$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/0ff3813d-a425-3f1f-a715-aacfa0108453.roa File: 0ff3813d-a425-3f1f-a715-aacfa0108453.roa (raw, json) Hash identifier: bR/+mDaZ05fzn2j97JL1lBuM1/pG41apoVV48BPDurs= Subject key identifier: 5C:36:67:CF:63:22:C3:4D:17:34:76:4D:C0:6D:CB:58:6D:27:B1:63 Certificate issuer: /CN=8511b8dc-74ba-47e5-af4a-7c4e6b777d92 Certificate serial: 010D0C9F4328584B153C17AB0B5AAE2E34886E80 Authority key identifier: D7:F3:DF:A9:F7:40:F0:2B:51:D8:42:27:F2:DC:C2:E1:DF:60:75:0E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/0ff3813d-a425-3f1f-a715-aacfa0108453.roa Signing time: Thu 04 Sep 2025 13:00:41 +0000 ROA not before: Thu 04 Sep 2025 13:00:41 +0000 ROA not after: Wed 03 Dec 2025 14:00:41 +0000 asID: 4540 IP address blocks: 170.89.192.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:15:3c:17:ab:0b:5a:ae:2e:34:88:6e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8511b8dc-74ba-47e5-af4a-7c4e6b777d92 Validity Not Before: Sep 4 13:00:41 2025 GMT Not After : Dec 3 14:00:41 2025 GMT Subject: CN=ca542646-e528-4d4f-9aa8-297808472729 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:d7:04:ab:45:6e:c7:ea:cc:15:9a:d6:21:be: 8a:fa:8e:9a:ab:f2:a4:43:b6:3b:2e:89:a0:95:14: a2:fc:ba:90:fc:29:e5:ec:73:ca:4f:b4:a3:71:60: 7b:8a:62:c6:c5:ea:5f:52:41:63:a5:d0:75:45:90: 68:4d:bb:f4:87:d6:73:9f:3c:b7:3c:30:a8:e9:bb: e8:5c:62:c5:64:0e:5f:c7:64:d0:b5:b5:05:32:94: 7d:8d:9f:c2:c8:51:67:c1:6b:ac:be:ee:a4:69:72: 16:4c:bc:7a:2a:1f:29:2c:bb:93:3f:61:3f:06:ef: 2e:e3:d0:36:c1:cd:bf:a3:ec:c6:e4:04:0b:26:3c: 6c:54:d4:ad:6c:e0:47:29:94:de:45:d5:5d:f6:28: 1d:1c:08:9d:62:84:71:34:ba:c9:66:52:9e:b5:b6: 8e:56:ec:d0:51:7a:93:26:89:b1:1b:bd:71:ed:d7: 59:96:e7:91:32:c3:70:f8:74:b5:9b:1b:a2:46:42: 41:d7:c5:e8:02:ab:f3:0d:2c:95:2d:97:10:77:6e: 60:6a:be:30:27:40:e9:e7:fb:63:0c:8d:ca:89:c9: bb:5d:49:02:83:87:5b:b7:c2:5e:dd:ee:c5:df:bc: 83:65:b9:1f:a8:62:90:77:aa:43:d6:a0:b8:20:41: 5a:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:36:67:CF:63:22:C3:4D:17:34:76:4D:C0:6D:CB:58:6D:27:B1:63 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/0ff3813d-a425-3f1f-a715-aacfa0108453.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.crl X509v3 Authority Key Identifier: keyid:D7:F3:DF:A9:F7:40:F0:2B:51:D8:42:27:F2:DC:C2:E1:DF:60:75:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer sbgp-ipAddrBlock: critical IPv4: 170.89.192.