$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/353f8b3e-d000-3445-8659-f5bf019cb547.roa File: 353f8b3e-d000-3445-8659-f5bf019cb547.roa (raw, json) Hash identifier: c0MlS+Yf7a2w5iSFbxdzwzMtq0Vlq7LLTjiOUUuyPPU= Subject key identifier: 83:E3:F7:4F:86:73:79:9B:8A:6C:0F:CF:27:E0:B8:3E:D6:77:9A:1A Certificate issuer: /CN=8511b8dc-74ba-47e5-af4a-7c4e6b777d92 Certificate serial: 010D0C9F4328584B153C1DE2A73F1DDD6F8AE980 Authority key identifier: D7:F3:DF:A9:F7:40:F0:2B:51:D8:42:27:F2:DC:C2:E1:DF:60:75:0E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/353f8b3e-d000-3445-8659-f5bf019cb547.roa Signing time: Thu 04 Sep 2025 13:00:41 +0000 ROA not before: Thu 04 Sep 2025 13:00:41 +0000 ROA not after: Wed 03 Dec 2025 14:00:41 +0000 asID: 4540 IP address blocks: 69.51.200.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:15:3c:1d:e2:a7:3f:1d:dd:6f:8a:e9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8511b8dc-74ba-47e5-af4a-7c4e6b777d92 Validity Not Before: Sep 4 13:00:41 2025 GMT Not After : Dec 3 14:00:41 2025 GMT Subject: CN=86437ac8-e4d8-403e-8f25-49e0574762c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:33:88:1f:ea:da:19:9f:46:1c:4d:40:5f:04: 07:d8:8d:03:c3:c7:d4:3a:d9:55:8e:58:b2:cc:0e: 5c:16:cc:11:93:b9:27:4a:eb:6d:93:b7:6c:34:81: 23:c8:97:5f:52:cc:b6:0f:fd:b9:8a:0a:c9:1b:83: d7:6e:86:22:1b:e6:97:85:a6:1f:3d:5a:7c:d3:5c: 0f:c6:d5:81:58:17:12:4d:d1:08:20:9e:c3:bc:12: ac:36:50:c2:ad:02:59:2f:3f:a0:8f:00:03:01:ee: af:34:46:dd:ae:5a:d5:56:ee:ba:a3:72:23:20:97: 0d:26:e6:49:c8:d1:6b:2a:71:b7:53:b2:5a:8c:ad: 7f:a5:9d:00:58:3e:98:ff:3f:67:5b:68:06:57:b6: 36:57:68:4c:6b:4a:6d:f8:1c:76:05:eb:71:dc:dd: 00:b0:45:93:76:ae:c6:9a:57:1f:cb:50:35:6e:0d: 0b:59:59:81:4d:c0:f3:52:9b:76:a2:0b:0b:65:5c: 2c:60:c0:ce:86:f0:8e:27:54:2e:74:e7:a7:2c:82: 1f:ee:08:0b:1c:aa:74:be:5d:23:54:1b:1d:e1:cb: 49:24:a2:5c:1f:d3:6a:53:cd:43:56:16:00:6d:72: 7c:a6:fb:6f:5b:2c:7d:33:71:3d:0e:27:d9:c9:28: d7:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:E3:F7:4F:86:73:79:9B:8A:6C:0F:CF:27:E0:B8:3E:D6:77:9A:1A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/353f8b3e-d000-3445-8659-f5bf019cb547.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.crl X509v3 Authority Key Identifier: keyid:D7:F3:DF:A9:F7:40:F0:2B:51:D8:42:27:F2:DC:C2:E1:DF:60:75:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer sbgp-ipAddrBlock: critical IPv4: 69.51.200.