjFXnFNQoi7nnRWyAcvycWJ8 NvdsXtZ16f27YMyNPBx8RfqSvHqPDTZ+z/2BovNBqMu9/TO/u0cuGuKsLNTtxXFJ 9zgbs6cdO6QIeaHgFjF4EgiAdPlXs/g= -----END CERTIFICATE-----Generated at Mon Sep 21 19:21:21 2026 by rpki-client