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:90:90:15:4d:57:ad:26:d0:94:64:47:e0:a1:f4:0e:fc:64: 17:f4:9b:6e:87:2a:5c:98:c1:6c:2b:4a:6f:04:ee:e3:1d:97: 52:76:80:de:94:89:d9:72:c0:c7:b9:3c:82:95:aa:e8:7a:9f: 09:e9:d1:db:05:60:31:a6:01:0c:cb:26:ab:1b:cf:00:54:7d: 7a:78:97:de:b5:59:d5:d8:27:d7:90:69:93:0d:ce:4d:fa:3c: b6:35:d5:0c:93:e0:4d:ca:b9:63:26:5e:6a:ec:58:eb:a0:72: 59:cc:05:1c:0e:ed:a0:83:9c:43:87:14:36:f2:8e:1d:64:ae: 9f:e8:38:61:11:b1:17:7d:53:82:44:4d:be:c1:b4:8f:86:ed: df:cd:ea:bd:90:15:81:4a:3e:1d:d5:44:f7:26:c1:02:62:d7: 0a:b3:16:d4:75:2e:d2:b7:53:c4:b5:e2:6a:10:1c:ae:c2:4b: d5:76:2e:5b:b1:ee:4a:71:ad:68:db:89:cf:94:82:c0:04:d0: db:ba:d1:f8:96:64:5f:89:73:d7:56:0b:38:00:bc:c2:5f:01: 90:4c:dd:ff:0a:7e:62:f4:6d:cb:3b:0e:00:4b:68:71:15:1a: ea:dc:24:ce:3c:fd:82:54:44:b8:8b:f9:f2:3b:0b:a9:a9:00: 95:a1:5c:8d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsVPBerC1quLjSIboAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODUxMWI4ZGMtNzRiYS00N2U1LWFmNGEtN2M0ZTZiNzc3 ZDkyMB4XDTI1MDkwNDEzMDA0MVoXDTI1MTIwMzE0MDA0MVowLzEtMCsGA1UEAxMk Y2E1NDI2NDYtZTUyOC00ZDRmLTlhYTgtMjk3ODA4NDcyNzI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl9cEq0Vux+rMFZrWIb6K+o6aq/KkQ7Y7Lomg lRSi/LqQ/Cnl7HPKT7SjcWB7imLGxepfUkFjpdB1RZBoTbv0h9Zznzy3PDCo6bvo XGLFZA5fx2TQtbUFMpR9jZ/CyFFnwWusvu6kaXIWTLx6Kh8pLLuTP2E/Bu8u49A2 wc2/o+zG5AQLJjxsVNStbOBHKZTeRdVd9igdHAidYoRxNLrJZlKetbaOVuzQUXqT JomxG71x7ddZlueRMsNw+HS1mxuiRkJB18XoAqvzDSyVLZcQd25gar4wJ0Dp5/tj DI3Kicm7XUkCg4dbt8Je3e7F37yDZbkfqGKQd6pD1qC4IEFaUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFw2Z89jIsNNFzR2TcBty1htJ7FjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS84NTEx YjhkYy03NGJhLTQ3ZTUtYWY0YS03YzRlNmI3NzdkOTIvMGZmMzgxM2QtYTQyNS0z ZjFmLWE3MTUtYWFjZmEwMTA4NDUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvODUxMWI4ZGMtNzRiYS00N2U1LWFm NGEtN2M0ZTZiNzc3ZDkyLzg1MTFiOGRjLTc0YmEtNDdlNS1hZjRhLTdjNGU2Yjc3 N2Q5Mi5jcmwwHwYDVR0jBBgwFoAU1/PfqfdA8CtR2EIn8tzC4d9gdQ4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS84NTExYjhkYy03NGJhLTQ3ZTUtYWY0YS03YzRl NmI3NzdkOTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDqlnAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADyQkBVNV60m0JRkR+Ch9A78ZBf0m26HKlyYwWwrSm8E7uMdl1J2gN6U idlywMe5PIKVquh6nwnp0dsFYDGmAQzLJqsbzwBUfXp4l961WdXYJ9eQaZMNzk36 PLY11QyT4E3KuWMmXmrsWOugclnMBRwO7aCDnEOHFDbyjh1krp/oOGERsRd9U4JE Tb7BtI+G7d/N6r2QFYFKPh3VRPcmwQJi1wqzFtR1LtK3U8S14moQHK7CS9V2Llux 7kpxrWjbic+UgsAE0Nu60fiWZF+Jc9dWCzgAvMJfAZBM3f8KfmL0bcs7DgBLaHEV GurcJM48/YJURLiL+fI7C6mpAJWhXI0= -----END CERTIFICATE-----Generated at Fri Oct 10 22:27:00 2025 by rpki-client