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:e6:8c:88:ed:a6:ec:c8:22:40:a9:62:f5:87:93:53:fb:e2: 73:94:81:57:bc:43:fc:80:a0:f2:0b:6d:ff:df:94:cf:3f:8b: 70:5d:dc:ba:47:ea:35:58:28:db:07:54:77:e1:41:9c:71:cb: af:9c:d0:e8:95:58:cd:29:e2:db:35:a5:10:c0:e0:99:76:aa: 4b:ae:e7:0c:d3:b7:1b:a0:cc:fa:48:3f:30:a3:a3:1a:5a:a5: 4e:c7:14:87:0c:75:29:0b:79:57:e8:da:98:ea:a4:19:e7:f4: b3:7b:d1:02:5d:55:03:23:86:78:60:51:fd:e0:f8:29:c9:cd: 7e:b0:7a:63:1e:b2:f5:82:1e:19:51:50:92:1f:c0:4a:fc:61: d3:56:f1:2f:8f:e5:9f:ff:32:ca:03:e1:4f:a9:c6:d7:bc:cc: 5e:23:72:f1:62:65:8a:cb:ca:ff:95:ea:47:e9:3c:5f:e2:df: 90:bf:59:17:07:b1:dd:94:01:67:0c:0f:ce:14:7a:02:28:a1: ac:ca:7c:38:ef:2d:37:ba:f8:3b:35:23:40:20:66:17:e4:38: 35:a3:d0:35:60:17:45:fb:6d:21:5f:23:fb:7a:02:fb:76:04: 38:bd:83:a9:10:a3:e5:b3:3e:57:fc:d5:0e:f5:3a:26:d6:4f: 5d:f1:f9:35 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsVPB3ipz8d3W+K6YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODUxMWI4ZGMtNzRiYS00N2U1LWFmNGEtN2M0ZTZiNzc3 ZDkyMB4XDTI1MDkwNDEzMDA0MVoXDTI1MTIwMzE0MDA0MVowLzEtMCsGA1UEAxMk ODY0MzdhYzgtZTRkOC00MDNlLThmMjUtNDllMDU3NDc2MmMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAizOIH+raGZ9GHE1AXwQH2I0Dw8fUOtlVjliy zA5cFswRk7knSuttk7dsNIEjyJdfUsy2D/25igrJG4PXboYiG+aXhaYfPVp801wP xtWBWBcSTdEIIJ7DvBKsNlDCrQJZLz+gjwADAe6vNEbdrlrVVu66o3IjIJcNJuZJ yNFrKnG3U7JajK1/pZ0AWD6Y/z9nW2gGV7Y2V2hMa0pt+Bx2Betx3N0AsEWTdq7G mlcfy1A1bg0LWVmBTcDzUpt2ogsLZVwsYMDOhvCOJ1QudOenLIIf7ggLHKp0vl0j VBsd4ctJJKJcH9NqU81DVhYAbXJ8pvtvWyx9M3E9DifZySjXbwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIPj90+Gc3mbimwPzyfguD7Wd5oaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS84NTEx YjhkYy03NGJhLTQ3ZTUtYWY0YS03YzRlNmI3NzdkOTIvMzUzZjhiM2UtZDAwMC0z NDQ1LTg2NTktZjViZjAxOWNiNTQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvODUxMWI4ZGMtNzRiYS00N2U1LWFm NGEtN2M0ZTZiNzc3ZDkyLzg1MTFiOGRjLTc0YmEtNDdlNS1hZjRhLTdjNGU2Yjc3 N2Q5Mi5jcmwwHwYDVR0jBBgwFoAU1/PfqfdA8CtR2EIn8tzC4d9gdQ4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS84NTExYjhkYy03NGJhLTQ3ZTUtYWY0YS03YzRl NmI3NzdkOTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDRTPIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABrmjIjtpuzIIkCpYvWHk1P74nOUgVe8Q/yAoPILbf/flM8/i3Bd3LpH 6jVYKNsHVHfhQZxxy6+c0OiVWM0p4ts1pRDA4Jl2qkuu5wzTtxugzPpIPzCjoxpa pU7HFIcMdSkLeVfo2pjqpBnn9LN70QJdVQMjhnhgUf3g+CnJzX6wemMesvWCHhlR UJIfwEr8YdNW8S+P5Z//MsoD4U+pxte8zF4jcvFiZYrLyv+V6kfpPF/i35C/WRcH sd2UAWcMD84UegIooazKfDjvLTe6+Ds1I0AgZhfkODWj0DVgF0X7bSFfI/t6Avt2 BDi9g6kQo+WzPlf81Q71OibWT13x+TU= -----END CERTIFICATE-----Generated at Fri Oct 10 22:32:49 2025 by rpki-client